This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: s/c7g785fjONlq7H59S7CCED0BxiIkkkWTrED3ddGHw=
Subject key identifier: 5C:7C:D8:EB:8A:B0:5B:DD:0C:F3:B1:CF:39:30:8C:FF:91:FD:5B:53
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 019C42EB14859655590F600A81578E8675EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 1814
Signing time: Mon 09 Feb 2026 15:00:28 +0000
Manifest this update: Mon 09 Feb 2026 15:00:28 +0000
Manifest next update: Tue 10 Feb 2026 15:00:28 +0000
Files and hashes: 1: P7j9IEWadDPaQ_nsO00HdXrOIT4.roa (hash: czQbKrK6LqGgUhK9pjsed0KgnTQUiTmpJ6IrbxHUhzM=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: upvTN8u0fPm6cRu3ZeWpg2V/9+cbhAoZjeYoII26U8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:14:85:96:55:59:0f:60:0a:81:57:8e:86:75:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Feb 9 15:00:28 2026 GMT
Not After : Feb 10 15:00:28 2026 GMT
Subject: CN=5c7cd8eb8ab05bdd0cf3b1cf39308cff91fd5b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:40:37:ed:73:a0:4d:22:dc:8d:78:76:93:
6b:79:3b:b4:17:67:e5:0d:f7:9a:95:0f:d2:72:42:
25:1f:7a:f3:54:bd:de:ab:01:8a:13:3e:0d:5b:4e:
37:61:ed:83:77:d4:95:68:ee:9b:90:2c:dd:47:87:
b0:f5:e9:6a:28:47:24:5b:0f:9c:9e:f4:e2:69:ed:
4c:b7:d3:2a:7b:33:90:3a:cd:c3:56:30:07:6b:e7:
f7:9a:21:e0:29:45:49:a4:c0:fc:08:bb:cf:97:0b:
58:f6:f9:1b:c2:aa:63:31:83:d1:1e:ac:68:b0:c3:
1e:f8:64:cc:38:a4:27:ad:55:28:f2:a7:55:dd:98:
99:ae:f1:56:46:7a:29:11:05:27:03:7a:c3:09:4c:
66:3f:a2:37:27:4d:7c:9c:3a:09:38:e2:d8:84:fd:
05:41:39:06:bb:a9:7f:dc:76:85:0d:9e:ce:e2:14:
3f:76:2a:e0:3d:a7:d1:3d:d9:39:88:ce:53:3e:99:
dd:e1:d0:44:9e:15:1c:bc:bb:b0:c9:9e:00:96:ca:
c8:e8:2f:95:0e:9a:1b:e2:4a:a6:5a:93:0f:eb:4a:
3e:6a:4e:0e:b4:6d:a8:ad:cb:4f:51:4d:5f:e0:42:
10:b2:ec:a4:54:f9:96:e3:aa:aa:33:4a:81:b9:93:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7C:D8:EB:8A:B0:5B:DD:0C:F3:B1:CF:39:30:8C:FF:91:FD:5B:53
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:56:58:8c:fd:fd:23:14:c7:66:9d:a0:e6:13:5d:29:66:aa:
2e:49:b4:7a:36:ab:bc:31:aa:6b:17:58:be:d3:e2:d0:5d:12:
fd:74:59:e4:15:73:6f:cb:28:c1:8b:ef:7e:61:2d:78:15:81:
f5:f5:54:d3:d9:e2:ed:2e:a7:8d:7e:37:5b:77:a8:50:62:96:
92:30:60:01:33:1b:b2:69:be:78:f9:41:a7:a1:e8:1a:cc:13:
89:56:21:03:b5:db:53:06:cb:27:2d:7b:ed:1b:5e:b8:02:36:
a2:d8:12:66:6e:73:58:e3:0d:4a:41:c6:b6:e0:57:74:10:fd:
6d:f5:7e:bb:de:d2:6d:d8:95:26:75:a3:a0:62:ea:1d:8b:f0:
ce:33:a8:05:e4:71:40:7d:85:96:c4:7a:d2:ee:f9:8e:63:83:
93:be:94:b1:33:e5:b1:61:59:02:e5:02:84:b8:ae:ca:e6:71:
8f:c7:42:54:79:08:ce:13:17:f5:29:b3:44:b0:43:50:4e:bb:
bf:76:88:c0:82:c5:8a:0d:3e:80:13:e2:23:c8:bf:cd:c3:61:
aa:19:09:81:4f:a0:75:b9:ea:93:1a:42:93:6f:ec:26:8b:62:
7a:9a:63:5c:60:2a:c1:fb:d7:73:35:2a:1b:9f:b2:e1:96:39:
1f:9b:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:48 2026 by rpki-client