This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier: N0UWbS9WfJGDZ18lmXpFYFxCJbVDITM2p0f25JwGg7k=
Subject key identifier: 5F:7B:B7:86:6D:B4:0A:71:7D:E2:BF:E5:B1:4D:75:B5:90:E4:C4:F5
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer: /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial: 019C42B4169077E7FB573376F5043B7E4649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number: 0F44
Signing time: Mon 09 Feb 2026 14:00:24 +0000
Manifest this update: Mon 09 Feb 2026 14:00:24 +0000
Manifest next update: Tue 10 Feb 2026 14:00:24 +0000
Files and hashes: 1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: 2Erwf40OINyyNINGQvlyo6o6GgxzaZHLcfG4Vb/YakQ=)
2: FB3UW6DVZXj3o7icgkVTEzxp9Ag.roa (hash: 6pH0Xhz90BXtIh2RhS40jMejU5H68bceW0YDHg58IYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:16:90:77:e7:fb:57:33:76:f5:04:3b:7e:46:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Validity
Not Before: Feb 9 14:00:24 2026 GMT
Not After : Feb 10 14:00:24 2026 GMT
Subject: CN=5f7bb7866db40a717de2bfe5b14d75b590e4c4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:c5:6c:45:0d:d0:3e:ed:ca:6d:34:4d:55:
dd:a0:71:20:8f:dc:d6:30:50:81:3c:fb:1d:d9:d1:
25:9b:ce:a6:dd:fe:1f:75:c4:0b:79:84:a1:69:58:
59:b7:67:46:b4:fc:62:55:26:b2:ce:31:6a:f6:c3:
38:0f:ff:16:b5:7f:6d:f5:87:fc:07:c5:bc:b1:21:
a8:4a:1d:d3:f8:52:15:a5:7c:c4:6a:1b:ea:45:c2:
c6:f3:2b:bd:9d:5f:1e:3d:75:44:0f:24:14:41:5b:
ab:67:59:4c:11:ed:49:ec:0d:f3:a6:44:d7:ba:b9:
c5:0f:01:b1:d6:e4:1b:03:12:81:ca:eb:d6:33:8f:
1d:96:2c:4a:96:a5:9d:87:9d:a4:f5:71:67:c7:27:
c6:57:09:4d:28:12:8c:7c:a5:d5:d5:96:95:f2:83:
8a:ff:06:19:03:8f:03:03:07:88:24:b0:1b:48:b3:
79:14:33:7d:04:9e:f3:c9:23:fe:47:d4:ee:d7:20:
6f:76:bb:42:dc:a4:a0:4c:ca:72:1e:d9:97:f5:b0:
7c:99:e6:e8:77:fe:5f:81:f7:47:15:b1:50:aa:45:
66:a6:b1:1d:78:30:92:fd:c0:70:72:c8:67:35:09:
b4:88:df:a4:02:32:d9:f7:75:d5:2d:a7:a9:c3:90:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7B:B7:86:6D:B4:0A:71:7D:E2:BF:E5:B1:4D:75:B5:90:E4:C4:F5
X509v3 Authority Key Identifier:
keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8b:ad:3f:c9:af:f4:f0:38:24:e5:59:0e:5c:54:3f:e3:75:
ac:84:e8:54:b1:6b:75:44:d0:cd:a4:5b:0e:15:3b:f5:1c:86:
cd:b6:06:a6:2e:fa:bd:ef:0e:68:83:f2:73:09:ac:87:56:2f:
d4:46:8b:fc:af:e4:85:b2:09:fd:4f:65:c5:9e:fc:01:2a:64:
19:4b:16:ef:85:50:9b:3e:a6:60:a5:3e:1d:ee:d4:b3:fb:92:
bd:b2:13:2e:a5:10:00:b8:b7:9d:54:fb:d8:ae:66:75:a1:7f:
27:75:b7:6f:41:8f:91:58:3d:33:1e:12:02:b3:c1:e4:4c:cb:
fb:fe:f2:2f:1d:d9:eb:23:ea:12:d8:1a:7d:9c:61:f6:ed:33:
8f:c1:d8:6c:54:4a:cf:c4:f9:1c:d9:21:2e:4b:a0:88:27:39:
2f:3d:68:73:43:53:ed:7c:4c:c4:44:28:0d:41:1f:28:a4:52:
24:0e:1f:91:32:14:01:a0:6b:ed:1a:3c:9d:65:98:16:fb:4f:
74:29:24:4f:8f:1b:16:b4:c9:87:a5:c1:3e:be:b2:ad:1e:1a:
e1:21:75:18:9e:46:7b:1e:94:70:e4:69:ff:af:fa:a2:4f:90:
f1:76:cd:1b:f8:7f:ec:6c:92:5f:b6:dd:48:8e:b7:5b:22:e3:
9b:2e:a9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:01 2026 by rpki-client