This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
File: pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json)
Hash identifier: RmkHhSH78SzXmfknvVBbPnLP0f9jqc9rUAljEMXMWUg=
Subject key identifier: 66:7E:F2:8D:A6:0F:8B:F6:1D:1A:79:79:B8:43:FC:4C:2B:7E:3A:D2
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial: 019C42463CD492EB7089E7D20B0FDAADDAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
Manifest number: 0EA5
Signing time: Mon 09 Feb 2026 12:00:25 +0000
Manifest this update: Mon 09 Feb 2026 12:00:25 +0000
Manifest next update: Tue 10 Feb 2026 12:00:25 +0000
Files and hashes: 1: O4sAh3xkbKW8_1R4ygmeymIKXCo.roa (hash: 3590EWq8UBW+NRuB0qqAJxA1WOGNS1btb/g2MoAacyw=)
2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: h+P/qmCAf6I/zOQXQw0XS9F97kzoQv35kOR3/S2LqAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:3c:d4:92:eb:70:89:e7:d2:0b:0f:da:ad:da:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Validity
Not Before: Feb 9 12:00:25 2026 GMT
Not After : Feb 10 12:00:25 2026 GMT
Subject: CN=667ef28da60f8bf61d1a7979b843fc4c2b7e3ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:34:a6:38:63:09:eb:14:12:94:2f:84:31:
f4:6e:1c:7c:c4:9c:68:64:24:85:44:b3:31:22:a4:
41:ff:e0:30:f3:7f:08:46:06:5a:62:12:05:d7:be:
a2:87:87:40:50:a5:e9:6d:47:ea:ee:48:42:ae:28:
e8:d6:de:4d:89:19:1b:3b:ec:82:8d:6a:90:9e:73:
3d:ae:37:b6:61:6e:b2:a5:17:8b:2d:6a:e2:84:8b:
7e:ad:c1:a7:4d:00:6a:8b:43:4e:29:bc:d8:f2:7a:
c4:6c:00:1c:ae:f2:d4:23:ff:b1:76:fb:74:1f:fa:
a8:a4:7c:9b:f6:38:2d:47:76:79:f4:f6:53:a8:b0:
11:ae:a8:34:a9:f2:8a:6e:0e:54:d2:b8:a6:87:c9:
c6:a1:4a:48:34:1a:c9:05:d5:01:f3:3f:a9:c7:52:
42:5c:c0:90:d5:9f:96:2d:e1:86:31:30:37:5a:c0:
f0:8b:bb:97:ee:9a:15:cc:03:0a:d4:7a:56:27:84:
e0:84:a3:16:5b:33:52:c9:5a:39:88:92:d9:82:4d:
43:96:70:d5:a2:d0:bd:53:07:72:98:5e:56:22:15:
2e:fe:b0:04:c6:f7:73:c3:1a:3a:ed:1b:d8:13:49:
f7:22:13:43:37:c3:f4:9e:c8:93:d6:0b:25:22:5c:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7E:F2:8D:A6:0F:8B:F6:1D:1A:79:79:B8:43:FC:4C:2B:7E:3A:D2
X509v3 Authority Key Identifier:
keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:08:a9:bf:a2:d7:c9:f6:56:1e:e8:76:ec:16:4a:85:1b:82:
cb:e0:ac:ea:c7:c9:5b:cc:a9:2d:80:c2:e2:33:8d:13:ee:c8:
f8:7c:29:9b:3b:56:bf:e5:c7:d8:d6:1a:db:ed:69:23:9c:06:
56:ae:d7:dd:16:14:ac:93:bc:ce:e2:bf:c6:3e:f7:36:d5:16:
07:57:15:b4:e5:d6:e1:0c:66:e1:6a:b9:b1:9a:58:00:11:4b:
c8:e2:0f:e4:50:5f:2a:e4:4b:e7:b3:37:5c:3d:92:f3:86:a4:
12:c1:41:41:43:de:52:17:7b:94:a0:11:18:d9:70:56:69:77:
42:97:73:b6:df:2f:90:13:88:2b:61:42:49:e0:0a:1c:b8:40:
61:00:59:a5:cd:8a:74:60:15:ce:f7:76:d0:71:6c:85:3b:a2:
66:b9:25:99:38:20:87:67:21:53:06:13:07:3d:2f:73:27:72:
32:a5:f0:23:d2:68:fa:a1:32:b9:62:77:fb:03:33:4f:17:42:
4d:b4:2c:43:0c:32:aa:3e:6a:ec:48:02:6d:d2:e3:83:46:3e:
4e:6d:f9:51:42:ad:1b:72:15:47:55:06:3f:d9:e9:a1:b7:47:
28:ca:a3:e4:db:89:74:bd:f5:2e:bb:eb:50:e3:5b:83:f5:c4:
4e:8f:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:28 2026 by rpki-client