This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
File: pkWmgpYFxtWOTgwadHTAo_MGjW4.mft (raw, json)
Hash identifier: pQ2Nu349sg/Mln47Hhe37R+qHg0MVlnX1mxwpETMY+o=
Subject key identifier: 16:A8:4E:E2:7A:D8:21:B2:8A:D2:BE:53:77:DD:EF:D9:36:FF:0C:8C
Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
Certificate issuer: /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Certificate serial: 019C4321FE5FD8AEA61D516DF4E4CA4B8B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
Manifest number: A8
Signing time: Mon 09 Feb 2026 16:00:27 +0000
Manifest this update: Mon 09 Feb 2026 16:00:27 +0000
Manifest next update: Tue 10 Feb 2026 16:00:27 +0000
Files and hashes: 1: DMVSDn-EmFqLrxD1lOdBrIrCjoo.asa (hash: uFX9WQ/D1sH0tSqq9AtdYpe5K/buXv8+uWvNQsHXI2E=)
2: pkWmgpYFxtWOTgwadHTAo_MGjW4.crl (hash: BfWa5+KKGkKR7jBmeiDuxjOcwUz38Eg3Zt9mlDsjrsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:fe:5f:d8:ae:a6:1d:51:6d:f4:e4:ca:4b:8b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Validity
Not Before: Feb 9 16:00:27 2026 GMT
Not After : Feb 10 16:00:27 2026 GMT
Subject: CN=16a84ee27ad821b28ad2be5377ddefd936ff0c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:7c:11:67:c8:69:f7:cf:c2:11:4d:05:99:
df:d3:fc:bd:53:a4:e7:4b:b5:dd:a0:19:d9:e2:a0:
97:53:f2:64:85:aa:e9:d8:60:c0:c1:32:8b:89:6f:
08:ff:2c:b1:b6:45:e8:cf:cf:6f:2a:cf:a4:e1:3b:
36:aa:be:fd:c5:f3:79:57:e0:c6:27:51:eb:14:9f:
92:98:e8:b4:e5:a9:20:be:37:c6:80:5d:6c:98:28:
dd:1a:08:5e:af:7a:c1:ce:a0:9d:4e:49:34:4a:7e:
68:7f:4d:19:d1:e9:d2:e4:79:e7:f7:54:1a:56:25:
3e:0b:6c:c1:b4:25:65:78:d9:ca:21:ba:4b:bf:4d:
50:c4:6f:f2:e1:7e:91:e3:c9:8b:cc:87:cc:a2:60:
0f:b0:14:fb:f1:e9:6a:8d:ea:8f:04:ad:54:f8:82:
6c:35:85:3c:43:09:e6:62:ed:06:22:de:17:75:c0:
0e:7d:cb:0b:24:8d:b4:05:0f:01:33:c3:60:85:7a:
95:81:b8:c2:73:18:30:ce:67:c7:a8:4d:83:43:87:
9b:f6:20:71:a9:ba:45:23:50:da:2c:80:f1:7c:ed:
11:cd:4e:47:54:37:44:8b:22:a7:cf:a8:9c:c6:de:
61:29:90:ca:f9:f9:10:45:af:ec:4d:cd:6c:e1:18:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A8:4E:E2:7A:D8:21:B2:8A:D2:BE:53:77:DD:EF:D9:36:FF:0C:8C
X509v3 Authority Key Identifier:
keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:09:c6:ed:3d:c9:bd:44:71:3c:b1:ac:3b:75:52:14:fa:c4:
02:ca:b4:ef:5c:28:9e:45:ff:bd:ac:13:ed:ac:de:35:14:00:
1f:4b:c2:60:17:79:ab:55:5f:bc:5f:bd:35:90:ea:31:12:3e:
cf:0b:cf:fd:b0:e6:f3:65:09:1c:01:a8:31:6f:8e:0f:6c:8d:
2e:ff:c0:d1:7d:88:4e:21:15:89:91:e6:e9:21:87:08:86:8a:
bb:8c:89:23:98:37:72:63:2a:7c:0e:3b:48:ff:a3:64:23:45:
a6:b4:b2:a7:a3:7e:42:43:22:b0:43:3b:6c:bc:25:60:9b:1c:
62:48:18:84:4e:40:88:13:2a:ef:ef:7b:90:b1:ca:51:3f:e3:
4b:e3:16:28:07:b0:43:de:1b:86:75:27:04:2f:63:0e:6a:83:
49:59:20:63:09:8b:f7:5d:7b:68:e3:a5:53:52:7f:ba:55:7d:
9c:e9:d9:8b:2f:34:19:c8:2e:3a:cb:fe:94:1c:2f:e2:2a:68:
e3:c6:d1:0e:a7:f5:a9:76:b9:3d:c0:8f:6a:47:6b:7d:54:6d:
0a:10:b8:8a:4f:57:59:2f:35:05:12:74:ad:82:b1:06:c2:8b:
b4:22:fc:06:74:5e:3a:a5:ac:99:17:ec:37:f7:db:24:ec:66:
98:90:ca:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIf5f2K6mHVFt9OTKS4shMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDVhNjgyOTYwNWM2ZDU4ZTRlMGMxYTc0NzRjMGEzZjMw
NjhkNmUwHhcNMjYwMjA5MTYwMDI3WhcNMjYwMjEwMTYwMDI3WjAzMTEwLwYDVQQD
EygxNmE4NGVlMjdhZDgyMWIyOGFkMmJlNTM3N2RkZWZkOTM2ZmYwYzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBt8EWfIaffPwhFNBZnf0/y9U6Tn
S7XdoBnZ4qCXU/Jkharp2GDAwTKLiW8I/yyxtkXoz89vKs+k4Ts2qr79xfN5V+DG
J1HrFJ+SmOi05akgvjfGgF1smCjdGgher3rBzqCdTkk0Sn5of00Z0enS5Hnn91Qa
ViU+C2zBtCVleNnKIbpLv01QxG/y4X6R48mLzIfMomAPsBT78elqjeqPBK1U+IJs
NYU8QwnmYu0GIt4XdcAOfcsLJI20BQ8BM8NghXqVgbjCcxgwzmfHqE2DQ4eb9iBx
qbpFI1DaLIDxfO0RzU5HVDdEiyKnz6icxt5hKZDK+fkQRa/sTc1s4RgKYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaoTuJ62CGyitK+U3fd79k2/wyMMB8GA1UdIwQY
MBaAFKZFpoKWBcbVjk4MGnR0wKPzBo1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNDIwOTctNTU2MS00YjdlLTk0NTgt
MmQ4ZjNiNmUxYjk0LzEvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lNDIwOTctNTU2MS00YjdlLTk0NTgtMmQ4ZjNiNmUxYjk0
LzEvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgnG7T3J
vURxPLGsO3VSFPrEAsq071wonkX/vawT7azeNRQAH0vCYBd5q1VfvF+9NZDqMRI+
zwvP/bDm82UJHAGoMW+OD2yNLv/A0X2ITiEViZHm6SGHCIaKu4yJI5g3cmMqfA47
SP+jZCNFprSyp6N+QkMisEM7bLwlYJscYkgYhE5AiBMq7+97kLHKUT/jS+MWKAew
Q94bhnUnBC9jDmqDSVkgYwmL9117aOOlU1J/ulV9nOnZiy80GcguOsv+lBwv4ipo
48bRDqf1qXa5PcCPakdrfVRtChC4ik9XWS81BRJ0rYKxBsKLtCL8BnReOqWsmRfs
N/fbJOxmmJDKcQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:14 2026 by rpki-client