This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: kDu1ZvPnvX3I2xYoddqPFxLo+hQsmk5x3HcmfiU/rd8=
Subject key identifier: F4:75:1E:D4:D6:02:CE:1A:4D:08:84:10:43:E2:58:0A:63:62:B7:88
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 019C43FDB5E4864CA6D27D9708689F31D73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0F4B
Signing time: Mon 09 Feb 2026 20:00:26 +0000
Manifest this update: Mon 09 Feb 2026 20:00:26 +0000
Manifest next update: Tue 10 Feb 2026 20:00:26 +0000
Files and hashes: 1: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: 25KsI8hDM8KnsJ+2EP5jvxMfsblPNuKEhSo2Z2mrpdQ=)
2: _EAdbKIlNCwppTUnYtOH719X6EU.roa (hash: Jm0d38jKbNV/SfdJd3VVcUEtQMJ+UWyy4HHgcaknpW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:b5:e4:86:4c:a6:d2:7d:97:08:68:9f:31:d7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Feb 9 20:00:26 2026 GMT
Not After : Feb 10 20:00:26 2026 GMT
Subject: CN=f4751ed4d602ce1a4d08841043e2580a6362b788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:38:64:74:90:a2:c3:24:c6:36:86:5d:19:
03:47:bf:7b:b8:99:bb:be:8a:be:6a:20:73:25:4f:
81:01:68:25:43:6f:35:6f:65:21:1a:9c:89:c6:ff:
68:60:60:14:9c:db:6d:5d:31:ef:40:cd:9d:0e:94:
9d:a4:c0:fd:49:70:d1:db:2e:c8:c8:5b:29:90:47:
47:e4:0a:2d:36:05:68:ee:ea:7b:44:d2:95:b5:6f:
87:cf:86:71:b6:29:a2:ef:9d:ba:fb:8a:b0:da:63:
82:83:7e:a1:cf:ae:91:88:fb:c8:79:1b:08:35:49:
37:14:20:e2:89:56:d5:17:8f:94:2d:4f:f9:f7:f9:
0d:c8:19:7a:5c:0d:7c:48:2a:85:08:4c:32:0e:6b:
0e:56:59:44:09:4d:be:a4:aa:1f:12:94:07:62:d0:
85:89:12:df:aa:55:7f:51:67:64:3c:b4:e1:87:21:
81:ba:cb:db:c9:9c:d4:b9:f4:b1:5c:d9:e4:62:f2:
1f:18:bd:43:cd:08:33:b5:8c:61:32:45:75:f0:0d:
5e:78:94:d7:11:db:bb:03:18:b3:4b:f5:de:5b:cb:
ca:29:b4:a1:81:a2:ef:4e:5a:60:34:34:db:0c:14:
42:49:fd:76:99:d9:70:f7:19:a8:6c:1d:7d:ff:40:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:75:1E:D4:D6:02:CE:1A:4D:08:84:10:43:E2:58:0A:63:62:B7:88
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ce:09:d6:79:df:cd:84:f9:6f:ea:90:ba:66:b5:0e:44:62:
a3:c9:3a:18:78:11:26:a7:2a:37:1e:6b:20:ba:8f:b4:97:c0:
99:e6:59:0a:33:2a:0c:68:80:12:2b:48:fb:f8:28:d9:cd:c1:
3c:55:85:56:a8:6b:b4:31:8e:cd:25:df:c3:77:5e:a8:13:46:
fc:3c:7f:17:b8:d0:6e:a2:04:7d:0c:6a:11:fb:58:b0:8e:c1:
31:05:44:59:cf:ed:d7:da:5f:fc:48:68:ec:35:42:d0:6e:37:
12:f1:4b:fe:b3:81:32:ce:74:ef:85:28:e8:de:f0:3b:9b:60:
e6:9b:6b:d7:2f:f4:b6:8e:5d:34:db:7f:ce:b1:56:09:37:da:
54:a7:63:bf:ef:39:72:57:fc:7c:56:b0:d9:e0:5a:34:a1:20:
0c:4b:3f:9b:c6:6a:a3:97:76:51:c8:e0:09:bb:f6:da:10:5b:
fd:3c:da:98:8b:3e:c1:9f:02:2f:76:42:6c:b4:9a:a2:74:ba:
66:1b:29:a0:c3:5a:c0:4d:fa:4a:97:2f:14:12:a2:44:7e:7a:
21:dc:9d:e5:74:4e:9f:c8:b0:88:ef:28:26:24:d4:c2:f1:d4:
fb:7e:9f:d2:a2:d2:4f:91:f5:8e:79:5b:32:31:c8:29:9b:c7:
c6:73:a8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:55 2026 by rpki-client