This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
File: 3cwuYUgshl3CU8D6lD49os6X2gU.mft (raw, json)
Hash identifier: 35vyyrhA88QKeV2zYyxrB7K97MVYbCliwdABHoGgBIQ=
Subject key identifier: 26:32:4E:6B:F4:FB:FB:54:48:B2:10:73:A3:96:3C:6E:33:41:0D:39
Authority key identifier: DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
Certificate issuer: /CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Certificate serial: 019C427E26950C4A572B4B7A87829AB502AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
Manifest number: 0794
Signing time: Mon 09 Feb 2026 13:01:29 +0000
Manifest this update: Mon 09 Feb 2026 13:01:29 +0000
Manifest next update: Tue 10 Feb 2026 13:01:29 +0000
Files and hashes: 1: 3cwuYUgshl3CU8D6lD49os6X2gU.crl (hash: ZTqNaAlwBMT5nuPNlifazfWVDil2p7f0w6O7uJxW9ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:26:95:0c:4a:57:2b:4b:7a:87:82:9a:b5:02:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Validity
Not Before: Feb 9 13:01:29 2026 GMT
Not After : Feb 10 13:01:29 2026 GMT
Subject: CN=26324e6bf4fbfb5448b21073a3963c6e33410d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:37:a3:2f:0f:da:ad:4c:f5:af:f8:26:da:
94:94:eb:1c:f3:73:51:f7:f1:98:5d:6b:86:69:5e:
3e:5a:5f:ee:98:8e:ca:cf:d8:73:89:e4:2e:04:22:
e8:05:31:f5:83:25:3e:36:20:4f:ee:ae:4c:02:48:
e4:6f:07:ff:8d:33:fd:a2:92:dc:89:19:eb:34:ed:
94:fe:a1:6c:8d:2b:fd:0d:97:1a:f3:db:5f:52:e9:
78:68:25:60:2c:7b:2c:d8:75:18:67:45:7f:fa:93:
76:cc:83:29:ff:12:98:fa:2f:58:e3:1f:63:43:5a:
09:cc:91:ef:77:65:18:8c:65:37:e1:c9:22:4f:d5:
eb:5c:e5:63:05:bb:a5:7a:bc:fa:eb:ce:b7:c5:63:
dc:ac:1b:9c:9d:93:c2:4e:8a:ed:08:27:d5:6e:9f:
06:5c:24:46:ca:62:ab:9e:40:7c:3f:a6:6e:be:c1:
ef:01:77:5c:7d:7a:e4:ac:fa:20:3d:a2:9f:aa:b4:
48:e2:f5:dd:c8:eb:c9:65:fa:77:52:09:a4:47:3c:
45:20:a8:3d:a5:b7:dc:0a:d2:0c:fd:44:82:e2:c7:
1b:83:d8:8e:5e:20:94:41:84:5b:f7:b4:e4:08:ac:
c1:1d:96:7b:3b:c1:40:42:62:df:5d:e5:a1:6a:94:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:32:4E:6B:F4:FB:FB:54:48:B2:10:73:A3:96:3C:6E:33:41:0D:39
X509v3 Authority Key Identifier:
keyid:DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f2:2f:76:0a:e6:0b:0e:6a:10:10:51:ce:de:93:51:03:4d:
b0:27:63:86:2b:6a:4a:95:05:13:d0:4e:79:dd:b7:9b:69:6e:
38:81:5c:54:17:d5:20:fb:73:31:95:c2:e9:1b:9e:1a:5a:3b:
35:56:45:e0:33:22:26:4f:cd:3c:5e:a8:e7:40:70:b0:cb:8d:
8d:de:ad:e3:42:d4:8b:71:2b:c2:15:30:8e:e2:ea:ee:ce:d1:
0a:a3:e3:74:db:49:e9:b1:54:8d:0e:0f:cd:d4:da:3f:4e:ac:
cf:17:b9:03:3a:2d:cb:5a:6c:ae:d1:f8:42:49:04:51:5d:0c:
78:23:a5:c2:00:b5:2b:4f:a5:2a:e4:96:2a:0e:17:1d:97:b2:
7f:f4:61:ef:f4:5b:06:70:85:62:e4:78:dd:2e:2f:14:34:7a:
67:1f:b8:49:fd:10:8f:ab:60:04:01:39:d9:46:6e:03:c0:91:
8b:9e:7b:a9:02:52:03:76:a8:88:65:42:97:e9:94:03:4e:4f:
ff:31:82:4e:1d:6f:7b:78:64:c1:16:72:e4:1b:82:b5:be:15:
06:e4:17:01:a8:6d:8d:7b:f7:d3:9b:4d:ae:55:a6:15:c9:34:
95:15:1b:f3:b7:ff:15:75:24:82:b8:ce:ff:e7:99:1d:4c:3a:
a1:3a:3f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfiaVDEpXK0t6h4KatQKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkY2MyZTYxNDgyYzg2NWRjMjUzYzBmYTk0M2UzZGEyY2U5
N2RhMDUwHhcNMjYwMjA5MTMwMTI5WhcNMjYwMjEwMTMwMTI5WjAzMTEwLwYDVQQD
EygyNjMyNGU2YmY0ZmJmYjU0NDhiMjEwNzNhMzk2M2M2ZTMzNDEwZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk03oy8P2q1M9a/4JtqUlOsc83NR
9/GYXWuGaV4+Wl/umI7Kz9hzieQuBCLoBTH1gyU+NiBP7q5MAkjkbwf/jTP9opLc
iRnrNO2U/qFsjSv9DZca89tfUul4aCVgLHss2HUYZ0V/+pN2zIMp/xKY+i9Y4x9j
Q1oJzJHvd2UYjGU34ckiT9XrXOVjBbulerz66863xWPcrBucnZPCTortCCfVbp8G
XCRGymKrnkB8P6ZuvsHvAXdcfXrkrPogPaKfqrRI4vXdyOvJZfp3UgmkRzxFIKg9
pbfcCtIM/USC4scbg9iOXiCUQYRb97TkCKzBHZZ7O8FAQmLfXeWhapR4IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYyTmv0+/tUSLIQc6OWPG4zQQ05MB8GA1UdIwQY
MBaAFN3MLmFILIZdwlPA+pQ+PaLOl9oFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2N3dVlVZ3NobDNDVThENmxENDlvczZYMmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iZjczNDMtNjVhNC00NzE0LThmOTAt
MzU4ZjU5NTMyMjU4LzEvM2N3dVlVZ3NobDNDVThENmxENDlvczZYMmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iZjczNDMtNjVhNC00NzE0LThmOTAtMzU4ZjU5NTMyMjU4
LzEvM2N3dVlVZ3NobDNDVThENmxENDlvczZYMmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfIvdgrm
Cw5qEBBRzt6TUQNNsCdjhitqSpUFE9BOed23m2luOIFcVBfVIPtzMZXC6RueGlo7
NVZF4DMiJk/NPF6o50BwsMuNjd6t40LUi3ErwhUwjuLq7s7RCqPjdNtJ6bFUjQ4P
zdTaP06szxe5Azoty1psrtH4QkkEUV0MeCOlwgC1K0+lKuSWKg4XHZeyf/Rh7/Rb
BnCFYuR43S4vFDR6Zx+4Sf0Qj6tgBAE52UZuA8CRi557qQJSA3aoiGVCl+mUA05P
/zGCTh1ve3hkwRZy5BuCtb4VBuQXAahtjXv305tNrlWmFck0lRUb87f/FXUkgrjO
/+eZHUw6oTo/Fw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:11 2026 by rpki-client