This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: o16odoouyCCHVP1a25R2UqNboEmO85WuKXMqnD8E5YE=
Subject key identifier: 51:25:25:4C:C9:03:04:48:33:57:DF:BE:56:EF:6F:00:0C:59:35:A0
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 019C438FCBB85F1DC4E60DA60ECE4DD6DA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 0B16
Signing time: Mon 09 Feb 2026 18:00:23 +0000
Manifest this update: Mon 09 Feb 2026 18:00:23 +0000
Manifest next update: Tue 10 Feb 2026 18:00:23 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: bL8ru33rHHyM9qUNdSpvdXf2XW9jPF5Zl9tTTD8lJiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:cb:b8:5f:1d:c4:e6:0d:a6:0e:ce:4d:d6:da:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Feb 9 18:00:23 2026 GMT
Not After : Feb 10 18:00:23 2026 GMT
Subject: CN=5125254cc90304483357dfbe56ef6f000c5935a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:8c:b6:02:e9:fe:99:1f:95:46:82:00:bf:
69:3d:1a:ec:c2:5d:21:f2:43:37:85:c1:01:ef:fd:
80:da:49:44:b1:93:74:66:41:7b:3c:e6:05:12:51:
ab:44:8e:d6:0c:39:93:39:15:24:62:6d:4e:64:17:
44:8f:30:cc:14:a6:89:79:b2:81:82:f8:cd:ee:d5:
c4:cd:15:de:c4:fa:22:8c:fa:fa:4d:49:43:42:55:
7c:c9:f7:a0:f5:8f:7a:45:5f:f6:f9:f0:c8:52:ee:
a0:00:ad:b9:fc:27:25:08:4c:e8:f4:a9:d6:53:ca:
2a:ae:64:d2:0b:65:55:35:fc:ee:00:71:78:1b:58:
ae:4b:17:2c:60:ec:86:fb:4f:c6:c0:c6:56:9a:84:
f1:dc:21:17:ee:dc:e6:3a:0a:51:d8:e9:15:30:73:
93:56:7a:78:0a:39:0e:7a:29:8d:78:f0:90:8b:ec:
38:cd:2a:c3:e6:00:8c:70:16:b9:3a:d2:dc:04:17:
72:65:11:79:e5:4f:bc:2f:f1:2a:09:4b:0e:a0:27:
3d:1d:d4:fc:75:62:bd:19:4f:01:45:a5:6e:4b:98:
de:aa:97:f2:56:18:bf:d8:8e:a7:d7:17:15:7d:87:
cc:2f:1f:9f:1d:a6:0e:ee:44:39:1f:58:9b:40:54:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:25:25:4C:C9:03:04:48:33:57:DF:BE:56:EF:6F:00:0C:59:35:A0
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c1:93:94:14:17:6c:f6:4d:12:b2:a4:a8:2a:16:5b:98:da:
d6:75:c9:ad:79:38:d9:22:9f:a3:e0:28:14:fc:46:0a:be:4a:
64:60:e3:05:ac:4c:99:56:fe:0d:88:41:24:52:4d:ce:65:d0:
1d:39:45:c2:c1:dc:c2:e7:02:7b:22:ad:4e:c3:e6:9d:9a:81:
af:8b:de:08:27:34:2d:ed:37:2a:36:f2:31:22:60:e7:b4:67:
6d:80:02:d6:d6:00:e0:8e:de:7d:b2:50:95:29:21:3d:59:11:
b8:f1:56:d5:22:bf:f5:dd:10:92:13:f6:32:f7:8d:61:b0:6e:
80:77:0b:3a:76:42:84:fd:d7:a6:56:84:54:87:f3:1b:9e:a1:
f8:95:19:4d:1f:a3:74:7d:86:25:37:1a:7d:11:3b:b5:28:8c:
3a:49:04:09:dc:18:fe:8b:d0:ed:7f:53:6c:fa:fc:bd:77:23:
6e:ed:65:aa:df:73:35:fa:3e:db:7a:4e:a1:4f:33:07:14:1c:
fe:ad:eb:7b:49:8c:3d:e9:52:5f:77:48:8f:a3:59:6c:fc:6b:
07:d2:01:95:df:68:aa:74:44:bd:fc:29:b9:c6:6c:4f:fc:a2:
c8:a3:cb:08:5c:7c:e9:af:04:d8:5a:3f:e8:4a:b6:34:87:ae:
d0:52:d8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:08 2026 by rpki-client