This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: 5Ti0PzZd3eyF3RRz2fwdGwRJ5VX9+i4uQeZvE8xWn7M=
Subject key identifier: 87:FB:2D:73:0C:09:45:F9:E9:5E:6A:47:B5:DC:32:97:E5:4E:3A:A2
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 019C42EB62E03ADC605B90EB0E5CE7BC0FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 1547
Signing time: Mon 09 Feb 2026 15:00:48 +0000
Manifest this update: Mon 09 Feb 2026 15:00:48 +0000
Manifest next update: Tue 10 Feb 2026 15:00:48 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: izv5jhAeNF0/Kmg2yIiOKzuINFZZtkE6ICwxCzevX0E=)
2: npOXlCeWSvGjxC2zJdVAMWyUfEM.roa (hash: pw1QNEJHKJUrWY6D1qiACJ/w8G/+SsXvTvvhcDDyBgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:62:e0:3a:dc:60:5b:90:eb:0e:5c:e7:bc:0f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Feb 9 15:00:48 2026 GMT
Not After : Feb 10 15:00:48 2026 GMT
Subject: CN=87fb2d730c0945f9e95e6a47b5dc3297e54e3aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:63:54:c3:72:0f:d2:1f:d5:dd:6b:f3:01:
66:b8:f4:98:9c:5f:6a:9f:ba:08:29:e2:f3:ee:b9:
3e:75:b7:fd:74:08:01:c7:32:82:09:51:52:22:f8:
c5:9e:3f:e3:48:64:6e:7c:d5:b2:65:1d:e0:7f:a5:
8c:5c:56:04:f5:22:21:86:30:1e:28:67:93:a5:19:
52:26:4e:36:04:dc:8a:10:57:0e:78:ff:b9:1d:cb:
a9:90:1a:66:1b:53:8c:1d:29:b9:22:78:2f:46:1b:
31:77:ce:27:36:bf:60:ee:86:4a:e0:0d:c6:92:35:
41:94:bd:51:e3:a4:57:4a:1f:89:d1:e2:74:36:db:
b6:6f:df:02:ab:42:7d:d9:c1:d0:17:69:c4:9f:14:
21:e5:ab:c9:6f:20:40:4c:5b:20:6c:4d:7d:39:0b:
10:0f:99:03:d5:82:ea:54:1c:1a:f1:90:97:52:e0:
51:b3:53:26:63:a6:9a:98:b2:a6:ab:d6:79:4b:1e:
d8:30:e2:22:30:06:70:ee:47:9b:5e:1b:58:bb:d0:
c4:81:e6:38:a1:32:9e:73:70:57:20:8c:03:20:33:
a2:23:96:b9:ef:8f:9c:49:89:e9:16:0a:bc:62:cb:
6c:6a:68:4e:af:1b:ef:34:c4:40:52:bd:59:4b:3a:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FB:2D:73:0C:09:45:F9:E9:5E:6A:47:B5:DC:32:97:E5:4E:3A:A2
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e7:79:4f:8e:11:6a:08:0b:6a:07:b6:ca:ac:86:c2:e9:b5:
d8:65:42:fb:a0:90:1f:72:20:f5:6c:12:e3:e4:2b:70:f3:56:
11:1a:87:e9:8f:53:9d:3e:af:47:81:a0:ff:da:cb:31:77:9f:
7a:d2:18:70:4f:b2:aa:6a:88:32:8b:b4:0b:ef:cb:a1:3c:ef:
2f:b3:82:41:4a:b1:34:b6:64:4a:2f:dc:fd:ef:91:e5:2d:c7:
c1:40:85:c9:e9:82:7e:7e:6c:71:3e:68:f8:cc:f0:83:53:40:
0e:e6:c7:9e:56:6c:8d:78:fa:2e:a7:b3:b1:56:74:01:53:1c:
0f:ee:3b:20:35:84:a3:c7:0e:1e:c1:8f:83:1f:37:96:0c:ee:
ba:a7:14:2f:31:6e:aa:71:97:88:d6:63:39:12:14:23:d0:99:
67:80:b9:52:94:a9:4f:68:68:96:b0:f4:d2:62:4e:ea:38:e6:
4b:4a:2f:94:81:56:ae:3d:a5:86:43:9f:75:61:3f:6a:92:55:
b6:34:52:18:45:75:d7:f2:44:cd:17:8d:80:a5:4c:4a:d0:fd:
d2:ec:60:eb:9e:22:b2:85:a0:8b:64:b6:d5:ba:51:89:41:d0:
1a:8e:a4:0c:26:9a:67:4e:ce:ae:01:fc:21:7e:92:d0:03:53:
22:db:50:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:36 2026 by rpki-client