This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
File: PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft (raw, json)
Hash identifier: IIqM8ikz/+hvmcCR3uQy3guEWri+kitZmENrBpXmEJM=
Subject key identifier: 3E:30:3B:16:81:C5:BB:DC:6C:99:D5:22:71:5C:D4:E8:17:A0:02:26
Authority key identifier: 3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
Certificate issuer: /CN=3ca447fd0979b8a989355c354d304d114d20727a
Certificate serial: 019C42EADD3AC3B087E6FD0BCB52814B2C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
Manifest number: 04EE
Signing time: Mon 09 Feb 2026 15:00:14 +0000
Manifest this update: Mon 09 Feb 2026 15:00:14 +0000
Manifest next update: Tue 10 Feb 2026 15:00:14 +0000
Files and hashes: 1: 3ozsuY79It-DMdWFEyLhstJbsHI.roa (hash: zjtvqxxsFQq22pHgPm5ML4HBHgnWmrbjfRUKAtA9O/c=)
2: PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl (hash: pnRu0qpWTcn3tYrxjiB6ikAvTDW5lT+s9ioNYoP8RqE=)
3: Rfqa8OJ2kQsd8ZG_LegzwW5IjHg.roa (hash: bd9vTzTkuvRXu3qYlvcAWmBvwcVPHwkBDQ7+v06V9d8=)
4: dGvFgDTa9c-WyY5c2fus0GTGmYs.roa (hash: 1KB6ISgMwSKc5X/zQ0taoCJinEVqBhQhQ69Q8uCNRZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:dd:3a:c3:b0:87:e6:fd:0b:cb:52:81:4b:2c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca447fd0979b8a989355c354d304d114d20727a
Validity
Not Before: Feb 9 15:00:14 2026 GMT
Not After : Feb 10 15:00:14 2026 GMT
Subject: CN=3e303b1681c5bbdc6c99d522715cd4e817a00226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:29:67:6d:e2:90:f1:74:eb:a4:25:af:2a:
65:92:f0:41:b8:4e:63:ea:2b:28:75:6a:09:df:49:
18:bd:b9:75:04:83:a9:db:a5:7d:d9:44:47:a9:96:
18:53:4b:a3:17:f0:21:fc:05:9f:cc:eb:24:b8:6f:
fd:f5:22:c7:d6:3b:6c:d7:3b:88:f4:95:63:b8:7e:
8b:7c:bf:b4:49:3d:93:d1:67:53:2f:d9:17:f0:19:
f7:9d:44:a3:8e:33:3c:f2:20:db:21:fa:0a:37:97:
bb:2a:92:6d:d5:33:26:3b:1c:d3:10:82:a8:36:6e:
68:ee:96:e1:3e:4d:30:a4:dc:28:41:a3:51:c9:29:
0b:8a:2d:bc:47:ad:bd:84:f6:ae:ce:92:9f:b8:34:
79:42:de:92:40:45:1c:b4:61:ca:7a:40:a4:ba:87:
86:c3:b7:a4:9d:54:b5:ed:90:20:3c:2a:67:8b:a4:
70:9c:7c:a5:6a:e0:46:60:25:bc:1c:54:f1:c7:07:
9f:93:94:3b:1b:bf:54:40:5e:e4:49:1b:3b:73:6f:
be:3c:5f:6b:fe:d6:0a:7b:91:07:fd:24:1e:e7:c5:
45:a4:19:8e:f0:1b:f7:3e:60:97:81:ce:e6:2a:29:
d8:ff:50:b9:44:7f:c0:d6:4c:1b:1b:98:19:be:60:
56:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:30:3B:16:81:C5:BB:DC:6C:99:D5:22:71:5C:D4:E8:17:A0:02:26
X509v3 Authority Key Identifier:
keyid:3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8f:56:ad:3f:f4:a5:38:c3:b0:9b:e6:dc:98:92:68:00:a7:
8c:31:d7:3b:ba:9d:34:3f:4d:0d:44:6d:a4:e0:88:b5:e3:e5:
4a:bb:fb:b1:ff:3e:6c:d0:99:47:c4:93:88:43:98:65:3b:78:
d2:d5:9f:9a:a5:b3:90:8d:6b:1e:5e:e5:d2:39:5d:a2:5b:34:
79:bf:a3:e2:4c:f4:0c:3c:12:f2:20:7a:f3:8f:ba:ad:53:7c:
d1:54:89:f8:05:6c:d9:5c:84:82:c0:cc:21:d0:9f:cd:32:c5:
e4:f7:7f:fb:8d:b3:0f:b9:8b:3a:99:9f:79:12:26:7b:c8:43:
cd:3f:4d:39:69:c2:5a:41:63:30:fc:d8:ad:30:05:56:41:48:
f7:32:e9:82:78:68:71:f8:d8:44:e1:30:63:1e:be:60:aa:25:
d9:a5:7b:ed:8b:60:f5:67:e6:d1:77:fb:c0:72:33:ae:18:9f:
01:d4:f6:ef:92:39:d5:4a:a7:38:2c:4b:7e:e4:8e:2f:38:cc:
76:35:d6:f0:f6:35:a0:9a:b5:5c:2f:5c:26:0b:50:83:21:ef:
a1:c6:7d:08:16:1d:b1:60:51:77:b7:cc:e5:15:06:66:5f:85:
7e:a1:da:d7:a3:2e:53:a0:4c:8b:31:a7:93:ae:c9:04:31:81:
f5:02:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:12 2026 by rpki-client