This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json) Hash identifier: sXQZLKkDZIIr23RA7SwZ17+0VWOM0dhdqxMDtEVWqcs= Subject key identifier: 16:E4:62:E7:01:0D:68:B6:B2:0C:5F:4A:33:61:0B:22:EC:72:8C:08 Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e Certificate serial: 019C4511410B4DA045D0DD3E06E31E35BA74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft Manifest number: 0AD7 Signing time: Tue 10 Feb 2026 01:01:24 +0000 Manifest this update: Tue 10 Feb 2026 01:01:24 +0000 Manifest next update: Wed 11 Feb 2026 01:01:24 +0000 Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: SHv1TNKiumozgLTZ9mOEUHIg9eANNE/aidlQizkCX1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:11:41:0b:4d:a0:45:d0:dd:3e:06:e3:1e:35:ba:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=737787cf2a870d91b11369f9d74591957602814e Validity Not Before: Feb 10 01:01:24 2026 GMT Not After : Feb 11 01:01:24 2026 GMT Subject: CN=16e462e7010d68b6b20c5f4a33610b22ec728c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1d:73:1c:20:89:e7:0a:e0:89:90:46:a1:f4: 8a:21:5c:8b:5d:f2:24:86:c2:53:01:c8:c2:69:57: 4b:84:d7:8d:5e:a2:59:3e:c2:bb:61:80:89:3b:19: 98:9d:00:d7:3b:45:da:49:93:25:cd:42:a0:dd:79: 81:bb:1a:aa:17:48:29:ad:63:86:4b:60:5b:0a:aa: 90:c4:5a:9b:32:53:2d:98:62:e5:e9:43:79:c5:61: 88:9c:27:4e:ff:94:be:59:95:40:64:a6:37:12:04: 64:7c:8b:19:23:80:99:c8:92:da:28:3d:71:86:d8: 8b:d2:ed:76:0f:79:72:b4:0d:85:77:3d:be:85:87: 58:7d:3a:24:05:bd:b9:7c:3c:59:4b:a6:09:61:d8: 55:b4:65:a6:82:43:ad:c4:0b:d4:94:a9:70:90:27: 14:9a:38:5f:c2:6d:26:69:2f:3d:0a:6c:eb:5a:10: aa:18:18:9c:a9:12:22:9d:94:14:02:5e:1f:a3:eb: 5b:17:16:cb:62:92:32:4b:80:ae:6a:4f:76:7f:b0: 1e:dd:11:ac:28:75:d6:0f:06:24:53:ed:a2:40:67: 05:e7:ff:fc:93:8e:99:6b:74:53:52:a4:c7:97:dd: 84:bd:59:c6:db:57:ff:1e:00:ca:9b:4b:a5:f6:5b: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E4:62:E7:01:0D:68:B6:B2:0C:5F:4A:33:61:0B:22:EC:72:8C:08 X509v3 Authority Key Identifier: keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f5:4d:97:1e:dd:f7:88:d9:34:eb:e0:d0:b2:99:03:09:a7: e6:0f:bb:1b:60:08:c1:5b:52:25:5d:f7:7a:53:5b:7e:7f:9b: 75:e9:df:d2:f6:ce:ca:f5:61:90:52:8e:3d:85:ee:e4:0d:be: 98:c8:7c:b9:4f:1f:f9:f5:5d:f3:90:4d:ac:be:b3:ff:4e:f2: 7c:0b:86:3f:3f:2f:65:ab:12:c6:fa:f2:e7:79:b8:e9:88:bc: 44:90:36:32:14:02:61:b7:c5:bc:5d:87:db:a8:a1:c6:68:9f: 84:dd:8b:79:2b:af:89:44:6d:6d:d0:dd:4c:83:cf:fc:dd:1d: 9a:fb:83:12:2e:ec:c6:51:44:d9:86:0e:15:28:5c:7f:6f:1f: 1a:91:32:14:d9:9a:45:42:5f:7a:84:b5:d7:e8:30:b0:8b:44: 9e:d5:7d:f5:0f:82:90:c5:b5:a1:8a:0e:ae:cb:25:8c:ed:18: f4:f5:94:6a:93:05:ec:df:61:31:1e:c6:11:22:52:fa:da:e7: 4b:2e:17:1a:6f:b5:e6:0d:b8:ac:a5:d2:49:71:d1:6f:b6:1a: 14:5e:c2:75:8d:29:fd:af:fd:66:bc:76:08:eb:5c:f7:b8:d2: a4:23:81:8c:50:f4:33:69:bc:73:bb:35:41:26:78:98:f9:b0: 07:2b:eb:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEUELTaBF0N0+BuMeNbp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNzc4N2NmMmE4NzBkOTFiMTEzNjlmOWQ3NDU5MTk1NzYw MjgxNGUwHhcNMjYwMjEwMDEwMTI0WhcNMjYwMjExMDEwMTI0WjAzMTEwLwYDVQQD EygxNmU0NjJlNzAxMGQ2OGI2YjIwYzVmNGEzMzYxMGIyMmVjNzI4YzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B1zHCCJ5wrgiZBGofSKIVyLXfIk hsJTAcjCaVdLhNeNXqJZPsK7YYCJOxmYnQDXO0XaSZMlzUKg3XmBuxqqF0gprWOG S2BbCqqQxFqbMlMtmGLl6UN5xWGInCdO/5S+WZVAZKY3EgRkfIsZI4CZyJLaKD1x htiL0u12D3lytA2Fdz2+hYdYfTokBb25fDxZS6YJYdhVtGWmgkOtxAvUlKlwkCcU mjhfwm0maS89CmzrWhCqGBicqRIinZQUAl4fo+tbFxbLYpIyS4Cuak92f7Ae3RGs KHXWDwYkU+2iQGcF5//8k46Za3RTUqTHl92EvVnG21f/HgDKm0ul9lt8FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbkYucBDWi2sgxfSjNhCyLscowIMB8GA1UdIwQY MBaAFHN3h88qhw2RsRNp+ddFkZV2AoFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEyNjQtZWEyOS00OTFmLWFjNGMt NjJjMDg1ODM0NGU4LzEvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NGEyNjQtZWEyOS00OTFmLWFjNGMtNjJjMDg1ODM0NGU4 LzEvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfVNlx7d 94jZNOvg0LKZAwmn5g+7G2AIwVtSJV33elNbfn+bdenf0vbOyvVhkFKOPYXu5A2+ mMh8uU8f+fVd85BNrL6z/07yfAuGPz8vZasSxvry53m46Yi8RJA2MhQCYbfFvF2H 26ihxmifhN2LeSuviURtbdDdTIPP/N0dmvuDEi7sxlFE2YYOFShcf28fGpEyFNma RUJfeoS11+gwsItEntV99Q+CkMW1oYoOrssljO0Y9PWUapMF7N9hMR7GESJS+trn Sy4XGm+15g24rKXSSXHRb7YaFF7CdY0p/a/9Zrx2COtc97jSpCOBjFD0M2m8c7s1 QSZ4mPmwByvrlw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:51:10 2026 by rpki-client