This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier: sdJOIZ3b5GYPOWBBcFIJXpjxto9/xyQ4WKwRCJxQ05o=
Subject key identifier: 8F:FB:4F:2E:43:A4:BD:F5:1A:A0:7B:E8:FD:B4:18:5C:10:AC:DC:26
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer: /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial: 019C416A8E7488B165569F0EA93AE973A06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 08:00:28 +0000
Manifest this update: Mon 09 Feb 2026 08:00:28 +0000
Manifest next update: Tue 10 Feb 2026 08:00:28 +0000
Files and hashes: 1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: 9e3WXNgktrlZuGOkbK5x1FPM0Lm9gUFI4I/wEYjYdkQ=)
2: cQu8PWE2ED6TGgN91J-oSiBaGLU.roa (hash: FGQyS1Z2RCfk2kbunFiNxKz2rH/BrfGjCFskroiMdcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:8e:74:88:b1:65:56:9f:0e:a9:3a:e9:73:a0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Validity
Not Before: Feb 9 08:00:28 2026 GMT
Not After : Feb 10 08:00:28 2026 GMT
Subject: CN=8ffb4f2e43a4bdf51aa07be8fdb4185c10acdc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:35:58:54:3f:18:f0:be:89:07:16:51:21:c9:
66:e1:b8:b7:61:8d:5a:05:7b:e7:b9:94:fc:da:6c:
3c:48:07:cf:71:26:7b:79:cb:f2:e7:ae:97:08:51:
88:2b:e2:e9:25:f7:df:35:69:d1:2d:47:cb:60:2f:
64:bc:74:7f:2b:a4:04:06:7a:89:16:46:3a:9d:8c:
7d:95:aa:3e:fa:18:15:f5:6f:4c:b9:8e:54:d2:a5:
f7:02:c9:6e:ad:84:7e:ce:a8:8e:62:24:76:5d:12:
57:69:a2:33:a4:0b:97:73:a3:8e:54:93:10:17:13:
2f:2e:e0:ed:65:a4:53:e9:de:84:46:b9:34:bf:40:
f6:c4:82:14:f7:c9:17:fd:14:48:cf:9b:b4:0a:db:
21:80:fb:fc:79:18:f3:12:31:08:40:14:f8:f7:e0:
7f:b1:e7:fc:83:2e:43:fa:6f:e2:ca:a4:b0:78:21:
2f:23:ce:f4:e8:3e:de:34:e0:ca:03:97:d4:56:ee:
2f:94:ab:21:38:87:a3:c5:96:73:ee:19:e9:bb:f1:
73:68:08:8d:7d:26:64:59:1f:e6:11:65:e4:98:48:
ec:37:66:d8:50:e3:16:0f:98:b5:ea:17:c6:44:90:
f3:7a:72:4f:e4:0b:e7:1d:cd:6f:19:c2:0c:d6:d0:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:4F:2E:43:A4:BD:F5:1A:A0:7B:E8:FD:B4:18:5C:10:AC:DC:26
X509v3 Authority Key Identifier:
keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:aa:1d:cd:7f:b8:e8:a5:d9:b4:13:ac:2a:63:da:69:78:30:
fa:65:fd:64:5c:d3:21:7c:bc:c1:85:e4:5b:52:20:cb:c8:6e:
da:ec:78:6a:79:b5:9e:f7:4a:84:60:46:86:34:d3:9a:7a:f9:
a8:55:fb:bc:ad:81:1e:cd:f6:63:b7:5c:a6:93:fa:cc:b3:0d:
78:ab:4f:61:14:8f:80:bc:66:bb:74:b0:5c:08:70:0c:93:46:
19:de:e4:d2:a2:2c:8f:ea:12:01:2f:e4:5d:4b:a0:28:a1:19:
00:67:b0:d1:f2:76:44:4c:7e:ca:35:51:ff:b7:66:62:b2:8d:
b4:c1:9d:9e:d6:f0:02:45:44:f8:28:bb:53:f3:a2:b4:ed:93:
b7:01:3d:ae:62:5d:85:cc:05:df:28:85:88:c3:bb:78:65:bd:
74:9c:21:cc:3d:7e:0d:ae:65:b0:11:a4:0b:06:b7:85:d3:d5:
13:44:39:ba:02:da:51:db:57:8d:11:5e:fe:90:ec:a1:9f:53:
38:2e:a7:6a:02:2f:f8:b2:7f:9d:16:de:65:c4:b4:c5:85:1f:
c9:35:64:df:e3:aa:ad:21:53:a8:54:50:9d:e9:69:49:2d:f2:
6d:d6:76:ce:db:08:79:76:a8:e8:d3:ae:dc:15:12:d4:3c:44:
01:bd:61:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBao50iLFlVp8OqTrpc6BuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjA0NmI2ZTMwOWU5YTg2NjUyMmMyYTQwYzY2ZmZjNDJm
YmI4NDMwHhcNMjYwMjA5MDgwMDI4WhcNMjYwMjEwMDgwMDI4WjAzMTEwLwYDVQQD
Eyg4ZmZiNGYyZTQzYTRiZGY1MWFhMDdiZThmZGI0MTg1YzEwYWNkYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DVYVD8Y8L6JBxZRIclm4bi3YY1a
BXvnuZT82mw8SAfPcSZ7ecvy566XCFGIK+LpJfffNWnRLUfLYC9kvHR/K6QEBnqJ
FkY6nYx9lao++hgV9W9MuY5U0qX3AslurYR+zqiOYiR2XRJXaaIzpAuXc6OOVJMQ
FxMvLuDtZaRT6d6ERrk0v0D2xIIU98kX/RRIz5u0CtshgPv8eRjzEjEIQBT49+B/
sef8gy5D+m/iyqSweCEvI8706D7eNODKA5fUVu4vlKshOIejxZZz7hnpu/FzaAiN
fSZkWR/mEWXkmEjsN2bYUOMWD5i16hfGRJDzenJP5AvnHc1vGcIM1tDKrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/7Ty5DpL31GqB76P20GFwQrNwmMB8GA1UdIwQY
MBaAFN6wRrbjCemoZlIsKkDGb/xC+7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDkt
MWM5NDkyMjQ1Y2FiLzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDktMWM5NDkyMjQ1Y2Fi
LzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKodzX+4
6KXZtBOsKmPaaXgw+mX9ZFzTIXy8wYXkW1Igy8hu2ux4anm1nvdKhGBGhjTTmnr5
qFX7vK2BHs32Y7dcppP6zLMNeKtPYRSPgLxmu3SwXAhwDJNGGd7k0qIsj+oSAS/k
XUugKKEZAGew0fJ2REx+yjVR/7dmYrKNtMGdntbwAkVE+Ci7U/OitO2TtwE9rmJd
hcwF3yiFiMO7eGW9dJwhzD1+Da5lsBGkCwa3hdPVE0Q5ugLaUdtXjRFe/pDsoZ9T
OC6nagIv+LJ/nRbeZcS0xYUfyTVk3+OqrSFTqFRQnelpSS3ybdZ2ztsIeXao6NOu
3BUS1DxEAb1hvA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:39 2026 by rpki-client