This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: tgMtnBEJ1B6t0Vl2QIpA2VQo9cPolKDYvQowFSfDMWw=
Subject key identifier: F2:BB:41:EE:87:54:47:6E:D2:6B:7B:8D:BA:33:69:20:E9:4E:53:1B
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 019C42EB0647E7A6DEDE0B66FFBD2DE8BCE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 0E6B
Signing time: Mon 09 Feb 2026 15:00:24 +0000
Manifest this update: Mon 09 Feb 2026 15:00:24 +0000
Manifest next update: Tue 10 Feb 2026 15:00:24 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: 9YRk//Nnh+tYjWepWb6tpzEpm6Apy+QTv3n1zVNfElw=)
2: 6oH-q1WmgKlbF7oPFf0VCjT4cP4.roa (hash: 8fxRfcDqePTH9D6GcvyAsB8XOQ2tsAsMINyYJwfwjDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:06:47:e7:a6:de:de:0b:66:ff:bd:2d:e8:bc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Feb 9 15:00:24 2026 GMT
Not After : Feb 10 15:00:24 2026 GMT
Subject: CN=f2bb41ee8754476ed26b7b8dba336920e94e531b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:1c:9d:50:93:59:92:af:e0:3f:08:2e:09:
47:de:96:ea:10:f5:63:c6:03:1e:0f:d3:8c:52:38:
18:67:ec:a7:df:21:40:ef:31:44:91:8f:8a:21:58:
5b:bb:41:e8:90:d2:9a:67:f8:df:f0:9d:27:07:f8:
9b:5e:1f:af:f6:93:25:10:1d:12:57:f6:85:8c:31:
ef:bb:f3:5a:35:b1:15:e2:b7:5f:1e:07:60:0f:fd:
1c:91:bd:a9:a0:b7:d5:ea:16:de:3c:ce:0d:ac:b2:
76:bf:0f:3c:f4:4b:1f:b3:40:3e:59:ac:3f:a0:b8:
c1:b5:8b:40:83:8c:87:c9:7a:d6:85:bf:21:62:ba:
85:5f:b8:df:7d:07:92:47:cc:ff:73:5b:37:20:a8:
32:1c:19:e3:88:9b:9b:13:55:66:8e:e7:76:be:0f:
e7:b4:69:e8:85:00:c3:06:f1:97:20:48:3a:94:9a:
a1:55:48:8b:b5:53:27:a7:dd:d6:00:41:df:e7:96:
f9:6d:28:d5:b7:c7:3f:2b:09:6d:1f:8a:37:a0:af:
73:68:f9:35:36:3a:e8:b2:53:82:7a:4e:ec:1e:c7:
99:26:13:e2:52:de:31:1d:66:52:cd:f1:ea:85:74:
50:e8:e8:c0:5a:09:54:70:ad:e6:87:f4:71:4f:8d:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BB:41:EE:87:54:47:6E:D2:6B:7B:8D:BA:33:69:20:E9:4E:53:1B
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c2:58:aa:a9:4c:57:ba:f1:77:17:89:8f:d0:53:0b:ab:41:
6c:a2:d0:3b:a6:32:5e:e7:e4:03:11:df:21:0f:58:29:e1:d9:
1a:74:5c:c1:fa:ed:41:d6:18:b7:88:60:1f:03:d5:26:93:cb:
0f:d9:2a:d4:81:eb:4d:e6:40:04:fc:81:e4:c6:09:a0:06:60:
81:0c:73:2e:bc:6d:15:fe:5d:04:02:4d:5b:3d:df:1e:e0:be:
17:a9:4d:82:fd:af:04:01:29:86:c3:8e:32:ab:93:2b:f1:67:
25:2f:ef:ca:94:1b:4f:88:c4:f9:a1:ec:bc:c9:15:08:09:6d:
e2:39:2e:ca:f0:08:2f:b3:16:6f:b0:51:60:30:05:a4:cd:e3:
40:d3:70:91:c4:59:2c:98:74:93:ef:10:91:a9:ee:9e:cf:57:
02:08:0d:f4:57:24:49:0a:23:f9:22:2f:3c:07:1d:84:97:71:
de:63:57:76:f0:88:7e:17:a7:7a:18:ec:16:47:1b:8e:ba:68:
c2:5a:4e:ca:c1:14:66:b5:0f:c2:3d:95:39:42:86:bc:ac:d5:
91:78:1e:20:e8:e0:70:23:a2:33:bf:e5:85:f2:d7:6b:17:c0:
ba:2c:65:47:a5:00:1a:46:b9:81:0a:7e:c6:60:08:0a:92:ed:
ef:22:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:24 2026 by rpki-client