This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
File: pPwscnotINbRTRyACqzbLfEJPcQ.mft (raw, json)
Hash identifier: CHAMcLXJ0UjYSehGlTtTJpyIo6549y6yMvQIyn4B7Rs=
Subject key identifier: 58:B0:11:4A:EF:62:98:B4:5D:B5:E7:4D:97:F1:8D:7A:5D:91:95:78
Authority key identifier: A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4
Certificate issuer: /CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
Certificate serial: 019C427E29F456AE6E76B3D3476A8AD95BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
Manifest number: 037B
Signing time: Mon 09 Feb 2026 13:01:30 +0000
Manifest this update: Mon 09 Feb 2026 13:01:30 +0000
Manifest next update: Tue 10 Feb 2026 13:01:30 +0000
Files and hashes: 1: pPwscnotINbRTRyACqzbLfEJPcQ.crl (hash: h0idZ9uiEdLwLDegZqq0iA5QxnYyIyt6lXeAm7OMnZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:29:f4:56:ae:6e:76:b3:d3:47:6a:8a:d9:5b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
Validity
Not Before: Feb 9 13:01:30 2026 GMT
Not After : Feb 10 13:01:30 2026 GMT
Subject: CN=58b0114aef6298b45db5e74d97f18d7a5d919578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:56:ea:50:3f:81:ef:8c:56:48:53:a9:12:4d:
9c:5b:c5:37:9c:fa:be:72:e0:54:a8:1d:a1:42:30:
40:50:b9:e6:28:0e:82:ca:b8:f2:fc:c6:77:64:d2:
1b:95:ad:3c:41:56:4f:65:5f:c2:bb:c5:b7:3f:c4:
22:b1:38:9a:a9:dd:11:33:20:bb:5e:5e:92:bb:3e:
47:c7:e5:1f:be:6b:a2:00:69:5f:af:71:b0:9f:2d:
2a:96:b7:41:66:fb:b0:f8:fa:e6:aa:55:e5:a4:8a:
87:c2:89:fa:38:c1:0a:5a:66:b7:bc:c7:ca:10:4a:
98:09:cb:55:02:3b:79:6c:f2:e8:80:bc:34:3d:8d:
69:d4:2d:78:85:f1:09:ef:93:78:9a:a4:15:05:ee:
76:b4:f7:71:d9:41:f1:e0:96:5e:4c:52:04:d8:02:
bb:57:8c:fd:14:d1:70:2d:d5:cb:df:e4:74:85:a2:
f6:fe:ca:54:60:3d:64:ea:79:3a:0f:7a:58:9b:2c:
78:eb:4c:8a:56:2c:85:9a:e0:a1:ae:3e:c7:0b:36:
79:c0:a8:f9:57:a8:ce:40:00:86:c3:ca:b2:60:bb:
2f:c1:64:31:6e:52:ba:ff:c1:65:50:7d:43:a1:7c:
61:06:8d:d8:d5:df:12:54:c4:16:dd:4a:df:ec:61:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B0:11:4A:EF:62:98:B4:5D:B5:E7:4D:97:F1:8D:7A:5D:91:95:78
X509v3 Authority Key Identifier:
keyid:A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bd:91:e2:ff:0f:14:51:f3:9c:17:37:2d:71:78:75:60:ba:
54:56:17:fb:e4:f9:aa:c2:bb:e8:a7:be:ba:cf:5b:62:a3:8d:
3a:eb:89:cf:07:d7:f4:cc:38:fe:cc:41:75:91:1e:9d:57:43:
20:99:ff:66:41:11:83:36:08:5d:fd:77:f0:ef:c3:d4:7b:d1:
0a:9a:9d:54:97:01:75:8d:b7:bf:21:4f:ed:22:0a:88:93:ab:
32:71:6e:26:c3:c2:b7:20:72:4c:42:fc:41:b6:a5:0c:d0:0d:
66:6b:7d:59:9c:c1:f1:7f:5c:9a:6a:86:6e:fe:be:bf:3f:76:
ae:4a:8e:17:2c:20:09:01:e6:4f:50:46:0f:dd:79:68:e3:23:
06:bd:16:eb:d9:66:8d:08:7d:ec:ec:10:2a:f9:8a:ed:58:c7:
ae:81:52:76:94:6e:95:ce:5e:e2:e6:94:81:27:ad:ab:b5:c6:
89:7c:3b:d3:45:4e:f1:21:43:90:9b:7f:6f:07:7e:ae:00:66:
cc:18:3e:74:f3:a8:cb:98:8f:44:c5:8d:c3:58:e9:07:5a:32:
ed:a1:09:b8:af:89:32:94:5f:5b:d2:7a:f2:1c:64:69:72:71:
34:72:c0:ba:77:3d:62:b4:da:5a:22:fb:d9:3a:28:0f:ba:b4:
34:7a:8e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:03 2026 by rpki-client