This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier: 6kuC/S/+GImON48Faka34m5EwB5MuHqkTyZcS4iWagg=
Subject key identifier: 1E:EA:01:17:16:E0:A0:82:4F:A2:F4:93:CF:1F:D7:7F:7E:86:D4:71
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 019C427E197923F3EB14EC4EBA5312AF247C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number: 139A
Signing time: Mon 09 Feb 2026 13:01:26 +0000
Manifest this update: Mon 09 Feb 2026 13:01:26 +0000
Manifest next update: Tue 10 Feb 2026 13:01:26 +0000
Files and hashes: 1: 7v2ZUdL5cbvsxZ3SJ5Ih0L5h5Cw.roa (hash: Fh4U2aM1V+vRKIdMaRS0oiOF0z5hb7HFVxTHs/Kfn8g=)
2: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: CADlkj2mjdqHB5HHMSoYZEkb1obPzF2gjV2qBZn8tjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:19:79:23:f3:eb:14:ec:4e:ba:53:12:af:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Feb 9 13:01:26 2026 GMT
Not After : Feb 10 13:01:26 2026 GMT
Subject: CN=1eea011716e0a0824fa2f493cf1fd77f7e86d471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:e9:73:e1:f6:64:af:0e:a8:c4:42:36:e7:
f9:d7:76:50:d9:2b:93:c3:2f:c8:e9:f0:2d:10:4a:
ad:b1:71:72:5c:54:e6:40:2a:86:6b:2f:3b:06:fe:
7e:3b:10:32:dc:4f:e2:26:77:6f:9c:61:e8:0b:85:
64:3a:bd:77:7e:94:2b:59:d3:3a:fd:de:6e:30:5e:
cd:5f:21:27:10:b3:68:28:78:f4:75:e4:79:00:28:
80:92:cb:32:df:12:d4:e1:72:58:55:a8:04:35:85:
e8:3f:df:cc:9d:d9:7a:b6:66:dc:11:76:d9:ab:25:
4e:1e:f2:56:09:ba:b4:83:66:24:e9:1a:9a:87:68:
e1:52:3c:13:d5:a1:35:be:37:64:64:33:4e:4a:6f:
ee:f6:a0:cf:f1:6e:8b:42:4a:2c:30:5e:40:f6:fe:
50:ed:d6:b9:ba:ca:85:68:36:92:3b:ac:d9:9d:70:
c4:30:32:13:a9:84:0a:7d:0f:5e:c4:b1:dc:a5:49:
29:b6:b5:5a:b2:f5:07:35:e4:4d:65:92:2d:99:6f:
24:7d:cb:4c:cd:e0:5c:70:9a:cd:a1:51:ec:7a:25:
79:6d:27:3c:79:cc:b3:b1:b7:a7:01:cf:f1:dd:bc:
05:aa:8c:0d:ea:e6:d3:14:b4:ef:1f:da:87:1c:16:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:01:17:16:E0:A0:82:4F:A2:F4:93:CF:1F:D7:7F:7E:86:D4:71
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c0:60:f8:72:84:b3:bf:a7:81:96:c4:f5:89:27:11:63:0e:
06:b1:bb:c8:15:8d:19:c3:ea:14:1d:5a:d5:f8:01:3a:41:ab:
ab:f5:88:cf:5c:55:b6:33:87:b8:bc:eb:9f:e8:2c:41:bb:ce:
c1:3f:44:bb:5d:fb:35:0e:ba:c9:45:be:bc:8c:c2:5d:f6:95:
a0:21:1d:d1:0e:f0:fc:05:29:e7:da:ba:83:d7:2d:6a:7f:ad:
60:8b:a2:0e:58:26:55:d0:32:72:d0:27:08:f4:c6:cb:c1:0b:
e0:97:83:28:40:3c:27:78:3b:b8:b6:c4:65:6a:c9:8b:71:34:
69:23:2e:2c:37:ca:9a:5d:9e:f9:97:18:a0:ba:90:98:da:ed:
d8:03:7d:17:fb:aa:5c:e1:1a:75:d4:a2:d5:f4:42:fd:45:2e:
86:52:5b:0a:11:95:9c:01:53:6f:68:ad:a4:70:6c:f3:42:23:
41:c7:e0:48:2a:21:82:90:ea:c3:51:c5:72:b5:05:6c:69:2c:
d8:ec:b6:f0:4c:c7:e1:a1:d3:97:84:2d:bb:84:1c:15:b4:1b:
c6:e8:bc:8a:be:c8:7c:ab:7f:8f:31:54:55:70:7e:aa:4b:69:
c2:66:93:a6:d6:60:21:87:43:fd:65:b3:60:af:aa:44:ec:46:
50:bb:85:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:14 2026 by rpki-client