This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: 1vSeY0gU5qLwAloAvcFCGq6HAocjufAIIlrcM+c1Hyw=
Subject key identifier: 17:4C:FD:23:C1:E1:DD:F2:37:A7:B4:3B:83:12:0A:20:5C:9D:21:82
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019C42EB9B9A2A057D2B85FC082A45CE2F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 182E
Signing time: Mon 09 Feb 2026 15:01:02 +0000
Manifest this update: Mon 09 Feb 2026 15:01:02 +0000
Manifest next update: Tue 10 Feb 2026 15:01:02 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: em+IdxbqKKzTfYO2aUGvB2p6gxkojsTPfUSOmtaWUV4=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:9b:9a:2a:05:7d:2b:85:fc:08:2a:45:ce:2f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Feb 9 15:01:02 2026 GMT
Not After : Feb 10 15:01:02 2026 GMT
Subject: CN=174cfd23c1e1ddf237a7b43b83120a205c9d2182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:9d:cf:b2:75:06:51:f0:95:89:e0:94:fe:
ac:b7:f8:bd:6a:ef:82:b4:da:3c:68:ef:84:1c:ea:
40:f5:ce:4f:50:1e:2f:c8:22:87:ba:e8:86:29:dd:
c4:1c:f3:ab:8a:01:dc:bc:f1:3d:7d:6d:7e:85:01:
b4:d8:81:20:5a:e7:aa:e3:69:2a:52:e9:b1:8a:8d:
02:af:54:ad:76:06:42:06:94:fc:97:a7:84:74:e7:
ae:ab:68:8d:d9:17:7d:e5:cf:d6:b8:ef:96:db:2f:
ce:4a:5f:a1:17:70:02:fa:00:34:c8:30:d8:59:68:
64:6d:67:97:ba:89:43:20:40:e4:ff:90:7a:f7:89:
7b:13:69:99:4c:ab:f5:79:c8:c7:4a:17:ab:8a:7b:
d0:77:c4:12:b4:54:2f:2e:5e:d1:2f:1f:2e:7f:b0:
c1:ed:c9:33:7f:7c:cb:cd:7c:2a:a5:83:c5:07:46:
9a:09:60:18:fb:e6:5e:55:71:1e:cd:31:f3:43:45:
16:26:ee:18:7f:e1:3d:ac:d4:95:b2:bd:29:3f:d1:
d0:ba:b2:d6:73:2e:3e:85:04:fa:11:d7:ff:07:75:
9f:02:58:fe:35:4b:a7:0f:97:ff:9f:9d:b0:48:70:
33:93:60:6f:a2:f2:b4:21:71:28:8c:b4:ec:03:73:
bc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4C:FD:23:C1:E1:DD:F2:37:A7:B4:3B:83:12:0A:20:5C:9D:21:82
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:07:7e:bd:28:b7:35:94:19:f3:d9:27:60:f1:c6:54:88:fb:
59:56:1c:aa:f3:64:68:36:a4:13:89:6e:88:f5:35:11:c4:97:
2a:eb:a9:4f:e2:b1:1c:e7:49:60:25:78:fb:27:40:35:2e:38:
21:c1:ad:fe:8a:ba:8c:ae:1f:36:1c:ab:41:26:15:8c:cb:48:
a2:65:09:7e:65:e6:35:be:78:61:85:36:af:a6:26:80:52:e3:
55:fe:0f:1b:6a:e5:77:22:1b:5b:cc:a8:48:8e:fd:27:40:d4:
f3:bb:1d:54:ef:77:44:c8:19:26:0e:d6:dc:d0:e7:a5:09:0b:
7b:df:c1:23:3e:43:26:3a:b5:a2:01:09:9a:c4:35:83:95:2c:
22:c2:08:a5:9f:c4:df:41:7c:fe:01:5b:bc:9a:0d:02:9a:9c:
6f:81:01:0a:3a:e7:90:30:50:6c:8d:c9:91:f8:50:64:ff:c5:
59:aa:f7:61:7e:f5:16:34:86:0c:35:9c:6c:79:62:86:fd:6a:
07:56:dd:31:bc:ae:c8:78:1e:9d:bd:29:7c:c8:82:36:b2:f4:
27:7d:79:85:aa:c9:30:fa:21:f8:88:1a:6a:1b:d8:75:0a:40:
8c:49:fc:2b:d3:07:35:d6:a7:c5:ef:b5:f4:7e:ad:85:49:a5:
11:49:bd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:12:57 2026 by rpki-client