This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: Pw1IecN8HJ07iC+Hnt53ZbtNqF3UVHLod1hwHr0bpD8=
Subject key identifier: 74:4A:D6:5E:D2:51:99:AD:AE:A4:16:6D:DE:29:5A:57:C4:3E:55:FB
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 019C438FEC2F2CFCA972ECF73B6B37E3DBF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 0E39
Signing time: Mon 09 Feb 2026 18:00:31 +0000
Manifest this update: Mon 09 Feb 2026 18:00:31 +0000
Manifest next update: Tue 10 Feb 2026 18:00:31 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: yHfTri30vhCK2h0hYJpRM/c4niyFTyMdqWpMw2E+B64=)
2: AsZzVRFHM8fIkabnOw1lUsz9Vcs.roa (hash: f+u/yu7J+CDrLDQiTVjW/9Sj11XA+wmveFvT2gcpBO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:ec:2f:2c:fc:a9:72:ec:f7:3b:6b:37:e3:db:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Feb 9 18:00:31 2026 GMT
Not After : Feb 10 18:00:31 2026 GMT
Subject: CN=744ad65ed25199adaea4166dde295a57c43e55fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:dd:34:fe:ec:26:ee:61:47:d1:c6:c0:df:
92:f7:dd:13:5f:4b:e7:0f:a6:69:da:a5:b3:2f:05:
cb:6e:0d:66:b3:24:c7:73:35:06:dd:ee:60:05:cf:
51:ab:a4:ee:14:b7:2a:5c:71:e7:61:2c:5e:8c:e2:
ba:60:7c:44:1e:4c:2a:69:30:e4:85:fa:0a:e0:21:
86:07:e9:ad:2f:ab:87:eb:3c:78:cf:13:22:00:e2:
90:e7:8e:ec:47:5a:81:78:42:13:76:25:82:51:38:
89:03:50:fb:d1:8b:90:b9:11:09:20:14:78:52:c4:
78:46:7d:b9:0c:2f:dd:80:a6:3b:b3:ee:c1:e4:4b:
db:ca:06:8f:ad:78:2f:92:22:1d:3c:46:ae:08:96:
f8:bb:ed:e1:cf:80:c6:b1:7c:34:b3:7b:db:57:aa:
6b:43:fc:ea:2e:7e:22:10:7c:82:9a:57:66:71:a1:
44:c7:3a:62:c3:83:b7:ac:e6:5e:e7:cc:82:6e:47:
d8:6a:19:36:53:fa:16:1f:08:45:1d:f7:ca:f7:ec:
16:8a:96:50:01:ba:9b:b0:de:c0:83:86:df:a0:ad:
17:fc:2a:7a:ac:4e:bc:74:08:f0:ac:08:f5:d9:9b:
4d:1d:93:c0:6b:59:81:ac:66:a2:30:9d:83:fa:0a:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4A:D6:5E:D2:51:99:AD:AE:A4:16:6D:DE:29:5A:57:C4:3E:55:FB
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:51:12:c4:6a:d9:97:0a:4e:bb:a7:82:45:a4:0d:3a:f3:0c:
85:3c:88:e9:1e:b5:47:8e:dd:44:b2:d9:b8:74:ad:83:8b:4f:
53:ca:1b:da:4a:9f:f4:e7:c4:f4:2b:62:2b:cf:14:28:5c:69:
8a:0d:52:a0:1c:04:de:f5:7a:0c:69:27:ae:37:3b:71:ea:5d:
9f:f8:e9:93:27:cc:76:26:77:a7:18:2a:d3:20:e6:33:19:b4:
08:56:0f:5e:56:bc:9b:ff:c2:c7:34:58:8e:2a:ec:b5:e0:a8:
d7:6d:5f:20:3e:df:9c:cb:40:ac:39:47:3a:8d:b1:66:d7:9d:
f3:9e:17:11:94:26:e3:af:f7:0a:51:a3:46:3a:51:61:4e:9f:
84:d1:c6:27:31:a9:2a:ca:40:ea:44:0c:4b:8e:bf:39:04:51:
e6:ce:b2:64:b3:86:88:70:8f:8e:6e:fc:80:dd:ec:b3:9a:43:
db:30:74:30:68:6d:d0:96:e6:cd:ef:ba:e2:57:27:93:42:2c:
49:e0:0a:5c:a2:a1:8b:e8:ec:1a:b0:58:ee:1f:22:9a:cf:6d:
54:5e:0f:11:61:46:43:24:e7:e9:de:f5:f9:03:99:9f:92:a1:
e0:51:2b:cb:f8:2b:7a:73:c5:ee:e4:65:2c:f7:64:13:f3:cf:
2a:31:6a:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj+wvLPypcuz3O2s349vwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2
NGZhYTUwHhcNMjYwMjA5MTgwMDMxWhcNMjYwMjEwMTgwMDMxWjAzMTEwLwYDVQQD
Eyg3NDRhZDY1ZWQyNTE5OWFkYWVhNDE2NmRkZTI5NWE1N2M0M2U1NWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmALdNP7sJu5hR9HGwN+S990TX0vn
D6Zp2qWzLwXLbg1msyTHczUG3e5gBc9Rq6TuFLcqXHHnYSxejOK6YHxEHkwqaTDk
hfoK4CGGB+mtL6uH6zx4zxMiAOKQ547sR1qBeEITdiWCUTiJA1D70YuQuREJIBR4
UsR4Rn25DC/dgKY7s+7B5EvbygaPrXgvkiIdPEauCJb4u+3hz4DGsXw0s3vbV6pr
Q/zqLn4iEHyCmldmcaFExzpiw4O3rOZe58yCbkfYahk2U/oWHwhFHffK9+wWipZQ
AbqbsN7Ag4bfoK0X/Cp6rE68dAjwrAj12ZtNHZPAa1mBrGaiMJ2D+gp3pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRK1l7SUZmtrqQWbd4pWlfEPlX7MB8GA1UdIwQY
MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt
MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3
LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlESxGrZ
lwpOu6eCRaQNOvMMhTyI6R61R47dRLLZuHStg4tPU8ob2kqf9OfE9CtiK88UKFxp
ig1SoBwE3vV6DGknrjc7cepdn/jpkyfMdiZ3pxgq0yDmMxm0CFYPXla8m//CxzRY
jirsteCo121fID7fnMtArDlHOo2xZted854XEZQm46/3ClGjRjpRYU6fhNHGJzGp
KspA6kQMS46/OQRR5s6yZLOGiHCPjm78gN3ss5pD2zB0MGht0Jbmze+64lcnk0Is
SeAKXKKhi+jsGrBY7h8ims9tVF4PEWFGQyTn6d71+QOZn5Kh4FEry/grenPF7uRl
LPdkE/PPKjFqBg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:24 2026 by rpki-client