This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File: NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier: 64qvTGyGMsOT3XvG1i5xoEuFI19Kh0SrbcbKcToFsKE=
Subject key identifier: 4B:9C:0D:13:39:AB:4C:1E:46:08:01:2D:B9:A2:05:7A:A3:10:C9:71
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 019C4133EDA017B449B57E919CFC21615AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number: 1184
Signing time: Mon 09 Feb 2026 07:00:47 +0000
Manifest this update: Mon 09 Feb 2026 07:00:47 +0000
Manifest next update: Tue 10 Feb 2026 07:00:47 +0000
Files and hashes: 1: 1cYADgyS9xUjbMqbTO8dbbS_ut0.roa (hash: sfBNeCmh7Arfh1u7KBOZ5cOLU6qwGNu6Ll6DwZYAXsQ=)
2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: ZrtOhxHFDK2CR5sg/ESjgsN9y3czckmT/oZpVxOLqzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:ed:a0:17:b4:49:b5:7e:91:9c:fc:21:61:5a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Feb 9 07:00:47 2026 GMT
Not After : Feb 10 07:00:47 2026 GMT
Subject: CN=4b9c0d1339ab4c1e4608012db9a2057aa310c971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:73:05:f2:48:c4:b5:1f:61:fe:74:23:33:
fc:bc:c7:ce:97:2b:3f:b3:1a:70:30:16:0b:9e:dc:
f3:62:1b:61:3c:00:77:d3:ca:a9:9a:8c:ec:55:53:
b3:f8:fd:4b:d7:04:f1:0c:f4:b5:46:76:81:9b:92:
5a:da:ee:ff:1a:d1:4a:f4:c0:f9:e4:8b:34:50:f0:
ab:95:02:0c:42:77:0a:75:b0:2b:73:d8:b6:6d:ac:
79:ce:13:52:81:73:bc:8a:70:2a:fe:53:10:04:f6:
8c:01:b6:08:da:ec:3e:be:e1:dc:6e:19:53:84:77:
11:be:9f:de:18:5e:61:20:8d:7a:c2:b4:8e:fe:3d:
33:13:16:32:7b:1b:e5:27:0a:79:a1:be:1a:50:dc:
1b:8b:38:d0:c8:8d:67:7e:3d:36:77:c0:51:ae:82:
ea:ea:67:b5:3c:a1:98:c1:8a:93:e4:ac:d2:c6:1a:
72:1e:2d:04:6c:56:5d:f4:ce:8f:28:19:6f:42:83:
37:6b:95:7e:9f:38:cb:e3:ff:db:84:f4:65:05:df:
9a:5d:ba:94:c5:d0:00:7e:e5:fa:d9:36:d4:7e:83:
e0:10:c3:95:38:80:a7:20:fd:4d:76:a3:5c:6a:03:
aa:59:c6:fa:b0:bc:35:29:02:1a:98:c5:fd:ba:09:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9C:0D:13:39:AB:4C:1E:46:08:01:2D:B9:A2:05:7A:A3:10:C9:71
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:25:68:73:fd:b0:1a:7a:b2:99:f1:8f:8c:68:a7:2f:2d:fc:
34:ad:2d:ca:68:ae:a1:f6:6a:f1:76:8d:41:f4:92:b7:b2:89:
0c:57:ed:0e:35:fd:70:86:8f:0e:aa:08:8b:5f:49:df:76:ea:
f8:ed:40:db:7a:3f:4f:22:1a:5c:47:b8:ff:e1:79:e8:81:14:
35:09:53:81:40:ed:20:56:14:c3:42:49:86:90:a3:69:ad:b0:
0d:ad:61:ac:a6:ec:09:70:0d:cd:d6:a2:99:f3:83:63:8d:41:
59:ac:ff:ad:40:b4:23:14:7d:67:34:c2:66:9d:c5:c4:f5:68:
7c:76:30:02:11:20:10:e4:a6:d2:eb:f7:19:63:94:de:98:3a:
f7:b7:35:b6:e4:3e:10:87:4a:3e:3b:53:c1:73:ac:31:88:94:
40:8f:4e:d5:c9:0a:d6:15:4d:b1:f2:0c:ef:c9:bc:b5:25:a0:
a7:71:17:80:98:4c:8b:a2:c4:f6:33:99:0e:28:25:ca:8e:d9:
29:91:7e:ef:cb:9b:5b:90:42:ef:b8:6b:fb:c9:20:3c:af:cc:
08:c0:cd:50:48:32:b4:93:cd:bc:dc:a8:23:96:b0:80:4d:e0:
84:02:95:0f:be:58:fc:79:b7:b0:43:da:56:64:8d:1e:d6:04:
69:b7:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:47 2026 by rpki-client