This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: Puifo+N56fX9EbSJeZBs2UvS3HIiHVnOOssABdI2CK4=
Subject key identifier: 79:29:18:ED:95:A8:60:06:39:EB:5D:5B:B6:A6:6F:87:BC:E0:62:F5
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 019C427D90309FF92DF60C70E0FB82E564C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0DFC
Signing time: Mon 09 Feb 2026 13:00:50 +0000
Manifest this update: Mon 09 Feb 2026 13:00:50 +0000
Manifest next update: Tue 10 Feb 2026 13:00:50 +0000
Files and hashes: 1: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: VrC+dz7lovjRxos+3bfqPOijs2efBOQkHQtWQ0fmxxI=)
2: SaGiZjjt90SX7-BzKCTX7bYUJCE.roa (hash: shQxuuEzemQfoeUgl6rxwi+Wbc4ekvnlLIFK68Q9YjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:90:30:9f:f9:2d:f6:0c:70:e0:fb:82:e5:64:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Feb 9 13:00:50 2026 GMT
Not After : Feb 10 13:00:50 2026 GMT
Subject: CN=792918ed95a8600639eb5d5bb6a66f87bce062f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f2:47:9d:1e:c3:56:53:de:dd:68:5f:4b:47:
b1:c8:97:3a:39:b1:ad:d1:9f:14:3d:1c:52:f0:08:
d6:81:c8:8f:5e:5e:d4:6e:9b:2d:db:37:1f:a3:12:
99:ab:ca:91:f1:0d:e7:39:6e:99:5c:f1:35:69:2e:
f3:95:e5:e7:2a:bf:f1:75:8b:66:08:6e:ea:f4:ee:
d2:e8:b1:0c:03:45:26:5f:f8:7d:0b:0f:f1:e6:f8:
fe:ad:98:8f:46:ce:6f:a5:8f:da:08:a0:be:b0:3c:
0b:d6:ab:36:13:9b:98:80:19:47:d0:07:c0:d8:8d:
fe:1a:bd:cc:fe:7d:c1:05:8c:f6:ec:93:bb:a7:1f:
68:1e:fd:25:e6:82:24:e2:2b:a7:4b:38:98:0d:28:
97:b4:90:95:29:14:1b:ce:93:b1:a3:f8:65:51:24:
c8:67:d0:c5:65:e8:5f:90:29:60:f4:23:03:b2:8c:
b8:51:1e:7c:1b:4b:3f:58:a4:d4:aa:87:dd:40:32:
ea:c0:0e:1a:a3:4f:93:a6:8a:cd:6c:3a:37:74:9f:
05:e3:c4:1e:ba:d0:27:9f:98:ef:82:d8:be:5f:6a:
15:ec:13:a2:c7:a9:d6:ee:72:43:5c:72:7d:d8:66:
db:0e:ef:e9:98:e1:02:99:fb:df:76:0f:11:df:16:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:29:18:ED:95:A8:60:06:39:EB:5D:5B:B6:A6:6F:87:BC:E0:62:F5
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5a:fe:d7:c1:fc:87:c2:c3:80:10:cf:ad:14:5a:8e:ba:5a:
0d:a5:7c:4a:b0:a7:ac:42:40:44:87:da:e6:b2:21:0a:d7:3f:
41:bf:55:56:14:05:c3:28:5e:95:7e:e7:e3:24:b8:8e:d0:32:
49:b7:a1:e3:3e:1e:c8:fb:43:7d:48:e7:2d:fa:22:e7:98:8a:
66:35:91:c0:f0:01:34:19:80:7e:99:e6:dd:12:25:31:13:07:
67:39:00:27:70:dd:ff:e8:81:99:b2:0c:62:ad:2a:22:d4:0e:
ad:b8:c3:02:32:ad:f8:c3:4a:64:a2:9a:29:ed:96:af:92:89:
c8:fc:32:81:26:5f:4a:5e:75:f5:82:d6:4a:86:fe:a0:e9:b1:
dc:88:f5:20:cc:52:65:43:22:f9:84:9e:47:ce:1a:0e:85:69:
e3:65:59:49:62:0c:64:92:2b:a8:e6:d3:cd:49:0e:b0:3f:1b:
10:e1:67:f0:6a:c1:c9:fd:d3:78:31:f9:45:83:04:63:51:a8:
f0:ab:34:0c:e5:f9:6f:34:88:ba:bb:c4:35:98:c0:a7:0e:8e:
00:cc:b0:72:f5:04:63:8c:10:cb:dd:f3:74:5f:39:f7:e4:0a:
50:94:33:6c:dc:1a:29:00:7d:14:43:f5:9e:ec:6a:fa:42:6e:
19:8a:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:28 2026 by rpki-client