This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File: PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier: k3Ndxj9+EesmjZtW0oLYF5BYHnO1SdSRLnFRvmMqQBU=
Subject key identifier: CC:D0:E9:F0:41:FF:D0:37:7D:A0:0C:2C:82:0D:67:54:93:35:EF:36
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer: /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial: 019C43FD9258EA942BE5AB7807FAF84362B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number: 1338
Signing time: Mon 09 Feb 2026 20:00:17 +0000
Manifest this update: Mon 09 Feb 2026 20:00:17 +0000
Manifest next update: Tue 10 Feb 2026 20:00:17 +0000
Files and hashes: 1: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: 5Ce3x+R18nMjjCHeFNd4El3MuTFKK24mx/LQ5DAqATQ=)
2: fL10Ig4d3crLZGY9ylUsNdJrhx4.roa (hash: 59cphjVnvRGhN51MwGpM2RBhtTLQE+TadVntWntgkw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:92:58:ea:94:2b:e5:ab:78:07:fa:f8:43:62:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Validity
Not Before: Feb 9 20:00:17 2026 GMT
Not After : Feb 10 20:00:17 2026 GMT
Subject: CN=ccd0e9f041ffd0377da00c2c820d67549335ef36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:bf:fb:9d:be:28:d1:f3:28:98:60:67:50:
f3:2b:55:07:c1:77:4c:95:3b:7e:bd:a0:51:ca:97:
88:4f:e4:a1:5e:09:06:6d:6f:80:b1:f4:a2:29:8d:
fa:e5:96:e9:99:68:cb:84:ca:c0:0a:3b:c6:b6:17:
55:ea:c2:d5:0e:22:54:09:59:e3:ee:66:17:ae:57:
fb:f3:85:ff:0d:5a:2f:4e:4b:89:87:06:29:34:d6:
e6:dc:2c:28:0e:61:bc:95:60:01:a0:69:92:d7:08:
6e:57:70:9a:1b:68:c1:f7:9c:32:33:9d:59:3a:61:
d6:9c:5e:eb:91:81:3c:2f:41:a9:bd:e4:7c:69:bf:
fd:8c:15:d4:5e:fd:51:bb:06:85:27:cb:c0:e9:95:
5e:7d:4e:ed:41:fd:9f:96:84:cf:30:79:9c:99:9c:
94:15:2c:ca:79:8d:b5:15:64:43:e6:40:a5:7b:31:
36:d4:f0:a5:63:56:3f:98:bb:10:ea:3d:09:bc:12:
61:50:24:d6:06:77:5d:06:4c:91:b7:39:4d:25:89:
da:0a:f0:fa:dd:76:96:ef:19:0b:6c:91:fa:38:86:
f2:fc:5c:cd:be:2a:72:93:fe:3f:11:25:f2:e2:8e:
e1:fe:6d:8f:d2:0f:63:06:0f:3a:70:fe:9a:ee:6e:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D0:E9:F0:41:FF:D0:37:7D:A0:0C:2C:82:0D:67:54:93:35:EF:36
X509v3 Authority Key Identifier:
keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:45:a9:93:6c:25:42:37:1c:b1:98:2b:e5:ec:de:3d:92:a9:
02:e4:cb:ef:31:bb:61:55:24:26:17:6e:fe:20:6a:bb:a0:fe:
9a:1e:99:ad:2b:e8:c7:47:cd:6e:4b:78:fd:c1:32:36:f7:cb:
17:2e:1d:4a:e4:7f:f7:3f:9e:5e:83:cf:9c:06:3b:6f:17:84:
c9:c6:14:b8:bc:bd:b0:7b:4d:ff:25:cf:17:84:e2:af:0e:e8:
57:fd:34:81:fd:28:4f:4c:50:f8:4f:8f:c7:2b:83:d2:79:66:
6d:e3:c2:51:c7:8f:6a:22:21:ca:1a:63:d7:b1:a0:27:37:1f:
0d:83:d6:62:e4:8b:e9:64:29:34:2f:a6:db:77:89:02:0c:99:
b3:7f:fd:39:cb:9b:6b:f3:2b:ce:fd:7f:b7:a5:34:0b:bd:7f:
18:0d:ef:8a:6d:e8:5c:77:48:57:79:50:2f:ca:12:5a:b6:c8:
4b:0d:4a:69:54:d4:7f:72:dc:6c:ea:ff:cb:4f:b7:79:5b:ec:
00:ba:34:55:ea:cf:f2:c1:ee:b9:ab:65:cb:84:f8:50:2e:4d:
b6:03:13:58:d0:c5:58:99:52:09:66:bf:7b:cc:22:cc:a9:d3:
2e:3d:07:92:3d:97:d7:d1:39:97:ef:b4:21:83:ca:fd:3c:1e:
2b:38:fe:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:57:00 2026 by rpki-client