This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
File: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft (raw, json)
Hash identifier: 4l+ARM2B7yWWyo76I+ulI68m8uzDazbqWqbSCCM/Mpk=
Subject key identifier: B6:CE:6C:9F:05:B8:2F:2D:52:FE:CC:0B:DD:CF:C5:EF:47:1B:0B:55
Authority key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Certificate issuer: /CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Certificate serial: 019C41D8A897F7999814CEAE1D205C3E3E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 10:00:43 +0000
Manifest this update: Mon 09 Feb 2026 10:00:43 +0000
Manifest next update: Tue 10 Feb 2026 10:00:43 +0000
Files and hashes: 1: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl (hash: kIp+UeldhWxnwM2NZJqwcdqbuxTYPiPRZf7Uc09jtNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:a8:97:f7:99:98:14:ce:ae:1d:20:5c:3e:3e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Validity
Not Before: Feb 9 10:00:43 2026 GMT
Not After : Feb 10 10:00:43 2026 GMT
Subject: CN=b6ce6c9f05b82f2d52fecc0bddcfc5ef471b0b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:5e:b7:ee:89:34:4e:cf:2d:26:2d:a1:6f:
52:a7:84:7f:cf:9c:2c:9b:8d:f6:1e:5c:bd:c0:68:
18:6d:e7:d6:49:6a:af:b3:79:2d:18:35:71:7f:31:
01:5f:1c:e5:49:df:25:6c:dc:bf:9e:e5:52:bf:86:
12:d4:aa:51:96:b9:46:f3:a6:87:78:2f:9a:56:6b:
4c:c9:0f:3c:98:59:95:d2:9d:22:1a:21:90:37:4d:
7f:44:51:e4:d2:55:b2:31:1c:eb:e4:b6:45:79:ef:
1b:14:80:68:cf:69:82:7e:3c:c7:0a:8a:a2:55:ba:
0e:09:f3:78:b0:60:6c:4f:ac:67:3d:ff:01:46:f9:
51:5d:58:d0:40:25:28:89:87:6b:bb:b6:16:59:2b:
e8:bf:65:0d:8d:c2:af:15:eb:86:6d:26:28:46:d8:
6e:ef:6b:68:29:22:11:d1:59:9c:e2:49:8d:c8:a0:
0f:a8:08:c2:8e:24:a5:8e:fb:dc:13:e9:d5:ae:37:
80:49:61:01:11:de:71:39:dd:7a:a8:9d:7b:17:aa:
b8:cb:ea:ff:33:5b:49:79:88:f8:49:12:16:ca:06:
ec:d1:40:91:41:27:1f:0e:25:b2:c4:9b:3c:c6:c1:
69:8a:e2:f4:d7:65:35:32:e8:ac:d8:bf:c3:b8:ca:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CE:6C:9F:05:B8:2F:2D:52:FE:CC:0B:DD:CF:C5:EF:47:1B:0B:55
X509v3 Authority Key Identifier:
keyid:3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e9:6e:c5:53:72:ba:a8:a3:c1:5d:d6:cb:b0:31:a7:7d:31:
2d:39:15:4d:ac:ce:31:cc:cc:4d:ed:32:2b:58:6a:b2:05:f4:
6a:30:fb:2f:16:f6:6f:0b:b1:35:f3:bb:30:0d:a8:70:d2:e3:
4f:89:78:b8:7d:e0:7a:0d:fb:6a:57:da:ea:04:2a:4d:23:bf:
f1:80:e8:2b:18:b4:f1:20:4c:1f:a2:8c:c4:c6:12:9e:d9:48:
2a:45:d9:0f:8f:75:af:16:df:12:10:cc:c1:7f:fa:3c:ee:ab:
5c:0b:7e:a5:c5:2e:82:be:38:5d:7a:82:9a:ab:2f:8c:6b:f7:
82:9f:e4:35:1a:0c:9f:da:2f:69:19:3f:05:4b:33:1d:bc:c9:
66:64:10:ff:b1:ed:37:b8:90:41:d7:15:f3:ab:7f:b8:0f:b2:
d4:82:0c:1e:df:bf:6f:f1:70:a2:13:3e:71:37:cd:78:ec:f3:
e6:e4:92:54:9a:4d:1d:ea:c7:6d:89:6c:3c:aa:e0:1b:dc:65:
48:95:e5:7b:fb:e8:b4:12:8b:86:48:40:ac:f8:13:f2:2c:97:
85:09:cf:60:cb:35:c5:d4:1d:ff:82:dc:1f:41:8d:8d:a2:0d:
55:de:1f:a2:06:32:0f:e3:6a:bf:6b:34:88:5a:35:f1:d9:3c:
9a:bf:2e:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2KiX95mYFM6uHSBcPj4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjNhYjczMDUzMDQ3OTJkYzJjZTgxNzgwYjVkYjg4OWQ4
ZjdmM2EwHhcNMjYwMjA5MTAwMDQzWhcNMjYwMjEwMTAwMDQzWjAzMTEwLwYDVQQD
EyhiNmNlNmM5ZjA1YjgyZjJkNTJmZWNjMGJkZGNmYzVlZjQ3MWIwYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwpet+6JNE7PLSYtoW9Sp4R/z5ws
m432Hly9wGgYbefWSWqvs3ktGDVxfzEBXxzlSd8lbNy/nuVSv4YS1KpRlrlG86aH
eC+aVmtMyQ88mFmV0p0iGiGQN01/RFHk0lWyMRzr5LZFee8bFIBoz2mCfjzHCoqi
VboOCfN4sGBsT6xnPf8BRvlRXVjQQCUoiYdru7YWWSvov2UNjcKvFeuGbSYoRthu
72toKSIR0Vmc4kmNyKAPqAjCjiSljvvcE+nVrjeASWEBEd5xOd16qJ17F6q4y+r/
M1tJeYj4SRIWygbs0UCRQScfDiWyxJs8xsFpiuL012U1Muis2L/DuMqPVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbObJ8FuC8tUv7MC93Pxe9HGwtVMB8GA1UdIwQY
MBaAFD8jq3MFMEeS3CzoF4C124idj386MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlPcmN3VXdSNUxjTE9nWGdMWGJpSjJQZnpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mN2RiOWQtZmNkOS00ZjIxLTkxYzIt
NjAwMzNkNWIwM2JiLzEvUHlPcmN3VXdSNUxjTE9nWGdMWGJpSjJQZnpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mN2RiOWQtZmNkOS00ZjIxLTkxYzItNjAwMzNkNWIwM2Ji
LzEvUHlPcmN3VXdSNUxjTE9nWGdMWGJpSjJQZnpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguluxVNy
uqijwV3Wy7Axp30xLTkVTazOMczMTe0yK1hqsgX0ajD7Lxb2bwuxNfO7MA2ocNLj
T4l4uH3geg37alfa6gQqTSO/8YDoKxi08SBMH6KMxMYSntlIKkXZD491rxbfEhDM
wX/6PO6rXAt+pcUugr44XXqCmqsvjGv3gp/kNRoMn9ovaRk/BUszHbzJZmQQ/7Ht
N7iQQdcV86t/uA+y1IIMHt+/b/FwohM+cTfNeOzz5uSSVJpNHerHbYlsPKrgG9xl
SJXle/votBKLhkhArPgT8iyXhQnPYMs1xdQd/4LcH0GNjaINVd4fogYyD+Nqv2s0
iFo18dk8mr8unw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:51 2026 by rpki-client