This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
File: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft (raw, json)
Hash identifier: eCLuRISXJ+kSgjFtOrFTMPSoDB60NTwwnxkiH0zIr/M=
Subject key identifier: 5F:B2:22:33:07:7A:3F:8C:C5:EC:94:1F:7C:60:CF:93:8C:97:0F:CA
Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Certificate issuer: /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Certificate serial: 019C42B48C174723680C497BA2AA46353517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
Manifest number: 0EC8
Signing time: Mon 09 Feb 2026 14:00:54 +0000
Manifest this update: Mon 09 Feb 2026 14:00:54 +0000
Manifest next update: Tue 10 Feb 2026 14:00:54 +0000
Files and hashes: 1: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl (hash: w7FGM6A7eFU+M2dPjrYqNML+8nKoRVkPL05MSTBGIWs=)
2: vFPz2EZZAEU2N3SgGFxaDNU5jHs.roa (hash: EuLVLB/JUDTlNe7Sgb1DpN69/WpO8B+6KWA2ZGoI7bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:8c:17:47:23:68:0c:49:7b:a2:aa:46:35:35:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Validity
Not Before: Feb 9 14:00:54 2026 GMT
Not After : Feb 10 14:00:54 2026 GMT
Subject: CN=5fb22233077a3f8cc5ec941f7c60cf938c970fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a5:c8:1b:bf:87:a2:3d:7a:b1:9e:eb:0d:be:
e7:88:53:ff:bd:83:ea:58:4e:1e:24:8d:87:fc:a5:
30:19:6f:8c:74:a3:1e:2a:e2:65:a3:8e:4d:17:88:
8a:bd:e6:5e:36:17:46:05:1d:f2:a0:78:51:c3:21:
91:af:d0:2d:ec:7b:84:32:7c:67:c0:5d:54:b1:b6:
3e:8b:aa:52:a1:95:3f:cd:d4:8b:2c:97:99:bb:de:
aa:33:ce:fe:7b:e1:7b:75:64:8d:bf:a0:eb:85:3e:
68:db:8c:bd:f8:ea:34:13:4a:59:1e:c6:bf:f1:ea:
c5:ea:a3:fe:35:df:92:86:9e:c8:4e:9d:d5:f8:6f:
89:e1:00:e4:0f:22:4d:62:fa:cb:41:4c:da:a3:73:
64:f3:32:0e:85:94:ed:1c:ec:87:25:42:87:ae:b8:
b8:e0:37:de:f2:17:80:a5:dd:c2:ef:a8:30:4d:5f:
25:0f:b5:01:e0:3f:52:86:4c:4c:d2:6a:d5:74:a3:
c6:f7:cd:7f:a2:67:27:a9:42:72:78:74:1b:ec:dc:
a7:aa:39:d8:43:d3:89:2b:6c:18:cb:69:3c:f4:2c:
59:fb:70:2d:67:84:84:df:7f:75:44:ea:34:5e:c4:
7f:14:9b:bb:25:3f:10:90:4a:6a:23:bf:07:40:b7:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B2:22:33:07:7A:3F:8C:C5:EC:94:1F:7C:60:CF:93:8C:97:0F:CA
X509v3 Authority Key Identifier:
keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6a:33:98:55:1d:04:5d:63:2c:dd:e2:b3:d5:62:22:15:40:
a3:41:31:9a:84:3f:f8:b0:f1:d0:a2:ed:67:94:62:e5:8c:f5:
a8:17:f9:01:e1:02:1c:2c:64:fc:a5:51:8c:ae:48:3e:ba:ef:
1d:c8:98:32:08:e4:11:ed:7c:ef:73:b5:4f:d4:18:9a:8b:d9:
6f:8c:72:76:42:b1:c5:14:2a:48:20:f5:ce:f1:ca:34:96:9e:
67:be:9f:9a:38:82:e4:f9:90:dd:4a:08:64:a9:1f:87:65:73:
83:d1:f5:27:e3:b7:bb:bb:bc:e3:76:0b:1e:b0:55:a3:f5:d7:
42:29:97:1e:99:59:19:45:31:f5:41:5a:b4:ed:78:c6:86:ec:
b8:f7:e2:fc:5b:2c:c7:c8:c4:d7:62:8e:15:b0:55:c2:7b:9e:
77:61:1e:02:cb:46:b2:28:61:08:27:f8:b7:f7:a9:e0:3f:39:
eb:59:7d:5a:d0:12:f7:af:a1:1d:9f:3f:54:8b:c6:a2:05:27:
cc:f8:81:d3:a9:01:be:1f:22:1b:be:ef:5b:9e:de:8c:a2:70:
7d:3f:15:8a:e3:14:47:56:a4:2e:6c:17:a9:55:e3:b2:0a:20:
ab:a6:e5:d6:2b:5d:eb:89:31:de:66:c5:7b:dd:64:c3:68:1f:
0e:44:5d:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtIwXRyNoDEl7oqpGNTUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NzMyNWU0OTVjYjAxNTAyMDNiNzlmMjQ2ZjRjZDRjMGZl
YzI0ZmYwHhcNMjYwMjA5MTQwMDU0WhcNMjYwMjEwMTQwMDU0WjAzMTEwLwYDVQQD
Eyg1ZmIyMjIzMzA3N2EzZjhjYzVlYzk0MWY3YzYwY2Y5MzhjOTcwZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6XIG7+Hoj16sZ7rDb7niFP/vYPq
WE4eJI2H/KUwGW+MdKMeKuJlo45NF4iKveZeNhdGBR3yoHhRwyGRr9At7HuEMnxn
wF1UsbY+i6pSoZU/zdSLLJeZu96qM87+e+F7dWSNv6DrhT5o24y9+Oo0E0pZHsa/
8erF6qP+Nd+Shp7ITp3V+G+J4QDkDyJNYvrLQUzao3Nk8zIOhZTtHOyHJUKHrri4
4Dfe8heApd3C76gwTV8lD7UB4D9ShkxM0mrVdKPG981/omcnqUJyeHQb7NynqjnY
Q9OJK2wYy2k89CxZ+3AtZ4SE3391ROo0XsR/FJu7JT8QkEpqI78HQLcwgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+yIjMHej+MxeyUH3xgz5OMlw/KMB8GA1UdIwQY
MBaAFKdzJeSVywFQIDt58kb0zUwP7CT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iZjg0MTEtNjk2MC00Y2VmLTkxZjkt
MTNiNmE2ZDcxYTQxLzEvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iZjg0MTEtNjk2MC00Y2VmLTkxZjktMTNiNmE2ZDcxYTQx
LzEvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGozmFUd
BF1jLN3is9ViIhVAo0ExmoQ/+LDx0KLtZ5Ri5Yz1qBf5AeECHCxk/KVRjK5IPrrv
HciYMgjkEe1873O1T9QYmovZb4xydkKxxRQqSCD1zvHKNJaeZ76fmjiC5PmQ3UoI
ZKkfh2Vzg9H1J+O3u7u843YLHrBVo/XXQimXHplZGUUx9UFatO14xobsuPfi/Fss
x8jE12KOFbBVwnued2EeAstGsihhCCf4t/ep4D8561l9WtAS96+hHZ8/VIvGogUn
zPiB06kBvh8iG77vW57ejKJwfT8ViuMUR1akLmwXqVXjsgogq6bl1itd64kx3mbF
e91kw2gfDkRd+Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:39 2026 by rpki-client