This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
File: N9IJppWeI1T3POLyuUEib4MpDIw.mft (raw, json)
Hash identifier: /uA5dimsXyFOxZomB4B1TZDx/5REFw3WizDcoBJbYIo=
Subject key identifier: B9:E5:C3:89:F9:4B:97:97:CB:62:C7:C8:A0:DC:D2:00:9D:59:8A:84
Authority key identifier: 37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
Certificate issuer: /CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Certificate serial: 019C4322F701F21131FA338CCFD435AED564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
Manifest number: 02C6
Signing time: Mon 09 Feb 2026 16:01:30 +0000
Manifest this update: Mon 09 Feb 2026 16:01:30 +0000
Manifest next update: Tue 10 Feb 2026 16:01:30 +0000
Files and hashes: 1: N9IJppWeI1T3POLyuUEib4MpDIw.crl (hash: 7YnQj7phoEzveWKLY5MK5XXmP3jTGp+82SqJJI2f4FI=)
2: czKSPCCshe_dDSbHHG45r9I_rso.roa (hash: ZmpNSaMc8ilnubHI16mYkmGjrHKzVWSmxUhSzVqLWvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:f7:01:f2:11:31:fa:33:8c:cf:d4:35:ae:d5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Validity
Not Before: Feb 9 16:01:30 2026 GMT
Not After : Feb 10 16:01:30 2026 GMT
Subject: CN=b9e5c389f94b9797cb62c7c8a0dcd2009d598a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:09:de:c0:85:ba:90:40:0b:b2:4d:53:a8:
9b:3f:6b:73:16:70:47:d1:2f:98:ad:dd:f6:eb:1f:
8d:36:ae:ae:61:47:1d:90:e3:a6:56:1e:f1:20:99:
fe:07:09:fc:27:7f:a5:ab:2a:10:42:56:60:ba:d3:
ea:24:25:e6:35:01:86:25:d1:d6:14:58:8e:22:84:
7d:44:43:1b:79:58:01:56:4a:5a:9b:3d:f1:a1:1e:
e5:52:23:0c:91:11:2c:19:a4:e8:06:13:c0:9b:94:
97:e7:24:02:59:2d:3e:5d:4c:47:f3:a0:0d:6a:77:
13:aa:23:f7:da:58:e4:6c:47:ea:9a:eb:24:b1:9b:
90:d2:12:23:9d:3b:6a:ad:39:f3:e2:44:87:94:89:
f6:a6:47:ab:c2:2a:dd:71:4c:23:06:74:2a:cf:6d:
d3:bd:de:98:a7:ce:b4:69:43:6a:5f:90:9a:e1:ab:
1d:66:ce:fd:ff:a1:65:c8:8d:ec:92:69:1b:e5:b0:
b9:5c:49:12:b2:66:cb:57:f9:1d:9d:42:a7:2e:05:
88:af:5c:ac:50:50:44:f5:68:db:6c:a4:99:08:d5:
ea:ca:e3:c5:eb:16:9b:f6:ee:c5:4b:16:4b:84:9e:
9a:0f:c7:17:ba:4e:91:91:0c:43:22:c8:2b:86:e2:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E5:C3:89:F9:4B:97:97:CB:62:C7:C8:A0:DC:D2:00:9D:59:8A:84
X509v3 Authority Key Identifier:
keyid:37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:be:00:98:f0:75:b9:ac:c7:15:47:28:33:50:9e:24:88:40:
64:07:e5:3e:29:df:ae:d5:88:79:34:29:93:7d:02:07:2e:d4:
36:05:0a:c1:a3:67:c9:6e:10:bb:5c:ec:4b:b1:33:03:2d:45:
df:29:7a:4b:5f:2c:5e:18:2a:3e:f7:9c:b3:30:c9:d4:bd:4b:
c4:65:8e:84:c0:de:6b:5f:d5:f1:cb:24:26:a4:1a:f9:da:01:
e1:c3:07:b1:75:1e:23:e9:c4:28:15:e0:1d:ac:f6:bb:3d:28:
d2:4c:8e:e1:67:78:44:78:a8:f6:8a:c9:70:a9:4d:ba:03:ba:
ce:9c:f1:0d:fe:40:93:49:dd:a8:01:f2:07:e9:34:26:2c:81:
a5:e7:75:dc:25:a9:b6:64:c9:37:a9:4d:1c:c8:aa:28:51:0e:
e5:43:73:09:61:65:5c:4c:5e:18:2f:b3:a9:f3:38:97:d5:5c:
82:31:b3:4c:fd:78:09:83:82:f3:fd:b7:62:41:0d:a9:fb:7b:
b8:5c:e9:ba:d6:9a:53:2c:92:a2:f3:54:bf:49:65:96:61:36:
70:c0:ef:8a:cd:22:a7:e1:8d:05:e1:20:9c:b8:f3:12:38:0d:
8d:5e:d8:99:18:c6:cf:37:e4:bb:9e:d0:d8:1e:14:d7:fa:5f:
40:21:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:56 2026 by rpki-client