This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: WaiAxpFDEoEIg6rksxZMStJqiK7+FYvgMGd7j8lEReg=
Subject key identifier: D9:5E:1B:CA:E1:12:F1:47:80:C4:C1:68:C7:7B:35:AD:B9:9D:6E:35
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 019C427E2FC62E9B97EF12CA4B6A2D0F7479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 1815
Signing time: Mon 09 Feb 2026 13:01:31 +0000
Manifest this update: Mon 09 Feb 2026 13:01:31 +0000
Manifest next update: Tue 10 Feb 2026 13:01:31 +0000
Files and hashes: 1: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: 3LmjtxLI3VikC3vDrczC8ZhD1y2UP5FXw2BBU+YxUw0=)
2: gPlEqEZzfnSTUwltcGMsedRBQ1E.roa (hash: 38esTkQDBO03GfM8yJINP0QbftSi3sYtaXAqJp+R6Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:2f:c6:2e:9b:97:ef:12:ca:4b:6a:2d:0f:74:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Feb 9 13:01:31 2026 GMT
Not After : Feb 10 13:01:31 2026 GMT
Subject: CN=d95e1bcae112f14780c4c168c77b35adb99d6e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:05:27:c5:84:04:02:63:09:2f:8a:48:44:
f2:c2:01:d4:26:29:a0:da:52:18:71:18:6f:2e:fd:
4f:3d:13:57:f9:aa:e4:1e:a7:f4:61:e2:a6:82:6d:
7f:44:70:8e:dd:4a:cb:79:63:f5:42:6a:dd:e0:55:
d6:d3:0a:57:d7:c2:a3:7c:f7:a3:d0:f1:92:73:7f:
f9:d8:55:2b:bb:f2:91:ef:97:11:b5:30:4c:44:b1:
88:6d:c1:7f:0f:7d:33:90:e7:9b:55:ac:21:4f:2a:
ff:57:c2:1d:6c:1b:96:47:6a:d7:8a:43:73:f4:48:
b0:77:05:af:49:79:ad:5c:08:7f:3a:36:b1:d4:df:
7f:22:4d:d7:c4:78:89:08:2e:da:83:6b:3f:c5:5a:
90:af:a9:00:69:cf:dd:1a:ce:ce:ec:ef:6e:1c:ba:
05:52:9d:92:47:47:7b:a1:f9:af:c2:b5:69:92:58:
10:1e:f3:b0:db:8d:30:9d:6d:e7:5e:4d:fa:1a:15:
b7:81:a9:44:26:c6:ba:6b:74:89:e1:e7:57:bb:ea:
0f:b2:14:df:f9:46:c3:a2:9b:3b:af:4e:fe:4e:4e:
86:ba:76:90:20:11:8a:64:94:b1:4a:f9:37:f7:4a:
14:2c:ad:dd:98:94:8a:6a:14:f3:83:e2:57:be:b9:
5d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5E:1B:CA:E1:12:F1:47:80:C4:C1:68:C7:7B:35:AD:B9:9D:6E:35
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:63:06:6a:da:52:01:7b:a6:ed:40:4d:e7:69:10:7e:45:3b:
ad:22:09:18:09:8c:28:f9:91:d2:cd:5a:32:bd:bf:5b:81:29:
11:95:1a:87:e4:70:6e:02:85:52:3b:79:35:35:ec:0f:95:db:
9b:7d:14:a9:43:a0:e8:29:b2:39:e6:4f:d5:30:8c:b4:30:84:
ff:38:8e:43:e1:d0:6a:81:67:ba:cf:d6:02:4c:50:91:fa:60:
92:a9:89:d5:98:a5:93:1e:ea:11:6a:af:81:77:5d:5f:75:ce:
64:84:e5:71:d3:0d:66:b8:f3:b3:b8:62:32:e3:1a:ac:9c:49:
97:6e:52:b3:71:07:49:0f:90:ac:39:08:f3:e0:4d:3c:8b:d8:
84:78:1f:2c:53:49:e6:e0:4e:c1:0b:6d:5b:45:14:f2:23:73:
d0:81:ad:8f:fa:37:e5:c3:97:62:f5:e4:f7:b7:59:be:85:26:
14:25:39:64:f7:f8:32:e5:eb:57:71:0a:d0:04:ad:f8:11:df:
b7:35:5d:94:e9:25:3c:b7:2d:38:35:b8:48:cc:bd:73:1e:10:
97:f9:36:7f:72:60:f5:fd:91:bc:4e:68:7f:9c:de:be:fd:34:
62:a3:bd:ec:d5:69:c9:e6:1c:2e:f4:44:46:6a:c5:92:d4:2a:
15:ec:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:37 2026 by rpki-client