This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: 9g2hQZSb1vwrpLFqmT7v0l76zvaGoy4g5PLkoQAOpiM=
Subject key identifier: 56:59:CA:D6:A6:D0:4A:D0:71:7D:CF:58:11:5C:47:9E:45:E4:0E:A7
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 019C41A256331A63A53AF9724ADC7F79FD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 06DB
Signing time: Mon 09 Feb 2026 09:01:23 +0000
Manifest this update: Mon 09 Feb 2026 09:01:23 +0000
Manifest next update: Tue 10 Feb 2026 09:01:23 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: kJiuPHiAYth9zuCmlIZ2h0PjRHSmNZhVg+JOCUv3jmI=)
2: U_7zBQWTwyWyUplGTwTnhAD7M1w.roa (hash: qcrvphnrKI926TTY4n+5jtIqzlPgS2kixs/9tqEWP9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:56:33:1a:63:a5:3a:f9:72:4a:dc:7f:79:fd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Feb 9 09:01:23 2026 GMT
Not After : Feb 10 09:01:23 2026 GMT
Subject: CN=5659cad6a6d04ad0717dcf58115c479e45e40ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:eb:77:ff:ff:cc:32:0a:db:f2:10:cf:e2:
c6:c8:e9:ef:16:84:c0:b8:82:c3:33:f5:ed:25:0c:
96:11:2d:c1:74:33:e9:7d:c6:40:f9:c2:f6:32:da:
d9:79:a0:1c:6d:bc:f0:c5:5f:52:76:58:17:7e:b9:
b8:22:5c:1b:74:0d:c5:02:cd:fa:9f:4c:59:af:96:
95:da:00:63:d5:b7:19:3f:e1:e4:86:c0:2d:ea:c6:
cb:34:ca:69:01:7c:e5:50:67:6f:fd:91:c6:43:e2:
95:62:6d:51:22:16:24:e0:35:48:b5:7c:5f:44:33:
e1:bd:84:5c:6a:28:41:7f:0f:7e:32:0e:56:e6:09:
69:52:ef:1e:da:1b:4e:6e:a9:fb:ba:2a:ff:9e:1a:
be:f3:98:40:c0:20:00:f0:e6:12:5d:2b:fa:38:90:
2c:73:38:b2:2b:21:5e:29:2f:59:df:d6:d0:f9:d3:
d7:31:eb:6c:42:92:41:1c:cc:7b:b6:8b:c1:63:d9:
f4:f0:76:66:8f:f8:ea:63:46:73:aa:29:55:39:b7:
55:47:54:a0:d3:77:23:9e:d4:0e:c5:f8:a1:5e:b0:
fe:d8:0f:c8:7b:b8:37:28:87:79:3d:57:9b:a4:ad:
1b:d8:47:39:c0:c0:6f:22:51:db:c9:71:2d:fa:72:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:CA:D6:A6:D0:4A:D0:71:7D:CF:58:11:5C:47:9E:45:E4:0E:A7
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:48:dd:58:d2:28:e5:ca:c6:15:2d:1b:f7:17:92:78:96:79:
b6:d1:69:4b:e2:db:a6:c1:11:7b:ed:c5:49:ae:db:74:1b:fd:
4a:ac:91:88:05:98:5a:b7:2b:f5:9e:0a:12:e3:1e:43:4b:40:
d9:71:61:29:33:bc:fe:aa:85:73:71:3d:29:f7:e3:d4:af:8f:
48:d8:27:37:c5:15:ed:60:05:be:d6:82:03:f2:b4:39:a9:92:
82:c7:d6:1d:1b:7d:b9:f3:ea:c0:e5:c5:55:59:df:15:9a:c2:
d5:7c:d2:5e:4b:38:c7:9a:9b:a2:ab:0a:47:bf:9e:bb:ea:7e:
06:99:04:63:a6:b7:26:d5:e6:4a:4d:36:4c:93:a2:81:24:5f:
42:4e:24:8f:c0:c6:2f:fb:83:2b:fa:6e:57:89:e8:af:34:d2:
b8:da:c7:f0:23:c1:53:9a:c2:d6:65:6a:3a:bd:f0:b7:cb:10:
d5:58:8f:a2:2c:08:89:d1:e6:3b:4c:4e:ff:3b:50:4e:7c:7b:
2b:aa:25:f1:0a:36:d1:a4:48:88:1e:96:a7:fa:2f:2d:50:2f:
f4:51:45:0c:95:48:5b:f3:3e:7f:6a:42:8f:2b:b4:ad:80:93:
ee:04:f0:89:01:24:15:f8:75:21:f6:95:0c:23:7b:5d:14:1b:
33:dc:5c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:01 2026 by rpki-client