This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File: PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier: s0djdDNmzioeeTMv2cwezfNIJXQfh6LVtlzD0c1Rzlc=
Subject key identifier: 0E:F2:99:DE:C0:E4:8F:BE:12:13:3E:F1:D2:C0:4C:D6:59:D6:7C:99
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer: /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial: 019C427D6E7E6C63261E4532C3410CAD3E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 13:00:42 +0000
Manifest this update: Mon 09 Feb 2026 13:00:42 +0000
Manifest next update: Tue 10 Feb 2026 13:00:42 +0000
Files and hashes: 1: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: RrjpGBzBv/wb5+Sh1lTmaswFEDOsrncnrCr6F6x7IIY=)
2: m5c3Kp4r9aaG4JXnWoVgbW6fzLM.roa (hash: zFQk8P7qdiOsDme61W/zQfVewpw/uX39LK39s6ZU7J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:6e:7e:6c:63:26:1e:45:32:c3:41:0c:ad:3e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Validity
Not Before: Feb 9 13:00:42 2026 GMT
Not After : Feb 10 13:00:42 2026 GMT
Subject: CN=0ef299dec0e48fbe12133ef1d2c04cd659d67c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:c3:c6:29:e5:51:c9:fa:d3:65:e3:50:9b:
13:92:36:88:2e:53:e3:2e:85:b3:e9:11:b0:9e:75:
c5:55:39:ab:d0:6d:70:db:98:42:4f:1e:35:fa:63:
08:62:5a:94:39:1a:81:d3:bd:bb:e4:62:4e:31:cc:
08:60:5c:f7:3e:04:92:d8:67:90:66:7b:de:1e:2c:
58:0c:63:ee:76:9c:34:3e:a9:0e:bb:fc:39:d5:5f:
b7:1a:c9:3f:98:38:75:7b:60:f1:aa:f6:d3:ed:86:
ad:09:37:5e:cd:97:70:df:0b:ef:ee:ff:37:f4:ba:
78:d5:1a:4f:2d:9f:cd:28:b8:a1:38:10:f5:03:f6:
24:c3:48:e7:82:cd:9e:b1:52:4a:42:38:79:14:35:
f2:9f:8c:6d:f5:ed:67:1f:4f:ed:b5:6d:0c:b8:5c:
a3:17:89:2d:2f:f3:cb:c4:e8:08:c6:59:10:30:28:
84:16:90:6c:5c:78:5f:ce:5d:66:9e:bf:21:73:cc:
b3:95:df:ef:08:ad:1f:45:09:dc:21:60:66:93:dc:
47:64:26:ee:d1:2c:fb:64:88:28:93:72:f3:cc:cf:
b1:4d:52:09:6e:03:46:68:d6:fa:21:70:39:21:bf:
c0:29:d7:25:3f:f4:73:08:52:72:de:c6:80:10:8a:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F2:99:DE:C0:E4:8F:BE:12:13:3E:F1:D2:C0:4C:D6:59:D6:7C:99
X509v3 Authority Key Identifier:
keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:35:ba:57:df:a3:3b:95:8d:28:5a:fe:6c:9c:58:02:e9:04:
63:bc:19:cf:13:d7:5d:6f:69:de:8d:f0:5e:45:c7:51:93:5c:
ed:d8:ef:ed:e2:cb:11:bc:9a:bf:2e:35:f4:f4:8d:71:9c:d4:
be:11:dc:74:a2:29:6b:88:12:22:db:69:fb:e3:12:7d:58:ee:
7a:29:db:c7:32:3e:da:cf:68:b9:c2:c3:d4:75:ac:dc:05:78:
cb:4d:6e:f3:d0:61:46:2b:8b:45:d9:1e:85:1a:2b:4a:bb:0e:
a1:53:ce:95:6e:3a:30:66:92:88:25:11:d1:07:6c:18:d5:d6:
e4:d1:c0:1e:83:ec:87:19:46:45:b6:c1:0f:aa:9d:4c:66:be:
5c:eb:27:9b:92:12:89:e4:4e:b3:5e:20:29:3d:f8:82:03:b0:
45:3b:15:1a:1a:d0:d1:1e:b2:a2:58:b4:0e:66:1d:7d:3f:fe:
01:cd:6d:29:91:f6:33:14:ce:31:8a:7a:0b:81:e0:71:da:d6:
a8:d8:a2:5e:21:47:90:f8:0d:53:66:d6:d6:96:35:b0:95:68:
d2:cc:5c:a1:32:f9:ec:cb:3c:5e:c2:dc:a5:4e:37:e4:b6:22:
8f:e5:c5:14:5d:e9:45:a7:29:bc:18:cb:b6:16:23:38:c1:c5:
9b:cf:3a:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfW5+bGMmHkUyw0EMrT4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTFmYWJlOWYwYjNlOTc3ZjhlMDgyOWMwYmY1ZjA4Nzgz
ODQ2NjgwHhcNMjYwMjA5MTMwMDQyWhcNMjYwMjEwMTMwMDQyWjAzMTEwLwYDVQQD
EygwZWYyOTlkZWMwZTQ4ZmJlMTIxMzNlZjFkMmMwNGNkNjU5ZDY3Yzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvATDxinlUcn602XjUJsTkjaILlPj
LoWz6RGwnnXFVTmr0G1w25hCTx41+mMIYlqUORqB07275GJOMcwIYFz3PgSS2GeQ
ZnveHixYDGPudpw0PqkOu/w51V+3Gsk/mDh1e2DxqvbT7YatCTdezZdw3wvv7v83
9Lp41RpPLZ/NKLihOBD1A/Ykw0jngs2esVJKQjh5FDXyn4xt9e1nH0/ttW0MuFyj
F4ktL/PLxOgIxlkQMCiEFpBsXHhfzl1mnr8hc8yzld/vCK0fRQncIWBmk9xHZCbu
0Sz7ZIgok3LzzM+xTVIJbgNGaNb6IXA5Ib/AKdclP/RzCFJy3saAEIqtSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7ymd7A5I++EhM+8dLATNZZ1nyZMB8GA1UdIwQY
MBaAFDyh+r6fCz6Xf44IKcC/Xwh4OEZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEtINnZwOExQcGRfamdncHdMOWZDSGc0Um1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mN2ZlOWItNjlhZS00MjA2LThkNjYt
ZjY2MGE1N2UyZGQ1LzEvUEtINnZwOExQcGRfamdncHdMOWZDSGc0Um1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mN2ZlOWItNjlhZS00MjA2LThkNjYtZjY2MGE1N2UyZGQ1
LzEvUEtINnZwOExQcGRfamdncHdMOWZDSGc0Um1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTW6V9+j
O5WNKFr+bJxYAukEY7wZzxPXXW9p3o3wXkXHUZNc7djv7eLLEbyavy419PSNcZzU
vhHcdKIpa4gSIttp++MSfVjueinbxzI+2s9oucLD1HWs3AV4y01u89BhRiuLRdke
hRorSrsOoVPOlW46MGaSiCUR0QdsGNXW5NHAHoPshxlGRbbBD6qdTGa+XOsnm5IS
ieROs14gKT34ggOwRTsVGhrQ0R6yoli0DmYdfT/+Ac1tKZH2MxTOMYp6C4HgcdrW
qNiiXiFHkPgNU2bW1pY1sJVo0sxcoTL57Ms8XsLcpU435LYij+XFFF3pRacpvBjL
thYjOMHFm886fQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:28 2026 by rpki-client