This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft
File: NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft (raw, json)
Hash identifier: JalGugEU+yERP5gaFCXDZntUsbjBhvnovFh5cPpNBw0=
Subject key identifier: 73:FC:49:D7:27:46:9C:C2:90:55:29:40:A6:D7:4E:A8:CD:59:85:36
Authority key identifier: 34:E8:1F:FC:43:EA:8B:BA:DC:98:30:78:A1:9A:AD:54:7A:89:1D:A5
Certificate issuer: /CN=34e81ffc43ea8bbadc983078a19aad547a891da5
Certificate serial: 019C420FA2B330F2B7CFDE5A8024565907F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOgf_EPqi7rcmDB4oZqtVHqJHaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft
Manifest number: 0115
Signing time: Mon 09 Feb 2026 11:00:46 +0000
Manifest this update: Mon 09 Feb 2026 11:00:46 +0000
Manifest next update: Tue 10 Feb 2026 11:00:46 +0000
Files and hashes: 1: NOgf_EPqi7rcmDB4oZqtVHqJHaU.crl (hash: wxbefjA3vEKkoqOX2iGPiFVbLrZ0u0nwAzsXfoaFgeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOgf_EPqi7rcmDB4oZqtVHqJHaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:a2:b3:30:f2:b7:cf:de:5a:80:24:56:59:07:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e81ffc43ea8bbadc983078a19aad547a891da5
Validity
Not Before: Feb 9 11:00:46 2026 GMT
Not After : Feb 10 11:00:46 2026 GMT
Subject: CN=73fc49d727469cc290552940a6d74ea8cd598536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:5d:fd:99:ce:e0:8c:0d:4e:9b:b7:db:9f:
89:63:a7:14:1e:64:b2:aa:5c:e8:9e:3b:5a:63:47:
a2:c1:1d:52:df:61:e6:d9:2f:2f:e5:6e:5b:31:be:
42:62:73:bd:1c:57:71:a3:e7:cc:a7:80:9e:5f:bc:
1b:e2:c4:75:cf:cc:56:6d:aa:1f:d4:d0:a4:30:39:
27:85:b4:52:48:c2:e0:02:39:d1:45:ec:9d:65:09:
5d:c6:9f:56:c1:4e:d6:98:bb:a5:92:51:ab:0a:d2:
cf:d5:03:e3:79:6f:ae:a6:52:30:10:ab:5a:e8:c1:
d3:fd:47:48:35:06:29:df:32:a1:12:ac:1e:a3:86:
db:e6:7b:e9:28:0e:6f:1f:8d:23:b8:fc:c7:09:c1:
fe:1b:5b:32:fe:4e:84:62:4c:13:69:c3:31:91:34:
34:fc:e1:b2:be:89:2c:ed:df:9e:b5:4b:bf:84:77:
f7:a6:a9:40:9c:d2:9b:8a:42:72:6b:53:f0:89:a3:
7a:c9:bf:d9:d5:5b:e5:76:af:36:3e:33:23:d4:7b:
ae:77:b9:ab:21:e1:57:e0:5e:fa:f8:1b:d5:2c:7a:
0b:09:aa:33:93:e1:3d:c7:d6:b2:94:f3:79:e7:36:
5f:c9:2d:d1:b3:5c:15:5a:8b:47:c2:34:0e:cb:0e:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FC:49:D7:27:46:9C:C2:90:55:29:40:A6:D7:4E:A8:CD:59:85:36
X509v3 Authority Key Identifier:
keyid:34:E8:1F:FC:43:EA:8B:BA:DC:98:30:78:A1:9A:AD:54:7A:89:1D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOgf_EPqi7rcmDB4oZqtVHqJHaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e5:78:34:3e:ae:53:e4:a8:ca:1f:8f:b6:90:6f:dc:e9:a9:
54:1f:bf:66:5f:6e:06:fe:fb:e0:1b:f5:38:b9:9a:e4:be:ca:
ea:8c:4c:34:82:de:82:43:34:5c:6c:64:63:29:80:61:ab:15:
8d:71:43:90:3f:1a:74:39:27:2c:c4:1e:7c:7e:15:2d:24:cd:
81:9d:f0:a2:ea:56:a7:c7:51:0f:86:2c:28:a9:5a:4a:32:42:
45:66:33:2d:f0:be:0a:d3:a5:a2:3a:e1:f1:53:01:03:48:f5:
e0:b3:31:06:26:a7:fa:c7:f9:1f:56:9e:38:3d:21:0f:2e:b6:
cb:73:cf:90:54:0d:27:3d:34:b4:48:18:f1:9f:a1:93:e3:ef:
97:bf:8c:8f:9d:70:97:c5:10:44:0e:de:95:b4:39:e6:9a:76:
4c:75:a3:96:e8:e3:84:d1:05:8b:f6:4c:91:ba:ea:7f:34:18:
58:38:78:a6:b5:82:1a:f1:96:70:30:ce:4c:4d:2f:4e:34:cc:
65:45:b3:21:b3:aa:08:78:cb:7f:03:d3:6a:4f:08:db:09:ec:
55:9e:55:ef:f3:fa:49:5e:0e:e0:26:58:88:63:13:b1:6b:33:
2d:d2:fd:e6:91:a4:e8:7e:8b:19:a8:ae:83:66:43:76:02:32:
6f:6e:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:09 2026 by rpki-client