This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: Bobyw4+q8Iyg+egA5RPP54AOoMtHg4xNbu/l1iJzMCY=
Subject key identifier: 02:96:38:EF:9C:3D:DA:5C:DF:4C:E3:FB:AC:07:CE:31:33:68:CA:AD
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 019C43596C6A6A4D770D750197A663CD1D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 08D7
Signing time: Mon 09 Feb 2026 17:00:59 +0000
Manifest this update: Mon 09 Feb 2026 17:00:59 +0000
Manifest next update: Tue 10 Feb 2026 17:00:59 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: nRuRBqqEG2A5/WD/vMPMYULX6e6yMKxj4jWo7cbnpSA=)
2: zaw-l3nyUygb03TlyeeZ5uNtuxc.roa (hash: vbvudETvvHbmCpQdctUZ1OuuVkp6d4krvgnH2TdlDSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:6c:6a:6a:4d:77:0d:75:01:97:a6:63:cd:1d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Feb 9 17:00:59 2026 GMT
Not After : Feb 10 17:00:59 2026 GMT
Subject: CN=029638ef9c3dda5cdf4ce3fbac07ce313368caad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:c2:a4:32:73:97:67:e6:49:8f:a5:f1:f6:
05:d2:d1:14:8c:d7:11:c9:71:41:55:d0:6b:1d:df:
a4:b2:b1:c1:e2:6f:07:40:5e:d0:56:b5:42:64:f3:
06:64:7e:bb:db:a1:9b:53:00:15:db:aa:01:16:14:
d8:5f:c4:41:69:e4:bb:b0:8d:31:ab:88:3a:58:8c:
35:03:3b:66:a1:69:df:5d:47:40:3f:7d:ac:ce:fd:
a9:06:b4:f8:24:90:12:99:97:e2:55:be:f7:bc:69:
65:04:12:69:92:27:1c:8f:9e:0f:fc:b9:57:92:2e:
5b:2c:77:22:92:58:23:62:61:dc:33:c9:bb:f0:4d:
01:36:93:bb:1a:24:38:b1:8a:51:93:58:ef:e8:04:
52:39:ba:b3:ec:50:d4:c0:2b:d5:b1:4c:bf:db:6d:
3f:26:84:30:27:39:74:2d:98:68:6a:0a:51:12:9a:
92:2b:ed:51:a0:46:56:0a:9d:d9:58:1d:e5:b6:2e:
f1:b2:15:1b:08:cc:01:7c:91:cc:24:e8:a2:06:9b:
e2:ec:f4:ad:d3:5d:eb:24:1f:97:89:99:0d:71:e1:
27:09:1b:e8:0c:50:b7:e5:ad:ab:d1:07:03:8a:28:
32:f7:cb:c2:28:6f:3b:1f:80:89:cb:89:4f:48:38:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:96:38:EF:9C:3D:DA:5C:DF:4C:E3:FB:AC:07:CE:31:33:68:CA:AD
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e4:97:0d:8c:81:49:17:79:be:fe:c2:6f:cc:f3:fe:c7:f0:
3d:de:33:37:aa:8c:61:38:7d:05:c9:a1:43:96:20:2a:a3:a7:
26:1c:ed:13:30:02:31:22:80:71:da:87:60:33:1c:3c:95:37:
0f:09:82:ed:e5:fc:e8:45:c2:d2:bf:50:ef:5f:64:4f:00:9b:
6c:e2:7e:f1:77:37:65:a6:78:72:0d:79:7b:f4:fc:0b:51:81:
f6:8b:01:3e:c3:30:3c:77:8c:35:99:21:6a:aa:af:ee:d1:c8:
29:8d:ac:a2:5f:14:01:84:29:a1:3c:6c:44:9d:7a:c8:f9:04:
b9:ce:bc:b9:4b:77:9c:b6:c1:fd:39:90:f1:9c:41:ad:8d:e6:
06:a4:c8:4e:c2:f3:b1:1b:82:66:96:60:ba:ce:fa:67:aa:a9:
71:94:d9:e1:de:5f:a6:59:f8:d3:54:89:2d:92:e6:ea:39:6f:
23:8d:a4:46:34:14:25:50:cc:91:d1:94:32:df:af:77:0a:9b:
ca:f1:ad:7c:1e:d6:11:97:83:14:fd:9b:8b:78:49:a9:4d:52:
b6:0d:64:db:fa:86:64:7e:61:0d:de:72:62:05:f3:2a:f3:96:
b3:d7:eb:73:7b:38:f2:2c:bd:a5:06:21:d7:59:7c:4a:13:2b:
70:ab:92:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWWxqak13DXUBl6ZjzR0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNjIwZjMxYjQ5OTdjNzM0NWJjNjZiNDZiNDNkNjg2YmYw
MDkzMWEwHhcNMjYwMjA5MTcwMDU5WhcNMjYwMjEwMTcwMDU5WjAzMTEwLwYDVQQD
EygwMjk2MzhlZjljM2RkYTVjZGY0Y2UzZmJhYzA3Y2UzMTMzNjhjYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnfCpDJzl2fmSY+l8fYF0tEUjNcR
yXFBVdBrHd+ksrHB4m8HQF7QVrVCZPMGZH6726GbUwAV26oBFhTYX8RBaeS7sI0x
q4g6WIw1AztmoWnfXUdAP32szv2pBrT4JJASmZfiVb73vGllBBJpkiccj54P/LlX
ki5bLHciklgjYmHcM8m78E0BNpO7GiQ4sYpRk1jv6ARSObqz7FDUwCvVsUy/220/
JoQwJzl0LZhoagpREpqSK+1RoEZWCp3ZWB3lti7xshUbCMwBfJHMJOiiBpvi7PSt
013rJB+XiZkNceEnCRvoDFC35a2r0QcDiigy98vCKG87H4CJy4lPSDiC6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKWOO+cPdpc30zj+6wHzjEzaMqtMB8GA1UdIwQY
MBaAFJxiDzG0mXxzRbxmtGtD1oa/AJMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2Qt
NGI4NzkzZGI3NDYwLzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2QtNGI4NzkzZGI3NDYw
LzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+SXDYyB
SRd5vv7Cb8zz/sfwPd4zN6qMYTh9BcmhQ5YgKqOnJhztEzACMSKAcdqHYDMcPJU3
DwmC7eX86EXC0r9Q719kTwCbbOJ+8Xc3ZaZ4cg15e/T8C1GB9osBPsMwPHeMNZkh
aqqv7tHIKY2sol8UAYQpoTxsRJ16yPkEuc68uUt3nLbB/TmQ8ZxBrY3mBqTITsLz
sRuCZpZgus76Z6qpcZTZ4d5fpln401SJLZLm6jlvI42kRjQUJVDMkdGUMt+vdwqb
yvGtfB7WEZeDFP2bi3hJqU1Stg1k2/qGZH5hDd5yYgXzKvOWs9frc3s48iy9pQYh
11l8ShMrcKuSpQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:43:55 2026 by rpki-client