This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: Jc7PLXHZvoZ/45v29lIR6X5RGvWxETvvcJDSTFBoVOY=
Subject key identifier: AF:1C:1A:41:B3:E6:4A:99:B6:85:CC:6B:76:10:C3:0E:4A:BA:C2:1F
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 019C43C735C2699C839867FFF435D2CF9587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 14B3
Signing time: Mon 09 Feb 2026 19:00:54 +0000
Manifest this update: Mon 09 Feb 2026 19:00:54 +0000
Manifest next update: Tue 10 Feb 2026 19:00:54 +0000
Files and hashes: 1: Kk8zKDuBw5v8OusgE_Xxlk9DnAw.roa (hash: xscBDT6c6gkdHFrRsZjyluPSGQ6QR97y0pWD2imFtVE=)
2: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: 3HKHMOdxnWE9cqjYL9juj81Alxte4gZC34iJZ8wdMeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:35:c2:69:9c:83:98:67:ff:f4:35:d2:cf:95:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Feb 9 19:00:54 2026 GMT
Not After : Feb 10 19:00:54 2026 GMT
Subject: CN=af1c1a41b3e64a99b685cc6b7610c30e4abac21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:7b:68:98:a6:40:c2:25:b5:c6:8a:3d:d0:
1d:a0:77:1b:30:0f:8f:48:5f:19:1e:68:f4:b9:97:
04:17:c5:39:0e:2e:b5:ce:76:23:c8:2c:23:9c:71:
cd:6a:eb:a2:6b:5f:20:69:8b:19:ee:15:92:85:97:
23:44:4a:83:c3:4a:b2:10:ba:1d:a7:97:20:b0:09:
cf:36:1c:77:de:5f:57:79:ff:be:53:35:b1:c3:e4:
60:6d:af:7e:12:70:e1:38:dd:45:ae:59:10:6a:9e:
0a:e2:a9:76:d3:82:39:6c:c2:37:a9:95:06:29:f7:
4f:b5:29:50:4b:b4:c0:35:d8:ad:5d:2f:3f:2b:a8:
a1:ed:7f:95:78:5f:53:96:a4:80:bf:3f:96:b6:66:
13:e2:a7:fd:ae:85:cf:85:85:f3:d5:0d:19:d5:42:
33:c6:14:32:23:f8:d1:8c:a3:ad:74:f3:f3:50:fb:
96:85:07:20:9d:4d:08:c1:8c:4b:94:f0:13:b1:24:
c6:c5:93:9a:94:a7:57:1b:69:db:d2:84:cd:fb:fd:
db:03:48:5a:32:b4:8b:d0:f1:cf:fd:00:42:ed:1b:
c4:5d:33:85:79:19:08:ee:53:dd:67:a6:09:4b:cc:
43:27:3e:18:37:1a:82:ee:0e:69:c2:15:de:9a:3a:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1C:1A:41:B3:E6:4A:99:B6:85:CC:6B:76:10:C3:0E:4A:BA:C2:1F
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:02:bd:2a:13:5f:3b:81:74:bd:1f:44:db:62:da:04:7c:81:
98:81:3e:54:33:5d:a0:9d:81:18:8b:24:07:24:da:1a:b9:b3:
06:ff:4b:e2:1a:3a:fc:e5:2c:16:2e:e2:94:26:64:1d:9c:33:
7e:84:44:88:51:3d:26:68:2a:92:e8:6c:69:b8:7d:78:43:62:
ef:88:e8:7f:a0:60:26:96:c5:46:2d:dc:0b:51:16:e5:70:a1:
fb:4a:a3:96:3c:60:17:02:47:c1:55:ae:85:9a:5f:e9:fb:e1:
ef:0e:c6:23:cd:75:cc:3f:9b:53:7f:9f:a4:6f:86:67:98:8a:
0d:e9:a9:d2:ef:52:0e:76:24:5f:76:eb:f6:8e:b8:24:71:3e:
5b:2e:73:65:96:a8:24:2a:7b:b9:6d:50:ff:34:af:71:e5:00:
44:5b:ff:87:6d:49:e9:53:51:4b:66:08:41:b8:77:ad:0a:35:
a8:98:2b:37:04:39:47:4f:c6:a4:ef:a7:ec:d6:fe:eb:ae:ce:
dc:22:b2:8b:c7:6e:07:d6:29:7a:1e:44:dd:06:9d:43:e4:5d:
cf:a9:c9:28:54:81:8d:25:99:b5:26:3c:6c:76:43:3f:5d:4e:
2c:98:d3:d3:d0:ad:36:66:52:bd:6c:01:9d:40:22:6b:76:33:
ae:f2:bf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:07 2026 by rpki-client