This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: nLqPYSREYIFYqmHmrBkBw1b6DnPhkgme/BFnhFy+wh8=
Subject key identifier: 89:8C:65:81:FD:79:56:DE:C7:9D:49:65:9B:13:1B:8B:07:E3:29:31
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 019C41D8BA400B0404100835FE8133F5C612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 10:00:48 +0000
Manifest this update: Mon 09 Feb 2026 10:00:48 +0000
Manifest next update: Tue 10 Feb 2026 10:00:48 +0000
Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: SDw79tuTNSXUd6TeDPHTM4I39D1zIljUQTJKQJJjB2k=)
2: cny5YunWoGOPcvtGZLymBoSxvc0.roa (hash: z2k+kuA2gEPwCUj1PQs/NjdvAeEDMEfFxUJYpvTthlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:ba:40:0b:04:04:10:08:35:fe:81:33:f5:c6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Feb 9 10:00:48 2026 GMT
Not After : Feb 10 10:00:48 2026 GMT
Subject: CN=898c6581fd7956dec79d49659b131b8b07e32931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:96:f1:fb:84:0a:d4:78:16:63:de:b3:39:
31:d0:88:00:7f:b8:3c:0d:ff:cd:b6:e8:b5:ad:38:
39:5b:7c:c8:20:75:ed:ee:4c:fc:a0:79:31:7a:0a:
98:a7:51:49:48:ea:ad:8f:dd:9c:5c:6e:18:72:40:
e6:c0:1c:79:af:06:bc:03:13:8d:21:b4:57:28:fe:
8c:9f:b4:e7:c9:dc:ed:93:a4:7f:77:3b:c2:9a:16:
1b:49:20:54:53:2d:56:f7:f5:93:a6:0d:9e:ec:e1:
9f:85:35:fe:13:4d:5b:de:6b:54:5e:35:fe:ff:2d:
55:c8:ee:af:56:7a:ad:02:a4:ea:3d:88:e8:a9:d3:
84:01:a5:63:6d:48:7d:2d:45:e2:32:51:66:b2:11:
ba:9d:16:82:b9:e5:69:bb:86:79:16:69:f3:97:68:
be:6e:22:dc:c4:2c:e7:8b:3f:24:b7:1e:ad:2a:16:
78:0b:04:09:04:f0:d3:80:d3:d5:f4:f7:7e:21:6d:
46:f7:bb:a1:81:6e:32:e1:10:65:dd:2e:86:cb:40:
66:11:6b:80:42:97:1e:5f:cc:6b:46:10:2b:cb:6d:
b7:33:ef:21:0b:eb:88:52:b1:75:f1:6d:85:44:6b:
a8:f1:3b:3e:e8:4f:b3:59:59:7d:f3:98:8a:f8:3d:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8C:65:81:FD:79:56:DE:C7:9D:49:65:9B:13:1B:8B:07:E3:29:31
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:dc:61:13:56:7f:b5:e3:06:30:68:96:66:23:ed:18:ee:0e:
b0:32:dc:b7:00:19:30:c9:4a:7b:84:90:92:b8:b4:31:0e:18:
66:77:90:bb:59:10:3f:1d:7a:d9:3b:83:cc:a1:c1:4e:e3:13:
ad:d2:d3:3e:93:a2:ed:81:0f:ff:64:aa:d0:2f:79:6c:91:c0:
18:62:eb:7d:05:a8:66:a4:08:14:fb:ac:6f:a0:68:18:47:9e:
57:68:4e:a7:e8:b5:34:f0:fb:d8:12:8c:e0:c3:16:ea:ba:71:
9c:cb:7b:92:10:5f:61:6c:72:05:f9:7f:a9:7d:e6:de:30:ef:
01:55:27:eb:7d:9e:41:78:3f:36:a7:22:eb:8b:2d:89:58:c9:
7c:b7:b7:06:87:9d:79:48:66:b4:68:9f:20:36:c9:95:a8:04:
74:e3:84:ca:1c:e6:98:76:b9:b8:53:6f:08:f4:13:ce:99:7e:
3b:e7:5b:4b:68:62:d3:7a:c1:1b:1e:fa:f9:7f:c3:b8:65:b3:
b2:36:fe:44:cf:ef:26:a3:2d:1d:b4:a7:07:68:a7:23:c7:ca:
60:99:8a:5c:a6:3f:1c:ac:59:4a:0c:f6:c4:ec:8b:fd:a1:4e:
5e:a1:32:cc:bf:7e:ca:09:fd:7c:47:11:16:bb:8e:a7:a0:00:
fb:f3:f7:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2LpACwQEEAg1/oEz9cYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNmEzNzQyZjBmMGZiMTIwOTIyYjMzOWVmMDFjZWNmODdm
NGQxZWUwHhcNMjYwMjA5MTAwMDQ4WhcNMjYwMjEwMTAwMDQ4WjAzMTEwLwYDVQQD
Eyg4OThjNjU4MWZkNzk1NmRlYzc5ZDQ5NjU5YjEzMWI4YjA3ZTMyOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl6W8fuECtR4FmPeszkx0IgAf7g8
Df/Ntui1rTg5W3zIIHXt7kz8oHkxegqYp1FJSOqtj92cXG4YckDmwBx5rwa8AxON
IbRXKP6Mn7Tnydztk6R/dzvCmhYbSSBUUy1W9/WTpg2e7OGfhTX+E01b3mtUXjX+
/y1VyO6vVnqtAqTqPYjoqdOEAaVjbUh9LUXiMlFmshG6nRaCueVpu4Z5Fmnzl2i+
biLcxCzniz8ktx6tKhZ4CwQJBPDTgNPV9Pd+IW1G97uhgW4y4RBl3S6Gy0BmEWuA
QpceX8xrRhAry223M+8hC+uIUrF18W2FRGuo8Ts+6E+zWVl985iK+D2S7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImMZYH9eVbex51JZZsTG4sH4ykxMB8GA1UdIwQY
MBaAFNxqN0Lw8PsSCSKzOe8Bzs+H9NHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80N2M5NzMtMjA1Yi00MTk3LTg2OTgt
Y2MxZDJjNWUxYjMxLzEvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80N2M5NzMtMjA1Yi00MTk3LTg2OTgtY2MxZDJjNWUxYjMx
LzEvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9xhE1Z/
teMGMGiWZiPtGO4OsDLctwAZMMlKe4SQkri0MQ4YZneQu1kQPx162TuDzKHBTuMT
rdLTPpOi7YEP/2Sq0C95bJHAGGLrfQWoZqQIFPusb6BoGEeeV2hOp+i1NPD72BKM
4MMW6rpxnMt7khBfYWxyBfl/qX3m3jDvAVUn632eQXg/Nqci64stiVjJfLe3Boed
eUhmtGifIDbJlagEdOOEyhzmmHa5uFNvCPQTzpl+O+dbS2hi03rBGx76+X/DuGWz
sjb+RM/vJqMtHbSnB2inI8fKYJmKXKY/HKxZSgz2xOyL/aFOXqEyzL9+ygn9fEcR
FruOp6AA+/P3Gg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:50 2026 by rpki-client