This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File: nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier: knWdnoloONsBGO7c1zvyWOxW9zGSz4znTSx+Kk4OLQg=
Subject key identifier: AB:89:08:CB:4C:AA:50:92:9C:56:6A:3D:8A:24:28:9C:0B:73:54:0A
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer: /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial: 019C427D24FC9921F7E3BB811CF30A221FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number: 06D5
Signing time: Mon 09 Feb 2026 13:00:23 +0000
Manifest this update: Mon 09 Feb 2026 13:00:23 +0000
Manifest next update: Tue 10 Feb 2026 13:00:23 +0000
Files and hashes: 1: fEeplWw_YpRC4Ay1QIQCqiNzEng.roa (hash: Twh3oQrfCjhr2qTmHSOUea5jfVO2MWIW03LajOLIrEA=)
2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: MtCfNDbdN01Ea7vfWHlM8mTNJ+ru6IORstYPveZiHrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:24:fc:99:21:f7:e3:bb:81:1c:f3:0a:22:1f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Validity
Not Before: Feb 9 13:00:23 2026 GMT
Not After : Feb 10 13:00:23 2026 GMT
Subject: CN=ab8908cb4caa50929c566a3d8a24289c0b73540a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:29:88:52:7d:22:1e:d8:b3:d7:ae:f3:a4:
c8:ca:5b:12:52:20:b0:16:cc:31:91:ae:ab:96:51:
38:c5:2b:6a:1a:a9:d7:ca:8f:49:63:e5:2b:21:87:
68:aa:7d:b3:85:2b:62:f1:e8:74:7e:66:d6:9a:2a:
06:75:5c:76:c6:07:dc:d1:2e:ba:2c:98:b2:41:1a:
09:96:af:08:28:86:84:bc:41:79:6d:97:b7:22:9a:
3c:69:dc:11:d8:d6:00:75:64:bf:5e:12:9c:71:00:
6a:1e:64:93:6f:3a:c1:2b:94:70:c3:a9:f9:f5:cb:
3b:bf:ff:95:7b:fa:6d:e5:7b:39:0e:56:5a:ba:ba:
d4:f4:c0:35:f1:2a:90:fb:76:a6:59:45:cb:4a:92:
eb:9c:ee:66:59:ec:5e:ca:67:0b:0e:41:56:d1:d3:
e5:56:4b:21:47:63:3e:7a:08:c5:27:30:a0:3b:fa:
8b:26:c6:64:57:58:2d:57:ac:3d:5e:ef:09:2a:94:
4d:eb:f3:13:8c:3c:68:cd:20:2c:36:96:3d:b6:a1:
18:01:1d:2f:4d:9c:59:e2:40:be:81:70:2e:56:59:
48:9c:96:6a:23:c3:9e:40:41:65:00:41:a7:06:80:
a5:0e:8f:05:03:af:80:76:24:29:51:09:cd:12:5c:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:89:08:CB:4C:AA:50:92:9C:56:6A:3D:8A:24:28:9C:0B:73:54:0A
X509v3 Authority Key Identifier:
keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:66:18:74:5a:95:25:24:69:44:79:3d:6a:6d:83:22:cb:26:
38:ff:d6:f5:f6:e7:82:5b:a6:08:1d:67:59:cb:45:bd:2f:0a:
ba:f1:8c:8c:23:cd:f7:e8:fd:5d:8b:13:2a:7b:21:80:8a:da:
f7:30:e5:f6:38:c4:7f:c6:04:62:d9:88:3f:42:55:92:75:93:
df:5e:61:f1:5a:26:4e:a5:95:20:e7:2e:4b:2a:0c:37:b4:29:
bc:f1:5f:7a:21:a1:d7:b0:b6:6f:6d:b1:7d:25:33:5a:a8:55:
a0:27:f2:96:9e:c5:97:09:21:d4:cd:44:d8:7a:ac:fb:d6:50:
24:c3:08:89:07:dd:26:90:5e:b2:13:b5:76:ad:fe:f5:ad:96:
93:f4:1d:9d:48:4e:98:aa:ce:35:16:bd:72:ea:01:4d:01:59:
dc:92:54:d9:bf:d2:39:c1:9c:bb:d6:11:76:a9:6e:b2:72:b4:
1f:ec:2e:d8:b1:82:ea:d1:f4:19:34:90:d8:cf:cf:0a:d8:69:
ed:93:9e:39:27:73:24:c9:4f:ce:fb:e4:81:84:5c:ea:a9:25:
53:71:ec:47:d0:89:5b:87:b5:9f:74:25:4f:a7:ba:fe:6c:96:
33:68:92:74:1c:58:e9:85:a1:91:eb:17:6d:18:0e:ff:a7:c5:
4b:c6:b1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:16 2026 by rpki-client