This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
File: t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json)
Hash identifier: NflP0ewXpB3LbK8ymCv1FBYdthkkG6mw6O1TeJ0fCrg=
Subject key identifier: 67:22:2C:A7:27:F9:BD:A7:8B:4E:44:59:D5:28:57:9F:25:C0:03:7C
Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
Certificate issuer: /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Certificate serial: 019C42EB276A93EE12FE881E653D2FA9EA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
Manifest number: 0713
Signing time: Mon 09 Feb 2026 15:00:32 +0000
Manifest this update: Mon 09 Feb 2026 15:00:32 +0000
Manifest next update: Tue 10 Feb 2026 15:00:32 +0000
Files and hashes: 1: PZBnPdfbJCdgsdJ-b0ZM7yGRxxc.roa (hash: lKGeR/3YCO+JxIhtID6zbVNMC2uzyz/+F4TUSGRB+zg=)
2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: qAkzMfo3f3rg8iSfQ/ZsuDU3FHtzTI/S8KhFgC8Y2wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:27:6a:93:ee:12:fe:88:1e:65:3d:2f:a9:ea:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Validity
Not Before: Feb 9 15:00:32 2026 GMT
Not After : Feb 10 15:00:32 2026 GMT
Subject: CN=67222ca727f9bda78b4e4459d528579f25c0037c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:45:0a:07:24:ae:34:cf:d6:33:ce:1a:d9:
b3:9f:b0:af:70:d7:8a:44:1b:83:72:00:13:ba:d9:
ca:c0:a1:54:0b:0a:f6:67:98:ce:1e:10:d3:a8:f3:
fe:6a:fb:f9:40:7c:73:38:d5:b9:c9:86:ba:f4:77:
71:a8:38:64:13:49:57:b6:c5:29:f9:67:fb:c8:b8:
f2:c8:3c:3f:8f:d3:eb:62:01:f1:c8:b0:fd:c6:c8:
c7:0f:18:5d:93:d2:99:ef:67:25:aa:c4:53:ce:bf:
81:11:1c:68:ef:63:ad:fc:22:07:d5:56:0b:4d:8a:
69:0a:d0:fe:e1:04:c3:c3:9b:f4:1b:79:90:d2:04:
ed:9c:3e:3e:5c:94:9d:20:23:3c:1c:53:f0:ee:9f:
5f:05:e5:3e:38:35:b1:ae:b0:33:bf:aa:db:ce:8e:
7e:2a:d5:5b:60:72:8f:4d:19:dc:e8:a8:d9:4d:7c:
e2:2d:a7:ee:f9:9c:9f:95:59:e9:82:d8:97:9d:a5:
cb:5a:83:e9:08:19:19:72:89:11:0c:36:84:71:1e:
76:61:74:e6:4b:88:91:05:08:61:b3:ca:78:c0:21:
45:d7:95:64:75:b6:0d:cb:14:dc:75:ca:6d:0f:08:
68:df:92:03:ad:1c:be:b9:cd:47:28:67:df:d8:e0:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:22:2C:A7:27:F9:BD:A7:8B:4E:44:59:D5:28:57:9F:25:C0:03:7C
X509v3 Authority Key Identifier:
keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:47:71:70:ad:82:33:9d:0d:a0:08:e9:4d:19:dc:69:4f:71:
fd:22:63:30:0c:63:4a:0f:1e:24:34:85:40:8c:93:c6:ab:88:
56:81:82:cc:46:e5:97:1a:36:e4:1e:d9:a9:63:ba:b2:13:e4:
cd:63:e5:85:96:5b:02:83:db:0f:91:dc:f1:5d:07:d6:c9:32:
d3:9f:99:88:7f:7f:5d:f0:76:65:6b:39:fd:45:00:a2:d0:d5:
4b:2e:3b:e6:8e:b0:37:36:36:2e:93:b6:97:12:81:04:a1:f1:
56:d1:5b:71:de:2c:7a:03:8a:45:c1:2d:c9:c6:2f:52:cc:ad:
5c:39:99:d6:aa:9d:f6:dd:05:ef:1e:0f:39:99:78:7d:f0:77:
11:63:4a:0f:ff:9d:57:c0:ba:01:9a:b9:59:f4:17:72:23:93:
10:91:88:fa:f3:78:a6:01:47:69:4c:d0:f4:28:0f:be:ee:df:
41:4c:37:8d:b8:0b:00:93:6f:05:47:3a:39:b0:7f:5c:b6:10:
70:40:f2:24:b7:d0:90:39:85:3b:e9:da:1b:95:94:9a:3a:35:
71:57:31:f7:00:23:f2:da:47:29:b3:51:45:9d:1d:1a:63:e0:
aa:32:1f:54:ef:49:79:66:b3:9b:c1:be:92:80:9e:ae:88:30:
f3:ff:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:35 2026 by rpki-client