This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: lKp1Bhm7uhvrXGvzUibf0a3b+4HLa4Im/7B/H9XMNwE=
Subject key identifier: D2:6B:23:76:41:A5:AD:28:E8:9C:20:D0:F7:6A:80:76:2A:21:4E:2F
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 019C420F7B26A0A43EDDCD06D66149244C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 11:00:36 +0000
Manifest this update: Mon 09 Feb 2026 11:00:36 +0000
Manifest next update: Tue 10 Feb 2026 11:00:36 +0000
Files and hashes: 1: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: Rxgpdasu+0oXPYuwWZYzZ4OvT0x8HhV/WMB00xRT2+c=)
2: e4_7yaHSmot34MoxfI-dfeOUQj8.roa (hash: Zla4V4TUPhBrvQzIH/3cu0Byr6xg7FZryKfovqeNwz4=)
3: wVHWp3M4ey0oV4Vvt4IVxUGWwHU.roa (hash: bGvl7Pnh00VzisoVUojSHZYeOEdkkKp2OdrZk5Xs+9U=)
4: z8_dgT6WuAsyinggiWah1gloyzI.roa (hash: Ux7iykUwWC0VnspPLqSHuMbius4UJKLHe67ofj8JFYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:7b:26:a0:a4:3e:dd:cd:06:d6:61:49:24:4c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Feb 9 11:00:36 2026 GMT
Not After : Feb 10 11:00:36 2026 GMT
Subject: CN=d26b237641a5ad28e89c20d0f76a80762a214e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:f4:85:1f:01:62:07:5e:f0:06:9c:48:e1:
a5:f0:e1:ad:7b:b4:07:03:6e:fb:cf:5a:c7:c4:76:
95:4f:4c:7e:33:6b:f3:77:08:62:cc:1a:ef:a4:e3:
11:46:6b:2d:c1:13:3c:b6:a5:d0:96:8f:7b:45:46:
48:38:6a:3c:49:e7:2d:ce:1b:00:1a:bb:32:2a:ca:
73:62:bd:f8:f7:8e:48:95:39:5f:5f:21:ec:87:2f:
7a:e6:89:e5:56:22:85:72:08:01:bf:88:55:f0:de:
fc:be:23:d0:a7:91:45:cb:89:cb:1f:51:7c:5f:4b:
f3:36:71:ad:bf:97:8e:7d:0a:71:13:ef:3e:0f:e7:
70:2a:c6:fa:45:55:b9:e8:af:6e:ad:b2:0c:81:d1:
45:60:85:87:98:25:86:60:f2:47:8e:c5:51:5b:15:
5b:f4:e5:95:3d:e5:ba:0a:51:e8:af:3a:ed:ed:c1:
04:36:79:32:64:77:a0:2b:f9:62:7f:17:69:2d:9e:
28:dd:1a:bd:f5:4b:c7:cb:af:72:92:1f:94:b5:fb:
58:b6:10:78:a0:f2:77:c8:3c:ee:c5:ae:39:33:b5:
85:96:b4:a1:97:6c:19:de:23:82:ae:29:80:1d:95:
03:80:52:6a:1c:b8:2a:5c:91:2b:dc:6c:3b:dc:91:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6B:23:76:41:A5:AD:28:E8:9C:20:D0:F7:6A:80:76:2A:21:4E:2F
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c1:60:07:cf:0b:0e:b4:0a:50:9a:2e:0f:fa:e6:bc:60:c6:
79:b2:c1:62:0f:53:c3:84:82:3b:2d:98:b6:2e:95:42:1d:90:
2c:00:b0:82:40:96:6a:4b:ae:ec:18:9d:3a:93:44:9c:1f:fc:
42:7a:e6:8c:0f:d3:02:e6:12:f2:93:0b:80:dd:3f:3c:8e:10:
e9:da:90:4b:ba:a9:06:c3:c5:10:a9:55:ec:f7:09:e3:e8:9b:
09:9a:bb:1a:5a:89:23:a3:7b:75:c0:9d:fc:d5:57:2c:fa:ae:
8f:a5:dd:e3:56:51:de:2c:ed:ff:35:29:39:27:a5:0b:42:c2:
c3:15:55:63:1a:2b:32:1a:10:96:db:e1:1c:9d:d3:c1:c7:f1:
56:00:2b:3a:73:74:8a:33:e0:36:bf:92:17:a4:5e:71:62:5f:
e3:6e:88:f4:70:c7:6e:ef:69:de:93:02:18:59:9b:7b:ae:6a:
10:fa:2b:7a:ea:5f:45:2b:a2:ae:bc:a7:8f:13:92:32:94:04:
4d:de:ea:d5:bd:05:3b:6c:41:cf:c6:9d:29:5a:2a:ca:81:5b:
4e:c6:72:00:3d:db:07:a6:a2:ee:c4:42:38:58:ce:e5:9f:7d:
ee:cb:2e:e9:b2:c4:43:c6:8f:bb:28:57:f1:ce:14:0a:bc:61:
b4:74:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:26 2026 by rpki-client