This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File: x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier: KJNnUalhjXptN5j7U8Kdixy+VFDdI3iWIiE1z+0rfqA=
Subject key identifier: 33:93:BB:3C:FB:EC:FC:78:23:E1:BF:44:DA:E4:2D:96:02:E3:BC:C9
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 019C41A1D70F35E9F2D82A69D0A31AF0CFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number: 0CB6
Signing time: Mon 09 Feb 2026 09:00:51 +0000
Manifest this update: Mon 09 Feb 2026 09:00:51 +0000
Manifest next update: Tue 10 Feb 2026 09:00:51 +0000
Files and hashes: 1: 7873A-doZHT3z3WdUC9-3ek1dsM.roa (hash: GiS1ksDLyImHjpb2W7ngtoEXY3bCfhYHNgRK23R2O8Q=)
2: SJYIkLcX_CNS1SprQ_soGckZIGQ.roa (hash: eDm4/cj9IxvpczJ1uU/Y+99aLmMJiA5yew/A11GEYVs=)
3: rf5y8gSq5wsa5gp2pUsrZdvorF4.roa (hash: LhVJmNP7LYW2COhuVTfB4/5Ch+7vx0bLlcnCO+/fQfk=)
4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: wuNxkng5qCSOLVhufWT9uTJmbPTcO0wkXW6z9bTGHQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:d7:0f:35:e9:f2:d8:2a:69:d0:a3:1a:f0:cf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Feb 9 09:00:51 2026 GMT
Not After : Feb 10 09:00:51 2026 GMT
Subject: CN=3393bb3cfbecfc7823e1bf44dae42d9602e3bcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:c9:ac:30:3e:81:0b:83:d5:e3:6b:8f:3c:
f3:8e:c2:50:8b:5c:b0:5b:89:46:14:f5:c2:3c:69:
cc:d5:6b:ff:ea:d9:4d:18:ee:54:28:62:0e:24:ee:
39:fe:1f:42:d0:2d:94:64:e8:0d:8b:dc:51:21:ee:
2c:6e:75:1a:dd:0c:f5:39:1e:31:65:07:19:30:dc:
7f:62:da:c9:4d:35:d8:a1:73:5c:47:aa:6b:93:ac:
22:70:1b:4b:73:40:5e:71:5d:d2:16:d0:29:7b:a3:
35:4e:2d:36:0e:0a:b7:0b:26:8e:cd:3d:fa:b6:28:
d4:28:37:7e:58:87:5e:c2:d3:72:46:74:36:0c:96:
6a:e6:cf:96:72:42:f4:0c:2e:f8:c9:99:6f:98:b0:
fd:83:5e:bb:aa:76:15:41:70:90:47:58:3c:19:60:
8a:47:eb:14:bc:21:dd:06:34:2e:63:e9:81:d3:32:
d0:8b:fc:1f:8b:d9:65:c2:32:af:36:64:06:8f:43:
16:ea:c3:cc:9f:09:4a:de:d7:e4:d4:9f:a3:01:7e:
dd:60:77:77:9c:c8:8f:73:d2:dc:ab:09:3c:ab:87:
ba:bf:c6:d5:b6:b5:c7:62:fe:9f:be:3c:b7:fc:c7:
85:22:21:26:c7:74:99:8b:6f:8a:a9:7d:25:40:08:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:93:BB:3C:FB:EC:FC:78:23:E1:BF:44:DA:E4:2D:96:02:E3:BC:C9
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:76:09:9f:f5:3c:8f:ea:35:3e:e3:a7:11:ef:03:97:98:ed:
fd:32:a4:51:23:a4:7f:19:0d:a6:24:ef:88:4f:bf:d2:ab:0d:
e0:35:e1:9c:86:d4:34:93:3f:76:1a:49:6f:7a:3d:3c:0a:b8:
e1:1f:ca:92:ae:3b:92:77:bb:90:34:d0:07:10:31:94:e4:76:
96:d9:57:8c:0b:ff:6b:9f:f3:06:6e:ba:ae:6d:f8:44:38:9f:
94:cb:48:1b:e3:7e:26:e4:73:40:a9:80:66:ee:a9:7f:15:b4:
01:be:f5:df:0f:b4:97:72:69:82:85:50:e7:d6:4e:cc:07:d5:
8d:01:45:fd:a6:b5:22:c3:ef:45:5e:e4:b7:4c:47:44:05:a3:
a0:a5:c2:76:95:90:8f:ca:1b:23:15:0e:82:3c:1c:8d:d9:65:
a8:c0:66:12:28:50:00:6b:93:1c:6c:32:c9:b2:2b:54:f3:bc:
48:73:8d:3f:8b:b0:64:38:e3:d7:34:fb:1c:13:9a:06:ec:ac:
f5:bf:98:47:0d:17:5d:45:e6:80:b2:22:42:35:98:3c:74:7f:
42:f4:c8:77:06:38:37:10:72:25:33:83:d2:78:ac:f7:3a:d0:
8a:d1:8c:97:b3:d0:e5:6b:8d:6e:78:f7:8e:ce:ec:d1:bd:98:
99:4f:99:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:33 2026 by rpki-client