This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: ZjtKPt6zV2pmcpG8LAWNrt1iqS97FTQn8bI0WFfSE+w=
Subject key identifier: D2:24:A2:20:6A:A6:F0:E2:32:EB:81:9D:08:9B:7A:31:07:BB:13:AA
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 019C378BECE71C94E695FF976B6CB257DF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 05B9
Signing time: Sat 07 Feb 2026 10:00:42 +0000
Manifest this update: Sat 07 Feb 2026 10:00:42 +0000
Manifest next update: Sun 08 Feb 2026 10:00:42 +0000
Files and hashes: 1: aoQsvFOShg8unGdvRNHzyskZu6Q.roa (hash: p8PU4KP73BDGEEa9wvSrJwTPPhTgMiV7+d9ryeZmr2c=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: iG4fZriOPUFTn9pbjaTLLh4i/ZtqCDtjOrBAYgcINTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:37:8b:ec:e7:1c:94:e6:95:ff:97:6b:6c:b2:57:df:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Feb 7 10:00:42 2026 GMT
Not After : Feb 8 10:00:42 2026 GMT
Subject: CN=d224a2206aa6f0e232eb819d089b7a3107bb13aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:17:c7:61:75:91:c1:fe:d9:3b:25:90:69:
e9:f7:80:a6:91:bd:f6:f8:34:2b:7e:7e:52:18:62:
6e:ad:79:ce:5c:db:f1:55:30:fb:34:55:02:a4:00:
b1:35:29:97:dc:4c:28:ab:87:d2:73:8f:4d:39:32:
7e:24:11:0b:35:7b:86:84:cd:6e:42:f2:fd:8d:dc:
41:18:37:7c:23:13:9f:96:cb:7b:84:56:c1:e5:3d:
c0:80:e0:2b:69:d6:7e:5f:5c:f7:7b:a8:dd:06:b2:
74:f6:30:d7:70:e4:db:2f:65:0c:66:a3:db:d5:24:
a8:be:49:43:a8:09:92:40:43:76:7a:32:b4:49:80:
f7:44:22:2a:a8:b5:11:c3:4b:27:59:33:e8:cb:a5:
f6:1e:b1:9f:3c:31:9a:e8:35:cc:f7:7e:7f:f4:4e:
02:13:6d:7b:10:b8:28:a1:27:6c:8c:9d:ff:11:db:
8b:8f:d0:cc:d0:1d:d9:8e:18:b0:8e:7b:cb:f3:d3:
3b:18:1b:d1:dd:1c:7c:a3:0c:8c:4e:d6:38:12:11:
b1:4d:70:cf:77:f0:cd:12:00:01:6e:e0:7a:ce:15:
cc:df:ac:ca:2f:b2:3e:ca:86:43:63:77:f0:a1:73:
d0:9c:a5:05:2f:6e:82:42:74:2e:c9:07:36:c5:24:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:24:A2:20:6A:A6:F0:E2:32:EB:81:9D:08:9B:7A:31:07:BB:13:AA
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:20:49:77:c1:38:11:73:50:58:a1:89:2f:1f:74:5b:2e:28:
30:f7:b0:25:e4:60:18:54:c5:2c:35:5f:92:79:73:50:71:1a:
f1:cb:25:9f:66:53:82:7b:0a:b7:e4:ac:ca:35:a4:b2:0e:9c:
49:c6:09:9a:47:ba:79:55:b7:f2:7e:2e:b3:93:fb:76:fc:01:
ad:a4:6e:42:4f:bd:a7:8a:b6:84:f7:63:86:b3:60:0d:eb:5b:
e2:00:68:a2:dc:6d:2e:9a:d5:da:df:88:f7:59:cf:a4:b7:77:
1f:68:a5:8f:57:e5:4f:1f:7e:98:fe:d3:c7:52:68:ca:2a:18:
71:65:f5:0f:ab:2b:f1:0d:df:55:2a:e9:4e:11:d9:18:a2:81:
78:14:ef:4e:aa:fb:c6:88:5e:ed:c0:47:03:cb:6d:35:83:c1:
c1:e7:02:c7:43:f8:06:e6:02:68:8c:e0:f8:86:08:d3:ab:c6:
6f:79:94:c7:44:0b:bb:dc:43:38:e3:98:93:58:3b:36:7a:77:
67:3a:cd:a4:49:f1:4a:76:bc:e9:2b:cf:10:33:8a:c1:ee:8c:
50:4b:a3:a4:99:e2:31:c1:c3:20:b2:fd:a0:8c:01:6b:22:dd:
40:61:58:73:f4:4d:8f:5c:e2:ed:b5:b3:34:23:03:09:49:05:
12:59:f5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 13:08:01 2026 by rpki-client