This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier: oVO9jLlq7Vbuvk4b+KOj+B75U1RUbDXX3YSDHTWNacQ=
Subject key identifier: 81:E4:2E:14:D2:7F:2C:1E:52:82:AF:23:F5:06:CB:83:09:B9:5F:8D
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer: /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial: 019C43FE0248DABAD1194CD3D146E7F1EB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number: 0A8E
Signing time: Mon 09 Feb 2026 20:00:46 +0000
Manifest this update: Mon 09 Feb 2026 20:00:46 +0000
Manifest next update: Tue 10 Feb 2026 20:00:46 +0000
Files and hashes: 1: T8H29xdvMM615tBBaetAKqxS1Lg.roa (hash: f1JOsohKbsQAHJoFy6fUS25sjpjOzZztTxeJ515Q3+k=)
2: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: yX952oxIKr4wy4D78heqtIOsFN3lknZIt/yCj6yDzBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:02:48:da:ba:d1:19:4c:d3:d1:46:e7:f1:eb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
Validity
Not Before: Feb 9 20:00:46 2026 GMT
Not After : Feb 10 20:00:46 2026 GMT
Subject: CN=81e42e14d27f2c1e5282af23f506cb8309b95f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:a1:68:02:0e:3d:c1:7b:2c:0b:ce:6f:01:
dd:82:ab:8f:94:cc:94:f2:14:75:55:f1:57:8c:2a:
4e:ac:7d:bd:78:c1:9e:15:44:6c:0e:a4:98:d2:2a:
ab:5d:a9:bc:74:34:c6:2f:97:bf:88:24:e1:cc:6e:
38:7a:2f:11:53:2a:04:22:79:74:a8:94:91:af:e4:
7d:5f:da:31:a2:5b:ab:0f:d4:26:cd:9e:38:3e:31:
dd:f1:af:ec:04:61:56:a9:c7:29:70:ff:01:02:5b:
9c:3d:67:e4:66:d4:ee:4c:db:88:0b:6b:ae:46:43:
af:a9:ef:b1:94:17:f1:d1:8d:8d:56:dd:b0:5e:17:
89:33:ea:ee:a6:fe:80:fa:e2:58:ad:e9:96:1f:ec:
7d:44:57:57:c2:72:93:2a:86:a8:0f:a4:dc:78:22:
6d:b7:75:65:fd:04:6b:22:1b:fd:d6:a8:42:fa:9b:
4b:d7:e2:c4:c7:05:1f:51:97:ee:9a:55:dc:3d:ff:
ae:c7:09:02:99:35:d8:5e:eb:c0:f4:e6:00:55:4c:
f4:d2:39:fa:6a:9e:31:f5:93:b7:a1:27:ae:f8:10:
f2:b6:db:99:7c:91:73:08:0e:29:51:97:71:0b:c2:
0e:d2:38:79:77:73:06:03:b5:3c:36:ae:66:0a:a8:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E4:2E:14:D2:7F:2C:1E:52:82:AF:23:F5:06:CB:83:09:B9:5F:8D
X509v3 Authority Key Identifier:
keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:06:11:00:e3:da:cd:16:f1:ba:2a:b3:9d:30:7f:06:50:af:
1b:b1:cf:4e:4f:ec:e7:32:60:d8:eb:53:40:bc:54:28:4d:58:
d5:97:79:de:b6:58:ae:44:fc:d9:53:b1:3f:38:c0:63:c0:ab:
15:fb:f7:4f:dd:55:91:7e:88:d1:b6:92:2f:eb:7f:36:a5:45:
54:11:4b:5e:84:48:82:63:2e:7c:09:f2:d1:73:34:a9:a1:c9:
f3:90:02:fe:d2:bd:1b:cc:eb:7d:5d:6f:88:13:1f:de:e3:8f:
27:b4:a4:f1:09:0b:61:be:21:91:5d:44:2d:4d:cd:c8:06:95:
27:5b:6f:96:31:f1:06:c6:30:f0:05:95:f9:be:6d:72:6a:8c:
76:e8:5d:81:3c:83:1c:1b:c8:81:ea:e0:59:b7:0e:a3:d6:4d:
08:46:54:24:02:ed:e6:bd:be:f0:59:79:c8:1b:10:38:62:b3:
70:02:e1:97:df:d9:5e:22:64:a6:de:e8:a2:b6:23:0e:8d:7d:
58:f0:8b:42:b6:10:51:e4:47:41:f8:72:ed:0e:f8:72:8c:63:
d2:25:03:a9:30:1d:09:c0:99:a4:6f:8c:98:71:0f:14:4b:09:
74:14:67:3f:2c:c6:0d:5e:0c:a4:22:03:a1:e4:21:a1:00:7e:
b3:2f:65:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/gJI2rrRGUzT0Ubn8euPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTE3ZDg4NWI2NzU2NzJmYzhlZmI4OWQ2ZTE0ZTIzNjc1
MDUyZDkwHhcNMjYwMjA5MjAwMDQ2WhcNMjYwMjEwMjAwMDQ2WjAzMTEwLwYDVQQD
Eyg4MWU0MmUxNGQyN2YyYzFlNTI4MmFmMjNmNTA2Y2I4MzA5Yjk1ZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iShaAIOPcF7LAvObwHdgquPlMyU
8hR1VfFXjCpOrH29eMGeFURsDqSY0iqrXam8dDTGL5e/iCThzG44ei8RUyoEInl0
qJSRr+R9X9oxolurD9QmzZ44PjHd8a/sBGFWqccpcP8BAlucPWfkZtTuTNuIC2uu
RkOvqe+xlBfx0Y2NVt2wXheJM+rupv6A+uJYremWH+x9RFdXwnKTKoaoD6TceCJt
t3Vl/QRrIhv91qhC+ptL1+LExwUfUZfumlXcPf+uxwkCmTXYXuvA9OYAVUz00jn6
ap4x9ZO3oSeu+BDyttuZfJFzCA4pUZdxC8IO0jh5d3MGA7U8Nq5mCqhP+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHkLhTSfyweUoKvI/UGy4MJuV+NMB8GA1UdIwQY
MBaAFKSRfYhbZ1Zy/I77idbhTiNnUFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8xM2JjMjktNGVmMy00MjFiLWEzMGYt
MTM0NGQwMmNmZGE4LzEvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8xM2JjMjktNGVmMy00MjFiLWEzMGYtMTM0NGQwMmNmZGE4
LzEvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAYRAOPa
zRbxuiqznTB/BlCvG7HPTk/s5zJg2OtTQLxUKE1Y1Zd53rZYrkT82VOxPzjAY8Cr
Ffv3T91VkX6I0baSL+t/NqVFVBFLXoRIgmMufAny0XM0qaHJ85AC/tK9G8zrfV1v
iBMf3uOPJ7Sk8QkLYb4hkV1ELU3NyAaVJ1tvljHxBsYw8AWV+b5tcmqMduhdgTyD
HBvIgergWbcOo9ZNCEZUJALt5r2+8Fl5yBsQOGKzcALhl9/ZXiJkpt7oorYjDo19
WPCLQrYQUeRHQfhy7Q74coxj0iUDqTAdCcCZpG+MmHEPFEsJdBRnPyzGDV4MpCID
oeQhoQB+sy9l6g==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:39 2026 by rpki-client