This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: BibG92mX8u4EUsYiQ/Y7YP2OjkgxTUAAXj5fpy9NuZA=
Subject key identifier: E4:0D:DC:75:5F:5D:DD:A6:06:9E:E5:42:5A:6E:5F:51:94:D3:D1:69
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 019C44D9FE4605BC3F21E54A28017FA79CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 1812
Signing time: Tue 10 Feb 2026 00:01:02 +0000
Manifest this update: Tue 10 Feb 2026 00:01:02 +0000
Manifest next update: Wed 11 Feb 2026 00:01:02 +0000
Files and hashes: 1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: tJDxVj1sSk248LW4Nm07v0awKNc4u+i56GDiJuEs0Is=)
2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d9:fe:46:05:bc:3f:21:e5:4a:28:01:7f:a7:9c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Feb 10 00:01:02 2026 GMT
Not After : Feb 11 00:01:02 2026 GMT
Subject: CN=e40ddc755f5ddda6069ee5425a6e5f5194d3d169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:02:a6:74:28:12:74:72:5f:cb:7a:ad:f5:
e2:30:25:21:27:33:a7:e3:d9:94:8c:27:3a:9b:35:
57:ab:3c:20:b6:50:9a:b8:c5:67:d0:36:d7:fc:4c:
62:7e:07:ea:47:39:36:ea:0f:07:64:e9:5e:90:98:
69:1e:91:5c:5f:26:76:cc:bc:06:c9:90:bb:1b:fe:
65:4c:c2:fc:70:3d:99:52:73:30:b6:da:b0:27:e4:
de:5e:16:cc:6b:07:e1:3e:d9:93:60:3c:46:07:e5:
29:5c:fc:c5:68:0b:11:0e:0b:81:1d:18:82:4b:9a:
19:75:59:05:4f:dc:85:86:1a:6e:3b:42:92:a0:8e:
95:d6:40:9f:c6:a9:84:f4:d0:5a:ad:b3:2f:1c:89:
36:36:6a:36:98:a2:13:b7:a3:88:5f:31:00:0b:4a:
f3:0c:ba:09:f0:6b:a4:c5:ba:78:0a:0c:3c:70:a9:
d0:aa:9e:56:4a:c2:21:70:bb:aa:66:df:54:0d:1f:
17:9a:5c:aa:22:2a:f6:7a:46:02:e9:71:b1:1a:50:
7c:91:d4:42:a4:fd:de:4d:9c:0d:11:4b:ca:92:6d:
b0:2a:0e:c9:7c:6a:25:a5:13:08:ee:83:89:3c:7b:
47:93:59:9a:0a:c0:61:c2:7b:91:d1:0d:5e:5e:80:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:DC:75:5F:5D:DD:A6:06:9E:E5:42:5A:6E:5F:51:94:D3:D1:69
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:b2:74:17:73:62:37:04:24:06:eb:74:83:0e:d6:6b:fa:
21:fe:44:61:c9:c3:03:4f:98:a2:a9:aa:28:25:80:95:5b:1d:
0b:15:92:64:c8:bb:5a:f3:e0:d3:b4:77:9b:a1:4a:e8:cd:c9:
c6:41:33:8e:88:e0:33:29:7e:63:c5:fc:36:5d:2e:7f:f8:7a:
b7:20:67:6d:d0:27:66:ce:67:b5:95:f5:ed:1b:c6:39:9c:a6:
e2:07:41:72:b7:84:0c:c4:ca:a4:4a:83:6c:d9:19:1f:6a:66:
ce:67:8c:61:da:ae:91:32:da:5b:c0:3f:e8:99:2b:a8:92:dc:
d0:63:29:9f:be:3a:a5:c4:e2:67:85:fd:52:64:03:72:cb:d2:
6b:ed:a2:34:8b:41:d3:23:20:90:34:e6:e2:d9:aa:e0:c5:32:
18:9c:9b:08:3f:63:4b:ec:6b:2f:ab:7e:2e:93:46:47:7a:c9:
a6:4a:4f:93:b5:5e:f8:f7:4f:a5:61:d1:19:0e:e9:92:cf:45:
4b:92:e3:a8:62:45:27:98:67:c8:ad:ee:36:28:24:3a:3b:df:
92:29:61:77:ac:b9:58:1b:28:cc:29:1b:12:83:25:be:39:91:
98:0b:89:dd:3d:51:aa:41:34:d1:ae:78:cf:68:19:8c:43:0d:
a7:12:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:02:24 2026 by rpki-client