This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: 0btOB832J5/pJORp3dFxPfP9MABLNFSosdNRtUM0FOU=
Subject key identifier: 99:DD:71:62:43:7C:D0:80:1A:E8:B4:44:8C:18:DF:47:B4:F2:CD:5A
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 019C420F2D3691E611D54BE66457CC691706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 171C
Signing time: Mon 09 Feb 2026 11:00:16 +0000
Manifest this update: Mon 09 Feb 2026 11:00:16 +0000
Manifest next update: Tue 10 Feb 2026 11:00:16 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: VFUkfiAvlEhDTyBGuj0sJV//ViLoU4njJc9kNYqjlgw=)
2: cJRtdE3GDxRyvg_Y9Tx3wuWjZfM.roa (hash: MkPveRr894uZyzuwskwU/N/yd8dG5AWBq5BdDGSD2o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:2d:36:91:e6:11:d5:4b:e6:64:57:cc:69:17:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Feb 9 11:00:16 2026 GMT
Not After : Feb 10 11:00:16 2026 GMT
Subject: CN=99dd7162437cd0801ae8b4448c18df47b4f2cd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:7a:9c:05:9b:64:0f:d1:ee:37:16:68:ab:
de:0f:e4:91:a5:44:3c:31:d6:88:fa:97:95:21:17:
5d:ab:a4:f7:3b:9c:b8:d4:3c:7b:70:ad:5b:0a:64:
bc:21:af:78:56:05:e5:8d:91:36:5c:c4:34:1b:40:
49:bd:fb:9c:5e:e8:fc:4f:2a:03:e1:ae:b1:4f:80:
78:6e:ea:61:77:ed:a3:e6:2b:28:d8:a8:2e:3f:c6:
0d:7a:5e:60:78:c0:b4:8d:f3:97:cc:1b:bc:80:9d:
43:15:fe:e2:cc:ca:39:75:a4:84:f4:f7:92:6b:60:
f7:24:f7:73:fe:82:1d:56:35:86:88:81:01:05:ea:
a4:cc:e2:c5:47:ae:75:fb:ed:de:76:e9:f2:9a:76:
b4:b1:ee:bf:a1:83:17:ba:18:0c:b6:2e:9e:48:e0:
5b:19:ce:ba:43:26:d3:f1:58:f9:a8:60:08:30:29:
8c:0d:29:71:0a:d0:3a:a7:74:fe:46:4b:5e:8a:72:
cd:f5:e7:7f:5e:3f:28:ca:53:64:49:6c:00:62:f4:
57:2b:a3:db:54:0a:c4:35:76:f4:66:12:9f:32:d4:
f7:2b:29:dd:ad:ee:09:ef:89:88:dd:cf:03:33:14:
11:6d:70:15:03:7d:91:9a:8e:f4:cc:1c:c0:35:a7:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DD:71:62:43:7C:D0:80:1A:E8:B4:44:8C:18:DF:47:B4:F2:CD:5A
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a3:80:b6:c5:3a:4b:e4:c0:d1:64:85:8e:1c:f7:20:a6:61:
33:ab:4c:97:79:5e:83:3e:5a:8a:69:35:0c:33:c8:c9:bb:e3:
28:3d:23:71:90:d2:e1:53:0f:8e:cc:c0:6f:76:8f:26:c9:49:
ab:5d:1b:4b:9d:c6:4c:c0:c3:e1:91:e9:1d:3b:25:0d:5d:01:
6d:25:6e:62:28:2e:d9:17:d2:6e:60:d2:02:92:20:c8:5a:d6:
97:67:9a:ce:15:2a:09:94:e5:b5:ed:b3:c9:6e:e5:a5:2f:1b:
fe:48:5d:0c:f1:fe:e5:ce:a1:c9:b3:41:c5:01:51:32:bf:15:
a7:e7:36:39:ba:fc:7c:81:38:f8:f4:0b:0d:7a:90:be:48:4e:
be:6e:1f:b8:42:65:05:13:19:bf:3d:5f:f1:ef:0f:c2:45:c4:
12:f2:2f:33:db:d5:85:b8:58:4e:02:39:ba:5f:e0:bf:41:2d:
5d:ee:24:07:f3:08:23:1d:cb:41:73:01:6a:2f:6e:12:32:35:
67:fe:9e:cc:d7:c0:4b:68:9c:b8:c5:6c:30:03:3d:7e:f1:5a:
e8:4a:d7:71:34:19:3d:c4:3d:5d:78:25:43:cd:8a:ef:bf:b1:
61:ed:b9:aa:87:35:1e:df:2b:69:e7:f1:ad:7e:d9:31:ee:b8:
1e:23:de:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCDy02keYR1UvmZFfMaRcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZmM0MTI3MjFjMGM2ZTdhNGM1NzY3YWU5OGM0NTIxZGVm
NTE1MDEwHhcNMjYwMjA5MTEwMDE2WhcNMjYwMjEwMTEwMDE2WjAzMTEwLwYDVQQD
Eyg5OWRkNzE2MjQzN2NkMDgwMWFlOGI0NDQ4YzE4ZGY0N2I0ZjJjZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrx6nAWbZA/R7jcWaKveD+SRpUQ8
MdaI+peVIRddq6T3O5y41Dx7cK1bCmS8Ia94VgXljZE2XMQ0G0BJvfucXuj8TyoD
4a6xT4B4buphd+2j5iso2KguP8YNel5geMC0jfOXzBu8gJ1DFf7izMo5daSE9PeS
a2D3JPdz/oIdVjWGiIEBBeqkzOLFR651++3edunymna0se6/oYMXuhgMti6eSOBb
Gc66QybT8Vj5qGAIMCmMDSlxCtA6p3T+RkteinLN9ed/Xj8oylNkSWwAYvRXK6Pb
VArENXb0ZhKfMtT3Kyndre4J74mI3c8DMxQRbXAVA32Rmo70zBzANadEPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJndcWJDfNCAGui0RIwY30e08s1aMB8GA1UdIwQY
MBaAFD/8QSchwMbnpMV2eumMRSHe9RUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZDkwYjktZmE4OC00YmQ5LWE3ZDUt
MjIxMThiMzYxNDkwLzEvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jZDkwYjktZmE4OC00YmQ5LWE3ZDUtMjIxMThiMzYxNDkw
LzEvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6OAtsU6
S+TA0WSFjhz3IKZhM6tMl3legz5aimk1DDPIybvjKD0jcZDS4VMPjszAb3aPJslJ
q10bS53GTMDD4ZHpHTslDV0BbSVuYigu2RfSbmDSApIgyFrWl2eazhUqCZTlte2z
yW7lpS8b/khdDPH+5c6hybNBxQFRMr8Vp+c2Obr8fIE4+PQLDXqQvkhOvm4fuEJl
BRMZvz1f8e8PwkXEEvIvM9vVhbhYTgI5ul/gv0EtXe4kB/MIIx3LQXMBai9uEjI1
Z/6ezNfAS2icuMVsMAM9fvFa6ErXcTQZPcQ9XXglQ82K77+xYe25qoc1Ht8raefx
rX7ZMe64HiPeYQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:05 2026 by rpki-client