This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: Q0et2e3qVKYH4aA8fQxdbOA7xDqSHhsyvWlTWyBr0Uk=
Subject key identifier: 88:4E:7D:6F:B3:D1:45:60:81:9D:F3:55:4D:D9:F0:72:E5:EF:02:39
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 019C427DAE4E28E30AE11AABF1AEC94B1A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 056C
Signing time: Mon 09 Feb 2026 13:00:58 +0000
Manifest this update: Mon 09 Feb 2026 13:00:58 +0000
Manifest next update: Tue 10 Feb 2026 13:00:58 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: vb8DwAhBCEsjNt5suzVhoWEmEn74dmjRzBEoWqZyWQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:ae:4e:28:e3:0a:e1:1a:ab:f1:ae:c9:4b:1a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Feb 9 13:00:58 2026 GMT
Not After : Feb 10 13:00:58 2026 GMT
Subject: CN=884e7d6fb3d14560819df3554dd9f072e5ef0239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:b6:a2:46:96:fe:6b:08:63:03:a9:47:54:
3c:a0:88:dc:38:f4:b3:6d:0c:e0:4b:e9:bd:4c:4b:
84:8e:4f:d2:c0:ed:fa:d3:4c:2f:e1:74:fb:27:58:
9b:aa:fe:5d:6c:1d:d7:e5:1a:40:6a:e6:4f:61:ba:
f3:f0:46:3d:78:39:38:3d:9e:fb:69:c1:01:b7:74:
00:9d:08:18:6e:f9:ef:3d:f1:13:35:1d:53:c3:2a:
3e:60:ec:90:4a:4a:c1:a0:95:b8:58:53:ac:eb:1b:
3f:23:e3:31:1d:b3:90:72:54:e3:d1:7f:57:0e:dc:
c8:a7:5c:75:a5:32:37:29:e0:32:47:04:7f:99:4f:
a6:e0:61:37:c7:ba:02:36:ee:d3:23:38:71:8f:d7:
04:48:f6:9d:b1:55:b5:51:a1:49:41:2f:91:ae:35:
d5:84:fa:c6:0e:56:79:b1:59:89:1c:34:30:30:54:
cd:34:2b:6c:c2:d2:e1:13:b8:93:32:16:c9:bf:a2:
4d:cd:24:88:85:3e:7d:cb:c5:bc:0a:cc:d9:49:1b:
ac:67:8b:41:b8:da:96:4d:1e:72:1b:cc:fe:b0:3a:
00:a7:7a:28:38:cb:ce:39:d2:f7:71:f2:bf:d5:ab:
16:e7:ca:93:72:fc:cf:5c:c0:2f:67:47:73:3a:33:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4E:7D:6F:B3:D1:45:60:81:9D:F3:55:4D:D9:F0:72:E5:EF:02:39
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a1:3e:96:c9:c5:c1:26:fb:5e:06:33:bf:88:65:65:bb:ae:
c6:e9:7a:c8:ac:5d:06:31:9e:d2:52:2b:2a:e8:59:a7:d3:51:
9d:aa:97:e0:97:97:0c:13:5f:63:c3:5b:73:26:96:68:ed:f5:
ca:c4:d6:32:d2:d2:55:52:9f:2b:61:df:88:ea:c6:c1:58:2e:
3e:5f:6c:ae:ac:84:db:2f:50:89:72:34:99:5d:b3:cf:7a:2c:
b5:0a:71:db:7c:d9:a3:9e:16:c0:6b:1d:54:3f:e1:c4:52:4f:
9b:8c:7a:18:a2:ca:80:76:26:df:8d:67:80:8c:88:ac:62:e4:
bd:ee:be:6c:18:70:90:09:d8:ff:76:1c:9f:02:dc:39:08:2a:
62:99:d0:35:db:a2:39:73:2e:ce:58:3a:31:df:99:e3:3e:1f:
57:ed:9d:4b:ad:01:69:d6:b5:df:4d:4a:4b:c8:02:b9:f0:68:
56:67:9a:6e:e6:41:00:78:3d:24:ed:8e:77:9a:f8:0c:78:58:
41:39:83:c2:eb:88:27:f4:79:be:c7:b5:c9:49:49:c4:02:4d:
66:b7:a6:ae:40:6b:2b:c9:17:68:71:1b:21:0f:34:08:69:bc:
33:2e:20:70:a4:8f:95:f6:86:03:b5:73:70:72:a3:8a:56:88:
d0:04:6c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:49 2026 by rpki-client