This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: ADUi1nLFYrxJv8jhoILjuuQNRfKxwkt+qEMx/XRnhNU=
Subject key identifier: 79:E7:45:4B:80:CA:44:9A:E3:BB:58:F3:8D:2A:12:FE:D2:38:5A:5C
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019C438FD5E470AC4F12D74425FF1057E551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 07BC
Signing time: Mon 09 Feb 2026 18:00:25 +0000
Manifest this update: Mon 09 Feb 2026 18:00:25 +0000
Manifest next update: Tue 10 Feb 2026 18:00:25 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: 5Nvz/5/ze+Q0Icx/kClKbnOxWmppUW9FP3L8kkjW/EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:d5:e4:70:ac:4f:12:d7:44:25:ff:10:57:e5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Feb 9 18:00:25 2026 GMT
Not After : Feb 10 18:00:25 2026 GMT
Subject: CN=79e7454b80ca449ae3bb58f38d2a12fed2385a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:60:b7:c6:fd:e2:7b:84:56:66:88:f6:53:
ea:58:f1:2e:4f:ec:20:b5:87:1c:7b:d0:58:70:00:
5e:0c:0c:bc:fa:34:5b:4b:ef:87:11:84:2d:2e:d1:
4e:e6:34:7b:b7:77:93:ec:65:e5:a3:45:6f:ab:1f:
21:af:d0:53:bd:df:b5:fb:6b:cf:bf:45:df:37:00:
d9:e0:22:18:4e:ce:d2:3d:a2:21:f4:e0:45:33:ce:
a6:b2:43:fe:20:43:90:68:bb:49:cc:74:40:8b:15:
f0:3c:ed:c2:96:e5:9b:33:f7:7e:b8:c9:f1:0b:9d:
c3:e2:c9:31:e9:54:3e:d5:6a:0a:b2:71:3a:70:a3:
22:f4:01:31:c8:81:a0:87:81:30:59:2a:0a:e9:a5:
43:43:d8:e9:69:d5:51:c6:a4:1e:4c:e2:41:0e:6e:
c1:e2:ce:69:ad:19:d3:74:be:3d:81:ff:e8:6d:26:
9c:fb:c4:14:c4:a2:2a:14:c6:c8:a4:1e:7d:24:05:
4d:53:b3:6f:84:d4:cb:84:0b:68:ca:64:44:66:c9:
c3:a9:f1:82:f0:77:d0:35:d0:59:47:0b:eb:13:56:
83:39:b9:ca:d5:a0:10:55:29:e1:06:ad:66:0a:42:
fd:ad:a8:59:1f:b1:43:d3:95:04:47:77:e9:1c:f9:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E7:45:4B:80:CA:44:9A:E3:BB:58:F3:8D:2A:12:FE:D2:38:5A:5C
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ff:3c:b8:53:a5:fe:da:16:96:64:cd:df:00:af:79:c7:21:
fa:cd:6c:5a:13:ff:eb:c2:fd:6b:cd:08:4f:ee:b9:10:f7:dc:
34:60:ea:20:6a:13:6e:f7:e4:2d:e6:dd:07:6a:f4:c9:ac:9a:
35:89:83:d6:de:c0:a2:53:e9:2b:c9:fe:32:85:be:e9:14:b7:
63:e3:83:8d:41:31:68:5d:4f:ae:61:09:78:b4:a1:e2:6e:cd:
0c:6f:1f:da:c1:ea:a4:93:e0:86:33:04:c2:02:aa:e5:c8:73:
91:cd:1e:14:3e:21:fc:27:6f:1f:f9:a7:d0:b4:88:2d:2c:ca:
78:1b:1b:49:4c:b9:65:7e:48:9d:cb:16:5a:55:4a:5c:4d:4b:
15:69:82:0b:29:a1:b0:72:26:af:40:94:d6:09:86:e2:2b:e6:
e1:f2:7d:be:04:8f:93:75:07:94:23:16:85:3e:11:1b:b4:b5:
7a:21:0f:8d:d0:b9:3b:aa:d1:27:03:0a:d9:ca:27:84:74:cc:
c2:6f:11:b6:4b:21:c1:8f:41:8c:6a:98:e8:3b:d2:8d:40:84:
ad:48:11:d2:1a:51:87:5e:9b:8b:cc:8e:e3:fd:46:42:3e:66:
d1:7c:f8:14:d3:6c:8f:ba:3e:ea:30:fc:38:d5:b9:c2:db:e9:
90:20:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:18 2026 by rpki-client