This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: trnyDkfXlnzVGLDwGceSe6L6Pc0n1MFhvhVRByaCWhE=
Subject key identifier: 48:F2:F1:33:FA:08:8C:76:BA:A7:1C:97:87:81:4E:D4:93:31:C7:64
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019BF951F5890BDDF8917EBEA9C940D1CEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 152C
Signing time: Mon 26 Jan 2026 08:00:56 +0000
Manifest this update: Mon 26 Jan 2026 08:00:56 +0000
Manifest next update: Tue 27 Jan 2026 08:00:56 +0000
Files and hashes: 1: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: jMe83lqaPgtZYSeTzvZfg0XmLsTUC3Q+IIJ5xnzFduY=)
2: EvJXEnC7zFUYWLsUXhzwJeb526c.roa (hash: 2yJuq+SaVzl7mv1pagqpW7rfh/6PNh11sR0zDQ+hDZo=)
3: JMtxM_e2f4IyQOe7ag83ATmrnwo.roa (hash: rSI4U1a3IADB916oOPX87Zu4Y5DYpWavrDRX8n8/D+w=)
4: U2Atptgt39wv3vkk-Rz1Z4xVq7I.roa (hash: JTV4DVizzOqXHlZIKppWlN6Mn1J/o8EGgCMYSuimn2E=)
5: WuAI-H8NlswYvvMAMOlcviEzotw.roa (hash: B7KPgvRjador4ZwI7bCeT1UxGcCpNUqTQunKcDn/m+I=)
6: jZ3FO_mV9WrcoKTLceS8pJGW3yc.roa (hash: jtA00NOXzw+v3t4avm6wslZ9lfOfAkUHsLwcYHyN6g8=)
7: k9aptvqWA05x4uvgA-vKuzilVzU.roa (hash: BJ061QuQOWlxavQBE+4vNFSfiTJRQL5oGm4+Ibheqps=)
8: uY0sFNMzlqwBju7zNYnP8ksOTWE.roa (hash: SVkZbh6uHodPSzQYZV8KL/YnQleGlnDyzyp+5VJFwZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:51:f5:89:0b:dd:f8:91:7e:be:a9:c9:40:d1:ce:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jan 26 08:00:56 2026 GMT
Not After : Jan 27 08:00:56 2026 GMT
Subject: CN=48f2f133fa088c76baa71c9787814ed49331c764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:24:e3:3c:e1:8d:56:e5:90:fe:02:f3:b9:
95:15:8a:70:97:7f:c2:57:98:51:75:05:90:cd:bf:
ff:e6:b3:1a:48:94:da:a8:52:b4:00:96:ad:6c:81:
34:ee:34:99:16:dc:26:32:a9:a8:c7:b9:c9:bf:97:
85:57:3f:47:08:31:95:aa:38:32:97:a5:49:4f:94:
eb:25:cc:af:83:d1:cf:53:a3:7b:56:06:da:85:2f:
32:da:30:dd:0c:47:b4:5d:9a:71:1d:a0:47:00:e2:
a4:50:ed:3b:e9:38:5d:4a:69:60:49:af:2d:ed:22:
a1:48:3e:17:d6:65:4e:35:e8:65:51:ac:c1:86:1f:
ed:a6:82:b3:cd:41:71:d2:a0:4e:7a:bc:c8:bd:55:
dd:59:90:19:b5:1c:3b:c3:91:27:2d:23:a6:37:e3:
55:9d:67:80:ad:7c:48:57:47:90:2e:22:2a:88:fa:
7a:cb:c4:53:03:67:fe:53:2d:d5:d8:02:ef:93:a8:
a0:08:34:ff:f5:7b:87:19:be:77:33:a9:d5:83:18:
5d:ed:60:33:2f:f2:ab:20:bb:80:5a:f0:5f:ab:b9:
bf:0a:92:8a:24:52:99:0e:ae:c1:45:0f:bb:f0:67:
e0:d1:86:39:8f:63:9a:e9:3e:fe:57:58:ad:25:74:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F2:F1:33:FA:08:8C:76:BA:A7:1C:97:87:81:4E:D4:93:31:C7:64
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:84:4f:a4:15:82:75:8c:83:16:e5:5b:39:62:7c:b6:2b:db:
1d:fb:34:14:55:4a:9a:cb:8a:c8:e8:34:41:7a:52:da:5b:c6:
92:b6:e4:68:fd:bc:ff:29:d5:14:84:16:bd:80:4e:fc:8a:ed:
03:7e:77:55:e5:56:8c:4b:e8:15:e8:04:3d:22:f8:6e:84:6b:
ea:03:bc:bb:c0:c7:e4:8f:57:a4:9d:1d:53:d4:33:f9:ca:d6:
17:d9:13:20:8f:43:00:f8:d2:7f:ab:f3:26:62:94:c8:5a:26:
74:7f:ab:29:e5:a8:97:d0:f5:a5:1a:de:64:ad:a4:7d:db:b4:
e9:16:60:d9:21:c2:36:a9:b2:45:7e:f0:8f:31:8e:24:2d:d1:
8c:e1:66:47:2f:6b:53:09:59:25:bd:22:25:c2:f5:b2:43:6c:
58:98:7e:46:6a:9d:7c:4d:a7:45:77:ed:19:c4:e4:fa:96:f7:
68:1b:30:80:6f:bd:f6:a2:3e:fe:eb:ab:c9:b9:1c:c2:1e:1f:
dc:87:5d:dd:a6:e2:8e:85:34:f8:a6:1b:25:33:cb:c0:60:60:
44:c2:08:04:03:3b:03:0f:99:05:06:9f:6c:0a:c3:d7:26:0b:
09:79:4e:4b:9a:d0:46:48:1a:61:c7:ea:37:84:d5:2e:7f:38:
67:86:b5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:27:17 2026 by rpki-client