This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
File: NoEciv-vsKwfX39v97ZLtwNGRX0.mft (raw, json)
Hash identifier: CSeKmPvTaJyqXxtE3WmOh1Ske8rG+sNJf9Ahl6Z6c0M=
Subject key identifier: 71:40:A0:C1:9B:8E:86:2B:29:7D:CF:5C:E1:8F:BA:9D:0D:60:26:5E
Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Certificate issuer: /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Certificate serial: 019C439028D6A3406F904D7129DA531E33A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
Manifest number: 09C2
Signing time: Mon 09 Feb 2026 18:00:46 +0000
Manifest this update: Mon 09 Feb 2026 18:00:46 +0000
Manifest next update: Tue 10 Feb 2026 18:00:46 +0000
Files and hashes: 1: Ac4l1p_bZl-wINdkBGjJK6t5WOA.roa (hash: mExfVg4mEZkQfa/o53ZXrQKDJoTaHqGKP/mA0/Gw99A=)
2: NoEciv-vsKwfX39v97ZLtwNGRX0.crl (hash: RXI+gd32ze92K2fA8Wc2IiQKzxAanBcp0kf5LCKNnRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:28:d6:a3:40:6f:90:4d:71:29:da:53:1e:33:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Validity
Not Before: Feb 9 18:00:46 2026 GMT
Not After : Feb 10 18:00:46 2026 GMT
Subject: CN=7140a0c19b8e862b297dcf5ce18fba9d0d60265e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:41:4e:d8:7d:0e:11:13:d9:ca:8c:32:2a:
d8:61:5b:c1:07:0f:73:59:52:33:17:13:8d:73:c6:
16:93:f4:f6:8b:31:36:75:5e:20:19:29:22:2b:fb:
ec:e3:c4:d5:55:45:a4:1f:ca:7d:b8:6d:7f:e0:5d:
7f:a8:95:aa:de:6a:75:40:aa:f1:48:7b:21:d1:f1:
59:2b:ed:95:fb:e6:2e:63:a0:22:a7:40:2c:0b:51:
78:da:83:cf:78:15:25:56:3f:14:0e:d2:79:8a:87:
a4:8c:9a:ab:f6:78:4c:a3:8b:8c:2e:cd:18:13:6a:
ab:88:74:d5:d3:e6:dc:7f:c9:1d:93:01:fc:f9:e8:
86:7e:78:f1:68:52:a8:f6:ec:fc:90:a8:74:a9:d5:
16:76:a6:af:f7:a9:16:4c:22:76:95:1f:09:27:ce:
5f:30:d7:5d:ad:1c:aa:3c:b0:7e:87:ea:45:11:43:
27:6b:1f:26:ce:c6:2a:df:e2:f4:04:42:ae:45:ee:
98:45:06:d2:56:09:0e:14:73:a1:63:c3:08:da:81:
35:72:cb:03:e4:cc:6c:56:f5:dc:81:8a:1b:e2:d5:
ce:b9:ac:ba:e1:3a:0c:44:45:76:5f:35:84:04:13:
ee:2a:30:a6:6b:fc:da:96:1a:62:a0:3a:aa:6b:ab:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:40:A0:C1:9B:8E:86:2B:29:7D:CF:5C:E1:8F:BA:9D:0D:60:26:5E
X509v3 Authority Key Identifier:
keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:38:57:62:03:8e:eb:27:2f:f6:c5:e3:d7:20:e4:9c:ee:97:
f3:5b:52:49:67:78:96:67:6f:d4:c3:d8:ba:19:f0:76:8c:3d:
6a:73:6c:2d:85:c4:5d:92:00:e4:cc:34:ef:c0:22:e7:75:6a:
07:d5:0e:5a:64:88:7f:bb:c3:ca:11:9a:82:f8:59:99:f6:e7:
54:55:9a:29:10:8d:7d:be:5a:ad:05:3d:0b:44:95:2f:67:8f:
f1:7c:f3:f6:46:e4:92:d2:7d:f0:3d:33:5f:c3:e3:73:da:51:
85:79:61:11:95:b6:31:30:33:d7:9b:03:21:88:d1:11:a3:36:
12:10:bd:6f:a1:7f:6b:be:52:51:09:69:31:72:29:5d:e9:e7:
f2:a6:30:28:27:cc:34:79:cb:a7:ac:db:71:e8:47:0d:d1:e6:
df:2e:f2:d1:51:31:cd:c6:76:3a:56:b0:f1:0d:44:e0:81:84:
59:33:33:b0:c3:53:4a:ad:50:69:17:9c:d0:e2:c8:3d:67:43:
a5:95:11:4e:0b:65:10:46:d8:0a:2b:ef:73:e6:fd:36:b2:54:
79:d4:59:e8:c6:c6:9b:52:c8:84:1c:2d:fe:f0:00:9a:19:58:
11:ba:b5:43:11:98:9d:1d:96:3b:9a:9d:54:0c:8c:fe:4a:83:
6a:c9:89:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:15 2026 by rpki-client