This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File: N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier: rqzyP22kfnlTtr9YPMRmFI5vZS7NB7WdFUGpn2feceA=
Subject key identifier: DE:C9:7D:2D:8F:4D:CA:C4:E0:7E:72:0B:59:0E:11:E2:72:4D:DE:98
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer: /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial: 019C427D4B5C2F64BAB425975061403A4E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 13:00:33 +0000
Manifest this update: Mon 09 Feb 2026 13:00:33 +0000
Manifest next update: Tue 10 Feb 2026 13:00:33 +0000
Files and hashes: 1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: FbLjBCKcSdFrOP8KhyBlFqrA7xUMX6Y7zgafMgCft1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:4b:5c:2f:64:ba:b4:25:97:50:61:40:3a:4e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Validity
Not Before: Feb 9 13:00:33 2026 GMT
Not After : Feb 10 13:00:33 2026 GMT
Subject: CN=dec97d2d8f4dcac4e07e720b590e11e2724dde98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:6b:3e:f2:99:41:8b:59:f2:36:59:00:21:
c5:f3:a8:71:02:42:48:60:2f:44:b2:76:86:62:ee:
60:d7:76:2d:6e:1d:22:51:d7:71:97:3f:34:44:12:
5c:b8:89:5a:71:ad:6f:b1:a6:cf:42:5b:b3:1d:13:
4c:a0:be:ab:ac:dc:73:e3:01:b3:9d:38:5b:56:c1:
78:da:bb:dd:b2:ff:69:5e:22:f2:e0:98:93:70:ab:
84:a4:9b:2f:7f:7a:b2:c7:78:c1:ec:6d:b6:62:a8:
e6:33:47:c0:20:e3:bb:29:b1:01:bc:7e:68:e3:b1:
dc:f0:e7:be:ac:c0:74:20:5f:de:37:2c:7d:e4:65:
da:8f:bb:c4:9e:fd:59:7b:5f:e7:76:68:42:be:47:
d1:a5:7b:42:ec:0d:ca:00:b0:07:21:65:b4:75:f0:
27:8f:a6:66:08:d1:d3:34:84:ef:c0:48:84:0d:cb:
23:5e:a6:3b:9e:ea:c6:9d:e6:b1:1d:75:b8:2e:62:
53:0c:99:eb:67:2e:9f:14:07:a1:62:30:7d:2f:d9:
ce:6a:1f:66:d8:07:78:19:0d:df:cf:a8:d3:2c:d5:
3e:41:07:b5:e4:a4:e7:e8:1d:31:9f:74:74:d5:b9:
c3:f3:1f:f8:33:49:70:1a:44:0a:f7:98:18:d3:cc:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:7D:2D:8F:4D:CA:C4:E0:7E:72:0B:59:0E:11:E2:72:4D:DE:98
X509v3 Authority Key Identifier:
keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a2:eb:96:74:00:aa:b1:d9:57:62:d9:ca:0d:f6:c7:b2:e1:
6f:b6:89:35:a6:6d:ec:f1:af:20:da:f1:7b:30:c5:61:fc:fe:
26:3f:fd:5d:7e:7f:55:85:08:98:61:2c:f5:cb:f9:a5:a9:60:
a8:a0:40:2a:a3:99:0c:3a:1d:19:58:34:20:db:57:30:b4:b7:
dc:5f:ae:e1:40:89:b5:46:04:8e:a5:2b:92:55:70:26:41:f1:
60:7b:3a:23:96:e8:dd:59:d4:d3:0c:12:fc:42:47:1b:c3:b3:
c2:7a:f4:6e:89:1f:ed:fd:f2:07:3a:ad:e0:58:d6:f8:8e:af:
7e:2d:ce:16:22:c3:7f:29:66:b9:9f:cd:f5:11:21:a4:45:ef:
6f:ba:f8:11:a9:15:60:d8:49:d4:bd:63:13:74:37:be:85:5e:
47:40:8a:fe:aa:01:0b:0e:f4:f8:a5:c3:70:a0:9a:22:f2:96:
40:e0:bc:2f:19:de:95:75:9d:02:89:c0:97:57:02:01:05:fc:
43:23:5d:f2:68:17:11:e9:05:4b:ce:9a:e5:3e:12:fd:49:ce:
47:0f:54:8d:c5:e0:ff:0b:cc:78:ef:3f:7c:ab:4b:9b:e3:92:
5a:00:b5:64:5b:6b:9d:70:9f:46:74:f9:cb:45:52:b7:8b:03:
77:47:1a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:59 2026 by rpki-client