This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: H3cx/gdA7BGZBjVdkKK0JrYRonpQV53Wd/XfENDekgI=
Subject key identifier: 04:34:88:44:FA:1A:78:96:AA:97:76:F7:69:04:3A:67:9C:35:DF:BC
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019C28F4D36E2861E05058029BCBA760ABA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 0267
Signing time: Wed 04 Feb 2026 14:00:59 +0000
Manifest this update: Wed 04 Feb 2026 14:00:59 +0000
Manifest next update: Thu 05 Feb 2026 14:00:59 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: Sk7EJdEv3MXS2jXtDJBU4GXWRNbmcSFXJ/0pvCwOUTE=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:f4:d3:6e:28:61:e0:50:58:02:9b:cb:a7:60:ab:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Feb 4 14:00:59 2026 GMT
Not After : Feb 5 14:00:59 2026 GMT
Subject: CN=04348844fa1a7896aa9776f769043a679c35dfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:d0:51:46:40:ec:17:95:8e:ab:a3:7a:81:
f5:9b:c7:bd:ce:5d:4f:df:5a:68:41:55:be:98:43:
f0:01:5a:81:3f:0c:9c:1d:db:54:22:f4:1e:f5:a5:
5a:2e:d2:73:22:1d:b4:06:a6:94:9c:ee:75:30:bd:
a9:35:ab:a0:14:29:4c:8b:ef:c2:4d:76:25:68:f2:
ef:3f:94:1d:56:9a:6a:26:a6:72:81:98:6a:e7:89:
48:1d:ff:a1:b7:4b:dc:90:6e:f1:4a:a6:e1:d8:2d:
0c:70:90:99:6d:fb:fe:d2:0a:39:35:73:68:4b:88:
06:21:4e:ee:c5:7f:32:d3:10:01:07:57:25:b1:3e:
6a:4e:8e:c5:a6:39:79:87:9d:9f:64:f6:82:bf:75:
16:ae:8f:24:b4:83:0a:85:18:7f:db:39:7b:2b:0f:
c7:b3:ea:93:18:e8:3c:54:17:7d:29:74:8e:41:e5:
5b:55:17:1b:ff:44:82:f8:0d:e5:21:eb:78:9e:11:
52:89:48:5a:d2:9a:04:13:59:97:f6:e3:e0:69:eb:
5a:21:50:d5:a4:a3:96:6a:58:91:65:2c:c9:8a:32:
9a:14:7c:4a:17:1a:1e:88:fb:6d:7f:07:63:fc:7b:
db:50:cf:dc:c9:ac:6e:2b:e8:c0:a3:b7:3d:b8:4a:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:88:44:FA:1A:78:96:AA:97:76:F7:69:04:3A:67:9C:35:DF:BC
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b9:d1:ec:48:51:e5:dc:18:b7:28:03:d1:9c:17:1b:c6:5c:
73:d5:32:64:06:2e:a0:87:39:e9:19:83:d6:5e:da:53:eb:9f:
cb:8f:6f:f8:18:a8:f2:b6:19:06:14:1c:2c:5e:d1:14:f6:b1:
a5:1d:ba:31:3f:9e:17:9d:9d:3c:a0:5f:f0:aa:af:b9:95:7d:
70:6f:56:c2:30:42:33:90:33:96:b0:1a:1e:08:ec:53:98:d3:
79:41:f1:8c:cb:ca:80:a3:6f:b9:74:d5:3f:4c:dd:2c:9b:65:
54:0a:e0:24:94:38:aa:3b:fe:88:f2:75:04:0a:ae:e5:e8:d2:
01:4c:e4:ae:77:f1:9b:99:0a:0e:06:f4:a2:79:3b:6a:23:f0:
c2:71:a7:c8:5d:3e:2c:f3:05:ec:c5:85:21:f1:8f:3b:81:a9:
a8:58:28:33:12:25:48:ef:8a:f5:dc:83:d0:8c:9f:0d:73:1c:
17:20:29:c9:f2:f3:6c:07:f2:9b:b1:29:a4:ea:de:58:fb:f1:
16:cf:85:c2:db:9a:c0:b5:d8:4d:90:9c:09:0b:ad:81:fc:c9:
46:54:28:84:55:a1:50:f9:a9:8e:4a:9c:00:6b:66:ca:43:7f:
bf:17:a1:5c:a1:77:93:a4:52:55:e4:18:af:86:eb:69:0c:d5:
5a:d3:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 22:09:32 2026 by rpki-client