This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
File: pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json)
Hash identifier: bW4O/8CY6FrHqu6FXO2LZYXEyHt4XV9BrFazL4jQaSQ=
Subject key identifier: CB:BE:8E:85:74:14:08:38:96:65:4E:88:AC:B9:5D:B4:9C:4D:F5:90
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial: 019C42EB73846F6E462355683BDAE96C9253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
Manifest number: 120B
Signing time: Mon 09 Feb 2026 15:00:52 +0000
Manifest this update: Mon 09 Feb 2026 15:00:52 +0000
Manifest next update: Tue 10 Feb 2026 15:00:52 +0000
Files and hashes: 1: TqluBkd6UQL59Ze0Zq97K0BmVTU.roa (hash: JviIbVzjJLsxCvwAUOWWxAWG+oSpM8WgOJkmQ0ir8uM=)
2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: k/QMulM6p+x3sUx9xSwiYVESJaapRBbWp6CqY8uVl0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:73:84:6f:6e:46:23:55:68:3b:da:e9:6c:92:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Validity
Not Before: Feb 9 15:00:52 2026 GMT
Not After : Feb 10 15:00:52 2026 GMT
Subject: CN=cbbe8e857414083896654e88acb95db49c4df590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:59:af:a9:4b:8b:ec:89:f8:ec:09:9b:f8:
10:94:49:37:2a:24:98:32:ff:d8:82:12:0d:c7:d8:
af:a3:8f:9c:17:09:c5:41:1d:9c:37:35:47:b5:19:
35:44:68:8f:de:e3:0a:8a:b3:9a:f6:dc:bd:01:1c:
d1:30:f2:06:f4:51:93:37:43:47:09:cd:e5:55:6f:
5d:58:69:b5:cd:b3:80:38:ae:27:10:83:27:be:ac:
99:c0:09:dc:c1:d8:0a:ff:23:ae:66:a0:c3:04:d5:
14:2e:a6:82:fa:66:3f:bf:ec:c5:16:85:3c:26:9d:
6c:57:6b:69:42:6c:4e:71:07:a5:b7:04:f4:ac:18:
df:e9:d2:66:92:90:73:e9:cb:db:45:43:22:1b:88:
46:86:eb:1d:85:1a:84:d8:46:46:39:79:02:d9:b4:
38:80:4e:9c:29:11:56:9b:9f:8a:24:ce:c2:9c:2d:
66:2b:8a:26:90:64:94:9f:c6:a2:e7:11:0a:f0:df:
d5:cc:ae:16:9d:8f:62:a3:bb:50:c4:ae:44:d8:21:
d5:e7:b2:1b:07:ce:a4:f4:82:8a:1b:63:82:4a:93:
bb:c9:1f:86:00:19:27:dd:0a:42:44:a9:ca:e9:6c:
37:05:73:27:40:98:67:4b:c0:9b:35:34:49:3f:1d:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BE:8E:85:74:14:08:38:96:65:4E:88:AC:B9:5D:B4:9C:4D:F5:90
X509v3 Authority Key Identifier:
keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:70:2e:95:e1:4d:0f:c3:79:a9:da:53:3d:f7:ca:7b:02:1d:
6f:7f:f2:a1:5d:45:65:a4:a0:ab:26:35:87:4c:79:c9:63:0e:
1b:83:55:2a:96:fb:10:3a:1e:59:bb:37:62:73:98:35:1e:2d:
7f:14:f0:da:d8:bc:ea:29:b3:f8:e1:71:d6:4d:70:fb:e7:0f:
0e:33:2a:b8:1c:db:73:12:84:95:11:a9:3c:9f:ba:b9:79:ae:
05:dd:9a:29:b4:cf:18:0a:2c:69:f5:d2:c3:0e:3f:20:bb:c3:
05:cb:4c:6f:1b:a8:9b:a1:3b:ac:d9:9f:dc:cd:d7:f7:ef:d4:
39:15:f1:25:2d:ea:eb:b2:ae:fb:50:62:56:a6:66:de:5a:28:
12:fa:b3:ab:e0:2e:b4:fd:4e:d6:93:f3:1c:83:24:42:ad:b6:
2d:40:48:73:ec:bc:2a:77:67:d1:19:60:d2:0c:49:81:e4:22:
c5:42:34:f1:ba:8e:02:04:e7:25:e8:07:b0:ed:9a:07:96:22:
74:c5:77:4f:bf:b4:35:c3:7d:f8:a1:91:2b:21:e3:89:a8:9e:
29:d7:22:24:f8:7d:4f:29:d5:81:8a:74:8b:36:5b:ec:f1:1e:
ff:71:ab:2b:a3:a8:4a:c3:f2:be:a5:e8:45:30:56:b1:33:14:
ba:87:ca:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC63OEb25GI1VoO9rpbJJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YzJiNTkzZDk4YzA5MmZkMzBhNjAxZWE1ZDI0NGFhYmQz
Y2IxNGQwHhcNMjYwMjA5MTUwMDUyWhcNMjYwMjEwMTUwMDUyWjAzMTEwLwYDVQQD
EyhjYmJlOGU4NTc0MTQwODM4OTY2NTRlODhhY2I5NWRiNDljNGRmNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27lZr6lLi+yJ+OwJm/gQlEk3KiSY
Mv/YghINx9ivo4+cFwnFQR2cNzVHtRk1RGiP3uMKirOa9ty9ARzRMPIG9FGTN0NH
Cc3lVW9dWGm1zbOAOK4nEIMnvqyZwAncwdgK/yOuZqDDBNUULqaC+mY/v+zFFoU8
Jp1sV2tpQmxOcQeltwT0rBjf6dJmkpBz6cvbRUMiG4hGhusdhRqE2EZGOXkC2bQ4
gE6cKRFWm5+KJM7CnC1mK4omkGSUn8ai5xEK8N/VzK4WnY9io7tQxK5E2CHV57Ib
B86k9IKKG2OCSpO7yR+GABkn3QpCRKnK6Ww3BXMnQJhnS8CbNTRJPx0YfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMu+joV0FAg4lmVOiKy5XbScTfWQMB8GA1UdIwQY
MBaAFKTCtZPZjAkv0wpgHqXSRKq9PLFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NDIyYjAtZGM3OS00YzcxLWJmZDgt
ZmNmOTk0NzBiOTg1LzEvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85NDIyYjAtZGM3OS00YzcxLWJmZDgtZmNmOTk0NzBiOTg1
LzEvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnAuleFN
D8N5qdpTPffKewIdb3/yoV1FZaSgqyY1h0x5yWMOG4NVKpb7EDoeWbs3YnOYNR4t
fxTw2ti86imz+OFx1k1w++cPDjMquBzbcxKElRGpPJ+6uXmuBd2aKbTPGAosafXS
ww4/ILvDBctMbxuom6E7rNmf3M3X9+/UORXxJS3q67Ku+1BiVqZm3looEvqzq+Au
tP1O1pPzHIMkQq22LUBIc+y8Kndn0Rlg0gxJgeQixUI08bqOAgTnJegHsO2aB5Yi
dMV3T7+0NcN9+KGRKyHjiaieKdciJPh9TynVgYp0izZb7PEe/3GrK6OoSsPyvqXo
RTBWsTMUuofK2g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:22 2026 by rpki-client