This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File: 3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier: 9DXm5sUViay2VYQ5p5z89m+YCbJ7JgaPROwU1v62bGs=
Subject key identifier: 88:97:C2:17:21:32:89:48:BF:99:9E:22:31:EF:FE:9F:CA:E5:66:BC
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer: /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial: 019C44A2557E63BF11BFEBF994C45FC2740D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 23:00:15 +0000
Manifest this update: Mon 09 Feb 2026 23:00:15 +0000
Manifest next update: Tue 10 Feb 2026 23:00:15 +0000
Files and hashes: 1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: wOmuI+ai/eLQZdmOnSRbgfMPcztpJ0y4eGBesbDP7q8=)
2: EVEUejBUxMAFSM5mcutAdBHE7R0.roa (hash: qHDy6GnHP2/o9uXwJYd4YuP8Cxkyp2quR/Jtu60lrfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:55:7e:63:bf:11:bf:eb:f9:94:c4:5f:c2:74:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
Validity
Not Before: Feb 9 23:00:15 2026 GMT
Not After : Feb 10 23:00:15 2026 GMT
Subject: CN=8897c21721328948bf999e2231effe9fcae566bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:4f:cb:0a:a3:eb:26:b2:42:20:94:0e:eb:
9c:90:28:fd:25:97:eb:d2:4d:32:13:06:c4:55:aa:
ce:28:c7:1c:ec:7e:00:30:8b:2e:cd:fe:4a:40:22:
1e:e0:a2:70:6b:46:94:c5:61:08:da:b1:f3:4e:1a:
a5:c7:9d:59:43:8c:14:74:58:34:8f:e0:14:67:90:
3c:ec:99:36:4c:fd:e4:23:2a:db:e3:67:52:48:34:
da:4e:79:37:2b:ce:49:0f:b4:e9:58:1e:e8:c6:4a:
ef:41:91:e7:fb:04:bf:a7:c3:6b:5c:a5:98:08:1c:
6a:c1:a2:33:46:76:af:e9:78:bd:19:42:1a:12:12:
8f:9b:46:82:ef:33:f0:2e:4d:d3:69:02:b6:bb:17:
80:77:56:7f:3e:da:88:21:48:36:40:77:79:90:02:
dc:91:78:b1:c5:df:15:2a:8d:cd:4d:f6:6d:45:46:
d5:9d:9f:f5:06:01:82:fd:d5:71:4b:84:df:cc:58:
47:27:d2:f5:e8:ba:f6:ec:85:2c:c9:0f:dd:0b:04:
5c:d8:5f:79:96:16:f1:22:e6:22:0b:ba:0c:d1:5a:
06:83:ac:63:bb:60:81:7e:88:17:fe:12:44:32:06:
2b:b7:30:f1:fb:57:b3:fc:ee:bb:55:6f:95:93:c9:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:C2:17:21:32:89:48:BF:99:9E:22:31:EF:FE:9F:CA:E5:66:BC
X509v3 Authority Key Identifier:
keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:91:ac:53:3a:81:a5:99:2d:83:eb:4b:1a:27:3a:64:64:b6:
fb:84:0e:fb:7c:5d:7a:1d:d7:3f:74:f6:73:2e:d8:8a:9c:d3:
f0:2b:9a:56:b8:87:b8:9b:5b:1b:b4:bb:e5:dc:5f:b8:18:54:
45:b4:09:84:fd:42:ec:c9:f2:6b:0f:37:35:f1:3e:14:66:be:
f5:75:e7:a8:44:28:05:72:7b:ab:0e:16:39:2f:78:17:46:a8:
d5:3a:86:e9:94:88:b0:75:20:84:3e:5f:af:bc:12:3b:41:f1:
43:09:41:7b:13:21:49:80:9b:74:db:d6:da:e0:8e:60:42:88:
f3:d5:0d:2b:40:a7:48:8b:2e:39:85:72:16:ee:2d:79:71:6e:
df:67:92:a4:c5:9d:0f:ab:c6:a6:32:ef:7b:c7:c1:98:5a:31:
fc:3d:cc:7a:88:19:5d:0f:80:a4:66:8a:ce:c1:54:1e:92:37:
ea:6c:6c:c2:1e:ec:13:8e:ed:1c:89:19:47:7e:f9:02:c5:dc:
f6:36:b7:6f:2b:01:91:32:19:80:32:d4:58:39:14:ae:20:c1:
02:cc:02:fc:a3:b5:06:c8:7a:22:11:e8:92:79:c4:3d:2b:da:
1e:10:d1:e0:66:57:6b:1d:8c:5d:41:f5:c8:50:30:35:e6:59:
64:3a:92:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:19 2026 by rpki-client