This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
File: s-3xF3T0QHrdvfPPukweeqAkIiM.mft (raw, json)
Hash identifier: jwax0uWPxmefHG00jd9BQWM5vnPIfHcHXg8n0SQU+lo=
Subject key identifier: 07:34:55:7E:7D:7A:05:0B:D1:6C:21:25:1C:81:DE:37:4B:4C:11:52
Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
Certificate issuer: /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Certificate serial: 019C443517CB503AF022FCE97D3C87DF1F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
Manifest number: 059F
Signing time: Mon 09 Feb 2026 21:00:56 +0000
Manifest this update: Mon 09 Feb 2026 21:00:56 +0000
Manifest next update: Tue 10 Feb 2026 21:00:56 +0000
Files and hashes: 1: dTnyHu7c5lmZ5YWNquE3Gp7QhhU.roa (hash: dYbqxC2rCCWq/yRZ4yUkpOLINJDRJe/smtZyFeEbLZs=)
2: s-3xF3T0QHrdvfPPukweeqAkIiM.crl (hash: PGK5dq1qRtSKXIDKg8PSvApSwTfL1c7CU7QaQEnS9sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:35:17:cb:50:3a:f0:22:fc:e9:7d:3c:87:df:1f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Validity
Not Before: Feb 9 21:00:56 2026 GMT
Not After : Feb 10 21:00:56 2026 GMT
Subject: CN=0734557e7d7a050bd16c21251c81de374b4c1152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:0a:42:6a:e8:63:2a:16:09:7e:6b:87:96:
6a:3a:3c:74:be:e8:41:1d:5f:2c:31:ec:e4:a3:39:
8e:e6:1a:32:88:f9:5c:37:d1:7f:c6:95:8f:1c:b5:
50:62:ad:58:af:9f:f6:86:13:f5:44:20:91:01:32:
96:3f:d1:8d:83:40:54:f4:5b:55:83:ab:22:85:01:
e0:02:44:bc:a8:ea:61:a9:f8:44:56:99:b1:10:cc:
fb:1f:34:cb:74:3c:85:f9:22:2b:32:e0:0d:63:57:
c9:1c:b1:96:3f:de:7e:c3:5d:03:d1:00:50:a9:d7:
34:f1:c6:cc:e6:08:44:1e:a3:e3:eb:b3:0c:e1:d4:
e1:02:4b:f1:c0:9b:bc:20:23:d7:9b:dd:90:24:f8:
a5:bd:85:fc:89:97:df:3e:f4:b4:6e:e0:a3:a2:ed:
e9:b6:95:35:01:cc:c5:7b:28:33:59:21:3b:4f:8d:
87:f5:c9:78:d5:f1:40:db:bf:8f:cf:a6:f2:78:f4:
19:e4:c2:c8:6b:6e:83:3f:61:d5:ce:ec:ac:a5:6e:
62:ad:32:1b:b2:47:d3:73:bc:06:30:14:cf:09:3f:
b7:17:df:51:10:b6:e1:c8:1f:45:c2:5d:58:23:f5:
bd:3e:06:13:f8:45:16:76:2d:da:b7:ee:eb:8d:94:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:34:55:7E:7D:7A:05:0B:D1:6C:21:25:1C:81:DE:37:4B:4C:11:52
X509v3 Authority Key Identifier:
keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:61:ed:d7:a8:2c:98:45:1e:79:4d:1d:ba:81:56:d4:26:fa:
a2:ad:fb:5a:60:66:1e:2c:d9:60:f0:58:e8:c9:3e:4a:53:37:
bd:ee:c1:1c:78:77:77:36:26:dd:3c:8f:30:c8:c1:61:2e:20:
e0:d6:19:74:6d:1f:ae:b7:42:c6:87:2b:31:c6:13:13:8d:92:
4e:14:4d:06:04:70:b3:3e:48:9d:05:1c:a4:4c:ce:86:64:c7:
b6:ed:27:d2:66:83:18:81:c0:4a:64:2f:7f:f5:00:27:e6:27:
08:90:a7:02:ba:51:20:c5:a9:92:59:af:d6:dc:08:7c:5e:9e:
9e:e2:31:eb:54:cc:c3:a1:c5:1f:e1:f4:77:15:32:e7:bf:4f:
d0:fb:bc:e2:ad:ae:8b:64:68:56:0b:61:e2:4e:f9:62:a5:12:
ba:a1:a9:94:d0:b3:5f:de:02:ca:f1:ad:4a:ad:fa:c5:e4:fd:
3b:e4:22:6c:c1:99:4d:be:1f:75:39:c0:c5:39:80:e0:f2:64:
6e:67:95:34:cd:75:fe:53:90:f2:6a:c1:a7:2a:a5:51:c6:34:
3a:54:47:fb:aa:3d:21:d0:cf:26:7c:d8:bb:45:19:b0:f0:93:
0d:8c:0b:c3:c1:2c:0f:fc:2e:5b:50:c2:18:0b:6b:5b:ab:6d:
e5:30:a6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:54 2026 by rpki-client