This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier: a3xJXOT72sJ1KV3J4qVbkqpx1bgby6gr2Jaxw3kNEOw=
Subject key identifier: F4:02:41:AF:9C:B6:97:E6:AF:34:C5:51:E5:58:CB:B3:BE:83:DD:F7
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 019C42EB0B0EC4125221BDE9DAF132B08982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number: 0E9F
Signing time: Mon 09 Feb 2026 15:00:25 +0000
Manifest this update: Mon 09 Feb 2026 15:00:25 +0000
Manifest next update: Tue 10 Feb 2026 15:00:25 +0000
Files and hashes: 1: lspkwJT88HzimvAJv3qctC-BJ3Q.roa (hash: egyKq59ztseKxvGFJSFIE/3NMX0yyNxg5wnFnieS1nE=)
2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: jbVSECn6XasQNDgMH44So1y9CHOVz3CpG0F+WCh4f5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:0b:0e:c4:12:52:21:bd:e9:da:f1:32:b0:89:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Feb 9 15:00:25 2026 GMT
Not After : Feb 10 15:00:25 2026 GMT
Subject: CN=f40241af9cb697e6af34c551e558cbb3be83ddf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:34:ac:e1:de:23:c7:bd:c5:0a:21:83:52:
b0:c1:f9:e6:ce:23:13:7d:75:7c:53:1d:d9:5a:0b:
d3:86:27:9c:c1:b5:a5:b8:f5:4f:3d:9a:69:21:2d:
71:ac:b2:5b:01:c7:70:7f:c6:d1:03:3f:59:53:4f:
10:1f:01:03:68:b3:9f:2a:e2:a2:2d:f1:24:9a:74:
8d:23:46:e6:91:81:43:0f:5b:01:5f:6a:7e:8d:12:
a4:03:94:24:f0:79:bb:23:11:4e:02:d8:e7:74:30:
f1:46:65:f1:2d:db:e9:88:24:49:9a:e3:ae:0e:15:
66:7b:43:a3:b7:f2:75:35:30:df:71:bc:66:e6:8c:
c3:45:5a:75:22:23:47:a3:74:35:82:91:be:0e:5e:
6e:6f:f1:f4:09:27:8b:5b:2c:ba:d4:48:61:53:4d:
97:84:af:d3:43:7d:5f:25:64:31:7e:9e:d2:79:8b:
60:a0:62:e4:93:ce:c5:fa:d8:3f:7f:3a:20:73:d0:
fd:1b:a8:46:11:6d:88:ff:5f:16:7f:89:ac:14:48:
7b:c6:55:d3:07:f8:0b:a0:ad:c7:84:f4:cc:0a:65:
f8:05:38:5c:86:96:a2:1a:2e:f1:88:98:73:ac:15:
40:ef:67:39:3f:b1:9b:29:15:a2:51:15:5d:0a:df:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:02:41:AF:9C:B6:97:E6:AF:34:C5:51:E5:58:CB:B3:BE:83:DD:F7
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c8:b0:5c:dd:17:fe:b6:58:82:b5:14:de:56:30:5c:1f:b0:
38:52:2f:c3:91:ee:4f:33:7c:81:93:02:8b:36:a6:1b:dd:bc:
98:05:70:54:20:7e:bd:84:bf:6c:03:46:ff:14:8f:56:f2:ce:
ad:d5:b4:5e:1f:e9:91:19:8e:66:a8:d1:15:7b:a3:01:0c:0a:
b2:32:0f:ca:45:1b:9b:e2:fb:6c:40:c8:4f:52:73:d5:8b:42:
f2:ed:bb:a8:1f:6a:09:9a:84:d0:39:4a:51:c8:5f:b0:f2:2a:
44:0c:de:7a:e0:51:2a:c9:e6:57:73:fd:83:3d:fd:97:c7:ac:
2c:7b:aa:e3:13:ee:ce:5c:50:d9:3e:08:90:2a:e2:a4:9f:d2:
63:ba:ca:92:ba:fc:23:bd:74:44:c4:4a:84:cb:ed:fa:26:a9:
60:56:65:69:8e:e7:77:87:d3:f9:3f:54:68:ab:4f:ff:e9:3a:
d4:5a:4c:ed:bc:6a:90:b3:a7:d0:be:3b:d0:a8:e9:45:be:6f:
b8:8f:79:5b:e6:9f:24:2b:d3:b5:18:55:9b:e7:ee:92:ae:58:
aa:d7:ed:f1:d4:cd:90:f2:8f:8e:4a:d2:f2:2f:7d:4a:36:90:
5a:cb:63:08:36:e6:04:9e:d8:b3:c0:96:d6:7e:e6:a4:04:3c:
a3:e0:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:43 2026 by rpki-client