This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft File: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json) Hash identifier: 4mvzduSLoVneGpD65XZIVdUhMwnGqZzDU9Pk7mkarTo= Subject key identifier: DD:3C:76:4C:6F:52:1D:5A:C6:16:65:73:19:6D:C2:34:9D:B4:C8:38 Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62 Certificate issuer: /CN=c37cd79543f1a77299d069aa36151854530dd862 Certificate serial: 019C43229D18AE22F9BA2F6EF5A285313CD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft Manifest number: 0967 Signing time: Mon 09 Feb 2026 16:01:07 +0000 Manifest this update: Mon 09 Feb 2026 16:01:07 +0000 Manifest next update: Tue 10 Feb 2026 16:01:07 +0000 Files and hashes: 1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: WG6GMHHaQ7hFJJ+k7ZaAoRco9wFvDd6TPLKnJbSEBz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:9d:18:ae:22:f9:ba:2f:6e:f5:a2:85:31:3c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862 Validity Not Before: Feb 9 16:01:07 2026 GMT Not After : Feb 10 16:01:07 2026 GMT Subject: CN=dd3c764c6f521d5ac6166573196dc2349db4c838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:24:f3:6c:c1:da:5a:d1:f7:6c:41:eb:6e: ce:aa:d8:77:b6:69:3d:01:64:90:ec:09:2f:32:84: 79:93:a7:a2:ba:e4:76:a9:f7:87:e2:83:2a:af:26: 85:01:b7:f2:e9:2b:88:6a:c4:28:dd:34:40:4b:0e: a5:46:65:f8:6b:67:eb:b7:5b:0f:51:04:f5:e8:33: 84:bd:6c:78:b9:ac:fa:fa:71:24:13:91:e2:69:34: 57:fa:1c:c0:c3:e6:d4:e1:3f:38:92:85:b6:93:47: 34:56:a3:ab:18:1a:c0:5e:fa:9a:ee:71:2f:a9:63: a9:d9:c8:32:91:9c:f0:6b:a4:f3:f5:02:7f:4f:e4: 67:e8:9c:b8:3f:3b:27:a1:87:22:48:3f:10:20:1a: f3:d4:2b:e1:49:e0:3a:1e:8c:4b:ad:28:4f:b4:be: 38:87:c2:84:59:9d:b4:1b:a2:a2:fd:9b:c3:e4:a8: 29:6b:4c:a4:19:75:93:fb:42:b2:65:8f:50:1a:0e: 82:00:d8:3e:e5:20:f3:06:7f:34:b1:83:05:07:1f: b9:96:2b:61:05:fc:33:08:2b:d3:42:c8:fa:12:10: b8:f9:07:3c:36:fe:25:d0:4a:c8:ce:42:20:c7:d6: f7:1d:bd:8c:fa:71:f4:20:48:43:54:9c:27:65:96: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3C:76:4C:6F:52:1D:5A:C6:16:65:73:19:6D:C2:34:9D:B4:C8:38 X509v3 Authority Key Identifier: keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d6:a3:46:79:4d:54:80:8e:00:3a:d8:86:a5:45:eb:77:b1: 18:03:a1:bc:34:77:33:bc:71:ea:62:26:65:76:f8:86:3a:63: cc:50:59:e5:b4:32:ba:44:c6:12:e5:67:7c:6b:fb:18:b5:3e: da:bd:d7:b9:0a:99:4a:dd:d9:aa:7f:58:7d:75:11:0f:c9:00: b3:1f:6e:ac:8a:f0:bb:ff:ed:1c:9a:ad:86:7d:71:45:65:62: 1c:07:75:58:42:77:b7:fc:f9:2d:fd:f5:9f:02:7a:cb:c2:a1: 7d:32:a6:eb:ba:fd:fb:98:31:10:fd:76:d1:70:9f:c5:d2:22: 67:fb:2d:76:62:bf:36:d0:e0:6e:f4:84:8a:86:02:32:64:9c: 7a:d7:e8:35:d0:fc:70:81:be:b4:fb:b8:d2:4d:89:37:d4:98: 87:1c:87:81:91:43:aa:0e:ff:cb:a7:87:17:03:7d:06:c9:08: 6a:3a:cd:88:76:82:72:ac:08:fb:1c:c5:6a:ca:3b:2e:e9:19: aa:40:9b:59:8f:c0:71:c5:a0:4d:a9:1d:f6:46:63:28:c3:a5: 6f:3a:2f:9c:7d:ca:ff:fd:f3:15:c9:f8:48:d2:a8:7a:f0:f7: 59:14:62:c6:13:b0:d2:d6:00:cc:38:6f:d1:31:7e:5e:30:89: 60:b4:0d:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIp0YriL5ui9u9aKFMTzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzN2NkNzk1NDNmMWE3NzI5OWQwNjlhYTM2MTUxODU0NTMw ZGQ4NjIwHhcNMjYwMjA5MTYwMTA3WhcNMjYwMjEwMTYwMTA3WjAzMTEwLwYDVQQD EyhkZDNjNzY0YzZmNTIxZDVhYzYxNjY1NzMxOTZkYzIzNDlkYjRjODM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznsk82zB2lrR92xB627Oqth3tmk9 AWSQ7AkvMoR5k6eiuuR2qfeH4oMqryaFAbfy6SuIasQo3TRASw6lRmX4a2frt1sP UQT16DOEvWx4uaz6+nEkE5HiaTRX+hzAw+bU4T84koW2k0c0VqOrGBrAXvqa7nEv qWOp2cgykZzwa6Tz9QJ/T+Rn6Jy4PzsnoYciSD8QIBrz1CvhSeA6HoxLrShPtL44 h8KEWZ20G6Ki/ZvD5Kgpa0ykGXWT+0KyZY9QGg6CANg+5SDzBn80sYMFBx+5lith BfwzCCvTQsj6EhC4+Qc8Nv4l0ErIzkIgx9b3Hb2M+nH0IEhDVJwnZZamAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN08dkxvUh1axhZlcxltwjSdtMg4MB8GA1UdIwQY MBaAFMN815VD8adymdBpqjYVGFRTDdhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzN6WGxVUHhwM0taMEdtcU5oVVlWRk1OMkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82YWYxNDItMGFjNi00ZTc2LTkwNDIt NzE0ODFiYjBhNTJmLzEvdzN6WGxVUHhwM0taMEdtcU5oVVlWRk1OMkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi82YWYxNDItMGFjNi00ZTc2LTkwNDItNzE0ODFiYjBhNTJm LzEvdzN6WGxVUHhwM0taMEdtcU5oVVlWRk1OMkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNajRnlN VICOADrYhqVF63exGAOhvDR3M7xx6mImZXb4hjpjzFBZ5bQyukTGEuVnfGv7GLU+ 2r3XuQqZSt3Zqn9YfXURD8kAsx9urIrwu//tHJqthn1xRWViHAd1WEJ3t/z5Lf31 nwJ6y8KhfTKm67r9+5gxEP120XCfxdIiZ/stdmK/NtDgbvSEioYCMmScetfoNdD8 cIG+tPu40k2JN9SYhxyHgZFDqg7/y6eHFwN9BskIajrNiHaCcqwI+xzFaso7LukZ qkCbWY/AccWgTakd9kZjKMOlbzovnH3K//3zFcn4SNKoevD3WRRixhOw0tYAzDhv 0TF+XjCJYLQNJQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:46:54 2026 by rpki-client