This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: y+koxJqTXfJS7Ae2uGPiondUSf343h1W9T8X/su9WFc=
Subject key identifier: 75:E4:C3:14:E4:27:77:13:88:66:3E:A5:93:AD:3A:B7:F1:EF:28:70
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 019C42EB31B6F2D71561B127C62DC061005B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 1816
Signing time: Mon 09 Feb 2026 15:00:35 +0000
Manifest this update: Mon 09 Feb 2026 15:00:35 +0000
Manifest next update: Tue 10 Feb 2026 15:00:35 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: bLUViiuTiU6+hQ4UaQeJLpif+tyo6jo1xafPj1Ob+EU=)
2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:31:b6:f2:d7:15:61:b1:27:c6:2d:c0:61:00:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Feb 9 15:00:35 2026 GMT
Not After : Feb 10 15:00:35 2026 GMT
Subject: CN=75e4c314e427771388663ea593ad3ab7f1ef2870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:69:b7:83:8f:d8:da:7d:0a:1e:85:30:32:
c2:1c:69:6f:3a:19:8d:b5:54:21:21:e1:35:b9:92:
f7:b9:6a:72:a5:a2:0d:17:3b:d1:0f:1b:63:d7:23:
f6:49:ca:81:b7:7c:28:99:0c:e3:e2:50:75:1f:1c:
83:d6:a2:fa:03:a7:b6:f4:04:98:40:1b:cf:bc:69:
a7:90:a4:2c:e5:e8:11:87:0a:ff:71:a0:60:c2:9f:
39:48:85:48:76:bf:5f:eb:ce:2b:8e:08:1f:78:88:
9c:8c:d1:a2:43:1a:dc:e0:da:2c:cb:7f:f6:fd:65:
cc:b3:86:5c:06:15:b7:a7:cb:bb:39:2a:90:2c:01:
4a:07:fd:30:55:ec:78:ab:cc:80:16:5a:26:9d:0c:
30:d6:47:6e:30:da:31:fb:5e:8e:c2:1d:a7:db:9e:
c5:cd:01:fd:de:e0:e7:fe:e5:09:a6:e1:ca:1d:1c:
c5:2f:98:39:af:44:5a:b6:99:6c:5e:7f:83:ef:d5:
fd:d0:61:5d:0b:e7:f9:1c:02:89:f2:53:44:c8:59:
81:34:cc:fa:dd:f4:bc:31:f2:73:fe:51:e2:08:19:
f8:fc:4f:f6:22:63:b9:30:10:bd:06:c4:58:dd:45:
bc:5d:45:ab:32:40:4c:e4:00:e4:7f:fe:60:2d:3f:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E4:C3:14:E4:27:77:13:88:66:3E:A5:93:AD:3A:B7:F1:EF:28:70
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4f:e4:e5:e9:77:ad:c3:9c:a5:14:dd:ce:c4:e4:cf:a8:c9:
ea:3c:e0:99:1b:c8:ed:2a:13:32:95:f5:d8:c6:a0:b0:9c:39:
5a:45:81:72:4e:03:42:08:9d:dc:da:cd:9f:dd:8c:6a:d1:78:
56:77:61:04:7e:7c:f0:be:07:2f:a4:3c:1d:bf:83:f0:e3:d1:
72:07:06:b0:ba:6a:fd:36:c7:a6:93:33:7c:cf:a5:66:61:a9:
71:1c:9f:20:4e:e1:a6:34:52:d9:58:52:b6:b2:94:6a:5c:43:
92:62:93:88:e7:45:49:9b:c3:f0:14:86:d8:93:a5:db:c6:8d:
36:53:16:00:fb:6e:dd:85:8d:cb:04:70:22:34:a3:62:fa:e4:
f0:65:f7:7e:38:32:9a:e9:de:6b:1c:1a:b0:6c:be:75:10:e2:
5d:c1:2e:1f:a9:cb:de:e7:81:6e:40:e5:0a:12:95:7a:26:b0:
74:26:7a:03:1e:c2:bd:42:65:52:25:8a:fe:a1:0e:37:4b:b7:
44:44:b3:85:47:d5:37:a0:a1:75:14:70:33:f1:96:b9:df:a0:
dc:62:c5:bb:d9:c7:00:01:69:ea:09:c0:ec:5f:18:59:25:41:
8a:d8:f3:45:57:5e:8d:34:48:1e:70:6e:93:a5:2c:14:1f:10:
8b:5f:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:53 2026 by rpki-client