This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File: n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier: K5k7y2XjeFDBK8YNLWcC/dOGYi7fx+41mtCTlEuxhOk=
Subject key identifier: BF:73:A1:3A:B9:B8:72:D6:AA:3D:C5:7E:39:48:34:20:F2:9A:57:68
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer: /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial: 019C427DAF5A980AE094DE8F800615AE5C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number: 137A
Signing time: Mon 09 Feb 2026 13:00:58 +0000
Manifest this update: Mon 09 Feb 2026 13:00:58 +0000
Manifest next update: Tue 10 Feb 2026 13:00:58 +0000
Files and hashes: 1: jrXfTMtV6H8gigUiywKcsYuAQWc.roa (hash: mgcQY3R0XYxNLA95issP8LL8M3tboWLY7IU4hd9EG4w=)
2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: qhbhuvSzHiopdrCAX+GiKNSct8fIEAGMeZ38bT1i4b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:af:5a:98:0a:e0:94:de:8f:80:06:15:ae:5c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Validity
Not Before: Feb 9 13:00:58 2026 GMT
Not After : Feb 10 13:00:58 2026 GMT
Subject: CN=bf73a13ab9b872d6aa3dc57e39483420f29a5768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:89:8d:e3:b6:02:10:7e:cb:6c:57:aa:d0:
e9:74:1a:01:ee:74:df:92:70:fc:df:7d:d5:57:90:
5b:dd:9d:c3:60:34:8e:6c:db:8a:39:e8:20:85:37:
dd:3a:97:31:e1:7c:3c:b1:3c:60:92:9c:5f:fb:0e:
fb:da:df:34:d1:de:5e:60:60:7e:9d:fe:78:35:b3:
46:67:b7:35:13:82:b6:8d:c1:92:4e:62:15:2d:ff:
8e:d0:49:f0:a6:d7:4c:96:30:3c:20:4f:8d:0f:f6:
ea:f5:52:8d:41:63:bb:7a:ab:0e:3d:f8:43:89:13:
6c:f2:2e:5c:cd:f5:3d:c5:10:56:bd:4f:d9:1d:ff:
37:b6:f8:0a:76:1d:36:fd:12:a4:ef:cc:68:fb:5c:
c0:eb:93:7f:16:f3:85:5b:88:59:4b:7e:8b:af:62:
ed:a7:e3:5e:40:47:87:3d:de:a9:4e:e7:95:b2:63:
ef:c7:cc:3e:29:fc:6e:cb:d3:b0:fa:10:44:13:1e:
a1:77:75:d8:27:7b:74:d4:01:ab:60:38:b2:fa:7e:
27:d0:0c:fe:5a:fe:eb:84:1a:fa:0f:fb:df:85:78:
0d:5c:98:de:56:a7:68:59:9e:d3:92:1e:91:64:01:
0f:28:39:3d:e1:15:1e:09:ad:34:8e:69:81:4b:22:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:73:A1:3A:B9:B8:72:D6:AA:3D:C5:7E:39:48:34:20:F2:9A:57:68
X509v3 Authority Key Identifier:
keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:99:37:e7:c3:6a:d3:b8:66:5f:39:d6:c7:39:bd:5a:10:91:
06:12:da:0f:a7:0d:c9:f8:59:6c:ab:3b:c7:14:99:6a:f6:e2:
25:18:f0:03:c5:e5:9a:dd:d6:00:9d:3b:7c:fd:49:ef:de:63:
58:60:cf:f5:a3:75:a2:40:e1:4f:70:1c:15:64:64:58:be:3e:
c2:71:fb:4d:83:9d:89:94:07:11:ab:02:99:29:5a:c4:f7:d3:
9e:0c:32:90:27:ad:1e:7d:86:6f:e6:c3:f4:0e:86:7e:99:cf:
67:98:35:92:bc:39:fd:cb:34:64:9c:76:c5:0f:80:c9:b8:cf:
3e:10:a2:a6:b2:2f:08:6f:78:75:12:a3:cc:58:fb:0f:01:d4:
cf:fd:8e:eb:e9:78:63:bd:5b:a7:34:c9:28:83:a2:cb:b9:94:
c9:f3:37:a2:82:62:69:69:9b:7b:ee:7a:55:c1:75:b2:a3:83:
de:4d:1a:99:9f:43:da:66:5b:55:6b:2c:c4:30:62:ee:df:0b:
4e:c9:30:b8:ad:00:76:45:7d:89:2a:d2:eb:fc:89:e1:ca:76:
b5:62:73:20:cf:d6:35:2a:b4:f1:97:f2:50:a3:ae:35:12:ea:
d8:29:d4:82:29:76:19:f9:2b:22:dc:d3:5a:fb:03:2c:31:35:
b8:10:34:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:12 2026 by rpki-client