This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft File: g-3hynyzX11h-NWctQNumT6kO3A.mft (raw, json) Hash identifier: N5aPhtmjEKpfuULU5d/ZlDw29759JNSRWIIZeZPUkAY= Subject key identifier: BC:B1:53:1B:46:6A:3F:69:FD:72:63:CA:98:72:77:A7:30:DE:17:C1 Authority key identifier: 83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70 Certificate issuer: /CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70 Certificate serial: 019C413392C182CEE7459F6903F605BA714A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft Manifest number: 1036 Signing time: Mon 09 Feb 2026 07:00:24 +0000 Manifest this update: Mon 09 Feb 2026 07:00:24 +0000 Manifest next update: Tue 10 Feb 2026 07:00:24 +0000 Files and hashes: 1: g-3hynyzX11h-NWctQNumT6kO3A.crl (hash: EuBtgDA5OFeJK7SQejsnjtgGODpjaUw1RgYctw36VG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:92:c1:82:ce:e7:45:9f:69:03:f6:05:ba:71:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70 Validity Not Before: Feb 9 07:00:24 2026 GMT Not After : Feb 10 07:00:24 2026 GMT Subject: CN=bcb1531b466a3f69fd7263ca987277a730de17c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ee:00:f3:65:43:f0:a4:22:52:c4:3f:88:99: 15:eb:18:c4:77:fd:9b:dc:15:06:16:1d:7e:9a:34: fb:b3:ce:f9:53:8a:75:ca:4c:9b:18:55:87:72:a7: d1:cc:e5:70:9d:a5:be:19:37:4b:7a:0a:df:88:22: e2:c8:80:6e:67:e9:cb:90:99:c2:7a:ec:16:75:ac: 2e:75:71:d1:14:ef:28:a4:11:c8:4c:2e:d3:13:9a: b1:3b:7f:12:40:b5:4a:48:d4:8f:dc:b4:bf:ff:90: 9d:90:22:2c:28:4c:88:47:af:7e:81:4d:68:ec:49: 05:9b:63:7e:b1:cc:89:24:da:b6:d5:5d:93:d7:5f: b2:d4:e2:1b:5c:8f:d9:9c:8b:a1:61:19:38:79:d0: 04:80:67:dc:8c:01:48:4d:b7:5c:66:d7:55:7d:7b: 31:e7:49:ce:23:ed:fa:b2:1e:b5:fd:a2:27:54:70: 03:d0:e8:f3:c0:ed:03:51:32:37:07:fa:8c:c5:15: ac:51:28:05:00:cc:0c:02:18:63:29:fe:af:49:8b: cf:ec:28:71:4f:2b:f9:75:40:c5:d9:dc:6d:62:59: 5d:2a:a9:d9:d5:4f:92:da:ee:a0:ee:56:8c:cf:d7: a5:ca:49:49:17:72:aa:f6:b9:33:fd:46:b0:01:68: b7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B1:53:1B:46:6A:3F:69:FD:72:63:CA:98:72:77:A7:30:DE:17:C1 X509v3 Authority Key Identifier: keyid:83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5d:08:bd:b5:c7:d3:dd:65:f1:a4:2d:e4:ec:ca:a7:b4:03: 8b:0a:24:32:b4:eb:c7:b9:09:bd:10:13:d9:88:26:4d:a2:21: 1b:ac:5f:cf:0d:63:61:97:b8:60:3c:db:e5:d1:28:03:28:f2: 22:84:15:36:be:0e:7a:44:b4:0d:07:ca:d4:87:f5:4d:80:7f: 03:75:f6:ac:42:14:13:67:8e:34:ff:2f:e9:d7:dc:49:64:cc: 1b:b2:1b:5c:9b:d0:5e:30:59:56:b9:27:48:81:ce:30:c2:ac: ee:c4:17:fd:2a:54:e1:80:45:8a:b0:8b:c1:a1:14:ec:b5:90: a8:ef:91:ab:18:39:35:e8:a0:49:fb:2f:87:54:21:3c:82:f8: 02:45:40:f1:45:0a:98:53:82:cf:16:4b:ce:e9:f8:23:ac:90: 19:ea:d1:ad:95:ad:ec:8e:e4:e2:67:86:49:8c:a1:68:2b:e2: de:98:cf:74:92:86:e6:b3:58:f2:a0:d9:64:57:12:3c:6f:05: 67:47:b2:d4:c9:66:4d:e5:6c:fc:61:b8:2b:3a:41:52:02:c6: 11:38:92:69:73:64:01:d8:24:e7:19:db:06:fc:fa:3b:2c:14: 79:af:bd:56:68:62:a0:5b:ff:6e:59:54:50:51:7f:aa:15:50: be:0b:5c:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM5LBgs7nRZ9pA/YFunFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZWRlMWNhN2NiMzVmNWQ2MWY4ZDU5Y2I1MDM2ZTk5M2Vh NDNiNzAwHhcNMjYwMjA5MDcwMDI0WhcNMjYwMjEwMDcwMDI0WjAzMTEwLwYDVQQD EyhiY2IxNTMxYjQ2NmEzZjY5ZmQ3MjYzY2E5ODcyNzdhNzMwZGUxN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u4A82VD8KQiUsQ/iJkV6xjEd/2b 3BUGFh1+mjT7s875U4p1ykybGFWHcqfRzOVwnaW+GTdLegrfiCLiyIBuZ+nLkJnC euwWdawudXHRFO8opBHITC7TE5qxO38SQLVKSNSP3LS//5CdkCIsKEyIR69+gU1o 7EkFm2N+scyJJNq21V2T11+y1OIbXI/ZnIuhYRk4edAEgGfcjAFITbdcZtdVfXsx 50nOI+36sh61/aInVHAD0OjzwO0DUTI3B/qMxRWsUSgFAMwMAhhjKf6vSYvP7Chx Tyv5dUDF2dxtYlldKqnZ1U+S2u6g7laMz9elyklJF3Kq9rkz/UawAWi3SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyxUxtGaj9p/XJjyphyd6cw3hfBMB8GA1UdIwQY MBaAFIPt4cp8s19dYfjVnLUDbpk+pDtwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy0zaHlueXpYMTFoLU5XY3RRTnVtVDZrTzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mM2ViMTktODVlZS00ODdmLWFkMTIt OGIzNjYwZWQ1ZWQwLzEvZy0zaHlueXpYMTFoLU5XY3RRTnVtVDZrTzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9mM2ViMTktODVlZS00ODdmLWFkMTItOGIzNjYwZWQ1ZWQw LzEvZy0zaHlueXpYMTFoLU5XY3RRTnVtVDZrTzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPF0IvbXH 091l8aQt5OzKp7QDiwokMrTrx7kJvRAT2YgmTaIhG6xfzw1jYZe4YDzb5dEoAyjy IoQVNr4OekS0DQfK1If1TYB/A3X2rEIUE2eONP8v6dfcSWTMG7IbXJvQXjBZVrkn SIHOMMKs7sQX/SpU4YBFirCLwaEU7LWQqO+Rqxg5NeigSfsvh1QhPIL4AkVA8UUK mFOCzxZLzun4I6yQGerRrZWt7I7k4meGSYyhaCvi3pjPdJKG5rNY8qDZZFcSPG8F Z0ey1MlmTeVs/GG4KzpBUgLGETiSaXNkAdgk5xnbBvz6OywUea+9VmhioFv/bllU UFF/qhVQvgtcrA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:51 2026 by rpki-client