This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json)
Hash identifier: BUuJurlK4Ph/323ee3s+PApeUBzdBVbqWLeeWp50jO0=
Subject key identifier: C0:CE:C7:9F:8A:D3:65:9F:62:80:35:04:A2:C2:2A:72:46:E4:9E:D6
Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Certificate serial: 019C432247A90EA8229B9128D4201BBF5D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
Manifest number: 0E50
Signing time: Mon 09 Feb 2026 16:00:45 +0000
Manifest this update: Mon 09 Feb 2026 16:00:45 +0000
Manifest next update: Tue 10 Feb 2026 16:00:45 +0000
Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: jUqn7kdvD1Tzbp8LF4EreN8H/pHJ25E2PtavCCnwNX8=)
2: w9CRvvsYzgY0DlQQmWuMnS9mI2o.roa (hash: fUMokcIKd3DOh6naOLFCtJpr9vVF9HoG1tnLSbQmKeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:47:a9:0e:a8:22:9b:91:28:d4:20:1b:bf:5d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Validity
Not Before: Feb 9 16:00:45 2026 GMT
Not After : Feb 10 16:00:45 2026 GMT
Subject: CN=c0cec79f8ad3659f62803504a2c22a7246e49ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:31:54:53:1a:64:81:08:6f:60:58:6c:7e:
8c:b2:3c:ce:cf:b1:ae:00:60:ff:73:49:f0:51:05:
04:82:41:60:c8:50:75:6c:f0:8d:70:8d:20:74:f2:
c8:c8:1a:bf:88:1a:0d:f9:c3:38:24:86:81:0f:4e:
21:f4:b1:0f:0a:1b:bc:a8:b6:4f:f3:44:85:4c:20:
da:04:80:18:af:fd:57:92:8b:77:eb:61:70:85:ec:
45:ea:4a:67:61:48:e5:78:d7:52:2c:57:9e:3b:f5:
c7:db:d8:49:b8:77:c0:32:36:a9:42:09:da:10:3c:
61:38:f9:52:73:43:54:9d:7b:12:a2:98:d3:cd:71:
6d:1b:da:c6:8b:8e:f1:b6:63:18:ea:fd:ee:e0:2c:
01:15:ff:cf:7e:e3:15:a6:83:85:58:c2:9d:65:9f:
0d:5d:69:d2:ff:6c:0e:39:b7:6b:69:01:43:bf:39:
fe:68:f4:6c:c7:d8:65:ca:57:62:e2:e4:da:2c:33:
d3:d9:1e:e3:b7:b2:04:6d:89:3c:f1:6e:82:29:8d:
e7:ca:d6:bd:a7:42:c7:b4:e6:13:57:2f:01:dd:15:
c3:ec:91:61:e4:07:a1:db:70:5c:9d:56:99:51:4b:
1c:d4:0c:3e:d6:df:ce:16:88:08:60:25:fb:ab:e9:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CE:C7:9F:8A:D3:65:9F:62:80:35:04:A2:C2:2A:72:46:E4:9E:D6
X509v3 Authority Key Identifier:
keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0f:35:30:ae:9a:b7:4e:76:21:e3:3d:c5:ed:bc:2c:83:32:
67:bc:34:56:33:e4:3a:7c:e3:9a:98:73:e9:7a:ce:77:99:53:
a2:75:4b:04:2d:89:e1:2b:ed:3a:13:29:bc:68:7f:bd:5d:ea:
ee:29:08:f4:df:10:3b:d8:14:58:c1:c7:c0:58:f1:6f:66:c6:
f7:f6:6a:cc:8b:05:4e:a2:82:9b:54:d4:96:61:0e:09:d6:09:
d9:01:e3:4f:c0:c7:97:8b:f5:7f:c7:ae:bf:2e:00:e6:84:49:
96:56:a6:68:ba:43:d8:53:cd:5b:b4:ae:f0:f0:d2:17:7b:29:
f0:f2:04:44:b8:65:08:fd:cf:48:3b:e5:2a:89:33:f8:9f:f8:
a4:08:dd:d2:d4:cd:59:9f:ea:a7:61:e4:5c:f9:f2:cf:e5:39:
e4:de:bf:1c:ff:4b:0a:87:4e:84:55:d7:89:2a:5d:2d:13:27:
2d:c6:ba:2d:d2:bf:a8:a5:97:6f:cc:5d:bc:07:13:12:f4:33:
c6:6b:e4:b4:04:3a:8a:bc:2d:b0:18:4f:1d:de:2d:e9:25:89:
2e:c6:f2:cb:e2:fa:c6:82:15:05:ea:d3:54:95:cd:c9:b5:a8:
20:19:24:68:f2:78:74:06:de:eb:1f:76:55:a5:f9:a1:c1:3e:
52:30:0e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIkepDqgim5Eo1CAbv12WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzhjMDhhMDYzYWMyZDM0YTFiMTkxZTI0MzYzODliYmVl
ZDVlOTcwHhcNMjYwMjA5MTYwMDQ1WhcNMjYwMjEwMTYwMDQ1WjAzMTEwLwYDVQQD
EyhjMGNlYzc5ZjhhZDM2NTlmNjI4MDM1MDRhMmMyMmE3MjQ2ZTQ5ZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSwxVFMaZIEIb2BYbH6MsjzOz7Gu
AGD/c0nwUQUEgkFgyFB1bPCNcI0gdPLIyBq/iBoN+cM4JIaBD04h9LEPChu8qLZP
80SFTCDaBIAYr/1Xkot362FwhexF6kpnYUjleNdSLFeeO/XH29hJuHfAMjapQgna
EDxhOPlSc0NUnXsSopjTzXFtG9rGi47xtmMY6v3u4CwBFf/PfuMVpoOFWMKdZZ8N
XWnS/2wOObdraQFDvzn+aPRsx9hlyldi4uTaLDPT2R7jt7IEbYk88W6CKY3nyta9
p0LHtOYTVy8B3RXD7JFh5Aeh23BcnVaZUUsc1Aw+1t/OFogIYCX7q+nsewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDOx5+K02WfYoA1BKLCKnJG5J7WMB8GA1UdIwQY
MBaAFDR4wIoGOsLTShsZHiQ2OJu+7V6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xZjEwYzItMDJlMi00MzhhLTkwYTIt
OTE3YzM1NzdmMzRmLzEvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8xZjEwYzItMDJlMi00MzhhLTkwYTItOTE3YzM1NzdmMzRm
LzEvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJA81MK6a
t052IeM9xe28LIMyZ7w0VjPkOnzjmphz6XrOd5lTonVLBC2J4SvtOhMpvGh/vV3q
7ikI9N8QO9gUWMHHwFjxb2bG9/ZqzIsFTqKCm1TUlmEOCdYJ2QHjT8DHl4v1f8eu
vy4A5oRJllamaLpD2FPNW7Su8PDSF3sp8PIERLhlCP3PSDvlKokz+J/4pAjd0tTN
WZ/qp2HkXPnyz+U55N6/HP9LCodOhFXXiSpdLRMnLca6LdK/qKWXb8xdvAcTEvQz
xmvktAQ6irwtsBhPHd4t6SWJLsbyy+L6xoIVBerTVJXNybWoIBkkaPJ4dAbe6x92
VaX5ocE+UjAONw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:30 2026 by rpki-client