This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
File: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft (raw, json)
Hash identifier: 9xVtnQcgTunZx52P3pEA1PyGV6lejeAS7Z1r33067uY=
Subject key identifier: A2:B8:9D:D4:24:31:AE:0B:9B:DA:D6:39:24:14:DE:7C:59:4E:EF:C7
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Certificate issuer: /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial: 019C427D0494DD1FF5BDDE1FD399C1ADBAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
Manifest number: 14D1
Signing time: Mon 09 Feb 2026 13:00:15 +0000
Manifest this update: Mon 09 Feb 2026 13:00:15 +0000
Manifest next update: Tue 10 Feb 2026 13:00:15 +0000
Files and hashes: 1: UYQCKBIJs_jm7bQEQlMrwuHX6Ds.roa (hash: /Rb7W1hiZzDM8zy+jiVsugvOM6pnTRPvaLJxUTo+MJw=)
2: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl (hash: x7dFvlcg5z1qFhW1uTE4ccTFMKThGOVmAY3MG324BFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:04:94:dd:1f:f5:bd:de:1f:d3:99:c1:ad:ba:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Validity
Not Before: Feb 9 13:00:15 2026 GMT
Not After : Feb 10 13:00:15 2026 GMT
Subject: CN=a2b89dd42431ae0b9bdad6392414de7c594eefc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:52:1c:b4:56:db:3a:99:63:4c:80:77:82:
d2:f3:7b:ff:2d:ed:39:3c:5d:18:25:a4:28:70:de:
46:0b:fe:2f:3f:d3:e3:ec:47:cc:90:fc:df:64:ee:
0e:e2:87:ae:67:81:ac:20:a8:f4:f7:39:75:cc:7e:
c2:c2:75:60:20:84:90:dd:6b:07:5f:6f:b9:54:1c:
b0:93:23:9b:1a:46:dd:86:61:7a:e3:bc:06:ec:e4:
d5:be:c1:d6:b1:96:78:51:8d:7d:fc:e3:c4:63:01:
f5:8f:dd:55:36:fe:88:93:63:f3:87:36:0b:32:76:
d1:89:ad:e3:2f:ff:8f:a2:b5:f1:cd:16:02:21:5a:
21:97:88:cc:51:37:04:fb:f9:82:f8:f1:20:5a:04:
d1:51:18:92:1c:9b:8a:a8:6a:e6:b5:2a:f4:34:df:
91:70:de:fa:8f:74:fc:60:b8:b0:4a:f1:6e:d2:82:
7b:5f:64:6b:0b:38:a4:32:ca:35:2f:dc:23:ad:2e:
ab:a3:ff:38:81:49:c6:0c:17:ea:4d:c7:99:4e:17:
a9:52:4a:17:ac:85:55:1a:30:3a:d8:8e:50:21:dc:
d1:67:9c:cd:4e:04:a2:8f:de:0a:be:72:ae:c5:4a:
4f:30:0f:ed:be:ca:8d:c6:9e:c5:3f:58:0f:50:fa:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:9D:D4:24:31:AE:0B:9B:DA:D6:39:24:14:DE:7C:59:4E:EF:C7
X509v3 Authority Key Identifier:
keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a5:6c:14:ac:ff:cb:59:90:4b:28:d8:c7:32:6a:71:2e:20:
9e:27:1d:2d:b9:de:5e:73:1f:0f:01:5f:54:f8:f9:5a:5a:96:
00:f2:63:10:f9:55:2b:23:7d:a2:36:c6:8b:f3:11:99:26:9b:
0c:06:1a:fa:16:c2:2e:0a:69:70:28:48:e0:3f:f4:15:9e:5b:
87:9f:bd:50:4a:d7:69:51:07:1f:c1:7b:f5:ff:5a:4c:5a:49:
49:0b:cd:87:fb:20:de:36:7a:0c:06:bb:ec:ab:18:9c:95:5f:
f0:0d:3f:b1:dd:d8:40:bd:58:d9:01:4d:46:31:46:9a:73:9c:
42:96:9b:aa:44:7a:6c:95:d1:7d:3b:5e:61:a8:e4:d2:c5:8d:
42:ce:1a:6e:03:77:5a:8a:30:ac:6d:06:d9:f3:bb:dd:30:5c:
a2:1b:bf:fa:f5:fd:0c:a9:80:fc:91:bc:4b:66:2f:4e:c1:8c:
6b:2b:29:92:6e:32:4d:66:e7:ce:c2:69:0c:00:46:a8:6c:f7:
08:f9:09:59:75:de:d9:e2:7a:9e:87:3e:dd:d1:6a:99:e8:74:
9c:bd:9f:d1:5e:8e:9d:cc:fc:d4:b0:d3:89:7b:7a:e3:42:03:
0c:3d:10:da:96:88:14:4e:b0:cb:b4:46:41:46:0e:24:b5:9d:
73:70:d8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:12:56 2026 by rpki-client