This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File: 317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier: 6Sw+hwXqscsH+FqO16LNnxXgZ0XlzbpFS3JLgJ44w7k=
Subject key identifier: 3E:C2:DF:D5:3E:4C:7D:01:53:E7:78:B2:69:76:26:42:AB:C7:7A:59
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer: /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial: 756739CE7763909F0A7C3213A394CF216C187881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number: 6F
Signing time: Sun 01 Feb 2026 19:49:41 +0000
Manifest this update: Sun 01 Feb 2026 19:44:41 +0000
Manifest next update: Mon 02 Feb 2026 23:12:41 +0000
Files and hashes: 1: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: XpQw9PV5Bb+vC7B3hfd1TBKsog/1Z/iIIPbzDmcnXkU=)
2: AS207682.asa (hash: yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 23:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:67:39:ce:77:63:90:9f:0a:7c:32:13:a3:94:cf:21:6c:18:78:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
Validity
Not Before: Feb 1 19:44:41 2026 GMT
Not After : Feb 2 23:12:41 2026 GMT
Subject: CN=3EC2DFD53E4C7D0153E778B269762642ABC77A59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:b0:17:e5:5d:22:00:f6:25:75:a4:5b:c7:
ed:ca:14:0b:7b:7d:26:19:b5:e6:99:75:f0:d1:7b:
06:b3:c3:00:5a:89:f1:aa:a6:38:0f:8a:53:b4:f1:
89:6b:0f:64:bd:b6:b2:78:82:da:57:55:32:67:06:
79:f6:c1:dc:74:f9:9f:a1:58:24:25:6e:b8:01:3b:
53:c6:bd:30:9c:1f:f3:31:68:f0:a3:c6:37:55:db:
7a:58:69:d7:14:a8:dc:1c:54:dc:f8:8e:a4:ce:a6:
65:2d:28:22:af:88:7d:23:6c:3a:41:50:b7:f2:29:
0f:91:e4:85:20:51:8d:e8:a2:cd:3a:6a:6b:45:a5:
f0:d4:7c:37:f8:24:20:97:f9:71:4f:68:31:1c:80:
81:41:4e:47:be:d6:44:27:1b:fe:f2:42:6e:ce:9c:
77:9c:e9:a1:db:86:ff:26:3d:d6:48:53:d0:54:82:
d6:f3:cc:f3:d9:64:60:d2:de:1b:1a:6a:7e:f5:2f:
9e:60:aa:42:fd:69:87:12:9a:16:29:3e:6a:2f:67:
8d:fe:9e:2f:ae:85:d7:31:3e:6b:1a:36:bd:aa:e8:
87:bf:81:f2:27:30:1c:45:ec:d1:26:f9:8e:9d:88:
c3:36:80:81:2f:0d:ed:cf:ad:bf:c5:2e:49:91:14:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C2:DF:D5:3E:4C:7D:01:53:E7:78:B2:69:76:26:42:AB:C7:7A:59
X509v3 Authority Key Identifier:
keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:78:7d:b1:06:3a:c8:e6:69:50:84:aa:19:dd:ef:3b:0c:42:
8f:09:a7:f8:fd:f6:16:22:21:6c:e6:d6:c8:f0:63:5c:56:5c:
ec:78:91:f5:38:2e:09:39:01:2f:18:1c:13:59:85:ae:a1:f3:
43:00:6b:52:81:1e:65:79:6a:d0:e8:03:f3:de:b8:dd:e5:d3:
50:38:71:82:37:1b:7f:4a:88:3d:04:50:fb:0b:ba:dd:99:1a:
7c:22:08:5e:fb:14:f0:c7:6c:a4:ea:aa:b8:87:2f:27:be:93:
f0:5b:51:32:17:df:c2:a6:88:8b:68:8e:34:fe:02:00:db:d1:
cd:9a:b2:85:78:3a:ed:94:25:f3:fc:06:00:9e:d6:b0:57:50:
89:81:c6:15:5b:b5:e0:d7:8e:bd:17:cd:92:ab:13:43:1a:0d:
b7:b9:a9:25:75:50:89:a4:02:07:45:c7:e2:19:2e:8a:98:91:
f3:c3:fd:12:88:3a:3b:71:20:d1:90:b9:a7:51:d1:d8:3e:56:
fd:78:4d:18:fa:2f:c7:d8:40:ad:c5:33:10:46:dc:c0:94:ec:
7f:18:6a:54:7e:6a:b9:eb:e4:7c:5e:9f:e3:cb:d8:91:70:dd:
97:f7:32:8a:b0:a5:8a:d8:39:b5:76:e1:18:66:6c:ae:8b:5c:
1a:fa:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:13 2026 by rpki-client