This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json) Hash identifier: haYOrpR0UTZJT7cM1bnB15UIKgZknWkQ6sIE/3ul9MU= Subject key identifier: D6:91:70:3B:A9:37:95:86:BF:50:77:B9:D6:FE:A8:70:2F:85:07:2F Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51 Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51 Certificate serial: 019C4321D04F6887E5730CD4DE3BFC09489B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:15 +0000 Manifest this update: Mon 09 Feb 2026 16:00:15 +0000 Manifest next update: Tue 10 Feb 2026 16:00:15 +0000 Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: /sn5jvTmO2+ohh6oARwQ2nrA9AK3T3Q/i4eILXkAv7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d0:4f:68:87:e5:73:0c:d4:de:3b:fc:09:48:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51 Validity Not Before: Feb 9 16:00:15 2026 GMT Not After : Feb 10 16:00:15 2026 GMT Subject: CN=d691703ba9379586bf5077b9d6fea8702f85072f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a9:64:72:7d:e7:06:0b:e2:c4:b4:e3:47:9a: 35:0c:62:31:d1:66:e5:fb:64:11:13:6f:49:1f:2d: 71:71:c0:cd:a4:10:0b:83:b6:07:11:7a:b9:bb:0b: 67:84:15:4d:ad:72:8e:14:4c:01:58:05:ce:78:8f: fe:fc:be:e8:7f:e1:f2:04:7f:87:84:6a:39:d4:6b: a2:91:ba:ee:41:93:41:27:47:2a:d2:07:fe:80:3f: a2:86:e5:b8:16:b1:f1:e2:c9:f6:c3:a6:58:38:2a: bd:9a:7f:36:4c:82:5b:60:dc:a0:a8:68:5b:a3:df: 15:95:0b:5c:f2:13:66:76:1d:60:af:21:f4:df:e8: c5:c9:72:f0:73:9a:fe:4f:57:54:9a:16:08:c0:39: a7:50:6b:c0:c4:f5:c0:c0:83:e9:39:47:a9:12:bc: 90:9a:18:be:e6:1e:1d:63:a7:d2:86:40:a9:a0:28: d5:7d:ed:51:9a:cf:98:29:72:f8:58:6c:86:9d:48: bd:78:b8:72:69:c3:2c:74:c4:de:36:b0:ca:26:7d: f9:9e:a6:49:bd:de:61:c8:b4:f1:3c:fa:a5:0c:a2: 60:07:7f:04:93:1d:b8:6d:b5:f4:ea:17:df:e3:fe: 10:df:05:b2:1c:0e:91:fc:c7:3d:93:c6:5c:49:3c: 09:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:91:70:3B:A9:37:95:86:BF:50:77:B9:D6:FE:A8:70:2F:85:07:2F X509v3 Authority Key Identifier: keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:3d:27:aa:b2:c4:42:75:e3:45:ed:3f:7d:42:24:d4:46:3d: 57:a5:7c:07:13:42:be:bb:8e:ed:f3:0f:fe:93:ab:e3:75:75: 19:ff:ca:44:05:42:ad:0a:f1:79:9d:65:04:07:9c:f2:13:58: f0:48:7e:df:4a:af:7c:2c:b0:fb:1c:1a:f2:56:61:78:c7:e6: b7:3b:85:ab:59:bb:6b:c7:40:86:c0:65:60:a9:4d:32:85:9c: 04:e0:74:6b:bf:e4:57:d1:d1:e0:20:e0:8d:2c:36:62:28:a2: de:bb:17:f2:c2:67:5f:04:98:1c:b3:20:da:04:d1:7d:95:17: d7:47:d8:1c:3f:25:9f:c8:46:00:58:3d:a6:ad:02:fe:1e:67: 6a:0c:fa:a3:cc:27:35:29:1c:f9:85:e2:ee:9d:fa:f8:aa:a9: 8a:8d:7a:de:02:91:6e:5f:20:37:7d:39:48:19:b7:7d:78:38: 60:54:48:ea:de:2a:79:53:41:fb:e8:55:68:f4:b9:55:d3:a7: 01:57:8b:c7:01:31:6e:b3:8a:74:63:11:f6:2a:f7:33:9a:4b: d9:91:f7:87:3a:40:92:50:d9:63:8e:07:b9:5e:8f:79:0c:72: 0e:89:74:28:98:50:61:53:8e:21:1d:45:09:c4:84:c6:ea:45: 51:35:7b:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdBPaIflcwzU3jv8CUibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZjRkNGJhODViNzU1ZWY5MjljOWI5OTVlYWY3NDZkMGUw YjZlNTEwHhcNMjYwMjA5MTYwMDE1WhcNMjYwMjEwMTYwMDE1WjAzMTEwLwYDVQQD EyhkNjkxNzAzYmE5Mzc5NTg2YmY1MDc3YjlkNmZlYTg3MDJmODUwNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Klkcn3nBgvixLTjR5o1DGIx0Wbl +2QRE29JHy1xccDNpBALg7YHEXq5uwtnhBVNrXKOFEwBWAXOeI/+/L7of+HyBH+H hGo51GuikbruQZNBJ0cq0gf+gD+ihuW4FrHx4sn2w6ZYOCq9mn82TIJbYNygqGhb o98VlQtc8hNmdh1gryH03+jFyXLwc5r+T1dUmhYIwDmnUGvAxPXAwIPpOUepEryQ mhi+5h4dY6fShkCpoCjVfe1Rms+YKXL4WGyGnUi9eLhyacMsdMTeNrDKJn35nqZJ vd5hyLTxPPqlDKJgB38Ekx24bbX06hff4/4Q3wWyHA6R/Mc9k8ZcSTwJ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaRcDupN5WGv1B3udb+qHAvhQcvMB8GA1UdIwQY MBaAFNz01LqFt1XvkpybmV6vdG0OC25RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAt NDE0NzBhOTQ1OWExLzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAtNDE0NzBhOTQ1OWEx LzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYD0nqrLE QnXjRe0/fUIk1EY9V6V8BxNCvruO7fMP/pOr43V1Gf/KRAVCrQrxeZ1lBAec8hNY 8Eh+30qvfCyw+xwa8lZheMfmtzuFq1m7a8dAhsBlYKlNMoWcBOB0a7/kV9HR4CDg jSw2Yiii3rsX8sJnXwSYHLMg2gTRfZUX10fYHD8ln8hGAFg9pq0C/h5nagz6o8wn NSkc+YXi7p36+Kqpio163gKRbl8gN305SBm3fXg4YFRI6t4qeVNB++hVaPS5VdOn AVeLxwExbrOKdGMR9ir3M5pL2ZH3hzpAklDZY44HuV6PeQxyDol0KJhQYVOOIR1F CcSExupFUTV76A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:42 2026 by rpki-client