This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
File: pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json)
Hash identifier: pswssF3E0ZtNecv+gcqp7nsys9x8ArJsrAbIcyfBdN8=
Subject key identifier: 1E:D8:84:E1:73:94:DE:C2:02:94:C6:19:7E:56:1E:6F:84:25:E2:D0
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Certificate issuer: /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial: 019C424675B9BF2FB8000BD7476191512CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
Manifest number: 01F6
Signing time: Mon 09 Feb 2026 12:00:39 +0000
Manifest this update: Mon 09 Feb 2026 12:00:39 +0000
Manifest next update: Tue 10 Feb 2026 12:00:39 +0000
Files and hashes: 1: lha0ZmedDVL5ojeX6XufkbgdzDc.roa (hash: aql9eZoUUBsK6RGXxorryRAzls71w3x+Yu3C3M/JeMA=)
2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: eYLESuPC8jPaPzzcwTVuXpVh1CIY+xukUP+rpFIre0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:75:b9:bf:2f:b8:00:0b:d7:47:61:91:51:2c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Validity
Not Before: Feb 9 12:00:39 2026 GMT
Not After : Feb 10 12:00:39 2026 GMT
Subject: CN=1ed884e17394dec20294c6197e561e6f8425e2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c7:9f:d8:ef:34:6d:d0:7b:89:06:04:9e:bc:
74:ee:7a:c1:e1:2a:66:09:e2:51:a4:64:27:bd:49:
82:98:6e:45:7d:3f:c2:20:bd:7e:56:5b:ed:2c:83:
50:0b:5a:83:96:e6:ab:99:aa:fb:81:22:3d:23:fa:
85:d6:00:60:47:bc:7c:e8:ff:ff:8b:cf:cf:36:27:
ec:0c:cb:42:c9:bd:00:b6:77:b6:9a:99:4e:dc:7e:
25:7d:45:23:c4:2e:84:2d:ba:4d:d1:a5:34:c9:df:
de:70:aa:48:17:a3:68:f5:9c:35:69:43:3e:3c:94:
bc:28:bc:ce:bc:d0:e9:e8:e4:2b:6f:96:eb:b7:4d:
43:73:24:55:63:da:7c:80:50:1f:68:93:b6:b8:3d:
d1:d5:f6:2f:cf:41:f6:bf:37:7b:9b:5d:c6:35:a4:
d0:c3:d1:e1:30:5a:c6:13:60:3a:60:91:3d:e3:03:
89:79:92:06:44:d3:52:78:c1:3d:eb:81:e7:74:60:
ba:38:0d:bc:17:25:95:de:ec:51:3f:a0:6a:29:4b:
2c:91:f8:f0:11:f4:f3:e1:8a:02:cf:00:aa:65:85:
f3:32:2d:23:67:15:d0:e7:10:5b:d2:29:e4:34:2b:
b1:de:94:52:80:bd:5d:d5:23:be:3d:78:17:c7:a8:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D8:84:E1:73:94:DE:C2:02:94:C6:19:7E:56:1E:6F:84:25:E2:D0
X509v3 Authority Key Identifier:
keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:96:46:8e:50:25:28:c0:3d:0c:0a:2c:d5:10:e2:c9:3f:ab:
69:40:f7:45:c6:87:12:ab:6b:40:90:52:d8:4e:3e:7e:9e:31:
e4:82:9c:65:9a:4a:49:ae:a7:ff:f6:64:99:35:83:e3:b6:4e:
e5:76:56:84:e2:c5:23:f1:ef:54:f1:10:14:eb:26:03:ae:ba:
53:e6:12:b2:4e:be:04:c8:d5:d1:9c:aa:3b:07:6b:c2:90:91:
a5:35:54:9f:b9:0d:bd:72:43:7e:ff:66:9e:8a:80:34:ff:cd:
02:f6:37:3c:42:d0:48:69:23:73:5f:6c:08:a1:65:b2:62:24:
a4:8a:aa:8f:ab:42:19:2e:3b:cf:9d:59:a4:7b:7e:a7:d7:e8:
50:90:db:f7:a8:95:19:14:ce:a6:c6:58:0a:3d:92:37:ee:a0:
b3:8c:0d:65:66:a6:fc:b6:a0:9a:f8:9e:b7:20:23:a2:5e:a7:
c3:5d:4e:cf:95:92:21:8f:bf:2d:67:5e:91:95:7e:97:5d:f6:
01:d5:27:b3:91:0b:33:35:99:0d:89:24:dd:e4:06:70:6b:77:
c8:a1:88:c5:36:be:97:2c:08:c3:a2:06:92:0f:75:93:41:46:
22:15:90:c0:f8:da:3c:83:2a:57:81:19:88:0c:68:f1:cb:ac:
b4:83:59:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRnW5vy+4AAvXR2GRUSzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjRjMTY1NTVkNmYwM2I2ZDZjOGQwYThjY2JlMWFmMWVh
ZWM0M2EwHhcNMjYwMjA5MTIwMDM5WhcNMjYwMjEwMTIwMDM5WjAzMTEwLwYDVQQD
EygxZWQ4ODRlMTczOTRkZWMyMDI5NGM2MTk3ZTU2MWU2Zjg0MjVlMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicef2O80bdB7iQYEnrx07nrB4Spm
CeJRpGQnvUmCmG5FfT/CIL1+VlvtLINQC1qDluarmar7gSI9I/qF1gBgR7x86P//
i8/PNifsDMtCyb0Atne2mplO3H4lfUUjxC6ELbpN0aU0yd/ecKpIF6No9Zw1aUM+
PJS8KLzOvNDp6OQrb5brt01DcyRVY9p8gFAfaJO2uD3R1fYvz0H2vzd7m13GNaTQ
w9HhMFrGE2A6YJE94wOJeZIGRNNSeME964HndGC6OA28FyWV3uxRP6BqKUsskfjw
EfTz4YoCzwCqZYXzMi0jZxXQ5xBb0inkNCux3pRSgL1d1SO+PXgXx6iffQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7YhOFzlN7CApTGGX5WHm+EJeLQMB8GA1UdIwQY
MBaAFKT0wWVV1vA7bWyNCozL4a8ersQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBUQlpWWFc4RHR0YkkwS2pNdmhyeDZ1eERvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kOTQyOTQtNzk5OS00MDA5LTlkZDYt
MjU2N2Y0YTliMTM5LzEvcFBUQlpWWFc4RHR0YkkwS2pNdmhyeDZ1eERvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kOTQyOTQtNzk5OS00MDA5LTlkZDYtMjU2N2Y0YTliMTM5
LzEvcFBUQlpWWFc4RHR0YkkwS2pNdmhyeDZ1eERvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJZGjlAl
KMA9DAos1RDiyT+raUD3RcaHEqtrQJBS2E4+fp4x5IKcZZpKSa6n//ZkmTWD47ZO
5XZWhOLFI/HvVPEQFOsmA666U+YSsk6+BMjV0ZyqOwdrwpCRpTVUn7kNvXJDfv9m
noqANP/NAvY3PELQSGkjc19sCKFlsmIkpIqqj6tCGS47z51ZpHt+p9foUJDb96iV
GRTOpsZYCj2SN+6gs4wNZWam/LagmvietyAjol6nw11Oz5WSIY+/LWdekZV+l132
AdUns5ELMzWZDYkk3eQGcGt3yKGIxTa+lywIw6IGkg91k0FGIhWQwPjaPIMqV4EZ
iAxo8custINZaw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:41 2026 by rpki-client