This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
File: pl-8tOowipiwk5diXmOGY4PBbdA.mft (raw, json)
Hash identifier: h62WuSJGGS0m2Yb2hb6pR24KyFgYDRPgvEBCD0LsKas=
Subject key identifier: 76:93:D2:10:40:EF:73:FC:F4:44:1B:FD:33:A2:82:18:48:0D:EE:E7
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 019BF319237F3861AE8A9DB94620F16816A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
Manifest number: 1241
Signing time: Sun 25 Jan 2026 03:01:09 +0000
Manifest this update: Sun 25 Jan 2026 03:01:09 +0000
Manifest next update: Mon 26 Jan 2026 03:01:09 +0000
Files and hashes: 1: Hp7ZxnJnTofRkI5yIDI7Zq99dYI.roa (hash: LDoLh+KsavvEWEveDP6iNRXft7TiHt7VWaryI9phpYQ=)
2: mZ4P89ydJFhQN4rY2f4PkVz254Y.roa (hash: Skt3qNUNcOa5hy1opbsaR3i/Q2rM/WSrwZEbE9IBS/I=)
3: nix55ZdCy-jiAbM3kDENoOmV2r4.roa (hash: fKHyNV7ttM6SvsWUs2Vebt6bVnHYHxU06lD/LcUsbsI=)
4: pl-8tOowipiwk5diXmOGY4PBbdA.crl (hash: p22wAdO7NwGZ3NX723uvVDa8yeQpa3EkPDLdOcLaw5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:19:23:7f:38:61:ae:8a:9d:b9:46:20:f1:68:16:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Jan 25 03:01:09 2026 GMT
Not After : Jan 26 03:01:09 2026 GMT
Subject: CN=7693d21040ef73fcf4441bfd33a28218480deee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:33:9b:59:06:fc:c0:88:f3:e7:01:72:4a:
d9:d1:41:31:22:7c:4a:e3:4f:c7:52:19:06:e4:2f:
79:78:88:94:5b:a7:77:0b:16:23:c0:a6:0c:22:f6:
38:09:14:be:20:af:88:fe:70:10:6c:cc:d7:eb:45:
d1:84:85:0c:e0:9b:d4:69:71:0f:a3:6c:d5:16:b3:
39:4d:82:c8:be:ab:0f:01:84:f9:7d:db:9b:a3:89:
68:62:3d:de:d4:b7:93:c6:05:2d:e5:37:b3:cf:17:
bb:e9:cb:9a:c7:41:57:1b:e1:05:38:74:b8:83:c2:
74:53:f0:d7:45:54:2c:a8:c5:92:42:e5:71:d4:41:
94:da:b7:d4:6f:f9:74:b3:08:7e:63:da:4e:24:bf:
b3:a5:42:dd:9b:e8:54:2c:a7:9a:5c:02:69:1e:91:
8e:aa:f1:21:fb:87:f2:92:a4:26:a5:3e:76:f8:42:
99:61:40:a5:70:c4:e5:b8:0a:64:be:f3:ce:a0:80:
b6:2e:b9:b0:22:f3:8f:1c:02:ca:c7:43:cd:66:76:
45:c8:57:14:eb:12:cb:fc:53:ae:51:a7:73:95:17:
ec:40:a3:a5:b5:5e:c3:74:2c:00:41:0e:93:36:48:
ab:7f:b6:37:de:68:13:3e:4e:67:47:8d:6f:82:7a:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:93:D2:10:40:EF:73:FC:F4:44:1B:FD:33:A2:82:18:48:0D:EE:E7
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:60:9b:6f:3a:88:1e:42:b5:b3:f8:db:df:31:62:2d:72:ea:
02:14:7c:1a:4c:4c:aa:ba:0d:f0:6c:e2:f8:a7:a9:6f:ef:9b:
cc:6d:26:a1:36:3a:74:c1:71:12:85:d4:0c:40:1b:ba:92:38:
37:d1:e6:7e:e5:04:c1:28:9b:64:4e:0c:33:76:cb:af:f2:7c:
9f:3b:cb:f3:31:fc:40:ca:2c:03:b9:fe:57:1b:99:41:58:25:
fd:9f:dd:05:73:ab:a7:9e:a9:5d:55:b4:00:42:8d:58:40:d0:
41:7a:0c:61:7e:ec:cd:21:ee:45:29:ba:00:a2:75:c9:78:22:
99:ab:20:a9:84:23:b0:96:5d:ba:5f:c8:72:26:e6:32:a7:4a:
a3:dc:e6:d7:67:7d:d5:8c:1c:0e:2f:86:2b:08:fa:0c:c0:0a:
d2:d9:ee:2d:8d:3a:3e:de:0a:70:90:91:fd:bc:be:61:d0:84:
88:d0:d0:25:48:9d:af:e0:08:7d:15:7d:85:31:a0:73:f4:5f:
fa:5f:57:f4:5d:6c:63:59:cc:4d:b4:11:b7:24:4d:0c:76:1b:
a3:c1:d7:d9:2d:06:5b:31:14:c1:2a:eb:34:91:01:f2:fb:bd:
a0:b1:ed:6b:69:50:e9:10:83:93:60:ff:c3:77:26:02:c2:ef:
7f:14:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:29 2026 by rpki-client