This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
File: pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json)
Hash identifier: 1JXbSHgyREgyfiOMU6svFD4h0sGznzeam6/JuPRSVKY=
Subject key identifier: 78:AA:7E:54:31:F3:7E:BE:05:56:1F:89:C2:19:11:CF:1F:DB:84:CD
Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
Certificate issuer: /CN=a5b2654e432b74dc8da66d816b260cffc8173175
Certificate serial: 019C420F41A12259B74430C8ED58E250EEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 11:00:21 +0000
Manifest this update: Mon 09 Feb 2026 11:00:21 +0000
Manifest next update: Tue 10 Feb 2026 11:00:21 +0000
Files and hashes: 1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: BlRse95r8OHwxBa/UOl/asvDrfm4uw15WZwb7upfBJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:41:a1:22:59:b7:44:30:c8:ed:58:e2:50:ee:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175
Validity
Not Before: Feb 9 11:00:21 2026 GMT
Not After : Feb 10 11:00:21 2026 GMT
Subject: CN=78aa7e5431f37ebe05561f89c21911cf1fdb84cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:d3:21:69:4a:e6:47:55:19:18:a2:86:c9:
ce:1c:80:4b:57:88:9e:bc:f2:b2:0d:b2:22:5b:39:
25:d0:fc:22:6d:97:cb:93:72:01:8b:18:62:87:5d:
cd:dc:c8:2d:9e:93:46:96:8e:25:b3:27:fe:1e:ae:
a7:75:6e:1c:49:36:4a:43:01:f2:c6:ae:df:a3:6c:
14:47:dd:af:2d:1a:01:83:c3:1a:2a:f0:82:8d:35:
7e:56:d2:2f:56:d2:7b:23:49:57:93:51:2e:38:9e:
65:95:48:8f:0a:a2:60:6e:31:ed:1a:e8:2f:d5:85:
c1:38:88:9b:80:da:c3:1e:3c:bb:99:cd:8b:da:e7:
02:61:48:86:5d:b0:45:e1:19:b0:4b:0d:9c:c7:1e:
2e:30:00:f4:f1:eb:cc:ae:28:4b:aa:02:ae:21:21:
01:ce:6b:6a:a2:46:d2:b1:46:47:4b:d8:c7:2f:ec:
b1:d5:7e:63:0f:54:d9:e1:1f:81:90:8b:0b:21:76:
5d:c3:88:4c:72:2a:df:63:2a:98:e0:bb:48:3d:66:
bc:37:f2:90:9b:5e:3a:09:43:f7:07:79:a5:07:50:
59:0c:08:ef:05:4c:12:7c:a4:d2:05:3b:16:cb:f2:
57:f1:68:9e:cf:f4:4f:f0:5b:4f:2a:a1:48:07:02:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AA:7E:54:31:F3:7E:BE:05:56:1F:89:C2:19:11:CF:1F:DB:84:CD
X509v3 Authority Key Identifier:
keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:59:c1:9b:e5:4f:49:49:27:d5:8f:e9:00:7a:18:34:bc:d2:
a8:db:1c:c3:94:21:11:3b:dc:9f:40:b2:a2:c3:c9:df:24:86:
59:3b:d5:b2:6f:41:61:53:9e:ef:78:f1:fd:23:27:d8:63:05:
fc:0f:22:9b:66:68:81:e0:7a:4f:ac:2a:e2:f8:c5:da:46:a5:
6a:96:ea:cc:c6:b7:19:ca:60:0e:1b:97:40:96:53:11:26:4b:
22:fb:11:36:89:ae:e1:0b:3a:8f:64:04:d6:9b:ae:9e:ed:be:
72:f5:54:99:ec:b2:71:40:92:37:c7:2a:32:bb:09:2c:1c:ad:
4f:23:dd:73:d8:37:b6:e5:67:02:8d:f9:cb:18:38:31:99:2c:
1b:77:a9:bf:55:00:71:aa:14:3a:d7:af:58:23:f6:b2:90:45:
48:2a:ea:e8:28:37:13:bc:84:a3:dd:3a:0d:1a:e8:e0:9e:48:
b5:fa:32:25:1d:a7:d7:81:84:ad:00:80:73:6d:c7:c8:cf:58:
37:ed:0a:3d:7c:98:73:05:51:b2:57:5c:38:fa:14:bd:a3:26:
16:d9:85:05:fd:fb:45:5a:41:c7:33:60:c6:3a:c4:24:27:21:
39:ab:8b:be:b7:37:0d:bc:ed:52:7c:61:69:93:16:9d:05:15:
7f:9a:59:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:57 2026 by rpki-client