This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
File: NehMBjohgLI_X20xYqdbMJL1wY0.mft (raw, json)
Hash identifier: PvBzzsGaX5Pqs8yWiC6+5LsxxBsbGVF+Ph8xl5pjmAk=
Subject key identifier: BC:A2:F1:BD:4B:E7:A4:6E:E2:AA:D2:13:87:78:66:84:D8:6B:81:A2
Authority key identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
Certificate issuer: /CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Certificate serial: 019C427D14A2D439264C0BED322E0BD7A368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 13:00:19 +0000
Manifest this update: Mon 09 Feb 2026 13:00:19 +0000
Manifest next update: Tue 10 Feb 2026 13:00:19 +0000
Files and hashes: 1: NehMBjohgLI_X20xYqdbMJL1wY0.crl (hash: eR6a1OWRWxTHWONdxs0C2ep7V9nlXSYvu/cQA7T5m1U=)
2: Vi8I4MkCYQcd0rGXc9xuEZAFofI.roa (hash: P7eM54+hvOkGLmFDM1sHFQzbHZ9ga56vNG5gdNovG80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:14:a2:d4:39:26:4c:0b:ed:32:2e:0b:d7:a3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Validity
Not Before: Feb 9 13:00:19 2026 GMT
Not After : Feb 10 13:00:19 2026 GMT
Subject: CN=bca2f1bd4be7a46ee2aad21387786684d86b81a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:d7:33:8a:f6:9b:49:c5:fa:95:fc:6f:c1:
15:81:aa:08:7f:c1:b5:34:19:11:4e:9c:54:c5:fd:
28:1b:8d:6c:b3:26:bf:46:b1:4c:81:cd:2b:e0:f8:
92:be:b8:dd:72:c0:57:f8:13:d7:1e:46:d4:71:01:
35:1a:23:3c:32:dd:04:b9:1b:49:20:1a:d0:c8:f1:
a0:69:07:09:63:d7:4c:75:e1:d2:ae:20:76:bb:e2:
7c:3b:eb:7b:69:ef:f7:a5:23:be:99:63:13:a3:63:
f1:6a:5c:48:cf:f1:e3:b6:26:ac:51:0d:21:4e:51:
ca:03:71:ba:a9:b7:20:ee:be:7c:cb:d2:0b:17:5a:
74:c4:31:0a:72:85:28:b8:99:46:73:95:9c:a5:13:
e3:48:3a:3d:e5:2c:2e:37:28:8a:14:c4:0b:e9:2d:
58:af:2c:be:43:9e:a2:b8:51:c4:53:2e:ed:d0:7e:
86:5c:d2:05:a2:2c:31:26:d6:1a:2e:a3:53:44:d4:
e1:50:55:99:d0:99:09:de:4e:8c:fd:24:8f:f5:08:
71:35:f4:64:2a:56:c2:f4:8e:96:10:98:55:1a:cb:
63:20:10:0b:84:40:0d:4e:5c:2d:cd:70:d2:8f:55:
e1:bc:2b:10:17:00:39:04:c5:6a:59:3a:0a:76:c7:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A2:F1:BD:4B:E7:A4:6E:E2:AA:D2:13:87:78:66:84:D8:6B:81:A2
X509v3 Authority Key Identifier:
keyid:35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d8:4b:81:03:cb:44:5d:d6:60:3c:a7:25:b1:b0:b9:43:06:
f2:cc:59:dd:a0:33:5a:f9:96:05:f1:19:fb:69:6d:20:71:4f:
41:0e:b0:3e:50:36:6d:2a:dd:36:4b:3f:68:96:71:52:19:14:
39:52:4d:8b:6a:8f:89:61:04:d1:1c:57:ce:4a:b4:de:f6:33:
9c:e4:4c:db:d5:37:35:06:ef:58:ad:fe:9b:7d:3d:c5:97:cb:
4a:29:46:93:fe:a0:2b:4a:cf:31:d5:b7:27:bc:99:03:fd:82:
f1:18:a8:af:15:2b:a3:d9:2e:ff:b1:03:e7:27:73:8a:dd:b5:
2b:37:a9:df:3e:a0:75:1e:46:e0:be:e0:7a:04:84:e1:5e:1d:
8a:81:d6:1d:b4:4b:94:10:5e:57:57:05:f2:2f:dc:15:52:a2:
57:0c:d1:22:b5:ad:0c:6f:b3:fa:9c:97:f1:f0:92:a2:89:d0:
c9:2a:22:71:81:8c:df:3a:57:af:c2:49:3f:21:9d:03:31:0a:
72:e0:38:cb:e0:ca:d4:54:df:11:2d:e5:52:77:b0:39:1b:d1:
fa:48:f9:1a:db:5d:91:06:b8:3c:fd:ae:62:a5:7c:19:27:b9:
b9:af:e5:a0:24:30:18:56:8d:05:68:63:8e:3f:76:ec:e5:bd:
ed:88:a9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:40 2026 by rpki-client