This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier: F3zZzRFV5zOnCdDJ3pFNJfHFWfHyYzg4FHvo2y3s55g=
Subject key identifier: CE:74:00:D7:B8:9D:D6:DF:83:1C:51:46:1E:63:31:B9:9A:70:05:16
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 019C420F2DE206F5411C64528E93E041D0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number: 0E6B
Signing time: Mon 09 Feb 2026 11:00:16 +0000
Manifest this update: Mon 09 Feb 2026 11:00:16 +0000
Manifest next update: Tue 10 Feb 2026 11:00:16 +0000
Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: VfGCB54t6oVBvegVl0gReYwDsU0plrwwCOnpgojfrH0=)
2: v4jlzQPH9B19BgnawF1RP-229sY.roa (hash: b4H5XHOj6d5z6OnvgwQoCpKZ6CNBYc2Lt4zW82aMu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:2d:e2:06:f5:41:1c:64:52:8e:93:e0:41:d0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Feb 9 11:00:16 2026 GMT
Not After : Feb 10 11:00:16 2026 GMT
Subject: CN=ce7400d7b89dd6df831c51461e6331b99a700516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:20:c3:bd:a1:5f:40:d3:16:97:f8:e6:70:
a6:91:6a:e3:47:33:fa:9e:be:55:a2:d5:5e:d3:e2:
57:8c:ca:64:80:74:02:1b:51:30:4e:6a:57:4d:29:
b6:c8:91:df:f8:7c:34:58:ad:5e:b6:c7:b9:6e:71:
6a:42:b0:f8:cc:07:86:ac:b4:21:a9:5f:88:cc:ab:
3b:1d:65:10:f7:d8:db:c7:0e:97:2f:dc:9d:6b:c1:
02:4b:60:6f:53:fc:08:ec:f1:1e:c2:9c:6e:0d:8a:
dc:d9:89:47:88:65:93:f1:e6:a4:32:70:54:5a:18:
f1:38:57:e1:5a:1c:e5:f9:c3:fc:92:1a:48:1c:8c:
f7:c4:e7:38:80:5d:6e:57:35:e9:f4:45:6f:5e:3e:
97:01:3e:6a:35:05:08:40:a8:55:05:90:a9:bb:b7:
33:f0:bc:32:4c:f9:9b:5f:5e:bc:c5:68:3e:9d:55:
fe:7d:ba:59:4f:cc:22:6a:21:3f:e2:25:8c:ff:ff:
7d:a6:88:00:36:f9:85:a4:54:73:ae:b0:e7:44:b1:
fb:9f:af:23:52:1f:3e:78:93:d0:cc:c9:dd:0e:23:
6c:2c:3d:8b:bf:11:65:cb:27:5b:8e:b4:3a:61:8e:
47:82:e7:45:70:7f:c1:60:b4:7f:6b:72:b0:90:90:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:00:D7:B8:9D:D6:DF:83:1C:51:46:1E:63:31:B9:9A:70:05:16
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c2:7b:eb:9c:41:df:6b:03:ad:48:86:23:f8:ec:6e:44:b4:
ad:97:42:25:aa:9e:05:eb:4d:d3:30:43:5a:7b:c0:29:0a:92:
0d:a7:39:59:34:97:c8:df:1f:57:32:0d:6d:29:2c:fd:02:9d:
ea:58:b2:74:31:3b:5a:b2:dd:b3:8b:b1:fd:1d:71:17:09:40:
fe:2d:8d:9c:db:dc:ce:d3:e1:72:b4:3a:5a:db:64:21:be:31:
76:fe:07:20:e6:13:76:71:74:67:b8:c3:c3:29:0f:07:1f:00:
eb:14:6d:2d:20:c9:2e:2b:04:cd:c4:10:90:ef:1b:76:e8:c2:
f9:de:ea:4f:a0:f0:6f:c6:30:68:21:eb:b1:7c:f7:bf:91:cb:
53:8b:f0:ae:20:2f:ed:79:61:99:93:d4:20:31:a5:29:8c:3c:
d5:97:c3:c6:b0:68:99:c9:4d:a2:45:aa:9b:7a:0f:0e:19:82:
66:ed:ac:98:32:0f:d0:db:b8:dc:09:b3:63:14:ff:ea:2c:31:
a4:c8:f8:d2:a2:c8:ae:ee:84:08:53:d0:3b:37:58:7d:2e:e4:
85:8d:a3:7c:9c:ff:a0:fa:a2:de:45:1d:86:a3:e2:a6:3e:1c:
e1:9a:81:a1:95:7f:30:ed:6e:e7:3c:52:6b:ce:cb:ff:d0:25:
e1:3f:d6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:42 2026 by rpki-client