This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier: yyvYD7mY8GrYzg49/rNVJ4W4VrikQK5ZLG8fnH5/BZE=
Subject key identifier: 3B:B9:40:82:DA:FD:D3:FA:AC:F1:64:5C:9C:38:19:3D:AC:3D:6C:8E
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial: 019C42465194FD5FB9A3F2EB4B769A15F961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number: 0779
Signing time: Mon 09 Feb 2026 12:00:30 +0000
Manifest this update: Mon 09 Feb 2026 12:00:30 +0000
Manifest next update: Tue 10 Feb 2026 12:00:30 +0000
Files and hashes: 1: 1t1mh1im05R5TEOwI71Jiu37ecs.roa (hash: m9uNu74yMGw3x49FIpVoScb0nsc8GhB3C9Hq/L+dUZE=)
2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: EjnQdaTNxBBihTuSUrllkonQ7zvxnUpw0v7PgSjsRII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:51:94:fd:5f:b9:a3:f2:eb:4b:76:9a:15:f9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Validity
Not Before: Feb 9 12:00:30 2026 GMT
Not After : Feb 10 12:00:30 2026 GMT
Subject: CN=3bb94082dafdd3faacf1645c9c38193dac3d6c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:9f:c2:e7:d1:96:36:33:b7:54:b8:29:e2:
4c:45:d4:82:d8:d7:e4:2d:81:15:c6:3f:ac:21:03:
3d:0f:ff:df:3e:07:c8:8c:e2:a7:86:7b:ee:bb:a7:
72:9f:5b:3c:41:99:d1:db:92:d9:e6:8f:73:13:ce:
b4:a2:f9:2e:85:27:86:ef:f0:2b:a6:28:18:db:0a:
72:4d:66:6d:dd:3e:5a:a0:47:00:c6:82:fd:2c:32:
d7:b1:7f:ae:a6:1c:94:24:df:ab:4f:01:4e:6f:91:
53:22:f2:74:97:b9:91:39:c6:a7:35:c9:3a:ab:d4:
5b:b7:6d:49:3d:ec:8b:5a:af:08:b9:f6:ab:e1:15:
67:7f:17:98:83:7c:e5:e8:0c:63:bf:fd:66:2b:45:
0b:46:4d:95:0a:e9:97:69:c4:1b:f1:02:92:e7:51:
ed:9a:9c:dc:06:cf:42:b7:e7:b3:82:7a:11:ef:73:
e5:97:cc:cd:95:c9:77:04:0c:ef:ce:bd:46:d8:61:
2f:37:83:cf:c3:0d:ac:a5:9a:2e:81:3f:7b:f9:3e:
d4:1a:1c:b1:9c:01:9e:83:08:fb:cf:f6:8a:29:c8:
43:08:74:a9:62:a3:87:f4:6a:da:61:d7:5a:5a:fc:
80:0e:c4:1f:ea:c1:d3:89:3f:fd:7b:bf:27:9e:27:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B9:40:82:DA:FD:D3:FA:AC:F1:64:5C:9C:38:19:3D:AC:3D:6C:8E
X509v3 Authority Key Identifier:
keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f3:6a:17:73:ef:10:89:da:7a:df:a9:c1:4f:97:57:c1:c8:
40:87:24:b8:e7:bb:e4:c0:80:bf:11:55:bc:e3:89:0c:ef:e8:
41:3e:45:a3:2a:2a:2a:f5:db:7e:b6:a2:68:af:3f:7b:ae:c9:
09:e1:f2:af:d2:82:8a:7e:a6:3d:10:4a:b8:9f:1d:c0:81:22:
5c:bc:55:b5:61:3a:26:30:9b:70:4d:72:3d:e6:c4:82:ce:07:
f4:ae:c8:b4:f8:77:c0:9a:52:74:f4:f8:0e:14:02:57:66:41:
0f:d7:ea:37:0e:e3:06:b1:84:98:d4:07:44:07:f3:35:e4:18:
6a:82:c5:57:9d:dc:4b:77:55:4f:39:05:d7:c2:e9:02:1f:80:
14:bd:19:fb:bd:a2:60:4b:3c:07:6e:e7:5e:e1:1e:ad:ef:0f:
e6:6c:05:dc:69:f3:2e:ec:88:f9:b5:8a:8a:15:c8:ac:52:45:
ab:ee:0e:52:6e:5d:35:c3:06:77:25:ba:90:ee:c2:ce:c3:5a:
94:db:17:32:d3:f5:36:b0:4d:7e:7c:a6:28:46:a0:f2:65:fa:
20:8b:5c:28:f3:f3:30:52:08:9a:f5:64:90:e8:8e:51:fe:01:
39:4e:33:f6:13:dc:3c:d5:32:e4:c1:79:dd:31:ff:90:0c:40:
dd:4f:12:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRlGU/V+5o/LrS3aaFflhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTc0ZGE0NWQ1OTE0ZWRlMTM4MWVlYWY5YzJiYjE2NDVi
NjY0M2EwHhcNMjYwMjA5MTIwMDMwWhcNMjYwMjEwMTIwMDMwWjAzMTEwLwYDVQQD
EygzYmI5NDA4MmRhZmRkM2ZhYWNmMTY0NWM5YzM4MTkzZGFjM2Q2YzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19afwufRljYzt1S4KeJMRdSC2Nfk
LYEVxj+sIQM9D//fPgfIjOKnhnvuu6dyn1s8QZnR25LZ5o9zE860ovkuhSeG7/Ar
pigY2wpyTWZt3T5aoEcAxoL9LDLXsX+uphyUJN+rTwFOb5FTIvJ0l7mROcanNck6
q9Rbt21JPeyLWq8Iufar4RVnfxeYg3zl6Axjv/1mK0ULRk2VCumXacQb8QKS51Ht
mpzcBs9Ct+ezgnoR73Pll8zNlcl3BAzvzr1G2GEvN4PPww2spZougT97+T7UGhyx
nAGegwj7z/aKKchDCHSpYqOH9GraYddaWvyADsQf6sHTiT/9e78nnidAVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu5QILa/dP6rPFkXJw4GT2sPWyOMB8GA1UdIwQY
MBaAFJ+XTaRdWRTt4Tge6vnCuxZFtmQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81MWVhNDktNzEyOC00NmUwLTgzOGQt
N2Q1ZWNiNGYxODFmLzEvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81MWVhNDktNzEyOC00NmUwLTgzOGQtN2Q1ZWNiNGYxODFm
LzEvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPNqF3Pv
EInaet+pwU+XV8HIQIckuOe75MCAvxFVvOOJDO/oQT5FoyoqKvXbfraiaK8/e67J
CeHyr9KCin6mPRBKuJ8dwIEiXLxVtWE6JjCbcE1yPebEgs4H9K7ItPh3wJpSdPT4
DhQCV2ZBD9fqNw7jBrGEmNQHRAfzNeQYaoLFV53cS3dVTzkF18LpAh+AFL0Z+72i
YEs8B27nXuEere8P5mwF3GnzLuyI+bWKihXIrFJFq+4OUm5dNcMGdyW6kO7CzsNa
lNsXMtP1NrBNfnymKEag8mX6IItcKPPzMFIImvVkkOiOUf4BOU4z9hPcPNUy5MF5
3TH/kAxA3U8SZA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:47 2026 by rpki-client