This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier: XmoVYW9jKTmYPolOUXmbxJyU0xE/op0rQ1ZJM4woEzc=
Subject key identifier: 7C:3E:C5:51:B9:CA:D2:D8:B8:C1:07:BA:03:31:04:2A:76:ED:C3:CC
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial: 019C42EAF8A9AC16B4CAA72BCFFA0DBC7B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number: 0867
Signing time: Mon 09 Feb 2026 15:00:20 +0000
Manifest this update: Mon 09 Feb 2026 15:00:20 +0000
Manifest next update: Tue 10 Feb 2026 15:00:20 +0000
Files and hashes: 1: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: VALTp1F1WMzPZrSKF5KRK1X+Td8c1cR65jzcv/3Fe4Y=)
2: hBIKQJotb91PfUz83IlhlDln8Os.roa (hash: FZgPmcaU95wHeFAG7MifAFsuelM+Kr14jElFrFSjrsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:f8:a9:ac:16:b4:ca:a7:2b:cf:fa:0d:bc:7b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Validity
Not Before: Feb 9 15:00:20 2026 GMT
Not After : Feb 10 15:00:20 2026 GMT
Subject: CN=7c3ec551b9cad2d8b8c107ba0331042a76edc3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:bf:6c:cb:5d:6a:6b:d9:bd:e4:f6:d9:a7:
83:4f:36:3b:5e:e4:fe:20:d6:77:aa:eb:89:32:d2:
08:a2:b0:34:6a:a3:14:1c:eb:fb:b0:d0:6f:a4:49:
74:e9:7d:a1:7c:43:aa:8e:1d:7a:d9:34:4d:48:23:
d7:7e:9a:d1:00:c0:3b:6b:4f:dd:2d:f3:2b:17:7b:
d4:24:00:09:6d:07:27:64:b4:b7:34:4b:b6:a7:19:
e0:f2:b2:8a:2e:ae:16:51:5f:8d:e4:25:3b:d1:11:
17:04:2e:fe:b1:6a:18:03:94:c7:33:9b:27:fe:2f:
2b:e0:1e:b8:54:ec:a7:0b:4a:c8:87:97:b1:c7:c1:
71:e2:6b:b4:ca:b6:62:70:11:3d:52:64:06:38:7e:
cf:ff:30:79:5d:6f:4c:60:5f:65:40:90:11:d6:55:
b0:ae:ba:d5:6a:c1:0f:31:e6:f1:35:d5:11:db:2b:
d9:c7:1d:5b:44:63:3d:3d:31:5b:ca:4f:be:79:7f:
82:cc:dc:2f:46:17:31:8f:aa:63:c4:63:97:40:4e:
ee:c0:b9:73:b9:a0:3f:b3:43:e7:05:e8:66:48:29:
a6:2f:e8:48:f2:9d:dc:f1:12:42:13:23:c1:ca:de:
a5:ca:8e:6a:a3:13:ff:0b:fc:c4:65:01:6e:d8:80:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3E:C5:51:B9:CA:D2:D8:B8:C1:07:BA:03:31:04:2A:76:ED:C3:CC
X509v3 Authority Key Identifier:
keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bf:3d:86:c6:aa:b0:e3:31:c5:7c:7b:33:76:83:a8:f8:36:
1d:13:39:c4:e4:e8:b5:33:45:02:cb:cb:7a:92:80:e2:86:42:
2d:ae:ee:94:47:43:7e:c1:16:40:6a:7f:4d:f5:d1:5e:4f:be:
77:76:65:88:39:23:8b:a3:7d:19:3a:b9:4e:e8:58:8d:a1:f1:
82:e8:91:a6:af:59:e4:d8:17:6b:9c:a5:47:fb:5a:cc:eb:85:
f1:8a:cd:bc:f9:d0:ec:b8:04:89:2e:ef:d9:2e:e1:a3:a6:5a:
09:87:6d:e3:83:4f:1d:39:0e:4f:ba:ae:09:70:f9:21:54:75:
69:11:ff:93:9d:48:d0:4a:27:65:a1:f0:85:35:c9:dd:d4:5a:
90:d1:80:57:31:ee:d4:07:7b:fa:03:fa:58:36:d2:8c:2c:46:
f2:67:dd:9d:d7:e5:09:1d:d3:10:35:1f:f0:6e:0e:e0:56:2a:
be:97:2b:0c:82:71:f3:f1:f9:10:b0:11:ea:e6:bf:49:04:ed:
bb:46:75:d1:21:c3:cc:af:98:c1:e6:d1:a4:73:2c:c9:7e:48:
ba:54:3e:41:11:d5:7f:b8:93:3d:68:2b:73:a1:c8:a4:23:7d:
74:5a:18:57:b3:34:01:53:3f:f7:95:05:8f:1f:55:f2:ca:4f:
75:ed:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:52 2026 by rpki-client