This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
File: 0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json)
Hash identifier: 4CcgiGT5MSu9UgWpbbU1ov6kz6OCitP/EF0LmxRsGhs=
Subject key identifier: 67:AB:76:0D:93:FF:F0:C6:13:F5:7D:61:88:98:76:86:43:8A:CE:24
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial: 019C44A2BBD4832DE4790425771976790764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
Manifest number: 1822
Signing time: Mon 09 Feb 2026 23:00:41 +0000
Manifest this update: Mon 09 Feb 2026 23:00:41 +0000
Manifest next update: Tue 10 Feb 2026 23:00:41 +0000
Files and hashes: 1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: vNcY0zyht/K+MneG+f88C40jvviR7Ar6PIESMCVgtsI=)
2: 3Yx2vfa7XpKGoKje1_1k7pHSStk.roa (hash: 4SXl0Toh/4xYp5qzMatRJXmfZoTd3stX8dho8IkBhRc=)
3: O_zLKAo-ZMO-tgxP2QAdS4mIV5k.roa (hash: exFmvEBwttF4QN/C/nqEjfx58jhXHu21SMR83NxxCYg=)
4: ZcXPev5XSqeCfOjCRaC4jLAvk3w.roa (hash: tC1vsSl2lFcihSUrAMnGtV0LC1FxIGsGqNLEW5eQ5Gk=)
5: jVDrmBIoje6iRSObfGXaCjLz0xo.roa (hash: RXvov2OHxeC7UMuJbvYcTyuiz8VJj0AFn2lQavBDDFc=)
6: uDA5v4UlBvQvX-LZ9N2uiXPAqNc.roa (hash: 74PjhxXF+GVRA7M8a6OYT30HIUUuictdHv+lHM0QfVc=)
7: yBmSRS9b5lz7_xzd3NgvPyLBW94.roa (hash: 8pKcmdD26fnU0KVwOwv225VvvZWRzrn5qkT1zOJvfrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:bb:d4:83:2d:e4:79:04:25:77:19:76:79:07:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Validity
Not Before: Feb 9 23:00:41 2026 GMT
Not After : Feb 10 23:00:41 2026 GMT
Subject: CN=67ab760d93fff0c613f57d6188987686438ace24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:3c:09:92:cc:cb:62:e4:fc:48:03:b6:83:
94:85:49:bc:d4:7b:54:da:6d:b7:12:32:a3:98:a0:
bc:e9:1f:5e:f2:16:17:7e:f9:4e:04:7c:a3:87:78:
2b:8a:73:a6:8f:3c:72:97:9d:ef:a0:5b:2d:86:0f:
0b:e4:39:6b:79:f3:71:4a:92:e7:97:f3:6b:2f:6a:
40:42:e3:4e:b2:72:44:54:69:e1:47:2f:d6:f6:70:
8c:c1:32:a8:3c:32:fe:86:fe:7b:dd:b4:7c:77:35:
b3:c8:ad:a7:d0:10:b8:83:3d:5b:5f:36:98:11:56:
f7:9a:70:c1:a6:61:62:17:cb:b2:bd:79:ec:55:b8:
a3:d2:fc:07:86:d2:7d:43:f2:90:a1:05:68:e8:58:
00:ac:f4:3d:19:94:3b:27:27:82:69:a2:21:c7:7e:
29:0a:71:06:02:5c:5f:5f:4b:bc:b3:94:af:8b:45:
dd:99:b0:96:fd:27:ab:7e:68:6c:58:ed:f6:cb:05:
17:c4:e6:4a:fc:36:d9:c5:af:62:25:40:03:ac:1b:
58:ed:b1:04:4f:1f:cb:ed:49:96:55:06:94:53:04:
8f:77:29:1f:26:e9:0f:5d:7c:26:6f:5a:c3:18:ca:
ce:fd:07:2f:5c:b7:32:f8:38:08:98:4d:c5:fc:7b:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:76:0D:93:FF:F0:C6:13:F5:7D:61:88:98:76:86:43:8A:CE:24
X509v3 Authority Key Identifier:
keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5f:cb:4d:9d:ef:82:d2:e0:ab:ed:14:7f:16:cb:11:0a:9e:
02:04:b2:3b:fc:10:dd:60:44:ed:70:3d:5f:36:cc:75:a4:4b:
cb:6f:b5:43:72:94:1a:b8:36:c7:70:f5:c7:2a:b8:a6:7f:0c:
22:71:30:ab:80:a7:b0:8e:70:22:3a:f7:12:b3:28:35:9f:dd:
c8:ee:6d:bf:18:fd:63:48:cc:c5:de:f2:b2:08:0a:7b:f6:58:
be:32:74:6d:ce:bc:08:65:f7:a4:ad:dc:1d:00:9e:6a:f5:2a:
2e:71:98:69:69:b6:85:6d:33:a2:7a:0e:46:d1:a9:6e:86:ff:
57:f7:42:ba:d5:39:68:de:69:b4:73:34:89:8d:f7:5e:6b:05:
5f:95:48:83:0e:b7:20:36:88:57:62:0c:31:72:a6:1a:39:7a:
cd:0b:8b:da:9a:7e:a3:1f:8b:14:fc:7e:f1:bd:3b:ff:d1:b6:
77:a8:7d:fb:27:4d:83:1e:21:3f:87:ef:1c:69:2f:8e:79:67:
b6:52:4b:d2:f0:4c:8e:fe:39:5a:fd:a2:03:39:8f:19:73:7b:
56:64:77:71:7e:ea:61:6b:d2:f4:35:77:99:c4:24:4a:97:8a:
80:65:2a:ce:73:eb:8f:59:e7:97:75:cc:61:f6:ba:e9:f0:82:
bc:ff:53:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEorvUgy3keQQldxl2eQdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4
ZDQ3OWYwHhcNMjYwMjA5MjMwMDQxWhcNMjYwMjEwMjMwMDQxWjAzMTEwLwYDVQQD
Eyg2N2FiNzYwZDkzZmZmMGM2MTNmNTdkNjE4ODk4NzY4NjQzOGFjZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UI8CZLMy2Lk/EgDtoOUhUm81HtU
2m23EjKjmKC86R9e8hYXfvlOBHyjh3grinOmjzxyl53voFsthg8L5DlrefNxSpLn
l/NrL2pAQuNOsnJEVGnhRy/W9nCMwTKoPDL+hv573bR8dzWzyK2n0BC4gz1bXzaY
EVb3mnDBpmFiF8uyvXnsVbij0vwHhtJ9Q/KQoQVo6FgArPQ9GZQ7JyeCaaIhx34p
CnEGAlxfX0u8s5Svi0XdmbCW/SerfmhsWO32ywUXxOZK/DbZxa9iJUADrBtY7bEE
Tx/L7UmWVQaUUwSPdykfJukPXXwmb1rDGMrO/QcvXLcy+DgImE3F/HuyFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGerdg2T//DGE/V9YYiYdoZDis4kMB8GA1UdIwQY
MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt
YjE2NmFlMmVmMjg3LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3
LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1/LTZ3v
gtLgq+0UfxbLEQqeAgSyO/wQ3WBE7XA9XzbMdaRLy2+1Q3KUGrg2x3D1xyq4pn8M
InEwq4CnsI5wIjr3ErMoNZ/dyO5tvxj9Y0jMxd7ysggKe/ZYvjJ0bc68CGX3pK3c
HQCeavUqLnGYaWm2hW0zonoORtGpbob/V/dCutU5aN5ptHM0iY33XmsFX5VIgw63
IDaIV2IMMXKmGjl6zQuL2pp+ox+LFPx+8b07/9G2d6h9+ydNgx4hP4fvHGkvjnln
tlJL0vBMjv45Wv2iAzmPGXN7VmR3cX7qYWvS9DV3mcQkSpeKgGUqznPrj1nnl3XM
Yfa66fCCvP9TuQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:08 2026 by rpki-client