This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft File: h3OqvdPia0S3mDfBRwq44XQV6o4.mft (raw, json) Hash identifier: 67aPaj8/rtoRSv3BhMd8kdtKCR7k9kGm5NQObFsWTXc= Subject key identifier: 72:CB:2B:EC:50:69:03:79:8C:A1:9B:96:B4:9D:90:A7:80:73:ED:55 Authority key identifier: 87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E Certificate issuer: /CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e Certificate serial: 019C41A189E936F66C3A512212948DB9BABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft Manifest number: 03FB Signing time: Mon 09 Feb 2026 09:00:31 +0000 Manifest this update: Mon 09 Feb 2026 09:00:31 +0000 Manifest next update: Tue 10 Feb 2026 09:00:31 +0000 Files and hashes: 1: h3OqvdPia0S3mDfBRwq44XQV6o4.crl (hash: xmLSEUTTcaoqIudamc+/1jGTJA6F/IbG4/ERjaas3o8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:89:e9:36:f6:6c:3a:51:22:12:94:8d:b9:ba:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e Validity Not Before: Feb 9 09:00:31 2026 GMT Not After : Feb 10 09:00:31 2026 GMT Subject: CN=72cb2bec506903798ca19b96b49d90a78073ed55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:6d:d2:ae:9d:9d:27:a3:e2:9a:22:76:f3: 10:e7:ff:84:61:dd:5b:b9:5f:93:ba:fe:9d:28:1a: 41:1e:9f:36:dc:f2:b1:ee:66:d3:51:8c:f7:ef:8d: be:cd:9b:be:32:22:ab:82:a9:28:72:a9:12:b9:38: 94:fe:e1:fc:31:11:46:b2:13:58:00:38:c0:16:1a: d3:ab:06:24:6a:19:24:cb:f3:06:cd:95:d8:18:81: da:d8:76:2f:18:c0:0f:6c:47:3a:db:db:16:25:f5: c4:30:f8:fc:1f:6c:01:a2:0c:23:75:a2:6e:40:4f: c2:90:f6:8e:a4:fd:f3:ad:cb:d6:b2:e7:93:a4:64: fd:4b:03:83:61:39:d0:65:91:9d:1c:a7:1a:9a:a2: 3f:2b:80:f1:9d:fb:56:3b:71:d7:22:99:c0:0a:54: e8:62:76:76:08:c1:7c:b6:b1:5e:96:6b:65:18:6d: bb:1b:0e:96:75:c4:ac:30:a3:cf:ef:2d:dd:5f:d4: 8d:c2:9b:37:cc:e1:77:88:48:d8:47:34:24:34:a3: f4:73:84:6c:69:d1:7b:c8:9f:3d:f8:db:87:52:e7: 74:9b:31:21:a7:35:16:95:2d:ff:f1:2f:bc:55:1c: c9:a8:3e:c1:2c:fe:a6:af:31:80:a6:5f:86:92:7b: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CB:2B:EC:50:69:03:79:8C:A1:9B:96:B4:9D:90:A7:80:73:ED:55 X509v3 Authority Key Identifier: keyid:87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a6:6f:ba:9a:73:a6:f1:f4:11:05:8b:38:2c:8f:d6:a8:20: e9:6f:07:f2:cd:9c:ae:42:dd:9e:23:73:c7:6b:60:3a:9b:3a: 2d:99:52:cb:ca:06:de:28:3b:b5:35:04:8c:14:74:bc:26:da: 41:27:a2:8c:6c:66:ac:ab:33:0c:b5:49:5b:02:b8:13:f8:e4: 82:78:1c:e7:d0:0c:a5:44:6b:d1:ed:a4:1d:23:7d:74:e0:5b: ef:bd:44:d5:ea:99:35:ac:c6:d0:1d:08:01:8a:db:50:6f:aa: 59:7f:ab:21:ca:0d:ba:ed:2b:2f:0a:b9:f3:f8:e8:1f:ba:cc: 72:8a:6e:99:f3:06:81:0c:d3:58:d2:60:88:3d:47:80:14:a3: 42:67:ac:7e:b8:ab:61:ed:c8:f5:19:62:2c:15:d8:12:0b:95: 0e:8e:84:04:ad:1d:04:65:b9:0c:59:e7:e6:15:39:85:21:b7: 06:cb:ce:fb:09:30:13:4b:79:8a:f4:ab:90:60:88:2c:c9:ac: 81:7f:aa:03:33:21:78:c7:11:f8:7f:76:a3:63:2a:0b:95:43: b9:58:6a:49:e1:fb:83:b5:c6:f7:f2:a6:d5:bb:e1:af:65:4f: 15:a2:10:c9:bd:ee:fe:a7:e8:45:85:0c:53:50:3a:34:56:8d: 90:20:ce:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoYnpNvZsOlEiEpSNubq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzNhYWJkZDNlMjZiNDRiNzk4MzdjMTQ3MGFiOGUxNzQx NWVhOGUwHhcNMjYwMjA5MDkwMDMxWhcNMjYwMjEwMDkwMDMxWjAzMTEwLwYDVQQD Eyg3MmNiMmJlYzUwNjkwMzc5OGNhMTliOTZiNDlkOTBhNzgwNzNlZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS1t0q6dnSej4poidvMQ5/+EYd1b uV+Tuv6dKBpBHp823PKx7mbTUYz3742+zZu+MiKrgqkocqkSuTiU/uH8MRFGshNY ADjAFhrTqwYkahkky/MGzZXYGIHa2HYvGMAPbEc629sWJfXEMPj8H2wBogwjdaJu QE/CkPaOpP3zrcvWsueTpGT9SwODYTnQZZGdHKcamqI/K4DxnftWO3HXIpnAClTo YnZ2CMF8trFelmtlGG27Gw6WdcSsMKPP7y3dX9SNwps3zOF3iEjYRzQkNKP0c4Rs adF7yJ89+NuHUud0mzEhpzUWlS3/8S+8VRzJqD7BLP6mrzGApl+GkntoqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLLK+xQaQN5jKGblrSdkKeAc+1VMB8GA1UdIwQY MBaAFIdzqr3T4mtEt5g3wUcKuOF0FeqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNPcXZkUGlhMFMzbURmQlJ3cTQ0WFFWNm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNGIzZjYtMDQwYi00MDZlLWI0Mzgt NmFiOGE4NzlhMTdiLzEvaDNPcXZkUGlhMFMzbURmQlJ3cTQ0WFFWNm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9lNGIzZjYtMDQwYi00MDZlLWI0MzgtNmFiOGE4NzlhMTdi LzEvaDNPcXZkUGlhMFMzbURmQlJ3cTQ0WFFWNm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqZvuppz pvH0EQWLOCyP1qgg6W8H8s2crkLdniNzx2tgOps6LZlSy8oG3ig7tTUEjBR0vCba QSeijGxmrKszDLVJWwK4E/jkgngc59AMpURr0e2kHSN9dOBb771E1eqZNazG0B0I AYrbUG+qWX+rIcoNuu0rLwq58/joH7rMcopumfMGgQzTWNJgiD1HgBSjQmesfrir Ye3I9RliLBXYEguVDo6EBK0dBGW5DFnn5hU5hSG3BsvO+wkwE0t5ivSrkGCILMms gX+qAzMheMcR+H92o2MqC5VDuVhqSeH7g7XG9/Km1bvhr2VPFaIQyb3u/qfoRYUM U1A6NFaNkCDOiA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:48 2026 by rpki-client