This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: d5R0MzLpjGHuCz8LZbLcIgsvIYZ5O7AuYljMVntAKRw=
Subject key identifier: 82:2E:F5:9F:E8:45:4B:98:5D:58:07:AC:97:E8:FF:E7:BD:4A:53:44
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 019C2D3F851BA5D49D306ED52D13C42241E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 12A9
Signing time: Thu 05 Feb 2026 10:01:03 +0000
Manifest this update: Thu 05 Feb 2026 10:01:03 +0000
Manifest next update: Fri 06 Feb 2026 10:01:03 +0000
Files and hashes: 1: EHScBu0DtfNN7XuW2NbtkqUh6LY.roa (hash: XTAL9pZrhDOSGcWcBZT8tlB7wZsz4Qittp7Yw5e9EHk=)
2: InJPJ1ltdDmmNb26X47efT5owog.roa (hash: roW4rWFh4v6ZLGndowGGN8SF2HPPme5DrUmgwwcOBrc=)
3: Usp7Cq9yEBn4Ro61mUJFM6lZCmQ.roa (hash: Q8czcZicRwqawMLCHXgEajjrnDJKLDPALwwosSnt964=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: fj9GZjPq8qdye3yzxLJkn/vfKOyzUf9iHB2O4mKrrOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:3f:85:1b:a5:d4:9d:30:6e:d5:2d:13:c4:22:41:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Feb 5 10:01:03 2026 GMT
Not After : Feb 6 10:01:03 2026 GMT
Subject: CN=822ef59fe8454b985d5807ac97e8ffe7bd4a5344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:ba:56:07:92:6b:58:83:a9:cd:d9:60:b9:
c4:e4:54:c6:63:8e:83:6c:e3:9f:36:57:a7:01:0d:
f6:f6:c7:5a:4b:3f:6e:f9:ac:e3:65:0d:d5:88:bb:
e1:d4:5d:cc:e3:f1:a0:57:6a:b7:94:c3:88:38:72:
fe:85:27:ae:e6:7f:ad:67:cf:0f:63:c2:fc:d0:70:
c7:2e:61:31:b7:99:74:62:9a:99:ed:ba:f2:e9:3d:
89:5d:99:9a:cb:d1:17:76:97:85:6c:00:ea:28:66:
2a:a3:e9:00:e9:a4:b5:3c:c8:f8:06:d2:15:9a:1d:
09:e9:f4:16:6d:61:fb:da:ac:10:f0:9b:95:86:b3:
81:38:11:a1:ab:e2:3f:65:8f:4b:a3:01:4d:16:ef:
d4:74:d0:3e:f0:70:90:5b:3c:3c:45:36:4c:b9:cf:
d7:1e:13:bd:27:c4:67:8e:c5:6f:12:5b:4c:6c:fb:
52:aa:85:a3:74:b1:99:f1:7a:a3:98:66:97:8b:62:
d9:05:4c:47:75:86:91:ea:5b:5d:bd:0f:04:9c:ea:
bc:82:25:98:24:aa:9b:27:16:ab:f2:4b:2f:18:a5:
fc:ab:3f:d8:4e:a0:79:8e:74:cb:37:b2:eb:0b:72:
bf:8b:2b:7e:de:ab:3c:f4:85:9e:28:8a:f6:9b:83:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2E:F5:9F:E8:45:4B:98:5D:58:07:AC:97:E8:FF:E7:BD:4A:53:44
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0d:5e:07:ef:1e:73:bb:3a:b5:dc:9a:55:fa:96:12:50:66:
35:13:8c:01:20:29:9f:c8:5a:d4:bb:22:61:1b:9c:22:89:1e:
ef:5e:f1:50:82:d4:87:bb:f5:3f:56:6e:e1:10:a3:0c:5b:6d:
ab:75:a8:b7:2f:31:c4:65:da:8a:d0:3e:e3:5a:b7:a0:3b:32:
da:33:b6:51:3b:77:c6:4f:6b:37:be:e9:30:14:a3:de:6a:d9:
32:41:e1:ae:b7:79:7e:a9:de:4b:83:ee:dd:32:74:72:b8:01:
c6:f1:82:af:7e:77:47:bb:a2:5d:00:b2:7b:f2:61:6f:3f:5b:
4a:df:24:ee:fe:c9:96:e7:f0:6b:68:1a:27:c1:6b:be:07:db:
0f:3a:1f:b9:e8:97:77:8d:d5:a7:aa:57:f2:32:fd:dc:01:bf:
77:cb:64:9f:16:07:be:7c:92:78:9d:72:43:15:a7:14:8b:61:
97:a1:88:64:e3:37:4e:d0:c5:38:8b:bb:ac:ab:b3:70:bd:ff:
c0:1d:41:23:5e:07:96:b2:df:e9:42:b3:0a:5e:c6:ed:b4:9b:
5e:2c:b7:1a:e2:40:b6:60:c1:f4:30:d1:5d:2c:06:ac:ac:b6:
8c:9a:b5:7e:cd:79:3a:56:4f:bb:96:f8:7b:b6:62:36:18:48:
4a:03:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 19:28:24 2026 by rpki-client