This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier: QpeZIFLSb1yZ2yg2fzEK/Shh8oCGCuUnqQyHVAFDTRY=
Subject key identifier: 34:52:D6:A5:26:FA:8F:2D:30:25:AA:24:AF:03:8D:81:92:8C:AB:E0
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 019C4358E29D2915E1FD1C7B384D7AFCDC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 17:00:24 +0000
Manifest this update: Mon 09 Feb 2026 17:00:24 +0000
Manifest next update: Tue 10 Feb 2026 17:00:24 +0000
Files and hashes: 1: lI1XK5SZ4unF2gsULOFdifpJAaI.roa (hash: rfS2OFj3wmP/4G5TYdNqf/vwvU8JRB0c9MwtD5rUi20=)
2: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: i0a7g/hki9oRynzrMYgILJlBUMyjyd82jKWVevJnncM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:e2:9d:29:15:e1:fd:1c:7b:38:4d:7a:fc:dc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Feb 9 17:00:24 2026 GMT
Not After : Feb 10 17:00:24 2026 GMT
Subject: CN=3452d6a526fa8f2d3025aa24af038d81928cabe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b1:db:5e:93:93:1f:24:da:85:60:22:9f:70:
03:24:31:f1:f6:9d:f6:77:94:0e:1b:b1:31:8b:04:
5b:e9:66:59:67:48:c2:98:11:de:ea:02:65:01:d9:
5b:0d:bf:a9:dc:7b:e5:8b:be:2a:22:88:4b:3f:7b:
a4:7a:49:b9:15:8d:db:32:aa:7a:06:b3:7c:48:7b:
9d:61:9b:11:73:56:2e:61:97:8c:53:65:12:00:ab:
78:84:6b:ed:cf:1b:2b:c0:24:31:fc:20:ce:7e:b8:
3d:b7:92:19:d3:cc:b5:f7:d7:5f:9e:17:76:cf:78:
4b:4c:26:2c:58:fc:63:ff:7e:3d:1e:e5:dd:31:99:
86:07:2e:ee:2d:b9:94:c8:be:b6:7e:9a:3d:95:77:
e4:63:a4:a1:90:e5:1b:43:4f:88:fd:3b:ec:27:2d:
06:fd:b2:a0:3e:1d:dd:20:24:44:8e:d0:3d:2f:6c:
57:7d:46:69:a6:63:dd:a3:1c:9f:b1:b6:3c:f6:c9:
92:62:d0:96:28:f3:fa:a1:3e:79:a9:aa:03:5e:08:
a5:49:33:0a:ba:90:e4:a6:e2:70:35:91:a3:08:93:
06:e7:83:2d:1a:58:7d:2e:da:2f:bc:f4:8a:d0:75:
03:b8:32:4e:f4:06:93:8c:21:09:81:70:d8:21:c7:
01:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:52:D6:A5:26:FA:8F:2D:30:25:AA:24:AF:03:8D:81:92:8C:AB:E0
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:74:93:7f:ef:0b:ab:5c:13:ae:7f:8f:de:ef:f2:8d:6a:35:
06:14:a9:09:a3:06:27:7c:cf:89:a2:10:c7:12:60:a3:9a:9d:
62:83:c3:b0:be:e9:c6:50:63:57:d1:79:62:8d:6a:48:9b:d3:
55:c9:0b:e3:10:84:3a:57:a5:56:51:4e:b4:8d:d5:79:2f:58:
b5:f5:c2:37:c0:c3:b8:63:f6:b0:fe:8c:78:f7:4f:17:ab:10:
da:9a:c1:d2:78:de:12:d7:14:89:e1:0d:1b:bd:01:e9:24:4f:
c9:d1:27:48:a9:34:3c:89:ec:1c:00:f5:84:a7:84:ce:02:8e:
a2:b0:63:8b:b4:82:ea:a5:27:d6:64:2a:26:a1:f3:ab:e2:83:
d1:1b:c4:1a:12:3d:af:06:12:0a:1c:73:e2:df:16:14:33:d7:
9f:fe:ca:ee:25:92:07:30:9e:8f:7f:36:6d:c2:d2:c3:f0:82:
46:88:83:7c:1f:67:d2:31:a6:b2:3d:b6:03:81:a8:7d:52:68:
78:f3:18:fe:89:70:12:dc:81:c5:65:67:6e:c6:1c:c7:60:a0:
69:7d:39:46:68:a6:ee:da:5d:f2:10:b9:b7:6a:1e:71:87:3d:
19:05:ed:02:79:15:36:71:4f:d6:7d:3c:4f:67:9f:6b:8e:fc:
f9:da:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:43 2026 by rpki-client