This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: 0EVlOWdHbPdbvjK25H9ZbSJSMpbHNMcrSa5k2grUMO0=
Subject key identifier: ED:CD:20:D1:15:AA:7C:48:47:6F:F3:85:0C:B9:6D:21:46:04:96:79
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 019C427D35A8163A9F0B51F5DEB325D9D87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 0C09
Signing time: Mon 09 Feb 2026 13:00:27 +0000
Manifest this update: Mon 09 Feb 2026 13:00:27 +0000
Manifest next update: Tue 10 Feb 2026 13:00:27 +0000
Files and hashes: 1: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: Gcp4VCgmXykn8GCMjI8QFc1eGrMkUekD9s6EVwaCb1s=)
2: c6e2woPNB04ZsyBinFv698qVT4o.roa (hash: +z15BNM7prrFn2O9ay18qeSx+nY/lsQt2tceRY1CHk4=)
3: ibsKE4EUTsSLpd3vwVB8H5K4fkA.roa (hash: gtNjgUXOJZryabS1OhF/Yx//V2poRKgBO2Y+3otBh10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:35:a8:16:3a:9f:0b:51:f5:de:b3:25:d9:d8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Feb 9 13:00:27 2026 GMT
Not After : Feb 10 13:00:27 2026 GMT
Subject: CN=edcd20d115aa7c48476ff3850cb96d2146049679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:fe:b3:3c:ad:0d:33:79:8f:28:6a:a2:18:
c4:3e:3a:c9:a6:74:47:5a:d6:d9:f3:d5:1a:1f:98:
18:77:4e:68:70:c4:86:39:28:a5:d2:a7:2f:b1:82:
d7:5c:37:29:07:2d:f4:7c:77:03:ba:9d:ed:90:b3:
c5:2b:9f:a5:82:c3:f7:e2:54:21:2f:ea:15:93:5b:
e7:48:e0:1c:fc:09:82:65:f1:ee:42:eb:c5:93:8b:
6f:7c:01:64:a7:50:25:d6:55:c9:80:fa:4a:86:08:
9a:b9:ac:7d:42:a3:e7:77:72:1a:f3:40:fd:80:b9:
6d:c6:15:a2:d7:a9:ae:2d:bb:aa:8b:f4:96:2d:39:
3d:3c:e9:e3:12:85:f0:36:d9:64:e7:c2:ea:0d:9c:
42:44:11:45:a8:1c:53:09:8a:6c:e2:eb:d6:12:eb:
08:5f:f2:55:06:20:8c:c0:15:e4:1f:d2:85:d4:0f:
26:8c:36:68:b5:91:36:39:e6:6e:dc:07:1c:f0:d6:
b3:62:e7:91:43:88:d5:9c:d3:4f:aa:fa:95:ee:ec:
e7:73:d5:14:fc:d2:19:a9:de:3e:49:6a:3f:02:d7:
38:12:a0:96:d7:f0:cc:e7:df:be:8a:0b:88:ec:97:
df:fa:72:d3:88:84:20:af:19:f2:d0:df:5b:8b:1c:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CD:20:D1:15:AA:7C:48:47:6F:F3:85:0C:B9:6D:21:46:04:96:79
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:97:6f:42:e0:6b:d6:b6:36:e9:e8:7b:e9:79:ac:76:07:2c:
8b:c0:44:23:99:95:8e:05:33:9a:d9:fc:32:41:e5:81:94:d6:
b5:8e:ef:40:34:06:e2:24:47:78:21:d4:77:22:64:86:e9:d8:
07:42:c6:13:e9:e4:78:62:c3:09:49:eb:76:f2:ab:2f:34:f6:
cd:fb:04:d6:02:0d:a9:68:d7:30:63:07:2a:f6:ac:aa:d4:93:
0b:6b:24:62:b9:19:dd:24:02:35:89:dd:a9:c5:a9:2c:3e:d4:
ee:c4:4e:79:9d:1a:3a:39:46:93:d6:ec:06:06:75:66:7a:65:
1c:dd:04:b1:d8:14:05:53:89:90:5a:d4:54:87:e5:1d:cf:84:
ba:70:dd:66:d0:40:b3:c7:a7:3c:8d:60:d4:18:ad:86:75:4b:
13:f2:73:8b:f2:42:d7:49:99:40:05:0a:b5:7b:b6:6b:e2:5c:
62:5b:13:cf:d5:9c:4a:0f:c3:98:b9:6d:32:87:54:e4:f6:c0:
22:87:aa:ff:cf:cd:4a:62:70:4f:f9:d3:c2:b4:9d:ed:2e:bc:
43:a6:57:db:d6:39:82:5c:68:74:34:3a:7e:92:b9:78:72:e0:
51:dc:c8:47:16:a5:cf:07:29:90:2b:ca:66:67:bc:de:2a:54:
94:1e:40:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfTWoFjqfC1H13rMl2dh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjM0MjA2MjU3NzE2OWE2MzU5N2U5ZTNhNjQyNWZjZGU2
YzE2NjEwHhcNMjYwMjA5MTMwMDI3WhcNMjYwMjEwMTMwMDI3WjAzMTEwLwYDVQQD
EyhlZGNkMjBkMTE1YWE3YzQ4NDc2ZmYzODUwY2I5NmQyMTQ2MDQ5Njc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv/+szytDTN5jyhqohjEPjrJpnRH
WtbZ89UaH5gYd05ocMSGOSil0qcvsYLXXDcpBy30fHcDup3tkLPFK5+lgsP34lQh
L+oVk1vnSOAc/AmCZfHuQuvFk4tvfAFkp1Al1lXJgPpKhgiauax9QqPnd3Ia80D9
gLltxhWi16muLbuqi/SWLTk9POnjEoXwNtlk58LqDZxCRBFFqBxTCYps4uvWEusI
X/JVBiCMwBXkH9KF1A8mjDZotZE2OeZu3Acc8NazYueRQ4jVnNNPqvqV7uznc9UU
/NIZqd4+SWo/Atc4EqCW1/DM59++iguI7Jff+nLTiIQgrxny0N9bixwkdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3NINEVqnxIR2/zhQy5bSFGBJZ5MB8GA1UdIwQY
MBaAFD2zQgYldxaaY1l+njpkJfzebBZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81MTAwNjYtNDcxZS00NzJhLTg5Nzgt
NDk3Mjc3YWZiYWE1LzEvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC81MTAwNjYtNDcxZS00NzJhLTg5NzgtNDk3Mjc3YWZiYWE1
LzEvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJdvQuBr
1rY26eh76Xmsdgcsi8BEI5mVjgUzmtn8MkHlgZTWtY7vQDQG4iRHeCHUdyJkhunY
B0LGE+nkeGLDCUnrdvKrLzT2zfsE1gINqWjXMGMHKvasqtSTC2skYrkZ3SQCNYnd
qcWpLD7U7sROeZ0aOjlGk9bsBgZ1ZnplHN0EsdgUBVOJkFrUVIflHc+EunDdZtBA
s8enPI1g1BithnVLE/Jzi/JC10mZQAUKtXu2a+JcYlsTz9WcSg/DmLltModU5PbA
Ioeq/8/NSmJwT/nTwrSd7S68Q6ZX29Y5glxodDQ6fpK5eHLgUdzIRxalzwcpkCvK
Zme83ipUlB5Alg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:22 2026 by rpki-client