This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: od3KTdUQvcIOVXQK67Y+rSgCkF+bybJWLoTQ3fMCETs=
Subject key identifier: DD:18:DA:71:8E:18:8F:32:89:2B:6D:81:8D:19:E9:4F:C7:BD:B6:7B
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 019C420FE429F32D0261E073C3DA9836CF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 11:01:03 +0000
Manifest this update: Mon 09 Feb 2026 11:01:03 +0000
Manifest next update: Tue 10 Feb 2026 11:01:03 +0000
Files and hashes: 1: MvAQn98nXI-pzUTu-tvnQV3730A.roa (hash: MNGv8KMiMdRhLMioPsnMtgqiuDzFEe7d9ay8edeo/r8=)
2: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: lg8dHIjCpCIpty0DtJZYehBUkiIWt4KRIMlX5HkurFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:e4:29:f3:2d:02:61:e0:73:c3:da:98:36:cf:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Feb 9 11:01:03 2026 GMT
Not After : Feb 10 11:01:03 2026 GMT
Subject: CN=dd18da718e188f32892b6d818d19e94fc7bdb67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:e0:22:a8:44:e9:1e:bc:12:40:f3:8c:43:
d9:5e:02:bc:98:12:17:04:66:9a:10:dc:84:4c:3d:
e1:a4:62:0c:8e:7d:02:da:54:29:97:08:f5:ca:5c:
51:94:8c:65:ac:5f:ff:78:77:a2:c6:7a:c2:0f:0f:
b3:62:47:8d:b7:f9:5c:37:ef:c2:52:cd:ed:dc:05:
b4:c3:0b:2e:c0:b2:98:47:5e:ef:8d:9e:0c:30:1f:
81:7c:f1:60:3f:ea:d7:91:9b:83:0c:76:cc:f7:5b:
a7:60:4f:4a:6c:c3:4b:e7:40:ff:5c:4c:a3:9f:1f:
38:cc:03:fe:2f:4f:96:d5:ad:5d:9c:78:1a:0d:48:
90:89:19:3e:8e:6d:bd:3c:04:c1:41:75:2b:b3:0c:
b0:7d:a4:98:e1:9b:77:52:ac:a0:e3:65:cd:eb:a2:
e6:97:8b:72:76:3f:6b:ec:86:d9:72:98:56:a2:eb:
5d:1f:ba:c4:8d:e2:e4:b9:97:41:ec:c5:de:c1:bb:
4a:f7:f4:c3:f6:fc:fa:82:d8:2f:1f:d7:5a:a3:36:
b4:57:28:89:32:34:75:4d:31:56:9d:c2:1d:ce:bb:
09:8f:ea:80:94:0f:21:66:f5:f1:6a:9b:3b:15:60:
c1:93:29:4b:12:a6:69:64:8c:10:9e:96:40:b1:70:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:18:DA:71:8E:18:8F:32:89:2B:6D:81:8D:19:E9:4F:C7:BD:B6:7B
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5e:a6:74:0a:ee:17:a1:83:a7:95:02:47:50:7c:2a:97:25:
6c:4b:23:05:52:08:40:94:56:0f:6d:74:fd:c0:55:46:ce:b1:
4c:5e:a2:2e:61:03:09:5e:81:20:5e:27:da:48:39:be:6d:b0:
a3:f8:73:63:04:86:91:b5:67:ea:da:fa:63:5d:52:e8:25:98:
ac:ba:7a:51:84:4b:be:2b:83:23:01:68:44:03:d1:30:b3:a8:
02:ec:27:1d:f4:e5:6a:13:1f:05:59:fc:cc:3a:24:18:76:e0:
29:c9:25:fe:39:e0:dd:30:69:f0:f8:98:e9:7e:81:6a:46:b1:
70:a5:b5:49:da:91:60:c0:91:ff:8f:98:a1:3a:7c:a7:8d:a1:
56:1f:a5:0b:a2:8b:96:9d:d7:be:ba:06:a0:8b:2d:20:40:ec:
9e:3f:82:d8:ef:f0:9a:0e:5d:79:d3:f8:ca:b8:00:87:ac:69:
58:b1:69:ef:55:e2:cb:b6:ed:a3:ef:a2:6f:db:52:af:33:de:
1d:10:03:d8:cf:27:c5:47:5f:a3:5b:6e:6a:1a:c8:0e:59:19:
a1:3d:54:2e:ce:e3:80:2a:c1:2b:56:8c:f1:fd:9f:33:fd:00:
f4:1a:e5:9d:86:0b:b8:ce:c4:84:75:5c:36:4a:c2:f3:1a:90:
47:b5:02:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:17 2026 by rpki-client