This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier: aEHW4dhaXw77C0jzOfkiAGXZ3vHxS28ZYL1Tr5EFtvI=
Subject key identifier: 84:59:33:16:EE:E3:8D:7E:74:7D:BD:FD:3C:C5:AC:81:B6:45:65:01
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 019C435913437F255AF18DFC280E5545790A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 17:00:36 +0000
Manifest this update: Mon 09 Feb 2026 17:00:36 +0000
Manifest next update: Tue 10 Feb 2026 17:00:36 +0000
Files and hashes: 1: HYaYWiPUwPT0J3PigGh4W9Dq_LE.roa (hash: p4mpafcbeyykks8+AH1sHGrQUM/Z36qBp4nJtDWe3lI=)
2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: tF8/DSQDMyix0Eva7v18zPKKGl6eEOHlb/DPQCwfC40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:13:43:7f:25:5a:f1:8d:fc:28:0e:55:45:79:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Feb 9 17:00:36 2026 GMT
Not After : Feb 10 17:00:36 2026 GMT
Subject: CN=84593316eee38d7e747dbdfd3cc5ac81b6456501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:db:a7:47:c9:85:25:cd:08:e5:2a:4d:7c:
ef:b3:fc:5a:81:3a:a0:ee:a9:2b:3c:da:89:71:d6:
03:6d:a6:54:f6:bb:4c:19:85:e1:6e:f1:dc:74:1a:
29:3d:43:d1:fd:61:60:1c:b3:88:14:98:91:a3:ab:
44:dc:c1:94:a2:25:b8:57:ba:f6:3b:93:38:bc:0d:
1b:b7:31:4e:93:df:88:70:c9:36:ee:44:4e:88:0b:
1f:a0:38:8e:39:df:87:88:24:8c:19:68:b4:72:9c:
f7:88:9b:f2:f1:22:2a:63:66:dc:19:8f:87:e9:4b:
d0:8c:65:03:48:42:e8:f4:f2:58:b5:cc:fe:c0:b6:
c6:9e:38:79:42:de:ed:6c:8a:22:e1:b8:1c:2a:69:
c9:8b:bc:22:0a:ba:c2:63:f0:3a:9c:cf:21:62:92:
84:d9:6f:b4:cb:c9:a3:36:9e:2d:75:94:ad:6d:f7:
d1:82:35:fc:ef:39:91:22:4b:c3:e5:e9:2a:de:9b:
59:b9:a6:40:8b:2d:d3:77:86:6d:68:69:23:63:c5:
23:24:5b:cb:4f:a6:13:6a:03:35:90:23:10:86:ee:
97:51:3b:f5:51:d8:6f:8f:72:57:89:ba:88:ba:93:
7a:7e:47:d2:12:50:df:4e:64:e9:24:68:ba:5e:9e:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:59:33:16:EE:E3:8D:7E:74:7D:BD:FD:3C:C5:AC:81:B6:45:65:01
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a4:ed:4e:15:00:f4:25:40:1d:25:be:ac:2b:98:bf:98:e0:
cf:6c:67:2a:50:95:1d:0d:9f:dc:71:9b:75:4f:21:76:29:b5:
b9:52:98:3f:17:30:6d:f5:13:9a:62:43:d9:09:37:12:9d:f3:
c6:7d:08:36:64:ef:18:2d:e6:30:29:14:c6:5b:ff:ce:95:1d:
8f:c4:08:f1:ed:a3:a5:45:16:f6:41:56:0f:9a:31:2e:f4:1b:
15:64:f7:62:6a:79:7b:7b:bf:33:eb:b1:e9:13:50:9c:ac:5d:
a9:11:f7:55:46:67:7a:c9:c6:b7:0a:49:13:5b:f0:4c:a9:12:
a8:7f:ef:c6:2d:73:ba:8f:0c:54:4f:6d:6f:72:12:73:30:fc:
6c:46:43:56:86:17:0c:ba:88:86:11:9f:2c:fc:94:f9:c8:f9:
03:93:2c:63:a5:7f:c5:73:2e:b1:74:0e:c5:e2:eb:c9:72:4a:
78:59:de:4c:65:63:c8:dd:f2:35:1e:d7:b5:3e:eb:ad:f9:fc:
64:93:d3:59:ee:fd:f2:f3:1e:e2:b8:d1:a2:b1:81:7a:29:05:
e4:7c:62:99:77:4f:70:ef:96:37:ce:bc:89:85:1f:57:08:87:
d6:42:dd:b1:62:82:5d:f4:3d:57:51:34:0c:d6:ef:e0:3c:60:
c6:b5:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:19 2026 by rpki-client