This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier: 6yNYxOP55IKrjcQSmvSEuibnwS2ElF0mEuVGTqKvz2U=
Subject key identifier: E2:A4:16:98:26:0B:F2:11:3F:48:6D:1E:ED:0F:A8:B4:07:14:CE:A4
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial: 019C43907F335E1694DA7F787AEC69C27D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 18:01:09 +0000
Manifest this update: Mon 09 Feb 2026 18:01:09 +0000
Manifest next update: Tue 10 Feb 2026 18:01:09 +0000
Files and hashes: 1: 0e20Vnm0C5gqevgZraEdYYQvC2k.roa (hash: 6onisxkqwNjHYYcPnOhg1nsEQp++MNFfPSzmz8SXV28=)
2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: ubRdfSCv/rgkiCfd/q0tcp81AMy8VXFDhZpuAW2MIh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:7f:33:5e:16:94:da:7f:78:7a:ec:69:c2:7d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Validity
Not Before: Feb 9 18:01:09 2026 GMT
Not After : Feb 10 18:01:09 2026 GMT
Subject: CN=e2a41698260bf2113f486d1eed0fa8b40714cea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:a4:dd:e1:53:21:2f:e3:54:b7:e0:4f:49:
87:d9:4c:52:20:ad:d5:55:61:89:38:24:8b:72:48:
57:1b:8b:f5:45:db:0d:f6:6f:54:c0:a5:0a:9e:a5:
d0:e7:76:74:2d:9c:0c:09:d7:59:6f:be:fb:15:90:
14:e8:49:ab:2d:29:6b:f2:8e:01:ab:1f:8b:7b:70:
1f:af:35:d7:48:59:39:ba:ba:23:cf:6b:2a:d7:a2:
e5:05:9e:82:c5:7c:b4:ec:81:cf:a6:04:81:78:34:
90:14:b2:35:b4:d0:0b:d9:7c:ee:22:f8:bf:bf:e1:
c4:be:5b:1a:9d:52:92:5c:90:31:4e:a0:5c:93:ed:
e6:32:44:de:5a:c9:ba:84:16:e1:70:03:34:06:cf:
25:b3:71:8a:c8:2c:f8:67:63:62:38:1d:58:1e:34:
39:65:e8:ca:b5:c7:8b:a0:90:e8:6d:03:a4:b2:8f:
0b:79:46:b3:85:8a:5c:0a:eb:ee:c8:e1:ed:5c:e4:
26:48:a2:30:aa:c6:53:44:1f:4d:23:e1:15:3a:4f:
4d:9f:ca:1c:71:1e:07:cf:70:21:8a:b2:f6:09:96:
f0:24:82:a3:7d:5d:fa:20:d9:e7:f1:e6:cd:09:ba:
d9:4e:32:67:a6:a5:dc:e5:ce:39:19:b9:4f:62:c5:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A4:16:98:26:0B:F2:11:3F:48:6D:1E:ED:0F:A8:B4:07:14:CE:A4
X509v3 Authority Key Identifier:
keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:19:5e:5a:86:9d:92:23:1c:12:79:9d:06:66:b3:65:1e:
3f:74:61:0f:47:19:ea:9d:e7:bb:b1:df:b4:d3:a1:12:6f:ef:
82:2c:75:54:87:d0:9c:ad:0a:d8:95:7e:f6:20:01:95:09:68:
eb:08:fe:84:55:59:a2:7a:d3:13:58:96:2c:2f:b0:c6:e6:32:
8d:28:70:a0:7b:69:56:dc:69:52:31:be:24:c6:05:ae:dd:d7:
ef:25:33:98:9e:85:e1:40:3b:ef:cf:32:69:63:38:20:91:7f:
10:32:16:cf:58:30:14:6f:e8:50:86:69:ab:4a:da:ce:e8:35:
8d:77:29:43:52:a7:e4:c8:95:ec:61:ce:f0:76:17:8f:56:c9:
bc:e0:ef:e2:1f:9a:08:05:0c:dd:b3:a7:64:3e:d2:20:13:7d:
29:6b:d6:4a:4b:67:98:34:d7:8b:67:63:92:a3:bb:99:da:9f:
9b:af:fc:9e:2b:77:89:78:e6:0e:87:c2:c7:40:5e:b4:80:07:
c5:37:7a:e1:94:57:f7:5e:5d:a1:3c:4e:5d:8a:ce:81:cc:e0:
c1:25:d8:a6:6e:4f:80:36:72:96:8c:60:e7:b4:ab:6a:d7:29:
dd:37:90:09:ea:22:97:dc:6a:be:a1:e6:39:a9:3c:f9:6d:47:
52:85:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:13:29 2026 by rpki-client