This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: qJUwPrSiM4lS/erfko43wvCRj4UjENJkpY5f/K42xpE=
Subject key identifier: 9E:23:27:36:E2:61:8F:0C:C3:A7:A6:86:07:1E:BB:32:6C:BB:5B:3E
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019C438FF8BEA73B2255CFDCCF20E31BAB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 02FA
Signing time: Mon 09 Feb 2026 18:00:34 +0000
Manifest this update: Mon 09 Feb 2026 18:00:34 +0000
Manifest next update: Tue 10 Feb 2026 18:00:34 +0000
Files and hashes: 1: DDkvvm20UwOj8A7Y_U-N1JKON2M.roa (hash: CztSHRDK9GU8Z8Q6g/s60OYynXKDEVEnijjY44XdV/w=)
2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: yoHaKw5GkspdPXJgo1OtzJSTaUlIqDGfDwwq8sfOUvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:f8:be:a7:3b:22:55:cf:dc:cf:20:e3:1b:ab:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Feb 9 18:00:34 2026 GMT
Not After : Feb 10 18:00:34 2026 GMT
Subject: CN=9e232736e2618f0cc3a7a686071ebb326cbb5b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:f3:0f:2d:16:e4:17:65:7d:e8:60:ab:33:
a2:b5:0a:7b:8d:ca:9d:44:28:04:00:d2:10:ac:17:
87:97:b7:f9:ab:83:7d:99:c5:ae:ef:93:9f:c2:93:
6e:89:00:43:ba:44:bf:5c:96:c7:8b:e0:00:6f:7a:
b4:40:47:90:f0:23:97:22:41:70:8f:bb:3c:6f:53:
1f:d2:28:67:52:5c:b1:37:ad:23:d9:d9:b7:b6:e1:
75:79:85:40:38:3a:22:e7:9e:22:f0:61:8e:99:82:
c1:e4:7d:da:00:22:0c:33:73:e7:86:f9:59:02:fb:
ef:4c:f8:61:f5:b6:c8:ae:42:bd:67:7c:61:c5:85:
a0:6b:0c:1b:cd:13:6f:f1:ce:ba:c3:6c:be:7b:ac:
6b:ba:f5:fa:8e:da:24:3b:87:50:a0:8d:a6:60:b7:
d9:83:69:37:0a:0d:e4:c1:f6:89:64:40:0e:a7:92:
c7:32:af:c1:bf:f0:f1:09:38:5a:6d:7c:0e:6b:bf:
02:5e:0f:a4:1d:88:07:62:fe:4b:aa:32:28:3a:11:
56:da:ec:9e:55:c4:c8:35:3f:40:26:29:91:e2:1c:
fc:d8:50:d5:18:77:bc:79:d8:60:0f:00:ef:3f:ff:
16:0c:c8:db:de:82:6c:c2:27:34:f5:dd:70:d9:07:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:23:27:36:E2:61:8F:0C:C3:A7:A6:86:07:1E:BB:32:6C:BB:5B:3E
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:16:44:6c:88:ab:10:76:86:c5:11:16:16:ea:3a:77:91:7d:
10:51:25:59:55:ba:17:52:3f:87:84:e0:c5:cc:5c:52:8e:ef:
3e:21:0a:2b:d4:6f:c4:5c:8b:94:b0:a1:a1:02:d8:16:4d:dc:
83:b5:67:46:45:73:b7:16:7e:d3:a6:6d:37:56:a8:1c:10:e8:
cf:00:30:de:e4:10:3e:c5:4c:52:06:d9:09:eb:1d:e7:4f:a0:
ad:37:f9:70:c0:30:63:0c:08:49:4f:d2:09:0f:41:ad:b4:df:
02:5c:c0:58:4b:1c:e6:da:a3:c4:e0:7b:82:04:93:aa:dd:9c:
ea:78:88:12:ba:6f:c3:08:cf:45:0b:3d:3c:e0:3a:3d:2b:eb:
a8:06:84:f6:21:57:34:89:d3:20:84:82:0e:98:30:dc:d9:d4:
0f:eb:5d:85:34:c9:0d:31:2f:44:b1:5d:e4:28:4b:b3:12:f6:
1b:62:4c:57:1d:f6:87:90:23:72:90:b6:42:03:fa:55:8c:d1:
a7:cc:40:31:ae:5c:50:71:de:f6:fc:f5:87:27:41:61:13:ec:
94:7e:11:4b:d1:ba:33:ed:8a:b3:0a:86:03:bf:66:2a:dd:18:
93:8d:b8:47:b9:ac:0d:7a:93:46:77:87:6a:49:bf:67:63:f2:
1c:5a:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:42 2026 by rpki-client