This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
File: 0PMTtkDG3nU1uB7GjEDubsmf_00.mft (raw, json)
Hash identifier: np/pDJCrUJ/LIT/bkHoMDY5sju1NnL9Qm2m+re/32EY=
Subject key identifier: CA:3B:61:E5:B0:31:84:87:71:81:7E:6D:F9:AF:1F:09:E7:BF:6D:5E
Authority key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
Certificate issuer: /CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Certificate serial: 019C420F505F3E12D80815FB86E15C0B998C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
Manifest number: 0941
Signing time: Mon 09 Feb 2026 11:00:25 +0000
Manifest this update: Mon 09 Feb 2026 11:00:25 +0000
Manifest next update: Tue 10 Feb 2026 11:00:25 +0000
Files and hashes: 1: 0PMTtkDG3nU1uB7GjEDubsmf_00.crl (hash: ZRzaYFZ9bwpj2MhumaZa1s/yLJ9+qniywpStlBmxfU4=)
2: hGkf_qyDhU37-o9sEDt63JFfVyM.roa (hash: d3kiFkXGyIU+fZhFKa/d+1Nny2/miOmiUkEEuvkDS5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:50:5f:3e:12:d8:08:15:fb:86:e1:5c:0b:99:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Validity
Not Before: Feb 9 11:00:25 2026 GMT
Not After : Feb 10 11:00:25 2026 GMT
Subject: CN=ca3b61e5b031848771817e6df9af1f09e7bf6d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:6a:ca:f5:11:76:b5:69:4b:6e:07:8b:49:
8c:51:9e:68:29:c1:20:f7:9b:4a:55:1d:4d:0a:5f:
bd:1b:e3:c0:1b:47:bb:09:02:a3:dc:8e:b0:2b:60:
4c:a9:cd:fc:2b:66:91:af:94:64:25:d0:22:b2:e9:
35:61:d5:65:e5:7e:e6:65:ad:8a:9f:db:59:b0:03:
1c:b7:a3:5c:20:3e:45:70:9a:7c:5b:e2:87:7b:1d:
2f:e4:d1:0d:61:da:fa:f9:71:8b:b4:fe:90:b8:a4:
13:c8:d5:7f:88:42:12:44:54:d1:61:d7:59:a5:08:
bc:2c:bd:e6:8e:5a:3a:36:c7:42:8a:48:2d:23:81:
b0:2d:19:28:b9:1a:ac:c8:1f:e0:8b:5e:dc:1d:fa:
aa:08:93:55:0b:ea:97:57:b3:20:61:c2:5f:97:9e:
0c:8c:b2:d2:45:31:e4:2e:b8:c9:dd:dc:75:10:5e:
66:e4:64:e7:1f:4f:45:57:d3:a1:46:17:93:24:73:
7b:e1:c7:6d:35:33:9f:b9:09:7e:f4:2d:53:74:c2:
37:62:21:f9:70:2c:b6:dd:25:2a:52:7a:56:e0:8c:
58:55:6d:b0:ec:2f:36:38:cf:7d:e8:7f:f5:04:37:
51:2f:f2:b4:42:bf:4e:0d:8c:78:d3:48:b7:79:4a:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3B:61:E5:B0:31:84:87:71:81:7E:6D:F9:AF:1F:09:E7:BF:6D:5E
X509v3 Authority Key Identifier:
keyid:D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ed:97:a8:b7:9f:5e:16:ee:50:23:77:b1:aa:69:9b:82:e1:
ac:26:54:c0:9d:ac:9f:0f:cb:6c:f3:4a:6f:d5:07:56:db:00:
b6:5d:f5:c7:89:c3:91:74:37:27:c7:37:03:d1:51:f5:fc:48:
d1:99:e7:73:6b:2d:a6:70:c2:1f:51:55:b4:d8:70:d0:df:ef:
07:c4:60:dd:77:5c:47:36:a5:71:e5:93:2c:db:92:20:26:54:
2d:0d:22:63:04:51:cb:e1:14:a4:28:51:19:d2:7b:21:5d:59:
48:a4:94:32:0d:df:8d:09:69:ef:31:9a:41:72:23:e2:e7:06:
94:cf:4a:e4:02:fa:49:72:7c:e6:eb:1d:17:f1:3f:48:fa:5c:
df:2a:97:b6:ae:e6:58:07:d3:2d:31:da:63:14:a9:76:73:cd:
93:70:ed:d1:e9:d4:cc:30:dd:12:e5:80:bc:42:e7:8f:ca:4b:
bb:78:7c:d8:23:8c:02:11:ac:1f:eb:b4:f8:67:61:fd:10:9e:
d7:87:cc:08:d2:f2:68:0c:87:47:66:74:aa:c1:0b:e5:30:a1:
2e:6f:d7:98:06:47:db:35:22:10:b3:58:90:e8:49:99:69:41:
32:41:ef:91:f6:0d:21:36:d5:0c:99:cc:17:1a:26:b1:f8:c6:
19:e4:76:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:22 2026 by rpki-client