This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier: FSddHgXAmoZKVxdG3glF2RIsb0V0cR6jS5RdRvot9xw=
Subject key identifier: 38:EA:E6:F1:54:8F:C2:FB:A7:40:3C:53:6D:BB:85:B2:1C:70:8E:A5
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer: /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial: 594F66533289041E668290B155908F7ECD1C06A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number: 0491
Signing time: Mon 09 Feb 2026 04:07:34 +0000
Manifest this update: Mon 09 Feb 2026 04:02:34 +0000
Manifest next update: Tue 10 Feb 2026 04:47:34 +0000
Files and hashes: 1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: /t1fnVt0hgVvfkRdEuo3lXtWKCnaul9HVi0tARTXiKA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 04:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4f:66:53:32:89:04:1e:66:82:90:b1:55:90:8f:7e:cd:1c:06:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Validity
Not Before: Feb 9 04:02:34 2026 GMT
Not After : Feb 10 04:47:34 2026 GMT
Subject: CN=38EAE6F1548FC2FBA7403C536DBB85B21C708EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:be:a3:be:4e:6c:d0:cf:4b:8a:f5:d0:1e:
c9:39:8b:f9:bf:dc:b8:46:d4:84:eb:ba:75:86:47:
62:a4:ba:12:62:72:bc:f3:c0:93:26:a7:35:c8:9e:
34:af:c4:bc:ba:13:fc:e0:8a:a0:d5:24:c0:ad:fd:
36:4e:d1:f5:82:83:2a:e9:9b:fd:95:78:d1:c1:34:
83:00:19:30:76:76:a7:5e:15:8d:85:25:1c:1b:c0:
85:77:40:40:26:6c:85:cb:81:b3:dc:72:08:d3:84:
4f:e6:6f:38:f8:57:1b:69:40:85:ac:aa:d8:9e:c7:
74:bf:b4:57:7c:ce:d2:57:53:b1:70:71:42:e4:b5:
99:3f:f8:3f:4a:7f:b7:dc:68:a6:c9:e9:9f:73:6d:
5f:9a:52:95:11:44:c2:05:0e:8c:79:d4:3b:03:63:
5a:3c:07:6d:3d:cd:fd:37:7f:c3:1f:1f:e7:6c:6a:
4f:72:80:7e:ad:66:94:13:96:06:da:f2:38:0f:50:
0e:b8:c6:99:f1:70:03:c0:89:57:11:7a:a5:81:6d:
04:bf:9c:30:3a:9c:32:6a:c9:e7:1f:55:a9:32:da:
ab:d8:85:15:51:fa:7c:d2:de:eb:d2:d4:fa:7c:d9:
71:16:cc:19:21:6a:00:47:7a:41:6f:fa:a6:c3:b0:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EA:E6:F1:54:8F:C2:FB:A7:40:3C:53:6D:BB:85:B2:1C:70:8E:A5
X509v3 Authority Key Identifier:
keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:44:fc:91:63:ff:00:7a:75:f1:9b:93:ac:f5:5a:6b:0d:cb:
80:69:bd:7e:a6:43:65:e0:dd:12:15:5a:44:1a:f7:87:7d:07:
e4:90:3c:4d:6a:df:99:7a:66:1b:aa:02:70:bd:40:90:21:58:
27:25:75:db:12:02:2d:9a:d4:df:97:50:a6:0b:7d:71:c0:99:
22:05:30:a2:14:96:f9:6a:73:54:5e:9c:f5:cc:b2:20:f5:67:
3d:ca:34:71:47:01:9d:53:a0:d5:c4:ce:22:4c:90:29:88:3d:
8b:b8:8c:0d:ca:b5:c0:89:3a:33:24:b5:29:a1:98:29:51:c2:
8e:d2:fe:a9:35:02:12:4d:b0:a2:24:f3:08:62:a7:b8:cb:03:
43:8b:12:12:31:8f:90:b5:ed:f4:1a:89:d1:e2:d5:cd:6f:9a:
4f:11:73:80:6b:03:73:cf:88:cd:4b:86:40:9f:e5:77:51:5c:
43:0a:e2:05:3e:ef:75:cc:1a:25:51:1e:6a:19:04:59:51:51:
21:ee:2d:ad:7f:b2:74:12:36:9e:b8:6b:c2:ac:21:24:64:6a:
75:18:cf:fd:09:b5:50:60:08:47:8b:ae:9e:e9:8d:a5:17:28:
a5:68:e0:70:b5:2e:a0:93:03:66:fb:c3:e8:6a:3b:b3:07:08:
63:02:6f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:38 2026 by rpki-client