This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: omDXus0ij2LpfDc0VeyvcWtYgXwlPVfR4SPdMWxUJb4=
Subject key identifier: 7F:E8:C1:47:0A:17:06:EF:C1:A8:07:F9:A8:37:E2:46:F9:6C:75:34
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 019C42102EB92E995F16A980F8F3F60902A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 154A
Signing time: Mon 09 Feb 2026 11:01:22 +0000
Manifest this update: Mon 09 Feb 2026 11:01:22 +0000
Manifest next update: Tue 10 Feb 2026 11:01:22 +0000
Files and hashes: 1: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: 3qt2sDmis71SMSnXZ5r+I8D0Y6AzKwDBmU0245KbjpM=)
2: ui7FUzschC45AaandKwrKd4ZLOE.roa (hash: p64p3A+w4Rzd9qzg1tn0C4YDnUbbDXUrufa5/DaN5QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:2e:b9:2e:99:5f:16:a9:80:f8:f3:f6:09:02:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Feb 9 11:01:22 2026 GMT
Not After : Feb 10 11:01:22 2026 GMT
Subject: CN=7fe8c1470a1706efc1a807f9a837e246f96c7534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:64:e6:31:a7:fa:14:20:1b:0b:a2:a1:f2:
c3:fd:6f:ca:eb:a7:47:61:5f:77:5e:f5:ab:2a:d2:
e7:7e:3e:ca:4a:ce:f3:4d:81:6d:9a:96:cf:29:9e:
77:41:8e:59:68:f7:1e:13:47:8f:58:f1:c2:75:fb:
77:e1:2c:f5:ef:2e:d8:26:33:7b:2a:d4:41:81:fa:
66:90:52:91:18:b0:75:d6:d5:0b:0e:52:40:27:f2:
63:61:2b:8c:66:ce:83:87:b9:e8:74:fa:7d:12:d7:
4b:d8:44:60:f2:b8:17:cf:9d:76:c5:3d:60:0a:55:
f3:8b:c6:9d:4e:84:18:57:ed:3d:dc:49:f1:f1:e4:
5c:ce:8a:cb:20:11:5c:cb:e0:72:26:e2:50:94:a6:
7a:3a:2d:39:05:13:3c:b6:fb:7d:70:ea:9c:73:d5:
48:ec:02:be:8c:d3:f2:3d:ae:80:dd:5b:1d:13:bd:
50:0c:20:db:83:9d:f5:35:32:ca:b9:7b:eb:bf:a4:
6c:91:f4:5a:82:dd:c0:dc:0c:27:38:67:32:1a:f5:
9e:75:9e:0e:d2:e6:5a:c5:fd:a7:44:b8:ec:12:a3:
7f:ff:8d:85:e6:fe:3b:d1:b3:36:b0:0c:64:ee:09:
1e:eb:67:09:1f:c3:6f:32:0d:7a:fc:8b:86:1a:31:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E8:C1:47:0A:17:06:EF:C1:A8:07:F9:A8:37:E2:46:F9:6C:75:34
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8e:d4:08:f3:17:c6:95:b8:a4:ee:02:89:18:18:2e:f2:1c:
86:82:9d:e8:b4:92:db:42:ec:a8:b5:f4:9d:c4:bc:44:30:a0:
ce:9b:98:ba:11:15:15:9f:96:31:a6:88:7d:fd:46:99:7c:f4:
5a:fd:3a:5d:8c:fe:5d:e9:b5:b7:c5:07:92:cc:50:59:25:0d:
cb:0f:f6:b6:dc:05:1e:ad:6c:95:0a:53:e4:ab:89:05:d3:f5:
8e:ec:d1:c3:cf:e2:26:37:2b:2f:ce:cb:af:d6:44:ec:76:f7:
3a:66:8b:c3:f0:52:3d:36:b0:83:81:2e:08:5e:c4:f7:23:bc:
fb:76:24:a9:96:39:82:58:80:3b:05:83:1e:9f:d6:f6:cf:9f:
77:d3:4c:e3:f0:5c:c5:76:54:75:b3:c1:de:4d:fc:2f:0d:54:
42:7c:9e:06:b7:7c:0c:71:65:0a:a8:49:06:82:e1:dd:89:fa:
a4:3e:7d:43:77:0c:2f:43:66:df:15:08:52:6d:a3:52:69:47:
82:40:86:63:db:56:39:30:a4:25:b4:9a:e6:0e:a7:59:d7:94:
a8:32:4b:e1:46:d2:1e:05:9b:6c:49:42:53:d0:97:19:ba:84:
d8:67:fa:8d:48:9f:f5:ab:72:ec:bf:ea:64:89:a1:3a:85:22:
a1:24:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:50 2026 by rpki-client