This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: FXk/kKqih/RMMDu/AtglsgTyidHjUN6j2Tur9721GwM=
Subject key identifier: 20:4A:2C:30:F5:3B:75:F6:B1:26:6F:1D:10:CC:9A:00:B5:0B:A9:4F
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 019C42EB60BEB5B427F16F337755C93794AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 150E
Signing time: Mon 09 Feb 2026 15:00:47 +0000
Manifest this update: Mon 09 Feb 2026 15:00:47 +0000
Manifest next update: Tue 10 Feb 2026 15:00:47 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: 7n0+aqUfmobT+nxVQQ/Ae9rhK73FeyRiEtvJUIx9PGo=)
2: l-MTLKLVkCPLyVnX6_jxbVIMUkY.roa (hash: ntncx83xvrR7GXBUBSWIBKho03vJeQ/rhh6Pkr3gi58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:60:be:b5:b4:27:f1:6f:33:77:55:c9:37:94:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Feb 9 15:00:47 2026 GMT
Not After : Feb 10 15:00:47 2026 GMT
Subject: CN=204a2c30f53b75f6b1266f1d10cc9a00b50ba94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:c3:0c:0d:3f:a3:fc:a8:2f:d3:85:37:ab:
b7:73:21:47:3a:3b:14:12:f8:c9:d1:06:7a:51:12:
56:76:88:13:d2:11:97:21:b9:03:1b:fb:53:5f:96:
6e:02:df:c4:a9:d3:33:ad:37:18:be:96:ec:fd:e8:
6e:7d:08:7f:fd:a6:5a:33:64:ee:7c:13:f0:8d:b6:
58:37:d6:20:f0:db:12:a3:4e:b2:38:29:43:03:aa:
68:9f:6c:99:a3:ab:79:93:a6:19:1d:c9:1a:10:86:
f9:cc:e0:91:ec:c9:59:24:51:1f:71:1f:a5:f8:1d:
c6:94:17:11:f0:15:20:83:61:26:f4:3c:ad:14:17:
7f:62:89:6c:96:0c:30:f8:69:b8:c6:bc:d4:0a:61:
d4:d8:55:dd:ec:54:3d:14:0e:9d:6a:1a:0f:28:10:
e1:a4:9b:16:57:a8:ae:b7:12:68:b3:e7:11:fe:2f:
da:70:68:9c:b0:e0:b4:1d:4a:5e:e3:83:55:f2:5d:
bd:84:4f:8b:b5:6e:ed:23:ab:47:7d:a1:b1:29:04:
ce:87:ec:43:8d:63:2a:6a:c2:b9:23:03:0d:86:13:
2e:4b:ff:e1:32:ce:4a:4f:ba:3e:52:5c:58:9e:c7:
4d:65:ff:91:75:cf:10:36:c4:30:60:ca:57:b4:df:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4A:2C:30:F5:3B:75:F6:B1:26:6F:1D:10:CC:9A:00:B5:0B:A9:4F
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bd:b4:c4:e2:86:76:2c:cb:27:e9:99:9e:2d:27:03:fd:28:
bc:12:ae:24:7e:93:fa:51:28:5b:d9:f7:31:a7:77:5a:dc:4b:
82:43:18:5d:08:4f:8a:39:dc:c7:be:23:3f:4a:c7:86:a2:48:
ef:d0:e9:b1:7c:23:8c:74:b5:53:60:81:74:4f:a1:dc:6c:cf:
2c:cd:13:6e:e1:3f:21:e3:0f:23:35:10:66:f4:3d:a3:eb:05:
9f:4e:d0:22:47:fd:12:e2:1a:85:24:87:f6:f1:34:27:cb:50:
fc:12:5b:55:13:df:41:eb:46:85:af:d2:78:a8:0d:ef:7b:14:
e7:77:ff:6b:42:6f:bc:73:9e:9f:34:9b:e8:72:52:ea:3c:07:
6e:ff:92:a6:f2:01:87:bb:83:66:6c:43:05:80:1e:f0:ab:43:
1d:b4:14:b1:c6:5a:af:eb:6d:86:c6:a8:4a:6a:11:9d:a3:21:
d3:c6:a7:c3:ae:59:48:a8:60:6b:d4:a0:cf:33:31:2a:79:fa:
e3:6c:57:6e:34:fa:a7:5e:27:46:5e:54:74:8d:94:ad:91:89:
ee:37:1c:ee:91:3e:15:f6:03:33:fd:c1:07:1d:f6:8b:0e:16:
8b:56:77:f1:e2:9a:a7:a9:16:8d:84:28:6e:f5:6f:66:49:19:
ca:e8:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:46 2026 by rpki-client