This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File: pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier: k/X0Q3aXEPIQELUOFQn5YT0bEQJMEheg2/Rn/LBiWTI=
Subject key identifier: 05:12:1D:AC:E7:6A:EB:61:08:D3:96:26:BF:48:B0:ED:DA:43:F4:AA
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial: 019C420F71F1D13A9D91E01EA14BE39BD2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 11:00:34 +0000
Manifest this update: Mon 09 Feb 2026 11:00:34 +0000
Manifest next update: Tue 10 Feb 2026 11:00:34 +0000
Files and hashes: 1: fczzCkb_2eHkiaUh2loE1L-X3Dc.roa (hash: yQHHlNkF+vXwUUV14v/AjylpWEMjSzOv1ynBII4ZKEk=)
2: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: kq+9p+Wxpqf3Xlzk7hnuXOMRnbF19/KIIfOOjKJ2Npc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:71:f1:d1:3a:9d:91:e0:1e:a1:4b:e3:9b:d2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Validity
Not Before: Feb 9 11:00:34 2026 GMT
Not After : Feb 10 11:00:34 2026 GMT
Subject: CN=05121dace76aeb6108d39626bf48b0edda43f4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:53:c1:95:4d:9f:7f:79:5c:62:d8:2c:4e:
35:48:37:73:d8:84:b7:96:ec:9e:cc:3a:7e:cb:71:
b5:50:07:38:d6:c2:94:ad:6b:cc:22:b1:cf:12:a0:
8f:85:31:4a:36:7d:a8:56:68:08:b8:d5:df:03:f6:
d1:55:e6:f2:37:67:82:9b:8a:31:fd:90:0d:20:12:
05:40:a4:17:d4:b5:1f:be:ae:09:59:3a:6c:f3:82:
2a:2e:dc:57:a3:e7:bf:88:f5:82:94:21:68:6d:4c:
f7:9b:12:20:fe:1b:ed:e5:ab:0d:ec:3e:de:1f:4c:
10:31:7b:ce:67:71:a4:4b:f2:4a:bc:7b:09:16:98:
b8:e1:af:25:d7:89:10:2e:33:9d:b3:d3:8d:6f:f6:
ff:2b:d9:b5:c0:1a:22:05:85:7d:36:bf:0c:89:45:
02:9f:34:f2:aa:c6:05:75:22:70:75:4f:41:4b:66:
8f:57:1b:83:3e:92:91:b9:a7:4a:2d:80:86:eb:54:
cd:be:c6:80:f6:ff:b1:d7:e4:cf:32:91:28:7a:44:
31:cb:44:9f:44:ab:02:21:61:23:82:a6:3c:63:e9:
a0:cf:f9:18:47:e5:1b:17:bf:05:1b:aa:7d:7d:69:
e9:c0:0f:93:27:b9:3e:da:8b:e2:dc:b8:d1:42:8a:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:12:1D:AC:E7:6A:EB:61:08:D3:96:26:BF:48:B0:ED:DA:43:F4:AA
X509v3 Authority Key Identifier:
keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cc:14:80:40:33:16:1b:e0:e2:29:d2:c6:db:4e:bd:40:d8:
9f:36:e0:0f:94:82:88:28:cf:aa:d6:7b:97:29:68:9a:41:da:
bf:b3:d4:f9:a6:92:2c:4c:02:21:5d:92:de:05:f2:1f:4e:0a:
7e:1a:cb:d3:aa:c8:ad:b0:32:ac:f4:2c:3e:ab:02:45:86:c2:
74:08:9d:60:38:0d:4c:15:e4:47:44:4d:0d:86:d4:9a:4a:f3:
46:f4:0d:69:09:ad:e1:2a:89:1d:9f:36:3b:52:83:ae:a6:2b:
ed:90:2b:0b:37:04:9a:d4:e7:92:7f:38:71:2f:e5:0f:33:e4:
26:75:e3:68:d4:7b:f3:15:10:f7:31:bc:4e:5f:d7:6f:88:88:
aa:ac:5d:4e:10:c8:6f:01:d5:72:60:3c:62:51:c8:53:ad:25:
40:39:e6:1d:d8:92:3a:b3:08:5b:5e:d4:5f:eb:75:00:25:c3:
84:46:d7:ca:f9:e9:71:32:60:4a:d4:ba:a9:52:e6:9c:9a:d5:
26:2f:3f:06:e3:b6:1f:0c:4d:02:e4:15:51:b4:fd:a8:12:48:
50:b1:8d:a0:8e:ed:e6:e2:1a:8d:16:f7:35:48:ba:26:53:5a:
8a:0d:38:8c:99:47:33:84:e7:02:c7:c0:41:25:26:aa:f1:f8:
5f:86:6b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:30 2026 by rpki-client