This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
File: n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft (raw, json)
Hash identifier: lgBputrF8B4vG18VLX+n17kAn7h91RHQ+7zHINKg/RE=
Subject key identifier: 0B:AF:FF:93:9D:2B:F6:DC:00:18:43:F6:C5:C2:9E:6C:59:C1:9C:2A
Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Certificate issuer: /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Certificate serial: 019C420F26934CFB403FB88FCF23B14C3AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
Manifest number: 0C7D
Signing time: Mon 09 Feb 2026 11:00:14 +0000
Manifest this update: Mon 09 Feb 2026 11:00:14 +0000
Manifest next update: Tue 10 Feb 2026 11:00:14 +0000
Files and hashes: 1: 3YrPqOPm2HTyKR3X-5RSXy5Hk4U.roa (hash: 5vGo/rzHCgJgztw1UHKfY47yWsIJL5OxKuVDeP97MLA=)
2: n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl (hash: BLGlHMLXzI58ADPs8XUOijcqJCNnCbjjGEpF1Act9Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:26:93:4c:fb:40:3f:b8:8f:cf:23:b1:4c:3a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Validity
Not Before: Feb 9 11:00:14 2026 GMT
Not After : Feb 10 11:00:14 2026 GMT
Subject: CN=0bafff939d2bf6dc001843f6c5c29e6c59c19c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:39:75:55:6c:3f:e7:11:10:e0:e5:44:06:
e7:a2:c0:6f:d7:99:8a:7e:d9:2c:88:5f:33:48:90:
5e:34:dc:16:0f:07:4b:a3:f5:68:21:12:de:76:c0:
43:aa:18:13:73:61:4f:23:7b:8f:10:df:de:fc:fa:
8e:6c:6e:e2:ce:5b:98:dd:f3:0f:5f:5d:05:32:18:
09:4d:fa:22:e3:25:d9:f7:31:49:8d:f6:6c:16:e1:
81:08:2a:ae:ed:fe:3d:eb:ca:5e:61:c4:99:83:31:
46:89:bc:71:bb:15:cb:ea:f1:9c:22:0b:b3:98:99:
ce:40:2c:e6:7d:a3:ce:fc:23:55:64:2c:c0:82:5b:
0f:02:0c:3a:f1:5c:45:91:ce:1a:d3:b0:16:42:45:
5d:fd:4b:55:36:13:cf:1e:5a:cb:40:c4:d3:17:64:
5e:a2:59:1d:15:85:92:af:bc:03:64:14:d5:62:b3:
66:a4:b7:21:98:6d:01:09:61:63:e0:50:d1:96:df:
67:3c:be:79:a4:77:2d:46:bc:d6:0e:e6:f5:ee:76:
6c:39:07:64:01:54:e4:be:71:ac:83:68:1b:95:d1:
7c:25:46:96:a4:e5:12:dd:84:12:34:f8:4f:c4:be:
ae:e6:b0:79:22:bc:2f:f2:e0:10:43:fe:47:d4:be:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AF:FF:93:9D:2B:F6:DC:00:18:43:F6:C5:C2:9E:6C:59:C1:9C:2A
X509v3 Authority Key Identifier:
keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:3d:ae:66:73:6e:8a:7d:50:8f:ab:5d:ee:f6:90:b8:9c:4a:
82:42:0f:40:a5:d9:c2:99:a0:ec:8b:a0:9e:67:1b:81:9d:6e:
0f:77:2e:51:11:31:e4:f3:4b:e2:00:ad:31:44:b5:7f:92:32:
35:8c:5e:2b:c5:45:7f:33:1d:6b:14:48:5a:c4:13:f3:c7:cb:
00:82:69:63:f9:ac:06:f4:26:a7:de:29:3a:46:e1:7d:42:bd:
11:15:60:59:98:ca:64:4c:02:7e:d6:48:9e:55:dc:85:3e:b6:
2b:64:4e:eb:5d:fc:be:8b:d7:f5:84:2a:9c:07:e0:69:9f:a1:
56:73:0a:cd:7e:f6:9f:7b:32:26:f8:24:86:14:fe:79:cc:87:
95:d2:4e:7a:22:78:5e:5a:07:5a:8e:93:d2:1d:17:d1:4d:0b:
a3:e6:fb:36:af:d3:26:9c:fc:d9:4a:0f:a3:e4:47:aa:05:b3:
00:3d:c0:ad:cf:cc:18:48:6a:78:42:1d:98:57:85:3c:49:00:
c5:ba:53:3a:52:08:e4:09:56:56:7c:f3:8f:e6:da:01:9b:57:
9a:00:36:2e:cb:30:81:ca:f4:aa:57:e7:95:ac:c3:40:61:0e:
79:80:30:f1:1b:24:d7:16:e8:71:ab:31:08:f6:f5:22:37:5d:
d9:83:b1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:09 2026 by rpki-client