This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json) Hash identifier: rqey6VZHL83yuhuveQh0MPFmKkrEcXVaNqX7YLwibsI= Subject key identifier: BA:79:F7:36:E1:91:BF:C1:2B:E0:0B:BD:4C:C8:4F:A3:E1:A8:0D:C8 Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5 Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5 Certificate serial: 019C43592C8C4820B63F8BB8F63260FD04B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft Manifest number: 0349 Signing time: Mon 09 Feb 2026 17:00:43 +0000 Manifest this update: Mon 09 Feb 2026 17:00:43 +0000 Manifest next update: Tue 10 Feb 2026 17:00:43 +0000 Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: e6F4xlflVnN7r8JbNs5nEWk5hTqsMg4IlOfDTilhHHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:2c:8c:48:20:b6:3f:8b:b8:f6:32:60:fd:04:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5 Validity Not Before: Feb 9 17:00:43 2026 GMT Not After : Feb 10 17:00:43 2026 GMT Subject: CN=ba79f736e191bfc12be00bbd4cc84fa3e1a80dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b8:fb:61:3c:69:ce:55:32:63:92:a3:b5:3e: d3:ea:fe:06:39:98:03:10:e1:37:a3:ec:e2:f3:01: fa:9e:eb:8f:1f:47:90:98:71:bc:16:80:84:d2:96: 92:91:87:80:37:6a:45:2d:bc:c7:8a:a5:43:34:49: 0f:56:5d:78:fb:0a:b5:e8:e7:10:aa:3b:a3:9a:80: 3a:24:82:fc:85:15:c0:36:38:ce:9a:6f:21:f4:d4: 85:9c:1c:fe:83:3b:32:c0:29:4f:7b:50:c4:0c:67: 43:fe:6b:e0:56:89:17:eb:96:da:90:88:7f:d0:32: 6b:ac:be:55:51:ff:e0:d0:26:82:06:05:68:98:c7: 3e:46:df:b7:16:c9:3e:2c:91:85:73:6d:04:c8:43: d7:11:bc:88:dd:4a:45:58:2f:7c:e6:5d:92:e6:0e: 13:5a:f3:9b:7a:eb:8f:ce:54:fe:a0:41:f1:ab:1c: b4:c4:49:0f:8e:a7:48:f8:68:fc:8c:7c:d9:6d:9b: fa:ae:71:40:55:2b:29:19:95:a6:84:dd:a5:a7:86: 92:47:fc:24:94:c6:9c:c4:6a:d2:c2:b5:6a:68:3a: a4:de:07:13:35:b5:68:b7:f2:bc:28:84:1f:6f:96: 2e:f0:71:dd:0b:ac:9f:82:09:12:94:f8:76:96:a0: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:79:F7:36:E1:91:BF:C1:2B:E0:0B:BD:4C:C8:4F:A3:E1:A8:0D:C8 X509v3 Authority Key Identifier: keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:64:c8:66:dd:ac:78:9d:e7:f3:48:c0:b2:0c:61:bb:f1:b2: d8:93:04:55:c2:8b:df:7a:41:86:ed:9d:ad:f3:75:97:c3:5a: 7e:20:c7:e3:5f:c6:25:30:a1:ff:4b:0a:f8:66:54:74:a2:ac: 3d:18:6c:6b:fb:e3:a1:80:7d:e3:ca:0e:e7:c7:fa:45:78:80: d9:77:18:a7:ef:18:de:0b:c9:84:b4:94:44:a1:46:1a:50:b6: 48:44:a3:97:4a:61:c8:09:d8:3b:55:27:c3:c3:78:5c:2d:23: 99:e8:1e:3e:5c:7c:bd:f1:16:44:71:63:bc:f2:7a:5a:09:63: 7b:a0:3d:34:39:55:be:0d:26:3d:e4:df:19:d5:c3:cd:f2:74: 02:f5:fa:7e:e7:31:db:a1:d2:00:12:5e:d4:cf:62:87:f5:30: 6a:5c:e4:8d:e3:35:33:fd:2d:c0:14:29:95:6a:c7:4a:b5:77: e7:99:d4:67:b3:1f:9e:88:b9:e1:f6:e4:7b:8b:93:74:c7:98: 74:c0:28:e8:02:c6:57:1a:9b:0a:f9:12:34:ba:f5:9f:07:c3: ee:4c:bb:d3:ee:63:d8:11:35:b5:4c:ee:5a:11:1f:50:6c:3b: ce:f2:8c:b5:6a:71:84:89:dc:e1:53:4d:7d:95:b4:98:df:5d: 91:49:57:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSyMSCC2P4u49jJg/QSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZWNhZDU2ZWFhZTEyMzVmYTc4OGU0ZWFkMzkyMmMyOTZl MjgzYTUwHhcNMjYwMjA5MTcwMDQzWhcNMjYwMjEwMTcwMDQzWjAzMTEwLwYDVQQD EyhiYTc5ZjczNmUxOTFiZmMxMmJlMDBiYmQ0Y2M4NGZhM2UxYTgwZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47j7YTxpzlUyY5KjtT7T6v4GOZgD EOE3o+zi8wH6nuuPH0eQmHG8FoCE0paSkYeAN2pFLbzHiqVDNEkPVl14+wq16OcQ qjujmoA6JIL8hRXANjjOmm8h9NSFnBz+gzsywClPe1DEDGdD/mvgVokX65bakIh/ 0DJrrL5VUf/g0CaCBgVomMc+Rt+3Fsk+LJGFc20EyEPXEbyI3UpFWC985l2S5g4T WvObeuuPzlT+oEHxqxy0xEkPjqdI+Gj8jHzZbZv6rnFAVSspGZWmhN2lp4aSR/wk lMacxGrSwrVqaDqk3gcTNbVot/K8KIQfb5Yu8HHdC6yfggkSlPh2lqCopQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLp59zbhkb/BK+ALvUzIT6PhqA3IMB8GA1UdIwQY MBaAFN/srVbqrhI1+niOTq05IsKW4oOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMy15dFZ1cXVFalg2ZUk1T3JUa2l3cGJpZzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kNjcwODctNzY1Yi00NmViLTgwOGMt Njc3YmFiNjEzYWZmLzEvMy15dFZ1cXVFalg2ZUk1T3JUa2l3cGJpZzZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9kNjcwODctNzY1Yi00NmViLTgwOGMtNjc3YmFiNjEzYWZm LzEvMy15dFZ1cXVFalg2ZUk1T3JUa2l3cGJpZzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGTIZt2s eJ3n80jAsgxhu/Gy2JMEVcKL33pBhu2drfN1l8NafiDH41/GJTCh/0sK+GZUdKKs PRhsa/vjoYB948oO58f6RXiA2XcYp+8Y3gvJhLSURKFGGlC2SESjl0phyAnYO1Un w8N4XC0jmegePlx8vfEWRHFjvPJ6Wglje6A9NDlVvg0mPeTfGdXDzfJ0AvX6fucx 26HSABJe1M9ih/UwalzkjeM1M/0twBQplWrHSrV355nUZ7Mfnoi54fbke4uTdMeY dMAo6ALGVxqbCvkSNLr1nwfD7ky70+5j2BE1tUzuWhEfUGw7zvKMtWpxhInc4VNN fZW0mN9dkUlXmQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:23 2026 by rpki-client