This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: HUEkbbzC6KUbxa6vYHOxh+d46hteKCM/fMH9lKzUxB0=
Subject key identifier: B0:64:A1:82:BF:9C:1A:91:25:85:1F:69:C0:54:12:4B:C8:21:19:87
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 019C43FE5712B59F88E189EEBF44F166C217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 09E6
Signing time: Mon 09 Feb 2026 20:01:07 +0000
Manifest this update: Mon 09 Feb 2026 20:01:07 +0000
Manifest next update: Tue 10 Feb 2026 20:01:07 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: 2mR2QGiCU7oStMroosbpyESFThwAs0vHzOG2v8j1MdQ=)
2: lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa (hash: IPZ3rABOnomgE8tL9UL1behEamup4e8GPV/2Qwjj8sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:57:12:b5:9f:88:e1:89:ee:bf:44:f1:66:c2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Feb 9 20:01:07 2026 GMT
Not After : Feb 10 20:01:07 2026 GMT
Subject: CN=b064a182bf9c1a9125851f69c054124bc8211987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:20:b7:86:d3:02:ba:90:56:27:9d:32:06:
7d:c2:1c:71:d0:72:83:ec:ca:f2:58:f0:17:b0:55:
92:a0:8d:9a:36:b3:64:d3:3f:bb:e7:55:c3:93:78:
af:bc:dd:d7:b7:d9:35:80:b2:9e:3a:8b:35:a7:55:
94:4a:f6:b0:d4:08:11:5a:60:11:f0:e4:3d:31:3f:
6e:4a:29:5e:1f:7c:97:46:5b:a9:6c:55:22:20:20:
10:2a:b9:98:9a:7b:3f:63:35:5e:ad:4e:f9:64:b2:
85:ae:2d:52:da:fb:e3:19:18:8a:37:4a:a2:30:ca:
b3:0a:bb:a8:fb:5f:6f:4a:0f:6f:ab:3a:3a:6b:75:
1a:2b:4a:79:07:db:49:7d:0b:2c:94:b5:ef:7a:86:
3d:d9:6c:e2:8a:3e:d3:bb:73:ce:78:a4:f4:ea:c4:
c2:59:64:fe:5e:50:dd:8e:5d:75:6b:0d:85:de:ae:
d6:25:97:01:b9:14:b0:d2:0a:24:3c:74:fb:60:45:
ae:f9:68:67:7f:83:fe:e9:13:a3:5f:32:d6:ef:63:
d3:83:4a:5b:73:36:48:fd:24:8b:b8:59:7f:78:c1:
65:db:94:ff:8d:3d:48:47:82:00:c7:e0:10:9d:9a:
6d:88:fa:c5:44:a6:e0:d0:79:a9:bb:6f:f5:fe:8d:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:A1:82:BF:9C:1A:91:25:85:1F:69:C0:54:12:4B:C8:21:19:87
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c4:83:41:97:23:58:24:14:e6:97:d4:1e:14:2f:e6:04:64:
c5:22:e7:3c:29:96:48:a3:a8:b8:34:27:9e:e6:e1:c0:2b:d7:
b8:e2:03:ef:ba:25:5b:0c:1d:6c:b3:f4:19:4a:d2:58:fc:d4:
4f:bb:9f:b8:a6:de:a9:e7:d7:07:b1:8b:28:b8:f0:0e:46:8f:
7d:14:60:ec:45:5a:82:46:18:b1:88:80:b7:61:e3:d1:03:20:
a0:d9:d5:d2:0e:a0:0e:36:b6:8a:a2:90:4f:1f:ee:41:2c:ef:
d5:bc:fd:6b:fc:59:82:63:f1:85:61:13:87:13:63:ed:ca:d4:
fd:17:bf:95:b7:99:86:9f:63:32:45:b1:4a:21:83:3a:86:25:
f8:34:61:13:85:4b:46:76:63:97:86:15:ae:e1:76:1d:7c:7b:
d5:ab:e2:fa:54:34:e9:7c:52:13:48:f7:b2:eb:b2:b5:88:bb:
a5:14:bc:ce:4f:19:ee:28:fd:8f:95:95:3f:3a:42:8e:d9:a9:
d6:1b:ab:3e:27:78:6e:23:8a:0c:ed:5e:68:bd:9c:88:ac:93:
44:22:5a:12:7e:8b:0e:09:d3:80:15:aa:e6:f9:6e:5a:99:36:
91:b5:5a:f7:f3:26:e1:48:2d:c6:74:02:7e:89:94:37:74:85:
90:5e:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:41 2026 by rpki-client