This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: uZ+iEzT8Kk/cBM+t3uPk5sxBk7UwiM3U2FbMPGvuL3A=
Subject key identifier: D8:57:C8:B3:7C:61:2A:BC:9D:DB:D2:BD:3F:5B:CF:C3:D2:FD:13:40
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 019C427DE5822559FF5A08E5188594218371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 0645
Signing time: Mon 09 Feb 2026 13:01:12 +0000
Manifest this update: Mon 09 Feb 2026 13:01:12 +0000
Manifest next update: Tue 10 Feb 2026 13:01:12 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: AjVEZw3EO+P3sFKPzqW6zKD5FryBxjyUXOaGapzS0Xc=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:e5:82:25:59:ff:5a:08:e5:18:85:94:21:83:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Feb 9 13:01:12 2026 GMT
Not After : Feb 10 13:01:12 2026 GMT
Subject: CN=d857c8b37c612abc9ddbd2bd3f5bcfc3d2fd1340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:c1:fb:c0:88:66:22:3d:f1:40:89:38:15:
a3:65:a1:7b:31:91:93:16:9a:e3:72:6c:72:b9:d6:
52:fc:22:29:49:e0:d4:e0:ef:93:55:7a:2f:10:64:
14:b6:79:e3:5b:b0:6a:fb:d2:f1:7e:b1:43:6d:57:
70:8e:fe:fc:28:21:43:1a:fa:28:57:8a:e7:84:dc:
80:20:90:13:ca:0d:00:10:fc:58:25:7e:bb:3b:a6:
79:5b:f4:f5:2c:b2:98:4b:3e:99:e5:de:76:38:47:
b4:f2:a1:c9:09:f7:42:cd:ab:a2:5b:85:16:32:b6:
9c:d8:3f:f4:55:07:c1:1b:df:f7:4e:69:91:34:bc:
20:c0:49:94:2a:b1:47:37:0d:bd:0c:c8:e6:40:ad:
9e:13:26:83:29:a7:62:18:5d:0a:57:f7:84:96:e0:
7f:8a:c2:88:72:bb:e9:ae:ac:65:cb:07:8e:68:11:
fa:05:76:cc:ae:7c:c1:7f:18:3d:a3:f0:ad:3b:9c:
f5:ec:c3:57:32:a6:fe:9e:0c:27:c5:39:7d:d2:fd:
0c:5d:10:17:b7:29:96:93:ea:fe:4f:89:35:8e:63:
c0:2b:d3:5d:20:66:1d:81:77:fb:5a:61:b7:40:98:
4a:d2:0f:45:89:cc:19:c4:7e:9f:b6:26:ac:38:30:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:57:C8:B3:7C:61:2A:BC:9D:DB:D2:BD:3F:5B:CF:C3:D2:FD:13:40
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ad:28:53:30:a4:13:31:02:45:5f:a1:21:05:a2:fc:e5:f9:
ec:ea:cb:4e:55:27:86:a4:1d:a8:74:e6:28:a4:a1:d6:94:3e:
64:75:70:8c:44:37:36:9f:89:c3:85:69:a7:c9:24:af:ff:ac:
fc:12:fa:58:c4:4c:6d:3f:e3:7a:70:8a:6b:42:af:bc:60:9d:
38:5a:b2:15:48:d0:24:d9:8e:b1:79:31:33:2c:3b:17:d0:75:
73:4c:4e:ed:ae:78:5b:ad:b1:8f:29:13:73:15:0f:16:c4:0e:
f5:47:48:cb:c5:82:99:c8:ed:19:a9:95:0a:c8:d8:35:b9:84:
76:00:44:1e:9e:4b:45:f2:61:0b:63:b2:8d:70:ea:9c:8e:4b:
95:04:8f:4c:69:1f:cb:6f:9b:3d:bd:35:69:1b:d8:e9:a4:20:
ab:ca:b0:03:97:b5:13:56:b1:07:ce:c3:ad:f1:bb:60:c8:f7:
75:b0:97:22:21:2c:8d:f6:a3:76:8d:d0:3c:f6:96:27:ca:60:
04:77:f0:58:af:04:3b:9a:ce:79:ba:54:2b:c5:11:3a:68:50:
59:87:18:02:6d:85:6b:aa:b9:e4:59:2f:9a:a3:25:40:44:6c:
7f:fe:3d:c8:e9:d3:59:3b:1e:0e:14:56:28:a8:a0:7c:6d:c3:
07:8a:83:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:37 2026 by rpki-client