This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File: 3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier: FhQOQmSQFS2H2Np0RelNHF10pcviFHfQX7N/ulfZGcY=
Subject key identifier: 6F:41:32:1E:55:96:17:CC:48:71:20:14:1B:D0:FA:08:99:8C:21:47
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial: 019BFD2ED91634C00527CE0870C14081C60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number: 17FD
Signing time: Tue 27 Jan 2026 02:01:04 +0000
Manifest this update: Tue 27 Jan 2026 02:01:04 +0000
Manifest next update: Wed 28 Jan 2026 02:01:04 +0000
Files and hashes: 1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: gMC5o7OPMvnq+hF0Hp9jXDcuo2gNcz//80E0qruMCkY=)
2: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (hash: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw=)
3: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (hash: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI=)
4: g0mhvAZsLExNosr94fQnamWzRDY.roa (hash: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:2e:d9:16:34:c0:05:27:ce:08:70:c1:40:81:c6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Validity
Not Before: Jan 27 02:01:04 2026 GMT
Not After : Jan 28 02:01:04 2026 GMT
Subject: CN=6f41321e559617cc487120141bd0fa08998c2147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:d8:f9:d3:9a:75:75:a3:47:bd:69:ee:fa:
61:59:0d:c3:4f:1d:c2:05:26:68:16:85:4a:10:c2:
21:44:c8:f6:11:d2:c7:c2:55:b1:8d:a4:9f:20:bf:
14:60:64:ec:9a:33:33:4f:f2:71:55:63:53:59:7d:
09:0c:41:2e:ff:39:c1:07:b5:c3:a7:5e:73:f4:0e:
66:cc:92:93:33:a3:96:82:fc:66:e6:fb:16:6e:05:
f7:26:90:bf:57:f2:bd:3a:33:7c:33:1f:e6:4d:22:
78:12:99:2d:83:0b:4f:6e:e8:af:ba:5a:05:31:4f:
53:68:6d:4a:fe:5d:83:c4:30:f0:46:cf:4e:be:7b:
65:b1:8c:f4:4d:99:1e:0a:de:28:bf:be:ca:59:f3:
2a:27:4e:ea:3d:ab:1b:ef:d5:b3:5c:af:5f:dc:ea:
52:d7:33:fc:93:dd:b1:6a:f5:bb:31:73:40:8c:d8:
3f:23:4e:09:ba:d1:0e:14:cf:29:ea:03:a9:7a:b9:
33:c2:21:f7:2b:07:83:4e:2a:9a:5e:ac:fd:4a:ba:
76:e1:dc:0d:a0:11:7e:1e:96:4f:13:c3:f9:95:cf:
fa:97:c8:d2:98:29:a3:68:9b:31:e0:91:5f:ef:99:
8a:da:e8:7f:c5:59:0b:a3:1d:4f:96:e5:56:b3:6b:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:41:32:1E:55:96:17:CC:48:71:20:14:1B:D0:FA:08:99:8C:21:47
X509v3 Authority Key Identifier:
keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7b:dc:9d:f2:67:0a:57:cc:be:fe:a9:3c:4f:f5:27:59:22:
36:66:36:c9:ef:ee:b7:4b:2a:60:69:81:f5:8b:bc:83:5f:71:
a2:d4:3c:c0:ef:10:ef:d3:ff:42:9d:78:dc:09:76:94:b3:f9:
20:d8:2a:12:ff:e4:5c:18:2c:04:6c:ab:8e:5f:03:c6:4b:7b:
c8:5b:66:2e:c7:ef:44:85:cf:62:c7:fc:86:b7:11:1b:b1:20:
1e:4b:f9:65:cb:14:2f:46:e1:11:cd:70:ef:bc:54:04:23:1c:
34:87:91:b6:3a:d9:c5:38:08:34:48:f9:74:e0:54:85:49:fd:
df:46:37:cd:a0:a3:6c:da:ab:23:66:1a:d2:48:50:73:3c:83:
f5:58:af:a1:8a:bd:81:3b:16:d5:c2:f4:68:fd:ec:d3:2a:bf:
7b:4f:a0:09:c5:ad:a0:37:a0:a4:bf:18:9b:bc:36:20:a6:5b:
d4:bf:9b:fc:75:1e:ff:98:60:ee:f7:0c:dc:bb:23:41:f2:1f:
31:0c:d8:33:43:a6:85:92:08:bd:3c:90:b8:55:c4:6d:14:bd:
c0:ea:17:03:ff:f0:34:61:d6:1f:78:50:a6:86:2b:f3:f0:6e:
df:d6:5f:57:33:e4:ca:82:2b:a7:d5:f6:ce:17:76:40:15:8b:
b0:35:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:39:59 2026 by rpki-client