This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: ukT0zXOPyuUSi/ct9z0KajfgeaFfrrNXDJ1UxgSr8N8=
Subject key identifier: CE:9F:41:8D:A1:D1:15:C4:84:22:FC:88:E4:25:A3:B8:3C:D7:7A:65
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 019C42B41CC049AF981A35B5EB04D4AFA770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 14:00:25 +0000
Manifest this update: Mon 09 Feb 2026 14:00:25 +0000
Manifest next update: Tue 10 Feb 2026 14:00:25 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: 5Oux/tQ/cRe4KmGrWgAsn480L3ORVtxTsiN525nF9aY=)
2: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (hash: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:1c:c0:49:af:98:1a:35:b5:eb:04:d4:af:a7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Feb 9 14:00:25 2026 GMT
Not After : Feb 10 14:00:25 2026 GMT
Subject: CN=ce9f418da1d115c48422fc88e425a3b83cd77a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:34:e2:e5:c5:5c:4f:0d:38:ba:16:92:6f:
ee:e8:a2:c6:17:5c:2f:32:ab:a2:7e:49:9e:24:c0:
a0:92:76:ba:ed:28:97:5f:6a:3c:3c:a8:be:fd:6b:
d1:bf:59:a3:90:a6:65:29:b0:81:43:a0:78:04:87:
cb:09:c6:83:30:a9:09:bb:f4:f8:58:9d:5c:72:cb:
b8:e0:9c:25:8b:90:c0:b0:4e:44:48:15:62:12:ac:
e6:53:0c:0b:67:6a:26:54:c9:f2:d4:fe:d7:5d:13:
0e:47:0e:84:16:ea:b4:ca:6f:d8:40:62:0d:b7:45:
40:e2:93:b0:77:cc:39:65:31:ce:ba:b5:5c:e9:a4:
a7:93:9c:46:16:dc:76:63:a6:63:cd:7f:00:80:78:
71:7e:d1:09:75:cb:67:06:75:b8:3a:06:16:e4:a1:
f2:80:ff:40:03:e7:b1:0c:62:04:6e:1f:a3:2e:98:
8d:cc:06:f9:b0:3b:73:e2:aa:0c:25:fb:74:28:f2:
26:cc:b3:10:c5:fc:58:5e:0e:b4:3e:e5:3e:78:51:
07:3a:64:fa:c0:43:93:27:c8:84:ab:44:3b:84:24:
09:49:d2:ad:bf:56:90:b2:83:37:b1:2a:6d:76:00:
f7:61:3d:c1:41:4f:8e:48:37:a5:02:e6:61:49:93:
65:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9F:41:8D:A1:D1:15:C4:84:22:FC:88:E4:25:A3:B8:3C:D7:7A:65
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:89:0b:33:09:52:84:16:82:7a:c7:fc:c9:fa:4d:dc:9e:b6:
44:ce:6c:f4:34:33:3b:ad:44:bd:d9:09:38:df:33:03:16:fa:
ff:e8:3e:e3:60:67:af:6d:21:a2:be:ff:8c:1e:1c:28:6b:63:
dc:ef:6d:5c:bd:44:06:86:85:e1:02:bf:f3:3e:6a:56:cb:70:
d1:96:ff:18:19:26:1b:23:75:1e:8b:34:d0:60:b0:6b:91:93:
79:4a:0f:68:fe:a2:3e:fc:20:a8:40:91:46:37:64:38:b9:40:
a9:fb:c9:02:5d:59:30:e0:3b:de:f8:05:56:0c:61:42:37:53:
d4:96:4e:58:d1:57:a1:61:24:24:19:f5:26:9f:ae:c2:30:cb:
a4:26:36:d4:e1:7c:8d:e9:9a:f1:85:86:9a:ac:ab:36:a0:0c:
4a:06:e1:ba:da:eb:77:6a:f2:4a:18:ee:39:e7:59:ff:6a:49:
30:e9:c7:80:7d:9b:2f:d4:53:01:02:94:3b:2d:27:31:17:e8:
b4:aa:e8:af:20:be:b0:a1:fb:d9:62:b2:b8:7b:bc:c1:0a:eb:
a9:ef:38:44:04:e7:a5:43:81:45:58:29:3e:5e:18:c6:a7:0d:
2d:49:69:93:07:72:fa:eb:46:71:09:af:c4:92:5d:e2:42:0f:
7a:35:3d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:13 2026 by rpki-client