This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json) Hash identifier: 7N3GF6fL69ooYzq6GY0Herf9FGENpkp/nvZ5NMYALF8= Subject key identifier: 60:48:B5:FD:5C:BD:97:03:20:B0:20:8F:28:F1:6A:FD:B6:E7:79:E3 Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Certificate serial: 019C4322A7867F4355B8F9289B1A70CE91A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft Manifest number: 0A22 Signing time: Mon 09 Feb 2026 16:01:10 +0000 Manifest this update: Mon 09 Feb 2026 16:01:10 +0000 Manifest next update: Tue 10 Feb 2026 16:01:10 +0000 Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: lGTQnLtQyv3Iho9b7CTrfq7f1MxBhRX3LdlHVt7Uajg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a7:86:7f:43:55:b8:f9:28:9b:1a:70:ce:91:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Validity Not Before: Feb 9 16:01:10 2026 GMT Not After : Feb 10 16:01:10 2026 GMT Subject: CN=6048b5fd5cbd970320b0208f28f16afdb6e779e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:9b:61:25:fa:5e:b8:71:98:f6:40:d3:66: 58:a1:69:7d:4e:03:42:1e:d0:f1:9a:9d:3f:cd:ce: 91:3d:a4:24:39:f0:2c:5b:f8:72:ef:53:23:71:b0: 34:c2:4c:97:40:c7:ea:8a:91:a1:99:63:e8:89:25: 2c:69:58:01:05:c1:9d:df:21:55:6a:d1:8b:72:f2: d4:7f:a1:0d:d5:ef:74:fe:c3:d4:f5:7f:5c:6c:aa: af:c5:b3:2b:7f:a3:5d:aa:19:f7:ac:92:e8:22:be: 20:3d:fd:82:8d:72:53:16:f6:ab:e1:28:98:d3:c2: 94:48:9c:3e:39:a5:d8:bd:a2:87:ef:8a:b2:db:c8: f9:f8:e4:0e:42:5b:1a:43:65:7c:7b:cb:6b:c1:7d: b4:e0:e1:47:86:15:1d:1f:70:24:e2:72:f0:b8:e0: 19:6b:cd:87:3c:44:fc:ca:69:8c:49:11:94:4d:54: 6e:90:50:80:e6:82:4e:85:7a:4a:31:12:da:ad:73: ab:11:a1:b0:02:02:f0:08:d6:e2:cc:fb:64:f5:f2: 9f:41:6e:a1:d6:a7:c9:42:a1:d8:3c:38:7d:01:fb: d3:03:26:a4:16:67:61:ca:02:a5:ec:eb:c4:8d:31: c7:08:b1:6c:d0:39:40:02:82:71:bd:0d:38:a0:93: 90:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:48:B5:FD:5C:BD:97:03:20:B0:20:8F:28:F1:6A:FD:B6:E7:79:E3 X509v3 Authority Key Identifier: keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:3e:46:1f:20:67:b3:b6:3d:9a:fe:83:1d:53:44:11:5b:5d: 2a:72:a2:76:7f:77:88:68:0b:b7:d9:dd:16:c4:5a:54:80:24: 46:46:81:5a:79:32:aa:59:8f:7b:c6:c3:41:12:b0:15:2d:0a: 8d:42:22:4b:39:ef:8a:1d:26:d4:07:8b:46:7d:9a:72:f4:6b: 11:38:27:4e:4c:e0:3e:5b:4b:fc:03:62:f0:a9:7c:38:e7:98: ce:6c:23:32:f9:6c:1d:0c:64:44:18:7c:40:fe:70:7d:4a:c1: 40:b0:39:6e:8a:2e:3e:8c:5e:77:00:27:71:8c:81:94:47:1e: 41:0e:dd:9c:5c:8f:4b:ac:04:46:ee:07:73:0e:c1:48:55:2e: 86:96:36:c7:ed:5c:b9:f6:3a:1c:d6:3b:9b:7e:99:91:19:bc: fc:4c:06:92:46:d5:7c:d2:82:d0:3f:b1:0d:8e:43:a1:86:32: 14:c9:34:d8:ad:52:a3:a3:e0:be:cd:a5:7c:99:fd:20:4b:7d: 7c:38:e8:94:a3:e0:f3:78:6b:9d:0b:c6:06:11:e7:42:17:b5: 95:93:f8:9a:2b:b9:8a:b9:bf:f0:bd:ca:0a:28:36:6c:d5:f9: 22:63:b8:d3:c8:17:56:ca:8e:3f:13:f3:72:f7:ad:cc:53:73: 9b:f2:6d:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqeGf0NVuPkomxpwzpGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MmRmZWNiYjQzMTcwMjk3OTYxYTIxYjdlNWI0YTNjNDdk ZTA5NWIwHhcNMjYwMjA5MTYwMTEwWhcNMjYwMjEwMTYwMTEwWjAzMTEwLwYDVQQD Eyg2MDQ4YjVmZDVjYmQ5NzAzMjBiMDIwOGYyOGYxNmFmZGI2ZTc3OWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph6bYSX6XrhxmPZA02ZYoWl9TgNC HtDxmp0/zc6RPaQkOfAsW/hy71MjcbA0wkyXQMfqipGhmWPoiSUsaVgBBcGd3yFV atGLcvLUf6EN1e90/sPU9X9cbKqvxbMrf6Ndqhn3rJLoIr4gPf2CjXJTFvar4SiY 08KUSJw+OaXYvaKH74qy28j5+OQOQlsaQ2V8e8trwX204OFHhhUdH3Ak4nLwuOAZ a82HPET8ymmMSRGUTVRukFCA5oJOhXpKMRLarXOrEaGwAgLwCNbizPtk9fKfQW6h 1qfJQqHYPDh9AfvTAyakFmdhygKl7OvEjTHHCLFs0DlAAoJxvQ04oJOQAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBItf1cvZcDILAgjyjxav2253njMB8GA1UdIwQY MBaAFKUt/su0MXApeWGiG35bSjxH3glbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUt YmQ1NzkwYTJiYTUwLzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUtYmQ1NzkwYTJiYTUw LzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgT5GHyBn s7Y9mv6DHVNEEVtdKnKidn93iGgLt9ndFsRaVIAkRkaBWnkyqlmPe8bDQRKwFS0K jUIiSznvih0m1AeLRn2acvRrETgnTkzgPltL/ANi8Kl8OOeYzmwjMvlsHQxkRBh8 QP5wfUrBQLA5boouPoxedwAncYyBlEceQQ7dnFyPS6wERu4Hcw7BSFUuhpY2x+1c ufY6HNY7m36ZkRm8/EwGkkbVfNKC0D+xDY5DoYYyFMk02K1So6Pgvs2lfJn9IEt9 fDjolKPg83hrnQvGBhHnQhe1lZP4miu5irm/8L3KCig2bNX5ImO408gXVsqOPxPz cvetzFNzm/JtSA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:59 2026 by rpki-client