This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier: 2v8mKaOYMt2TAmuPVBoJrZui/4qmJd/OHM5oFzMvKXw=
Subject key identifier: F0:A6:2D:F3:79:23:D4:EE:D0:65:4C:3F:D4:0D:28:E2:66:FF:EB:B5
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer: /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial: 019C41E6D621CCACE98392D173BD07CC1512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number: 03
Signing time: Mon 09 Feb 2026 10:16:12 +0000
Manifest this update: Mon 09 Feb 2026 10:16:12 +0000
Manifest next update: Tue 10 Feb 2026 10:16:12 +0000
Files and hashes: 1: DEhwRgoZwhCnbHx9TY0u2RmnPo0.roa (hash: n+U52/pS/pOI43rdd4ozwHX86HIZKxpvXIyPf0K2Mgk=)
2: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: l+RoegJPMdyZxSvQ3tq/p5moztE7zArm0OpHio6m7RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:e6:d6:21:cc:ac:e9:83:92:d1:73:bd:07:cc:15:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Validity
Not Before: Feb 9 10:16:12 2026 GMT
Not After : Feb 10 10:16:12 2026 GMT
Subject: CN=f0a62df37923d4eed0654c3fd40d28e266ffebb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f0:e7:38:d9:ee:19:a6:95:59:81:9c:b7:25:
cb:0f:27:5d:82:8a:25:2d:2e:42:3a:59:2d:04:61:
c1:7b:18:c3:a9:2c:65:1e:6d:57:17:0c:80:59:1c:
ee:7f:90:4d:7f:16:0b:26:c4:6c:f9:77:d3:af:54:
6e:ef:9d:af:1e:f6:68:6c:1a:68:7d:84:bd:33:1d:
d1:86:14:79:cd:1e:31:89:45:97:55:59:c2:05:da:
01:52:de:9e:ce:dc:e1:d6:20:0c:7d:01:d2:8b:ac:
5d:41:32:cf:17:87:ac:09:cc:bc:28:e7:5e:0a:a2:
58:32:0c:ad:51:b2:27:6f:38:c3:74:69:ea:5f:a9:
9b:f1:98:27:45:ea:ec:06:96:e9:f2:45:d4:70:0f:
73:ae:3e:f2:9a:cc:8e:28:fe:d4:33:74:71:66:62:
22:0d:e5:1a:29:fd:da:23:7c:b6:e7:5d:ef:03:c5:
d4:a9:46:84:6f:df:e7:87:e2:5d:57:d9:8c:13:ab:
ae:6e:44:b7:9a:10:87:f5:45:63:31:a8:86:0a:c7:
0c:08:af:76:c2:ad:b9:a5:5f:f4:61:21:8c:ad:8e:
b2:5b:ba:2b:a5:ac:54:4c:18:13:9d:85:4c:f3:9a:
1e:9b:d1:41:47:28:fa:d5:74:d9:57:07:06:2c:10:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A6:2D:F3:79:23:D4:EE:D0:65:4C:3F:D4:0D:28:E2:66:FF:EB:B5
X509v3 Authority Key Identifier:
keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:44:55:3d:0b:ac:e5:56:0f:79:45:a5:9f:59:ea:17:da:b8:
e4:83:96:30:7b:04:27:5a:38:a3:6a:6a:5e:ce:67:82:d9:5b:
26:85:3c:b7:45:29:b3:68:6f:a6:be:c7:cd:0e:4e:2b:e2:72:
75:0a:fc:9d:f4:60:8b:e3:f9:66:ca:c8:ae:dd:2f:51:77:a0:
7c:cb:86:89:b7:86:91:43:05:d1:c8:06:40:54:72:cd:d9:55:
62:29:6b:9b:1b:9d:97:7b:9e:aa:1f:83:42:64:73:51:91:ff:
71:da:b9:4d:71:02:d1:11:75:9f:d0:cf:94:a8:85:3a:67:6f:
f2:11:23:42:40:90:5b:09:f4:42:88:f1:f2:87:a1:0c:6b:d3:
a8:82:61:e4:bf:77:4a:d2:cb:2c:56:90:66:7c:2f:d2:16:9d:
55:98:59:42:f6:c3:16:e4:4c:3d:a9:69:13:05:5b:dd:6a:28:
53:f3:7c:1b:f0:53:8b:d5:4f:6f:7a:94:67:0e:c0:12:9b:1f:
5d:89:59:14:8a:0f:f4:ee:05:af:6f:4b:34:e6:fc:11:94:b2:
ab:09:87:0a:7b:37:69:8a:95:1f:85:6e:af:df:a3:a0:0b:41:
f0:88:98:6f:5f:3a:69:52:bf:fd:c3:62:ba:03:8c:6e:6c:64:
3e:41:5a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:32 2026 by rpki-client