This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: ndhRbXvGYYxks4nwu0oEFQrMdgEYH6sIHxqD6634v44=
Subject key identifier: 5D:53:E7:F0:49:AD:28:E6:5E:8C:79:48:41:88:6C:23:DF:15:A3:25
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 019C4390B485C455E246835EFA5077A1CB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 18:01:22 +0000
Manifest this update: Mon 09 Feb 2026 18:01:22 +0000
Manifest next update: Tue 10 Feb 2026 18:01:22 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: g2fnCA8WGRAjsO4bKw3EgdZMVqe1iSoRAOjKBJ2uIjc=)
2: LmwyPllgT27iDmcYfX7agNvw4rA.roa (hash: kpm3XdXtMEMrfdjcWSVw0huoNKfPlGFqAs8H1ASM9Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:b4:85:c4:55:e2:46:83:5e:fa:50:77:a1:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Feb 9 18:01:22 2026 GMT
Not After : Feb 10 18:01:22 2026 GMT
Subject: CN=5d53e7f049ad28e65e8c794841886c23df15a325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:46:ef:01:c2:28:4e:b0:f2:ca:77:0a:c4:
5f:b5:12:72:a8:7f:b0:6e:52:5b:8a:06:7d:9b:56:
f7:aa:6d:72:bc:42:28:61:c1:1b:80:ae:da:dd:4c:
2e:62:68:6e:f9:6e:55:14:2a:06:64:56:2f:47:4d:
f0:f4:0c:e0:91:7d:de:a0:4c:45:e7:5d:61:2f:1c:
a0:e7:06:d1:31:a5:3a:66:d8:0d:1f:59:d2:7c:50:
81:f2:ad:be:9a:e4:53:83:13:b8:ee:d8:35:3a:8b:
94:c8:72:b6:dd:f7:07:39:3d:8b:4c:d9:51:5f:bc:
b6:98:f8:22:31:36:42:4a:52:6b:3e:8f:61:5c:d0:
d5:5a:c7:d2:9e:f9:07:5b:83:5e:d5:79:0f:40:90:
45:ef:7a:c0:17:7e:1c:3b:77:86:60:f9:51:f4:6c:
01:c2:c0:a9:b7:8c:f4:7e:10:63:be:b2:e2:1d:21:
24:1c:1d:87:d9:82:f8:82:fd:56:fc:d0:94:f6:6b:
88:0b:69:41:b8:2d:2f:48:12:ee:95:d2:9a:38:d5:
09:2f:80:8e:d8:3a:06:9d:10:f4:43:81:c5:3b:9b:
67:d7:e4:33:d9:c3:54:74:50:54:6f:26:dd:c6:4b:
97:a2:92:c6:75:bb:72:56:f7:8e:e2:97:c5:c8:ba:
07:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:53:E7:F0:49:AD:28:E6:5E:8C:79:48:41:88:6C:23:DF:15:A3:25
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:09:ca:94:be:c7:49:cc:fa:1b:ad:64:f9:0c:19:a1:3a:83:
77:16:65:6e:cf:a3:90:a1:28:87:08:6e:8a:34:7d:c3:af:8d:
38:7e:96:d3:a6:40:c4:ff:9c:a0:33:1a:e4:58:ac:c0:92:97:
ec:2b:0d:ff:de:01:8d:fd:e0:9d:c1:d4:fd:a2:b5:ad:ad:e0:
48:f8:8e:fd:fa:58:3c:c7:b4:2d:4c:1c:5b:ba:18:ba:39:46:
f9:27:c2:a2:e2:3a:fc:a6:d7:bd:dc:34:0b:7a:a3:f6:14:ab:
d5:87:22:07:20:59:1b:c8:dc:7c:73:13:3e:c1:7b:cb:de:f8:
79:72:af:ed:b2:bc:16:6d:6d:9b:6b:9f:70:d8:7c:d9:10:b1:
24:be:89:8f:c6:fd:b0:e9:7d:c8:59:18:a9:08:43:f5:71:4b:
0f:06:dd:9b:96:e8:33:0d:ef:ca:54:fc:fe:08:4e:d7:77:27:
b7:54:13:a6:e9:52:65:12:07:3c:83:8d:cb:b7:f2:ed:12:06:
8d:5c:4d:29:a2:4b:ad:f6:8a:85:7d:32:73:b6:e8:36:46:b0:
47:e4:11:cc:8b:42:0f:65:be:d0:e8:e6:aa:61:10:da:0b:e4:
d6:5b:34:45:8c:f1:06:49:35:18:f3:8d:d7:76:25:28:17:5f:
57:cd:df:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkLSFxFXiRoNe+lB3ocs2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNmJhYTYwMTIzNmFiOWJlYTI5ZjgwN2E2NjkyMGVkNTY1
NmExOTYwHhcNMjYwMjA5MTgwMTIyWhcNMjYwMjEwMTgwMTIyWjAzMTEwLwYDVQQD
Eyg1ZDUzZTdmMDQ5YWQyOGU2NWU4Yzc5NDg0MTg4NmMyM2RmMTVhMzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHxG7wHCKE6w8sp3CsRftRJyqH+w
blJbigZ9m1b3qm1yvEIoYcEbgK7a3UwuYmhu+W5VFCoGZFYvR03w9AzgkX3eoExF
511hLxyg5wbRMaU6ZtgNH1nSfFCB8q2+muRTgxO47tg1OouUyHK23fcHOT2LTNlR
X7y2mPgiMTZCSlJrPo9hXNDVWsfSnvkHW4Ne1XkPQJBF73rAF34cO3eGYPlR9GwB
wsCpt4z0fhBjvrLiHSEkHB2H2YL4gv1W/NCU9muIC2lBuC0vSBLuldKaONUJL4CO
2DoGnRD0Q4HFO5tn1+Qz2cNUdFBUbybdxkuXopLGdbtyVveO4pfFyLoHiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1T5/BJrSjmXox5SEGIbCPfFaMlMB8GA1UdIwQY
MBaAFNxrqmASNqub6in4B6ZpIO1WVqGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YmQyZTMtZjNjNS00OTU1LWI5YTEt
MzRhMTIzN2YxNjcwLzEvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83YmQyZTMtZjNjNS00OTU1LWI5YTEtMzRhMTIzN2YxNjcw
LzEvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwnKlL7H
Scz6G61k+QwZoTqDdxZlbs+jkKEohwhuijR9w6+NOH6W06ZAxP+coDMa5FiswJKX
7CsN/94Bjf3gncHU/aK1ra3gSPiO/fpYPMe0LUwcW7oYujlG+SfCouI6/KbXvdw0
C3qj9hSr1YciByBZG8jcfHMTPsF7y974eXKv7bK8Fm1tm2ufcNh82RCxJL6Jj8b9
sOl9yFkYqQhD9XFLDwbdm5boMw3vylT8/ghO13cnt1QTpulSZRIHPIONy7fy7RIG
jVxNKaJLrfaKhX0yc7boNkawR+QRzItCD2W+0OjmqmEQ2gvk1ls0RYzxBkk1GPON
13YlKBdfV83ftg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:23 2026 by rpki-client