This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
File: cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json)
Hash identifier: X+3b9WCBIRW4ZzZCEHBNp2UKZaAGBP6fjxcfM55582M=
Subject key identifier: 01:9C:E9:E8:87:5B:83:3F:17:02:4A:A2:1F:DE:27:A9:2B:91:F4:49
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 019C43C7065C778477BC63B414EF6BDE0596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
Manifest number: 1814
Signing time: Mon 09 Feb 2026 19:00:42 +0000
Manifest this update: Mon 09 Feb 2026 19:00:42 +0000
Manifest next update: Tue 10 Feb 2026 19:00:42 +0000
Files and hashes: 1: RlL6IgEXEHtlHG87R_tgHeGJuso.roa (hash: e4pQoIrHsDZ81Hd65Er2benKsfXZs73qgjEzBGazD/4=)
2: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: 8ZbtLGKddeXKpkQDnFzwFQJyFUxA7F0Eqk85ITBa3Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:06:5c:77:84:77:bc:63:b4:14:ef:6b:de:05:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: Feb 9 19:00:42 2026 GMT
Not After : Feb 10 19:00:42 2026 GMT
Subject: CN=019ce9e8875b833f17024aa21fde27a92b91f449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:c8:ee:bb:5f:44:e8:42:c3:9b:19:f0:d4:
ac:f5:aa:cf:4d:e9:d9:20:06:0e:bb:6c:7b:f1:8b:
8a:f6:e9:3b:68:7d:37:3a:b4:06:81:d7:94:64:6c:
c2:a6:e9:b9:4a:65:ed:a9:c4:5c:49:23:e5:1a:be:
05:fe:83:61:a2:0a:f2:30:e1:4f:58:2b:54:73:67:
0b:46:c2:0e:9e:91:00:2c:65:7d:af:25:35:bc:31:
a4:39:26:05:53:80:25:4f:33:b9:ec:75:a3:ec:c7:
f2:3f:aa:df:2d:83:00:08:29:32:da:2f:b8:fb:eb:
c3:b9:6d:03:83:8d:3b:b0:49:7c:7b:e1:c4:d7:88:
48:e3:9b:b0:e8:d5:23:d8:5b:46:b1:00:18:05:23:
67:4d:93:20:fb:5c:b3:ed:ef:2f:35:0a:14:98:d5:
34:75:fd:af:fc:ca:19:12:b3:c6:a9:73:08:d5:c0:
82:bf:89:f3:df:3a:ea:45:e0:6c:4f:2f:4c:4a:5a:
f5:a4:33:86:57:81:73:65:c8:28:3d:67:15:13:59:
b9:5c:32:a9:cd:20:f2:56:18:ce:f3:78:a6:b4:d4:
6e:b4:d5:33:2a:69:f2:de:1a:45:68:89:a4:a3:e4:
1f:e7:62:2e:30:04:43:5b:f1:d6:a4:bb:a2:67:16:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9C:E9:E8:87:5B:83:3F:17:02:4A:A2:1F:DE:27:A9:2B:91:F4:49
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:72:a4:fe:a2:c8:1d:74:ea:7d:5b:5d:ef:08:14:7d:6a:
09:3d:15:b9:59:54:b9:66:47:f8:56:10:91:be:55:3c:bd:2f:
0a:90:73:e5:a9:8b:e9:c6:bd:95:c5:7b:1a:f4:3f:38:b7:32:
fb:09:93:ea:ae:4e:04:dd:b0:16:fa:8f:e5:de:6d:27:7c:49:
98:3b:23:99:8b:4b:7a:6f:03:c8:35:36:53:4a:8d:5e:aa:2d:
6e:fd:6d:84:8f:73:63:0c:67:16:7d:38:fc:a1:7c:5f:d1:67:
77:46:10:70:8e:48:26:a8:20:05:c1:e7:3f:6f:7b:c2:90:bb:
a8:37:d9:8d:2b:77:80:76:f9:f8:8d:4b:4b:14:b3:05:59:2b:
32:fa:a5:9e:23:8c:f9:78:70:d3:a1:0d:cb:c6:86:06:6d:3c:
64:34:aa:82:b7:19:9c:6d:0c:72:b6:f2:01:75:8c:a9:ef:99:
38:ad:5e:22:8f:d7:24:89:9d:e5:85:60:2a:8f:e3:57:71:3e:
e7:e9:f1:6b:10:b1:30:f9:2e:ef:7a:01:16:de:ab:7f:3f:0f:
99:a1:6c:46:8c:1c:09:89:18:15:51:32:bb:1e:b2:ec:c7:3a:
f7:2a:0d:8f:bf:15:57:65:84:41:5e:b6:87:81:70:45:3a:54:
0a:4c:5e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:29 2026 by rpki-client