This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
File: cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json)
Hash identifier: WHQ/kCWFFK/y41hCsgMz6uJsZHpVMU6DCrpM8E/qyVg=
Subject key identifier: FC:E0:B7:03:98:44:46:95:F8:D3:3C:A3:5A:79:DD:6F:48:4E:D9:D7
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Certificate issuer: /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial: 019C41D858F58FD664FE28D239D1775FCB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 10:00:23 +0000
Manifest this update: Mon 09 Feb 2026 10:00:23 +0000
Manifest next update: Tue 10 Feb 2026 10:00:23 +0000
Files and hashes: 1: CGASqwsZcGaWA7KhgQteEYO55EY.roa (hash: wP8KXOiWGgF6XyMWqWY5eIrUa40yWygDD4xGf13foh4=)
2: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: t66gAkgqCIGHwFkBLRdtxm38l7jvNAcklrJF2FFdZ6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:58:f5:8f:d6:64:fe:28:d2:39:d1:77:5f:cb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Validity
Not Before: Feb 9 10:00:23 2026 GMT
Not After : Feb 10 10:00:23 2026 GMT
Subject: CN=fce0b70398444695f8d33ca35a79dd6f484ed9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:59:2e:b9:49:7d:23:18:b0:05:93:5c:a2:
d2:37:ce:f4:9b:5c:3c:6d:2c:1d:e4:8b:99:1e:89:
22:77:82:f6:a0:60:80:c9:da:7d:cd:eb:38:e5:7d:
de:12:5b:d6:c7:c0:e3:67:fd:7a:4b:d1:19:bb:f5:
4e:79:5e:f8:45:f9:0c:9b:90:a4:2a:e4:10:6d:c6:
08:d9:20:a4:51:e6:8b:54:f8:41:b2:ce:f1:db:29:
40:f6:f9:32:b0:61:3a:0a:9f:a5:ac:da:17:8a:dc:
cd:2d:0f:59:bc:15:45:7d:4e:c6:06:d8:97:eb:60:
7b:23:82:da:41:9d:33:64:5f:13:94:e1:5a:d3:57:
7a:98:01:f7:dd:9e:43:98:3f:29:ea:29:0a:97:e9:
17:6e:36:cb:86:2a:76:fc:d4:42:e9:d9:e7:69:76:
14:3d:52:01:a0:42:b3:51:b9:ff:d6:25:a7:32:6b:
e8:3d:1f:45:9d:6a:2f:9d:25:e2:eb:dc:15:5d:f3:
7e:3f:95:bf:e7:5f:26:1c:ea:7b:ea:9a:cc:3d:51:
60:3f:09:f0:55:fa:d0:21:67:73:76:74:78:c3:93:
b7:7c:cb:26:c4:f7:5a:48:3c:e4:60:10:18:fb:44:
a5:3b:6f:81:b2:a2:b7:4b:2d:cd:04:7e:19:f2:73:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E0:B7:03:98:44:46:95:F8:D3:3C:A3:5A:79:DD:6F:48:4E:D9:D7
X509v3 Authority Key Identifier:
keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:92:c5:df:f4:a0:22:c4:a4:16:3f:ac:37:cb:d2:3c:99:
d7:91:c5:7b:af:30:4b:e6:f8:b3:3f:13:69:e1:38:99:2f:92:
c2:8e:73:a3:54:d9:f1:82:12:97:b5:d1:bb:7c:15:ba:b5:88:
0f:f5:f0:7e:9c:05:d9:78:7b:c7:ba:b0:7c:16:06:28:a3:09:
9f:50:92:96:e8:31:93:97:09:d7:93:dc:ab:49:9b:78:56:e6:
87:30:7d:68:d2:25:c7:1d:aa:f5:5c:9d:31:21:a2:f8:3a:76:
1f:12:9a:05:fa:d0:70:f2:6c:5c:12:6b:a1:e9:f1:7d:c1:26:
59:94:f2:3d:ca:71:a3:65:34:8b:8b:03:7e:c2:41:3b:8a:81:
49:4d:c6:9d:36:b8:e0:c6:a4:12:72:ef:69:63:a2:7e:79:ab:
ef:cd:d8:27:9a:72:7a:5b:a9:36:f3:d0:7b:de:1e:f9:ef:a2:
c5:68:2a:8c:66:45:38:90:f3:4a:cb:18:48:fd:4f:7d:be:98:
24:cf:5d:09:84:c4:aa:3b:04:31:aa:db:94:12:bb:1e:11:68:
40:50:5e:bb:00:a9:bc:f9:4f:0e:85:9e:77:89:25:1a:7c:d6:
ea:5e:c4:d0:c9:98:11:be:b6:ec:0c:4a:3b:aa:09:a2:af:a1:
89:40:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:21 2026 by rpki-client