This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft File: 3tvumMupuOYloRR7s7VRl9LQoFc.mft (raw, json) Hash identifier: D4RbI/WJQE8h8hzg1a4BxuBYZx+BXR/X/otOHtWaV5E= Subject key identifier: F9:31:D3:F7:9D:FD:C2:97:AE:FF:37:62:F8:B0:3C:89:AB:EA:9F:9A Authority key identifier: DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57 Certificate issuer: /CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057 Certificate serial: 019C43225B35BCE309A511358B4255F4300C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft Manifest number: 0878 Signing time: Mon 09 Feb 2026 16:00:50 +0000 Manifest this update: Mon 09 Feb 2026 16:00:50 +0000 Manifest next update: Tue 10 Feb 2026 16:00:50 +0000 Files and hashes: 1: 3tvumMupuOYloRR7s7VRl9LQoFc.crl (hash: J2ew2+RgMVZysGMhpRW6leKUgVgfdvRU7S4SNZtghB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:5b:35:bc:e3:09:a5:11:35:8b:42:55:f4:30:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057 Validity Not Before: Feb 9 16:00:50 2026 GMT Not After : Feb 10 16:00:50 2026 GMT Subject: CN=f931d3f79dfdc297aeff3762f8b03c89abea9f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:e5:0d:3d:2a:28:0e:06:d5:b0:e5:e1:eb: 7c:ae:11:9b:c0:83:39:b6:74:6c:0f:86:6d:4c:29: c5:05:6c:7b:25:fa:9d:27:f5:66:a5:ed:04:0b:92: 77:5a:42:4d:1d:57:b2:af:b9:26:5a:f5:f4:2d:d6: db:d7:d6:2d:de:7f:29:67:96:c5:f2:e0:81:d0:dd: 93:c3:c9:a5:38:4d:1d:45:6b:dd:88:0e:25:ce:37: 4c:af:7c:02:8c:a8:0a:e0:c2:a1:3d:58:6c:9e:af: 6e:fd:74:cf:9b:f6:2c:01:ca:55:7a:c5:f3:c9:0b: 00:51:6f:33:8a:9c:5c:93:60:7f:d4:e2:2a:d8:df: 5a:f6:9c:0b:7b:59:9d:b0:d0:4d:c9:04:e9:ad:c3: 20:01:95:eb:80:00:56:39:d2:59:5c:59:65:a7:9c: 4f:1b:6d:97:54:61:e8:ca:a6:94:9d:83:8d:81:de: 2e:96:db:23:94:b4:f0:4f:23:71:e1:bf:0a:f4:02: 61:de:fd:30:b6:42:91:39:82:7f:38:f4:68:35:44: 02:5c:d3:eb:b9:6e:28:80:f6:01:a6:6f:8e:15:49: 6a:88:4a:9e:63:e2:ab:ad:28:04:ea:33:32:62:97: 70:98:3f:35:7d:fc:2e:cc:26:60:a3:6b:7c:81:9d: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:D3:F7:9D:FD:C2:97:AE:FF:37:62:F8:B0:3C:89:AB:EA:9F:9A X509v3 Authority Key Identifier: keyid:DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b3:3f:93:45:6f:60:a8:86:40:79:f8:b1:31:ef:71:71:b8: ee:46:84:75:e9:5e:8a:2c:fa:73:79:69:27:82:5c:ca:21:18: c0:e6:9b:03:a1:13:0c:98:0b:c9:54:60:46:2d:0f:07:88:53: 29:5c:dd:6d:6c:69:78:59:dc:1c:25:c9:67:26:77:ec:9c:c2: 30:6b:37:36:e0:03:8c:37:a0:3c:0a:a0:dc:79:50:d2:5f:1e: 83:34:77:c9:9a:87:6b:dd:21:19:c6:6d:89:c7:0c:06:22:71: 6f:3d:b1:04:67:cd:8d:01:7c:fc:2a:33:ec:81:27:85:0c:2f: d2:b2:41:aa:0f:9c:4e:38:0e:af:4d:99:31:1a:1d:4d:cd:74: 9a:3a:15:ad:56:6c:16:a9:cb:f6:f8:5a:75:0d:c2:b7:2c:98: 90:71:ad:55:bb:64:55:9e:46:85:57:25:a3:66:31:25:6b:ef: 29:b1:d3:b1:be:e9:1b:96:36:50:25:7a:ae:5d:91:cf:b9:19: ca:ff:6f:46:0f:96:75:b6:de:c5:62:dd:42:d6:58:b4:7a:3f: 1f:d7:3c:7b:a0:2e:92:ff:e1:43:7b:11:34:54:b8:f5:d3:df: 71:d9:86:bc:f8:2b:0b:65:ac:c9:be:99:1d:0f:22:dd:fd:3f: 62:f9:50:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIls1vOMJpRE1i0JV9DAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGJlZTk4Y2JhOWI4ZTYyNWExMTQ3YmIzYjU1MTk3ZDJk MGEwNTcwHhcNMjYwMjA5MTYwMDUwWhcNMjYwMjEwMTYwMDUwWjAzMTEwLwYDVQQD EyhmOTMxZDNmNzlkZmRjMjk3YWVmZjM3NjJmOGIwM2M4OWFiZWE5ZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7TlDT0qKA4G1bDl4et8rhGbwIM5 tnRsD4ZtTCnFBWx7JfqdJ/Vmpe0EC5J3WkJNHVeyr7kmWvX0Ldbb19Yt3n8pZ5bF 8uCB0N2Tw8mlOE0dRWvdiA4lzjdMr3wCjKgK4MKhPVhsnq9u/XTPm/YsAcpVesXz yQsAUW8zipxck2B/1OIq2N9a9pwLe1mdsNBNyQTprcMgAZXrgABWOdJZXFllp5xP G22XVGHoyqaUnYONgd4ultsjlLTwTyNx4b8K9AJh3v0wtkKROYJ/OPRoNUQCXNPr uW4ogPYBpm+OFUlqiEqeY+KrrSgE6jMyYpdwmD81ffwuzCZgo2t8gZ1UpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkx0/ed/cKXrv83YviwPImr6p+aMB8GA1UdIwQY MBaAFN7b7pjLqbjmJaEUe7O1UZfS0KBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUt MThmMGI4MGYyNTBkLzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUtMThmMGI4MGYyNTBk LzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULM/k0Vv YKiGQHn4sTHvcXG47kaEdeleiiz6c3lpJ4JcyiEYwOabA6ETDJgLyVRgRi0PB4hT KVzdbWxpeFncHCXJZyZ37JzCMGs3NuADjDegPAqg3HlQ0l8egzR3yZqHa90hGcZt iccMBiJxbz2xBGfNjQF8/Coz7IEnhQwv0rJBqg+cTjgOr02ZMRodTc10mjoVrVZs FqnL9vhadQ3CtyyYkHGtVbtkVZ5GhVclo2YxJWvvKbHTsb7pG5Y2UCV6rl2Rz7kZ yv9vRg+WdbbexWLdQtZYtHo/H9c8e6Aukv/hQ3sRNFS49dPfcdmGvPgrC2Wsyb6Z HQ8i3f0/YvlQMg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:51 2026 by rpki-client