This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier: jHMCxl2ieeDDZpXIROZDx9OldmSlTZUYa+YBVno7SKk=
Subject key identifier: C7:E3:7F:59:B2:E9:E1:F2:7E:65:2C:4B:D5:AB:F5:14:8A:3A:93:7B
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer: /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial: 019C1D27AC1E42AB082BE0A786D200DCCA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number: 1774
Signing time: Mon 02 Feb 2026 07:01:04 +0000
Manifest this update: Mon 02 Feb 2026 07:01:04 +0000
Manifest next update: Tue 03 Feb 2026 07:01:04 +0000
Files and hashes: 1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: FDlWShcaFLP7YbrPgP9ivF8bEHXFiKdIhhyGS1cyeBE=)
2: VFigvxiioVp_z41f3Wvp6F5J9nU.asa (hash: gCXKzk5x+T9R6DTeXi9kC1UIethWxH5rZC/fh9KZfTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:27:ac:1e:42:ab:08:2b:e0:a7:86:d2:00:dc:ca:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Validity
Not Before: Feb 2 07:01:04 2026 GMT
Not After : Feb 3 07:01:04 2026 GMT
Subject: CN=c7e37f59b2e9e1f27e652c4bd5abf5148a3a937b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:46:a2:21:3e:c3:39:f8:c4:67:7e:95:b7:4b:
56:02:33:c9:6d:2e:8d:68:d2:87:3c:a3:86:c6:4a:
58:8b:e2:44:b1:58:eb:a2:f1:29:d2:c8:54:36:e2:
00:87:1a:1a:3a:71:f5:10:ae:8c:34:1f:85:5c:17:
7d:42:9b:83:ea:d0:36:bc:5e:a6:14:2b:74:f3:60:
97:cf:85:b5:ff:33:0e:9a:e8:7a:a5:fa:8f:a7:51:
a0:e4:26:a3:36:28:29:9a:80:e2:19:f3:94:5e:5e:
39:30:a2:29:5c:6a:de:ec:e1:8c:ad:8d:fe:4b:7f:
3e:85:23:43:d3:29:c4:5e:d4:2e:f0:b9:ac:83:28:
bf:17:24:d0:09:6e:fc:04:14:06:cb:5e:62:20:d7:
58:68:1b:08:99:d2:93:b7:da:20:b8:3a:e4:dc:50:
7b:be:a3:03:05:9f:cb:81:95:0d:45:c1:da:60:02:
fe:dc:bc:77:89:a3:db:90:03:5d:a8:85:0f:e0:77:
b1:ea:88:49:ef:e0:62:d5:1d:68:1d:c2:56:b5:86:
0b:e9:0a:f5:3d:52:bb:36:1b:09:56:86:ae:b4:0f:
06:ff:44:98:24:b3:a8:25:ce:ca:9d:87:c0:19:22:
f9:e7:85:2a:fc:58:2b:15:77:b8:ad:da:7a:a5:17:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E3:7F:59:B2:E9:E1:F2:7E:65:2C:4B:D5:AB:F5:14:8A:3A:93:7B
X509v3 Authority Key Identifier:
keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3d:06:31:1b:36:42:8c:fd:fc:ab:1d:ac:68:46:f9:c8:62:
3b:2d:09:f3:e3:6c:be:a5:db:7d:84:cb:18:a5:80:77:d6:f6:
19:ea:18:75:ff:0c:d3:fb:ac:8c:c4:83:74:d4:c7:5f:46:07:
0f:a7:e0:de:f1:5a:01:2b:be:57:27:15:2c:fb:4d:ca:c2:2f:
d7:99:6b:d9:fe:31:ee:5f:31:d6:3f:e5:15:38:4e:92:f0:c1:
68:b3:fd:fa:c9:94:17:ea:48:9f:cd:b2:4e:46:67:00:a6:c0:
b6:5e:82:7d:fb:ad:76:61:3f:0f:1e:c2:0e:78:59:6a:8c:4f:
3f:65:1a:e6:22:3f:86:1b:a4:de:3b:bb:85:5d:80:0f:3c:64:
29:e9:b0:51:87:a7:06:86:92:52:fe:43:a8:e7:93:2a:e2:e6:
ca:0a:7f:e3:2c:07:48:4a:e0:c6:d0:b4:21:02:4d:ae:5c:0c:
25:fa:ff:d9:9d:99:3d:a3:58:2c:d4:c1:33:6d:90:30:8c:ca:
94:2e:2f:c1:5a:d8:40:fa:0c:24:67:f1:6b:4a:38:57:d8:aa:
5b:93:7c:59:f0:1d:b2:93:69:24:f1:cb:2d:d2:87:52:30:53:
80:f2:e1:2e:83:e0:d2:c4:8c:a9:6d:1c:e6:95:ea:d6:b9:8e:
1c:0a:17:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwdJ6weQqsIK+CnhtIA3MqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZmIzZTk1Y2JiYTE5NDhiZDk4NmE5MmJlNmYwZjY0N2U2
ZGM2YzQwHhcNMjYwMjAyMDcwMTA0WhcNMjYwMjAzMDcwMTA0WjAzMTEwLwYDVQQD
EyhjN2UzN2Y1OWIyZTllMWYyN2U2NTJjNGJkNWFiZjUxNDhhM2E5MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kaiIT7DOfjEZ36Vt0tWAjPJbS6N
aNKHPKOGxkpYi+JEsVjrovEp0shUNuIAhxoaOnH1EK6MNB+FXBd9QpuD6tA2vF6m
FCt082CXz4W1/zMOmuh6pfqPp1Gg5CajNigpmoDiGfOUXl45MKIpXGre7OGMrY3+
S38+hSND0ynEXtQu8Lmsgyi/FyTQCW78BBQGy15iINdYaBsImdKTt9oguDrk3FB7
vqMDBZ/LgZUNRcHaYAL+3Lx3iaPbkANdqIUP4Hex6ohJ7+Bi1R1oHcJWtYYL6Qr1
PVK7NhsJVoautA8G/0SYJLOoJc7KnYfAGSL554Uq/FgrFXe4rdp6pReKCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfjf1my6eHyfmUsS9Wr9RSKOpN7MB8GA1UdIwQY
MBaAFN77PpXLuhlIvZhqkr5vD2R+bcbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lYmI4MzktNTJiYS00MzFiLTlkZWEt
ZjQ1OTQ2YWM1ZTgwLzEvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lYmI4MzktNTJiYS00MzFiLTlkZWEtZjQ1OTQ2YWM1ZTgw
LzEvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFD0GMRs2
Qoz9/KsdrGhG+chiOy0J8+NsvqXbfYTLGKWAd9b2GeoYdf8M0/usjMSDdNTHX0YH
D6fg3vFaASu+VycVLPtNysIv15lr2f4x7l8x1j/lFThOkvDBaLP9+smUF+pIn82y
TkZnAKbAtl6CffutdmE/Dx7CDnhZaoxPP2Ua5iI/hhuk3ju7hV2ADzxkKemwUYen
BoaSUv5DqOeTKuLmygp/4ywHSErgxtC0IQJNrlwMJfr/2Z2ZPaNYLNTBM22QMIzK
lC4vwVrYQPoMJGfxa0o4V9iqW5N8WfAdspNpJPHLLdKHUjBTgPLhLoPg0sSMqW0c
5pXq1rmOHAoXPQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:33 2026 by rpki-client