This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
File: nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json)
Hash identifier: y3KHjuhjSqmxPKal9VUryJnhxlvIOUmsJ3Ybtcc1lyw=
Subject key identifier: 78:60:80:C1:FC:E3:28:38:5C:0F:A9:A1:25:2D:E4:AF:02:1E:9F:1E
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Certificate issuer: /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial: 019C42B3EAE732441F84BB2BC31C014B82D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
Manifest number: 11ED
Signing time: Mon 09 Feb 2026 14:00:13 +0000
Manifest this update: Mon 09 Feb 2026 14:00:13 +0000
Manifest next update: Tue 10 Feb 2026 14:00:13 +0000
Files and hashes: 1: GJbpcBM6DeYJcijI_V6UQpsMcLo.roa (hash: JvMmW6CWfWERUpYtBxgQrLJ4+C/bBMbHU6ozU5Y8U6A=)
2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: A6AhJNfCOnVEGF18Umomh8+BcouU1sKEklWlXbatqKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b3:ea:e7:32:44:1f:84:bb:2b:c3:1c:01:4b:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Validity
Not Before: Feb 9 14:00:13 2026 GMT
Not After : Feb 10 14:00:13 2026 GMT
Subject: CN=786080c1fce328385c0fa9a1252de4af021e9f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:c3:12:e8:45:a9:e7:28:80:74:58:71:15:
c5:f1:c4:6a:6a:3e:40:5c:ed:74:37:b6:cb:cd:33:
6c:ff:f4:74:82:ab:54:9b:35:97:50:ef:7f:a2:be:
d2:c9:23:98:62:ac:ee:03:4c:93:ef:3d:b7:0a:cd:
1c:08:49:1c:98:9b:e3:2b:17:b3:90:69:74:83:02:
0c:68:b8:c4:f6:5b:62:c4:cb:59:70:10:ad:d1:c1:
2a:48:fd:98:28:a8:50:df:92:fb:dd:93:f5:c6:fc:
d8:ff:7d:77:e6:e8:35:6a:8b:b0:2f:ef:73:e8:16:
e8:a7:c4:03:a2:6e:f5:65:4c:b7:bc:f3:4c:6e:50:
8e:bc:0b:87:c7:05:ad:6a:75:33:1b:ad:51:80:50:
74:a2:80:53:0d:0a:85:5f:4c:f7:33:47:45:c1:ab:
07:5f:b3:1c:89:b7:40:f3:87:57:7e:98:25:93:d5:
fc:01:06:a9:9f:10:f8:29:ba:37:9d:aa:39:d1:75:
81:fb:4f:c3:e8:a7:80:bc:e1:93:45:50:3d:49:53:
83:21:57:17:e3:7a:d2:5e:0f:79:4d:97:fc:ae:3c:
35:ac:42:d8:c8:c4:af:b9:00:3a:0b:f0:57:17:18:
bf:43:01:0a:3b:0b:95:61:68:7c:cf:73:18:22:7a:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:60:80:C1:FC:E3:28:38:5C:0F:A9:A1:25:2D:E4:AF:02:1E:9F:1E
X509v3 Authority Key Identifier:
keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:25:cc:ac:b8:59:95:ea:09:fa:29:37:ab:8b:2a:f0:ff:aa:
06:b5:21:fa:35:67:9f:27:9f:3b:e4:19:fc:53:a8:26:d0:22:
42:b2:f7:df:f7:85:ee:29:fe:ed:27:18:1b:ec:bf:16:3d:de:
9b:b3:de:e9:f2:44:97:c6:6f:0f:94:9a:d4:ee:01:e7:2a:fc:
ca:29:7c:a0:f0:13:e6:5e:77:e1:40:fa:47:74:95:aa:1d:7f:
a2:c9:81:8c:e9:96:af:a4:53:1b:9f:77:dd:12:fb:52:b3:7f:
28:0f:ba:84:d0:4f:8e:16:a5:c0:cd:98:10:3f:7b:e5:7d:d6:
b8:d1:1f:6a:27:44:97:ba:1d:d2:a1:8c:17:44:e3:f1:87:ba:
71:77:bd:df:b8:bd:aa:5a:cf:f9:9b:55:f1:42:9b:7e:c3:44:
cc:e4:56:b4:db:45:cd:cc:56:a4:c0:7a:8f:d0:5f:e5:bc:40:
a1:ad:1f:9c:15:eb:c3:1a:ff:b3:ee:fb:c4:18:5d:9f:b5:1a:
06:37:74:30:12:44:4c:eb:3d:87:c4:58:24:2f:03:38:7f:24:
80:72:77:d4:2d:99:68:d5:5f:92:2b:a3:1a:60:a2:d5:7d:b2:
72:52:1f:d0:b2:43:db:86:73:cd:e6:0e:f8:32:18:04:10:65:
f4:db:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:17 2026 by rpki-client