This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: ot2tNLYaRJBA7lfa3iJ6BFEfPdH69P1aOOMSyOsGmnM=
Subject key identifier: 8E:D0:24:FC:F1:19:B5:56:2B:D5:8F:F4:E0:2C:81:84:81:B9:CA:1C
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019C42B44762242A0FDA815526A74CCA2D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 1751
Signing time: Mon 09 Feb 2026 14:00:36 +0000
Manifest this update: Mon 09 Feb 2026 14:00:36 +0000
Manifest next update: Tue 10 Feb 2026 14:00:36 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: yuUV4avazfNhcUXdxu8BgcyLzGTTwQPI7e5n9HRdpGg=)
2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:47:62:24:2a:0f:da:81:55:26:a7:4c:ca:2d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Feb 9 14:00:36 2026 GMT
Not After : Feb 10 14:00:36 2026 GMT
Subject: CN=8ed024fcf119b5562bd58ff4e02c818481b9ca1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:2d:16:f3:03:10:08:25:1f:17:6b:3b:30:
2f:3d:6c:9d:60:df:52:03:d0:57:13:d9:d8:af:f3:
d3:27:c9:83:96:c0:43:90:32:9d:79:5f:d7:27:28:
ea:e5:f1:31:48:f1:48:1b:68:a7:9e:01:4b:50:a2:
9d:5a:c3:ce:de:0f:c1:d5:1c:32:77:73:9d:e0:7a:
11:d8:11:f8:c8:e9:1e:22:4a:fe:a6:f8:5e:b3:f0:
57:b5:11:5b:ab:1c:dd:d4:92:13:02:96:a8:ba:f8:
34:33:66:83:bc:ee:86:52:fb:5f:92:4a:fe:bb:86:
64:a2:82:59:6c:4f:12:5a:c7:60:7d:38:e3:44:82:
8f:0f:85:64:92:9a:65:a2:ce:16:53:9b:7e:cf:52:
2c:2e:96:12:b1:b6:d2:9f:43:b9:b4:94:4c:f5:d6:
f1:25:2b:af:63:9f:48:05:70:83:b3:67:4e:da:4c:
be:75:25:c9:3f:76:0d:4e:1c:be:5f:aa:50:18:f5:
62:52:41:8f:e6:56:5e:99:2c:9f:3a:e8:7e:1e:c1:
de:54:6a:07:43:01:e4:44:6b:02:58:09:72:91:5d:
46:97:93:c3:52:40:cf:b3:77:02:30:8a:52:08:44:
87:90:22:a1:db:2d:fd:6f:3f:4e:08:6e:84:28:5c:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D0:24:FC:F1:19:B5:56:2B:D5:8F:F4:E0:2C:81:84:81:B9:CA:1C
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b8:35:8a:99:1f:88:3b:9b:a6:4d:4d:8f:54:16:79:d6:79:
ab:aa:73:c1:f1:ae:2d:c6:cd:0e:4d:df:c7:8b:6d:b3:c4:5e:
a5:64:99:25:b4:70:3f:01:10:53:03:87:df:e3:39:3a:de:69:
48:7d:fe:33:5b:12:c4:56:66:65:62:5c:2c:e4:2a:5a:ae:24:
9c:a2:77:ae:9f:c5:85:e9:ef:9a:cb:69:74:6a:f2:c4:a8:63:
83:68:de:05:f9:8b:cd:92:19:f1:66:a6:f8:b3:68:24:fb:e7:
42:b9:ff:97:8d:33:e2:92:6f:27:8b:3d:ab:71:23:67:ec:b3:
f5:c1:69:fe:a4:d0:78:e7:17:14:2f:78:ad:cf:ac:59:8c:75:
6e:d4:4c:2a:6c:70:48:42:eb:47:1a:16:e3:29:c5:f4:de:ef:
15:73:bd:6f:65:6d:2b:5b:16:71:96:c0:56:7f:db:c4:81:89:
0a:f5:d3:ab:51:76:92:3b:8e:a2:d3:20:14:0b:5f:ef:cf:6c:
03:e8:cf:ee:cb:4a:74:b3:8f:b3:f9:be:4b:c3:b9:b5:51:94:
79:ca:d7:97:d2:ed:89:d5:b8:b3:25:16:af:74:7a:53:e7:ab:
65:a6:8d:0e:e6:06:f5:8f:6c:fe:e7:04:04:fc:e6:d5:84:79:
43:a8:1a:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtEdiJCoP2oFVJqdMyi0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmY4NWJiOGEzNzU5NTIzZTBjYzlmOGE5MWRiZGFmNDc0
ZDZiN2MwHhcNMjYwMjA5MTQwMDM2WhcNMjYwMjEwMTQwMDM2WjAzMTEwLwYDVQQD
Eyg4ZWQwMjRmY2YxMTliNTU2MmJkNThmZjRlMDJjODE4NDgxYjljYTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyEtFvMDEAglHxdrOzAvPWydYN9S
A9BXE9nYr/PTJ8mDlsBDkDKdeV/XJyjq5fExSPFIG2inngFLUKKdWsPO3g/B1Rwy
d3Od4HoR2BH4yOkeIkr+pvhes/BXtRFbqxzd1JITApaouvg0M2aDvO6GUvtfkkr+
u4ZkooJZbE8SWsdgfTjjRIKPD4Vkkpplos4WU5t+z1IsLpYSsbbSn0O5tJRM9dbx
JSuvY59IBXCDs2dO2ky+dSXJP3YNThy+X6pQGPViUkGP5lZemSyfOuh+HsHeVGoH
QwHkRGsCWAlykV1Gl5PDUkDPs3cCMIpSCESHkCKh2y39bz9OCG6EKFwFZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7QJPzxGbVWK9WP9OAsgYSBucocMB8GA1UdIwQY
MBaAFNz/hbuKN1lSPgzJ+Kkdva9HTWt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYt
NWJjMzAyYjRiNWZjLzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYtNWJjMzAyYjRiNWZj
LzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObg1ipkf
iDubpk1Nj1QWedZ5q6pzwfGuLcbNDk3fx4tts8RepWSZJbRwPwEQUwOH3+M5Ot5p
SH3+M1sSxFZmZWJcLOQqWq4knKJ3rp/FhenvmstpdGryxKhjg2jeBfmLzZIZ8Wam
+LNoJPvnQrn/l40z4pJvJ4s9q3EjZ+yz9cFp/qTQeOcXFC94rc+sWYx1btRMKmxw
SELrRxoW4ynF9N7vFXO9b2VtK1sWcZbAVn/bxIGJCvXTq1F2kjuOotMgFAtf789s
A+jP7stKdLOPs/m+S8O5tVGUecrXl9LtidW4syUWr3R6U+erZaaNDuYG9Y9s/ucE
BPzm1YR5Q6gaxg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:28 2026 by rpki-client