This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier: fOUqVOdQjjW3w37HTWaeCm4G3Ud1ujtb2qxyzA27/Ow=
Subject key identifier: CD:60:8A:5F:1B:75:CF:2D:4F:8E:51:67:80:EC:27:4E:47:51:B2:33
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 019C41348D708A0F8DA0E0E0A78CA7E02BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 07:01:28 +0000
Manifest this update: Mon 09 Feb 2026 07:01:28 +0000
Manifest next update: Tue 10 Feb 2026 07:01:28 +0000
Files and hashes: 1: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: GDbQptDNeWl2HPqWwmEYUBJcO3hRPC/DjjiJwnGAd9U=)
2: h9csAbPkQWfATuuCxHD4BYCCVSo.roa (hash: uOXNbpvZvHEf4Spk0vf1dg88f9LIRcDmba0q2K0ziEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:8d:70:8a:0f:8d:a0:e0:e0:a7:8c:a7:e0:2b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: Feb 9 07:01:28 2026 GMT
Not After : Feb 10 07:01:28 2026 GMT
Subject: CN=cd608a5f1b75cf2d4f8e516780ec274e4751b233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:78:4f:55:36:1b:e1:bd:6a:ac:9f:b6:93:
5d:b1:22:27:51:87:75:6b:93:8c:ae:8d:4f:42:b0:
75:8c:c5:70:2c:89:a2:2d:0d:d0:34:07:16:8b:d5:
f3:b5:57:4d:20:e4:b9:ab:62:82:82:aa:bb:16:65:
09:52:86:0f:c6:af:b6:e5:42:d7:29:1f:2e:f5:29:
ec:0f:a1:57:f1:5b:fa:bd:6a:10:15:7f:8f:c2:6e:
97:76:87:41:09:1c:7e:58:33:7b:e3:32:39:8b:d4:
ca:e8:11:d6:3f:66:38:7e:08:47:50:32:29:6f:b1:
fe:23:c2:92:cd:6f:7e:f7:e1:9a:15:3b:33:88:76:
cd:3d:ac:67:69:4a:6d:5b:fd:ad:a8:1f:37:46:6b:
c0:d5:97:1f:56:c3:7c:76:12:39:13:cb:87:45:f7:
52:4e:97:06:22:e4:01:7c:8c:34:25:95:32:ea:46:
ac:d0:a7:fe:6d:2e:63:90:e7:8b:f8:8f:bd:53:9f:
d6:12:1b:df:b5:14:31:7e:43:c1:40:42:cd:97:ce:
cb:c0:d7:f1:26:d4:21:27:61:f9:a0:d8:aa:8c:ca:
56:65:1e:17:2d:af:c4:db:6f:04:29:f8:73:dc:1f:
58:51:75:68:16:11:80:a7:42:87:a5:fa:04:f5:7e:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:60:8A:5F:1B:75:CF:2D:4F:8E:51:67:80:EC:27:4E:47:51:B2:33
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2c:df:c9:8f:02:92:7b:9e:f6:76:6d:de:53:1e:73:98:91:
72:3e:ac:c1:20:81:a2:69:77:9e:44:4f:81:0a:54:21:1f:8a:
0d:75:0d:90:55:21:c0:d2:7c:ef:1d:3d:3e:32:35:ce:ff:2c:
df:9b:f5:5c:e6:b3:75:1b:22:a5:f1:3d:15:2d:94:ca:50:6e:
91:2e:eb:59:64:ed:70:07:6a:43:6e:c5:98:de:d8:9b:cd:14:
3f:83:23:30:4b:91:2b:71:79:8e:16:cb:9c:fb:1d:8c:c3:a6:
52:ef:2c:0c:08:d9:47:4a:56:c0:e5:17:45:c3:6b:9b:83:d3:
fc:a6:b8:6a:e4:fe:40:ca:6f:78:ae:21:f4:2c:4d:2d:37:7d:
01:58:39:9f:0b:7a:59:28:5c:c6:8a:a5:1a:f4:83:e9:58:17:
ae:75:fe:ea:ca:10:b6:19:58:31:6f:9f:5f:ae:e1:4f:27:70:
3a:42:c9:41:50:3e:18:dd:88:83:31:a1:9a:08:22:20:6e:c4:
32:82:dd:68:7e:48:cf:1d:0e:2d:a1:c4:b5:68:94:1c:16:f1:
3e:8b:22:44:b1:2d:ac:81:f6:28:1b:b3:fd:28:e6:da:4a:6c:
24:f0:6d:a0:3b:21:8a:65:c1:21:7a:1a:65:80:b9:d9:bc:15:
a2:6c:96:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:39 2026 by rpki-client