This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: g2m3c6f0ei4fjQlcq0Osux5X1kZmo/nIgY/SHYacy0I=
Subject key identifier: 0A:F6:A1:E8:1E:ED:9D:88:7D:83:6E:80:F2:AA:84:AC:D8:63:88:75
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 019C427DBC7370D31C75EAF31F2CA56CB20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 1111
Signing time: Mon 09 Feb 2026 13:01:02 +0000
Manifest this update: Mon 09 Feb 2026 13:01:02 +0000
Manifest next update: Tue 10 Feb 2026 13:01:02 +0000
Files and hashes: 1: WgyWXzUsbTmY_1RP05v7gzecvkE.roa (hash: 21qhAR+umq3QUHZh7Y6Cu4mrPcpjOq1CbtvmUgC6mpY=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: U+E1dCSG22qFrVshnldU67cOdo1I5sroqY1CeioyPkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:bc:73:70:d3:1c:75:ea:f3:1f:2c:a5:6c:b2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Feb 9 13:01:02 2026 GMT
Not After : Feb 10 13:01:02 2026 GMT
Subject: CN=0af6a1e81eed9d887d836e80f2aa84acd8638875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:8e:09:52:3a:54:f8:e0:18:ee:eb:61:6e:
be:47:f1:c4:83:ab:21:5b:f2:f4:61:e8:38:6b:a6:
ef:4a:77:bc:9e:b3:98:db:fd:f2:da:9d:79:f3:9d:
74:a9:f0:f5:86:fd:35:5c:2a:9a:83:ab:66:38:f5:
83:8b:4f:b1:24:98:09:15:54:37:20:0a:6c:28:11:
3d:c5:10:0b:d4:f7:37:bb:42:47:d1:ab:cd:f4:9b:
92:ea:62:23:94:c2:92:06:87:62:d5:0f:21:b9:05:
21:89:ab:e9:5a:0e:18:02:bb:88:9f:93:b6:da:42:
56:8e:eb:6e:b3:48:d5:cb:6c:c3:40:cb:78:4f:2e:
86:f4:f8:83:43:e1:72:75:99:7c:45:04:e7:5d:3e:
05:85:7e:82:2a:20:a1:a0:d2:ee:90:a2:e4:39:39:
9e:58:ce:ba:9e:ea:b2:f2:78:69:79:15:b4:c6:50:
b4:1d:de:44:1e:b2:ed:e6:c2:f1:4b:78:eb:12:01:
f9:3b:ee:98:82:e7:1a:77:32:d0:6d:12:85:c4:ba:
13:22:52:a6:85:35:a0:b0:07:d2:2b:e9:4c:53:4f:
6b:70:93:52:db:95:70:76:28:33:98:5b:66:f8:c0:
9a:f1:c0:29:bd:94:e7:d7:30:bc:79:e6:ca:3a:85:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F6:A1:E8:1E:ED:9D:88:7D:83:6E:80:F2:AA:84:AC:D8:63:88:75
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6c:d7:9d:f2:d0:14:5a:77:7d:fb:45:8e:90:51:3f:50:3c:
f9:ec:37:c0:95:18:b8:1e:ad:c8:05:f7:b2:5d:1c:4a:db:b2:
76:df:45:33:52:15:65:65:cc:25:14:64:a2:77:69:c5:34:c6:
49:23:52:ec:f9:32:bb:ba:b0:8f:1f:43:18:f2:2c:c7:80:28:
38:ee:4d:75:ca:a3:64:4a:89:ef:29:6e:63:ec:5d:f6:c4:ce:
e2:eb:9d:f8:b3:ca:ed:86:98:27:e2:b3:c2:d3:ce:72:d1:c6:
85:f5:3b:da:be:0c:4c:9c:89:59:e9:49:90:90:67:b0:9c:48:
2b:19:6e:22:f4:f8:f8:5c:e7:72:97:05:fc:29:24:28:44:d9:
62:28:a8:1d:a0:28:6e:a6:9d:48:3f:c1:60:f0:2e:be:9f:4d:
7c:36:04:f7:74:c3:1a:27:19:9b:d7:72:01:a9:fa:9f:22:64:
20:04:0f:2b:96:6f:c7:ed:49:55:01:15:d2:c9:19:81:ae:9a:
a0:b3:5a:74:81:a6:85:da:70:b5:7f:dc:0e:19:4b:9c:13:40:
50:42:1c:cc:af:10:e2:ef:d0:a6:3f:e1:f8:99:84:f2:dd:b7:
62:25:8d:00:e1:bf:6e:4e:5a:ab:39:8f:27:01:fb:7d:a1:b5:
95:b0:72:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfbxzcNMcderzHyylbLIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzM2ZWRlYjkyZjkzN2VhNDU4OTNlYTliY2Y0ZWY4M2Yx
NWZmYzgwHhcNMjYwMjA5MTMwMTAyWhcNMjYwMjEwMTMwMTAyWjAzMTEwLwYDVQQD
EygwYWY2YTFlODFlZWQ5ZDg4N2Q4MzZlODBmMmFhODRhY2Q4NjM4ODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCSOCVI6VPjgGO7rYW6+R/HEg6sh
W/L0Yeg4a6bvSne8nrOY2/3y2p158510qfD1hv01XCqag6tmOPWDi0+xJJgJFVQ3
IApsKBE9xRAL1Pc3u0JH0avN9JuS6mIjlMKSBodi1Q8huQUhiavpWg4YAruIn5O2
2kJWjutus0jVy2zDQMt4Ty6G9PiDQ+FydZl8RQTnXT4FhX6CKiChoNLukKLkOTme
WM66nuqy8nhpeRW0xlC0Hd5EHrLt5sLxS3jrEgH5O+6YgucadzLQbRKFxLoTIlKm
hTWgsAfSK+lMU09rcJNS25VwdigzmFtm+MCa8cApvZTn1zC8eebKOoXoEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAr2oege7Z2IfYNugPKqhKzYY4h1MB8GA1UdIwQY
MBaAFMdzbt65L5N+pFiT6pvPTvg/Ff/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYt
NjY5NmRhZGI0NWViLzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYtNjY5NmRhZGI0NWVi
LzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmzXnfLQ
FFp3fftFjpBRP1A8+ew3wJUYuB6tyAX3sl0cStuydt9FM1IVZWXMJRRkondpxTTG
SSNS7Pkyu7qwjx9DGPIsx4AoOO5NdcqjZEqJ7yluY+xd9sTO4uud+LPK7YaYJ+Kz
wtPOctHGhfU72r4MTJyJWelJkJBnsJxIKxluIvT4+FzncpcF/CkkKETZYiioHaAo
bqadSD/BYPAuvp9NfDYE93TDGicZm9dyAan6nyJkIAQPK5Zvx+1JVQEV0skZga6a
oLNadIGmhdpwtX/cDhlLnBNAUEIczK8Q4u/Qpj/h+JmE8t23YiWNAOG/bk5aqzmP
JwH7faG1lbByUw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:45 2026 by rpki-client