This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: HNOceW2OgsYdnTj/NMYc8PU3LnklM/c8W4Qv5RQyPak=
Subject key identifier: D4:A0:FE:E3:02:5A:56:A5:6C:85:80:69:92:85:15:D2:80:F1:DE:AA
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 019C41A17CBA838E5E7759FF4135973E8F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 057C
Signing time: Mon 09 Feb 2026 09:00:27 +0000
Manifest this update: Mon 09 Feb 2026 09:00:27 +0000
Manifest next update: Tue 10 Feb 2026 09:00:27 +0000
Files and hashes: 1: 3fJrjAYV-8WA5qmnNRu8vP1jkLs.roa (hash: UTNsuGJV1hBq6NhuyQF7exUAJYp789Ei8OqvCYeZo7o=)
2: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: /4J/3UCw9cm0bICl8EfcDbf3bS7vfGNxBRH7B4dQkVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:7c:ba:83:8e:5e:77:59:ff:41:35:97:3e:8f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Feb 9 09:00:27 2026 GMT
Not After : Feb 10 09:00:27 2026 GMT
Subject: CN=d4a0fee3025a56a56c858069928515d280f1deaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:7c:3f:80:e6:85:fc:8a:f4:81:b7:0b:ca:
fe:9a:7b:d2:ed:3b:c4:c2:18:d6:53:fb:b9:17:18:
e5:54:ab:54:c9:50:c5:02:df:d8:2e:e8:21:be:c4:
47:59:85:d2:6c:78:a4:6b:6c:9c:b9:76:f1:98:89:
4c:14:be:97:99:2b:17:0f:b9:24:f0:a8:bf:21:5e:
8e:b3:67:cb:1f:bd:df:cb:41:48:86:9d:ab:f3:56:
5a:9c:d8:af:41:cc:81:c5:c3:71:09:c9:c5:c6:2b:
d0:e1:63:0b:fe:e6:83:57:e6:d6:db:8d:a7:be:4b:
12:95:b8:15:ba:09:f9:63:5c:8f:3a:59:e6:9f:f6:
27:f4:2e:d1:4a:af:2e:8e:1d:e4:be:06:f0:49:34:
30:aa:95:11:45:b3:bf:19:71:e9:8a:1a:60:4e:9f:
71:ff:ab:ff:c8:1c:61:99:00:94:02:2f:1c:7e:8f:
c4:4a:3d:e4:5e:aa:fe:e1:a8:2b:76:cc:a7:ee:98:
d2:8a:27:e2:cf:0c:2c:59:5b:08:9f:54:05:75:cc:
12:4f:a3:3b:c0:d1:14:66:2f:1b:73:dc:5f:89:24:
65:09:55:b9:8f:a5:7f:e3:2b:be:c1:f0:01:ca:10:
bb:60:20:a6:e3:11:a7:11:fe:6d:85:81:e4:53:14:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:FE:E3:02:5A:56:A5:6C:85:80:69:92:85:15:D2:80:F1:DE:AA
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5c:a3:2d:65:3d:4d:cf:39:d1:10:51:34:bd:b0:a9:79:24:
d1:82:d1:41:d9:a8:07:02:b2:d1:12:bf:bf:fa:2f:8a:78:a7:
08:1c:bf:20:bd:9d:9f:f7:bc:66:49:ae:28:62:d0:2f:f3:a3:
bb:72:c4:ef:b6:df:01:00:70:b7:fc:91:f2:57:f9:11:66:be:
ec:a9:5c:92:ef:9b:a7:a6:b2:fa:e1:2f:6b:c4:79:40:51:8e:
ad:bd:8d:74:b7:81:08:b9:cf:a3:d2:e7:66:62:4c:19:12:78:
d8:8b:34:fd:1b:86:f0:1d:1e:c7:6c:5f:16:44:9d:ed:97:64:
9d:a3:9f:54:5c:8d:9f:1e:c9:47:31:7f:1d:fa:4a:5b:52:15:
13:2f:c9:6c:1c:71:ac:2f:a1:56:41:a2:d4:ec:7a:fd:04:79:
14:7e:cf:f1:fd:36:4a:c1:97:80:23:81:f2:3e:1f:a2:69:e5:
c6:54:5d:fd:70:0c:8c:ac:33:3f:a0:1a:1e:62:fc:d3:cd:42:
e9:c5:15:b4:27:85:fa:7d:27:92:6b:91:b8:63:99:30:b1:ad:
eb:40:bc:53:96:cc:ed:18:b5:e1:49:43:aa:09:dc:36:ce:75:
24:43:c0:37:fc:48:21:40:7b:4e:b0:bb:15:6c:b5:92:01:f8:
03:0a:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:12 2026 by rpki-client