This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: PL40G2v6kZ18zBblZ7DqdK/Ugip/GnRHAaiLIoHG7g8=
Subject key identifier: 54:72:A2:3D:58:1E:96:43:19:8F:6B:09:F5:CA:19:ED:5B:E0:EC:B9
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019BF8ACD6057F76DEBEE503E07125205F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 0702
Signing time: Mon 26 Jan 2026 05:00:35 +0000
Manifest this update: Mon 26 Jan 2026 05:00:35 +0000
Manifest next update: Tue 27 Jan 2026 05:00:35 +0000
Files and hashes: 1: 2U3Vq1QnP8ctuHADYZl7AYfrN8Q.roa (hash: aSqIWAFTh+DEyVISsUqiiF4heoz8JVrFxkyTiK/xNAk=)
2: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: 0msonpYiKRepZyr28TxXBUE9xGJSe05QDUD/ET7c/IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:ac:d6:05:7f:76:de:be:e5:03:e0:71:25:20:5f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Jan 26 05:00:35 2026 GMT
Not After : Jan 27 05:00:35 2026 GMT
Subject: CN=5472a23d581e9643198f6b09f5ca19ed5be0ecb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e7:c8:70:b0:ec:36:b5:65:9f:6e:ef:1b:be:
cf:15:b8:9f:3f:bc:7e:cf:8c:56:8f:76:55:cd:f1:
44:07:63:a7:2e:b8:f0:98:7f:60:8c:25:11:97:27:
62:8e:65:3d:a1:af:d8:4c:94:64:73:d6:6b:46:ed:
19:e4:89:b7:3a:c9:3b:18:32:e2:a3:77:15:fc:a2:
e3:16:02:b7:00:9b:19:b9:f0:a3:53:44:b8:cf:a9:
86:0b:5d:48:91:a4:f3:ae:42:30:39:dd:b6:c3:23:
b1:d7:7b:8e:e1:ff:81:79:97:ab:87:92:ab:91:26:
63:93:43:ff:d0:8f:f6:1c:42:4f:93:50:6b:b9:24:
81:b6:bc:98:61:01:40:b4:24:55:f2:14:cb:9c:00:
a8:e3:be:d5:7f:44:30:f8:b3:a1:78:be:11:be:40:
1c:e0:8e:50:a0:66:de:90:f7:e9:d7:bc:02:b7:e0:
04:82:43:a7:ff:75:94:47:02:f9:5c:78:dc:4d:02:
a1:e5:3e:71:a4:e8:55:1c:ad:eb:27:be:61:7f:5c:
e2:cd:35:29:d8:ca:2e:2d:7b:72:6e:e4:d6:0d:24:
9b:f0:cb:0d:06:5b:fe:be:78:27:85:5f:c0:ef:44:
f5:91:92:0b:cb:af:43:f5:b5:d5:c4:5a:09:8e:57:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:72:A2:3D:58:1E:96:43:19:8F:6B:09:F5:CA:19:ED:5B:E0:EC:B9
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:37:78:bf:04:e2:0c:61:57:fb:7b:f0:a9:ea:49:d6:34:4c:
3f:ac:1d:0f:28:06:bf:b9:a5:aa:8b:53:87:3e:85:a3:0c:88:
b1:e5:7c:0f:07:4c:47:c4:7f:96:30:02:69:f7:cb:8d:90:b9:
b3:5b:c1:0c:77:b4:53:1d:f2:e2:08:73:3a:c1:c3:c9:c9:2c:
e5:bc:4d:39:67:b5:1f:51:96:8f:13:a1:ee:b2:e7:43:61:92:
15:5a:fe:22:e0:84:d2:4a:01:b0:76:a7:65:c8:79:2c:83:80:
96:53:f8:07:15:8d:d6:df:12:de:77:53:f9:dc:83:23:78:10:
e4:64:f1:48:c4:7a:29:ac:87:c3:9f:d4:e4:b6:0d:ab:20:ef:
bd:c4:ab:be:2c:d3:01:60:0f:e6:dd:2b:da:29:6d:1d:61:35:
b6:86:55:30:10:ae:92:e5:29:4a:62:3c:39:e7:66:b6:f2:24:
4a:8f:46:b5:22:a0:23:84:c5:84:e1:11:76:81:c4:ef:ed:e0:
84:49:38:65:04:91:ff:38:f0:48:b9:ec:7e:39:25:43:66:82:
70:20:80:68:80:28:ca:9e:1d:43:1c:34:0b:dd:ff:e2:d8:30:
b3:53:48:20:83:49:dd:f0:24:21:1e:61:05:b6:97:33:5b:3e:
43:c2:37:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:37:17 2026 by rpki-client