This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
File: ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft (raw, json)
Hash identifier: AAP7M+rK9k2MD/Tpp0jhxTtBUNoWou26rUqyp1D1AjA=
Subject key identifier: CE:3F:DF:F4:BE:A3:1E:8D:BB:9B:C8:89:A3:F1:A5:6F:C1:1E:C3:04
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 019BF3F5184314CF06FB663241B598B17BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
Manifest number: 0E8D
Signing time: Sun 25 Jan 2026 07:01:24 +0000
Manifest this update: Sun 25 Jan 2026 07:01:24 +0000
Manifest next update: Mon 26 Jan 2026 07:01:24 +0000
Files and hashes: 1: 7-wWVh2ShqOjXRU3C5_nLCV8Taw.roa (hash: yBmho6Hc+8S+AZOf8tb5d8VX1stt/f9ql0bZ3I/nuA4=)
2: KHUoX9iRMr8MWj7KrZX1ErQ1SGU.roa (hash: 4gBgum5MWPlAQtpHYeC2hA4pL23ODMXf31DF5ppTdUI=)
3: f9rNCsFzObsmXufIGxfL6R-yFCk.roa (hash: si6wauF3TBoV3pmRSTWHYOpsqar2slO37/4OV4jqMcA=)
4: ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl (hash: gbslcAhEB43Wn7i7KT+spsm2rvfnlUKx/7UKvm98kD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:f5:18:43:14:cf:06:fb:66:32:41:b5:98:b1:7b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Jan 25 07:01:24 2026 GMT
Not After : Jan 26 07:01:24 2026 GMT
Subject: CN=ce3fdff4bea31e8dbb9bc889a3f1a56fc11ec304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:35:91:b7:85:10:75:6c:f3:f0:d5:4d:29:
73:d6:8d:58:b9:22:01:c3:0c:c9:30:3e:df:9d:f2:
91:e2:85:9b:ce:bd:33:84:27:1e:fb:a1:90:93:81:
e4:51:5f:a7:3b:43:d6:0c:b5:0a:8f:bf:d3:81:8e:
be:29:8a:c2:a4:60:1f:a9:8b:cd:b1:c1:a9:1e:f3:
17:16:57:0a:0c:23:35:58:28:d4:6c:fe:3c:2b:17:
67:34:2d:f3:5c:d3:3e:ba:dd:14:09:b0:ca:bc:88:
bb:9b:1f:3c:0f:98:85:cf:fa:ee:13:38:98:0f:4a:
a8:f3:ff:fa:10:73:bd:59:6d:b8:f7:e2:76:d3:c6:
00:09:42:eb:67:89:ab:9b:4b:95:64:9f:a8:a9:26:
0f:f4:01:c1:81:2e:ab:55:26:90:53:c0:23:41:03:
f7:8f:3b:be:46:f3:09:36:ff:99:92:8d:ef:30:c6:
b0:1d:52:9f:9f:49:9f:e3:5b:81:f9:61:bc:a8:98:
d2:50:95:b5:31:00:64:56:1d:5e:fb:51:36:b2:84:
38:9f:32:5a:be:4f:19:83:4f:14:f9:e0:06:78:94:
4f:ba:ab:d2:dc:d7:41:89:14:81:61:39:34:70:a4:
38:04:60:9f:29:1b:70:7d:b7:1d:8b:f4:4f:57:cd:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3F:DF:F4:BE:A3:1E:8D:BB:9B:C8:89:A3:F1:A5:6F:C1:1E:C3:04
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ca:45:b8:38:91:81:21:9c:57:ac:bc:f7:0b:c2:96:3b:15:
44:fa:33:5c:5a:2a:f8:29:c4:e3:53:eb:5a:93:9a:c9:c7:fe:
a4:e1:9f:dc:35:43:47:d7:b4:f9:16:86:7a:06:95:e1:4d:6c:
37:05:84:47:4e:e3:97:4d:b4:93:50:34:d7:f8:f6:f9:b7:21:
8b:5e:d2:25:36:d3:3a:72:09:41:e1:d0:7d:3b:50:68:eb:f6:
63:93:90:55:e0:44:92:24:a7:f4:8c:57:1e:5a:35:be:e2:b5:
21:28:f1:f0:90:6a:f8:6d:a5:1e:8e:94:dd:e9:be:11:0c:14:
93:6e:35:dd:6b:61:08:92:3b:30:21:b0:67:df:6a:59:de:77:
54:29:a7:35:1a:9b:0b:02:da:33:97:3e:71:02:10:8b:ee:85:
88:43:25:4a:55:17:44:ab:19:45:fa:a1:9a:9b:c9:71:08:3d:
e8:b4:bc:3b:b8:3b:2b:42:2b:34:ca:30:9f:40:19:ae:02:4c:
7b:99:83:60:4b:ab:fb:cd:e8:dd:16:60:bf:55:db:b4:69:e8:
fa:54:f0:d0:a7:8c:7a:d4:f1:8c:3d:6e:08:36:4e:29:48:6a:
be:b9:5f:78:15:2e:c6:ec:cf:1a:26:ee:cb:a8:f2:42:02:a8:
e8:ac:76:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:25 2026 by rpki-client