This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json)
Hash identifier: Ed9TAerjhfBQYfxhUc4i/mpJyvvZRGkFDrJFe8xYDW8=
Subject key identifier: 1A:0F:05:5B:DA:73:78:1E:4B:08:1B:5D:2F:1E:24:01:E1:28:00:41
Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Certificate serial: 019C42EB2953CC822CB2E708D78ED6CE8E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
Manifest number: 0135
Signing time: Mon 09 Feb 2026 15:00:33 +0000
Manifest this update: Mon 09 Feb 2026 15:00:33 +0000
Manifest next update: Tue 10 Feb 2026 15:00:33 +0000
Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: B5Q6HS+Tc8F3TFbSUT0Dwx6A2EHvFxR+LSWzR8ePtIk=)
2: U1VjosqpBiqy2ZFxYLqdYxKnum4.roa (hash: AvN5YNAvDxw0bLWGw+RbIchpQR/eRlfnMr+l8l+QHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:29:53:cc:82:2c:b2:e7:08:d7:8e:d6:ce:8e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Validity
Not Before: Feb 9 15:00:33 2026 GMT
Not After : Feb 10 15:00:33 2026 GMT
Subject: CN=1a0f055bda73781e4b081b5d2f1e2401e1280041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:85:91:e5:ea:4f:be:2d:3d:2c:d4:56:08:
86:3c:ee:0b:f6:d4:56:07:03:e9:4d:2c:2d:ac:47:
eb:e1:70:7c:b3:11:d5:21:68:5f:1c:87:4d:8e:99:
94:2e:43:38:09:ea:5d:58:a2:20:be:c0:ed:bc:a9:
2a:54:d6:a4:5d:2e:2e:5a:44:fb:a5:6d:c3:41:15:
71:20:85:e8:ff:a9:a0:c2:4d:3a:2d:dd:40:a1:a9:
f8:f2:b6:00:85:b9:f6:2c:42:a4:73:57:3f:34:7e:
39:1b:c2:26:24:fa:3f:1a:07:cf:bd:fa:de:7a:8f:
35:ad:fb:c4:3d:24:ad:64:8b:96:06:e6:6b:13:d7:
38:c7:27:b1:0a:75:28:9d:9b:61:7e:cd:88:17:64:
61:85:da:8f:cb:63:6d:79:f4:f4:90:e5:12:d8:83:
e3:7c:74:2a:05:44:0a:98:5f:ad:d9:c3:43:eb:50:
ae:7c:9e:4a:10:8b:11:84:1e:2b:01:8e:54:54:6f:
c1:3a:01:74:18:c4:f6:57:2c:64:86:53:ad:04:d5:
d5:ed:07:aa:96:17:77:bd:30:20:5c:46:f3:3d:58:
6e:89:de:4f:84:00:04:31:27:84:4e:4e:f7:41:c3:
76:77:05:e9:e3:0a:f6:af:b7:92:27:12:5e:e4:e9:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:05:5B:DA:73:78:1E:4B:08:1B:5D:2F:1E:24:01:E1:28:00:41
X509v3 Authority Key Identifier:
keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:27:24:18:04:08:72:d2:5d:38:e9:d4:69:34:fe:1a:a0:9e:
73:4c:9e:7e:1e:c2:f9:5f:55:59:74:d6:0c:e5:e6:ec:0c:5a:
fd:fa:f5:60:6f:ff:df:d3:bd:52:e0:70:25:2f:bd:46:34:0d:
c1:30:3a:e6:a0:68:b3:5f:30:dc:0c:71:a8:c7:b8:1d:ea:ca:
72:0f:4c:18:a6:30:a2:99:14:ae:88:51:04:b0:75:d9:d7:23:
ca:e5:b0:ee:cc:b5:77:4f:98:6c:58:7b:41:5e:e3:09:b8:42:
50:f3:e1:f3:d4:d3:e9:23:74:e3:fe:dc:04:9f:9b:cc:fe:ce:
53:b1:90:f7:f5:37:32:50:d2:64:fc:b6:d8:1f:b3:cc:7b:b0:
2d:25:c9:40:aa:2f:69:d2:a2:f3:69:0f:fc:4a:99:54:e9:09:
25:45:a9:c8:cf:ef:1d:62:c2:2e:43:d4:ac:ad:36:78:24:4a:
79:ca:96:71:62:fb:cf:22:0f:2d:b6:27:5d:b6:d2:16:e8:6d:
15:7f:87:c2:76:fc:de:1d:2a:df:61:11:8c:8b:49:49:23:2d:
2f:d5:84:35:de:23:f0:25:9a:86:72:b4:49:5b:14:28:99:56:
27:fa:b3:b8:9c:5c:2e:1f:31:d9:f2:9d:92:57:8f:7c:d7:23:
ae:5a:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:12 2026 by rpki-client