This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: ID7JUDFTpB58WU2TS4E3TPZXx0Z+OS8hjec0p6toUCE=
Subject key identifier: C7:CA:FE:28:E5:DE:6E:1E:5C:1B:93:D8:87:8A:A0:ED:FD:B5:36:85
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 019C427D763E5926A48FCC3FC0E826101CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 13:00:44 +0000
Manifest this update: Mon 09 Feb 2026 13:00:44 +0000
Manifest next update: Tue 10 Feb 2026 13:00:44 +0000
Files and hashes: 1: 9ue2agzfAIo35GmUAoRIfCasK3U.roa (hash: yFoHWICrkhwEa2l89NQ/jxElFE5J+GHyL3e0jPdDNQw=)
2: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: fFxa3BjVFJYncEw978QTIdyww+9A2ZlnvyW76bW3E5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:76:3e:59:26:a4:8f:cc:3f:c0:e8:26:10:1c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Feb 9 13:00:44 2026 GMT
Not After : Feb 10 13:00:44 2026 GMT
Subject: CN=c7cafe28e5de6e1e5c1b93d8878aa0edfdb53685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:51:f6:b8:ea:86:20:34:22:cf:4e:c0:87:
5f:c5:79:93:04:66:de:48:43:5a:27:e5:fc:57:bf:
07:2a:6e:44:54:81:d0:ca:52:45:bd:69:96:4b:14:
60:50:50:9c:e8:d0:c8:a4:cc:94:6e:b1:22:4d:d9:
6b:eb:68:4c:b4:0d:f8:38:80:3f:2f:3b:7b:36:e2:
85:1f:1f:25:49:7f:22:11:46:27:cc:34:8e:59:61:
77:72:d4:93:5f:4a:5c:03:9f:78:3f:ee:ca:af:65:
b2:17:02:80:bd:c3:02:b9:cc:df:fb:1d:ce:cb:05:
73:e4:a2:60:41:0f:a1:38:ca:3f:b3:be:a9:bc:4f:
bc:f9:67:5a:2a:4d:1b:6c:80:ff:f0:f8:e0:f4:47:
5e:2f:46:c6:19:6a:48:aa:18:4e:0d:20:ea:a0:80:
83:a2:1a:a0:10:0c:fb:3c:e4:a7:f7:16:0e:9e:87:
c7:e5:34:cc:7d:92:30:a7:18:43:9d:ae:3d:de:1e:
3d:28:32:70:60:32:f1:ac:b9:3f:4b:ef:9d:ee:d2:
31:14:3a:3c:d2:15:68:50:2f:92:43:1b:24:9a:00:
e7:46:b1:aa:b4:0f:13:11:58:3f:98:c6:57:79:1e:
03:87:02:e0:4c:bc:81:1e:23:51:b5:2b:ae:f6:ab:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CA:FE:28:E5:DE:6E:1E:5C:1B:93:D8:87:8A:A0:ED:FD:B5:36:85
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a5:b5:5e:9b:2d:fd:da:bd:ab:d1:a2:cb:bb:aa:30:ad:00:
5d:5d:1d:fd:1c:30:b0:b7:68:53:5e:67:bb:99:cc:96:56:05:
7c:31:f4:8b:90:aa:f5:bf:a6:76:69:0c:d7:89:81:e7:13:3b:
d9:fb:5e:3d:fa:5a:9c:b4:c1:9d:e7:d1:77:3a:45:6a:6c:64:
7b:4a:93:0b:f9:0d:ba:76:16:eb:37:a5:ef:34:e3:01:f7:a2:
e5:53:4f:30:72:0a:e5:c1:0d:24:c5:42:5b:89:c4:ff:64:4b:
c2:5d:cb:ad:16:15:3e:32:2f:8d:da:b9:c7:28:0b:1d:62:da:
f1:3f:56:43:8c:db:15:36:b3:93:d2:ea:56:72:e5:81:01:82:
a6:aa:db:b0:7e:b0:9f:d1:95:79:56:a0:c5:90:e0:1b:7c:1e:
98:8b:6c:b8:c3:3b:a3:4b:03:44:a5:83:1a:d6:fb:42:9d:0a:
01:a6:16:0f:e3:0d:32:51:2e:3b:c0:20:ef:87:c9:e9:40:9f:
1a:77:06:00:f2:74:b2:30:86:71:88:7b:a2:25:29:01:8f:fa:
3f:bf:4c:c2:7e:bd:a2:c7:97:4c:9f:98:d4:41:83:b3:24:16:
fb:43:25:88:31:18:3f:b2:3b:26:47:9c:d6:e9:e5:a8:e9:a9:
b5:1d:18:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:45 2026 by rpki-client