This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: w/HtVKrH/6OB+in2oJpwJgtvFWZtdCFcoHIsAtqGKWY=
Subject key identifier: D5:3F:8D:0E:39:DA:DC:40:7E:E9:18:DE:46:DE:E6:3C:0D:32:EE:58
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 019C4510369E8D034A5F370A76C1E2C779AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0BF4
Signing time: Tue 10 Feb 2026 01:00:16 +0000
Manifest this update: Tue 10 Feb 2026 01:00:16 +0000
Manifest next update: Wed 11 Feb 2026 01:00:16 +0000
Files and hashes: 1: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: 0bJhzRJubVG0Lgc+JwuXx6zE06moBWAckvYiYuT0Hac=)
2: VTDoK_HiASPo0rKQEESAmloV1uI.roa (hash: j/Uqiho+zYJi7PaZZVvRcMCOVoIn337nTlvuR4KCJ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:10:36:9e:8d:03:4a:5f:37:0a:76:c1:e2:c7:79:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Feb 10 01:00:16 2026 GMT
Not After : Feb 11 01:00:16 2026 GMT
Subject: CN=d53f8d0e39dadc407ee918de46dee63c0d32ee58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:6e:7d:b3:c2:09:be:a7:88:b4:69:dc:0d:
52:10:6f:04:4f:d7:23:cf:9d:d5:20:6b:83:63:dd:
67:49:6d:60:7a:7a:41:ba:26:c9:19:ad:65:7c:69:
93:93:d8:35:6f:0f:58:f0:b5:7e:ee:53:5a:93:54:
06:64:d4:fa:fb:64:ca:5e:41:ad:1e:11:65:1d:03:
e3:e9:ec:2f:8d:51:db:77:ea:7d:97:78:cb:e3:51:
ae:5f:24:bc:40:28:6d:f3:41:4b:80:49:e3:e4:1c:
d1:1d:a8:a9:73:0e:05:76:b0:53:68:16:ce:52:ee:
45:53:96:6c:4c:d0:b5:d1:52:b6:1c:94:91:9a:3e:
c7:56:dc:bb:8e:35:26:62:35:dd:16:6c:28:62:c7:
99:35:3c:a6:4a:2e:3b:9d:98:b8:41:04:c4:02:ed:
72:5c:0d:b1:f2:ea:54:a1:cc:88:ed:ac:46:9b:59:
1e:72:c7:f4:2d:52:ef:59:d7:b0:71:c6:31:3d:35:
12:35:36:65:5e:3b:16:64:57:7f:d5:b4:8e:a7:d2:
fd:17:58:04:06:ed:e9:79:46:3d:74:f7:b9:b0:13:
e6:8d:3e:ee:21:18:bd:73:2e:41:03:46:b7:73:93:
aa:46:6e:7f:ee:e8:df:30:49:3c:bb:8f:84:77:75:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3F:8D:0E:39:DA:DC:40:7E:E9:18:DE:46:DE:E6:3C:0D:32:EE:58
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:11:0d:eb:17:7a:00:a3:e3:12:c9:fb:2f:ae:62:52:cc:c5:
07:ef:23:35:d5:78:20:22:81:6e:2f:dc:aa:9d:32:e1:66:a6:
77:85:6f:94:a1:81:cc:da:da:d6:d5:37:1d:77:23:79:33:87:
f9:78:6d:70:4b:53:02:43:bc:c2:dc:32:ac:c8:82:7b:b3:ac:
63:f1:31:b7:40:4a:38:6d:47:7f:4e:94:58:c1:b4:e7:32:01:
9b:2c:bf:7f:dc:3e:54:d2:68:47:e9:d0:44:44:e6:77:e9:2e:
10:c6:69:7e:7e:50:97:0d:9c:cf:28:ed:98:5d:7b:7b:96:45:
97:f0:a0:30:7e:a8:d3:26:59:cc:10:ec:f4:01:3e:f0:db:b0:
3c:8d:ce:79:fa:77:d2:58:1f:d5:3f:7b:cf:2e:58:25:96:3d:
19:24:ee:2c:74:79:3e:d0:7f:1e:79:04:fb:02:2b:93:52:a5:
f3:53:b7:a8:6c:7c:88:86:f7:de:f5:3a:77:fc:55:6e:b7:6f:
2e:2a:e3:6f:34:d9:78:ea:d8:51:0a:9f:b5:91:44:dc:7f:ee:
23:87:a5:e6:a9:16:32:91:0d:38:94:b5:8c:b9:c5:20:d1:f8:
5e:fa:b0:b2:a6:fc:cf:08:d9:a8:75:b9:47:a6:ee:0b:d9:62:
65:5f:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:30:26 2026 by rpki-client