This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
File: NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft (raw, json)
Hash identifier: tJTUXDbQ77nK8p6McZAc9Nxula96VdxwVG1/hbMv+2k=
Subject key identifier: DF:97:9A:A1:CA:47:D7:C7:36:D8:BF:14:21:E7:17:03:CB:FE:46:9C
Authority key identifier: 34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
Certificate issuer: /CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Certificate serial: 019C427DF13F1C36D337041C12C227755EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
Manifest number: 13F0
Signing time: Mon 09 Feb 2026 13:01:15 +0000
Manifest this update: Mon 09 Feb 2026 13:01:15 +0000
Manifest next update: Tue 10 Feb 2026 13:01:15 +0000
Files and hashes: 1: NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl (hash: pnipQPI6Fns6+1WkbApRu+y2rGsgzjSGgjvlpRwMGUI=)
2: yLkWfOZ9pwRHBarKKNZ4fHLFIcc.roa (hash: svQPIicQF6L4iRCTdIy2JhuS8+4OxhvfXxWW++0FFdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:f1:3f:1c:36:d3:37:04:1c:12:c2:27:75:5e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Validity
Not Before: Feb 9 13:01:15 2026 GMT
Not After : Feb 10 13:01:15 2026 GMT
Subject: CN=df979aa1ca47d7c736d8bf1421e71703cbfe469c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:b5:7d:28:cf:75:5a:24:57:d8:a1:07:94:
89:09:93:bf:52:a2:b9:00:4b:65:62:80:9c:58:0d:
9d:a1:40:cc:f1:3c:e6:ad:38:03:bb:62:4b:bf:b1:
04:5d:bb:5a:e5:3a:ea:33:ce:08:a2:2e:55:2e:d0:
f6:a1:55:55:21:e0:c8:2e:bf:e7:04:f5:c8:43:c2:
3f:6b:e0:14:ef:64:84:04:46:7b:b4:27:f7:4a:29:
6c:27:94:69:38:b0:68:5c:01:fc:7b:e4:ff:cb:42:
50:43:9f:9a:1c:21:9c:c1:2a:80:2f:13:f7:5b:70:
99:6b:5b:95:74:9e:53:b5:41:44:cd:80:b0:28:a4:
a3:e8:7c:34:35:55:8c:e6:51:eb:f0:74:3b:7b:e5:
3d:da:17:57:ba:d7:86:bf:c0:de:9e:fd:20:4a:01:
5b:a6:3d:f8:3f:4e:9d:d5:8e:8d:c5:ca:8b:b3:2b:
9a:54:59:c2:6c:66:ba:8f:26:38:d4:3a:dc:9e:38:
81:86:4f:e5:c4:84:f3:31:2b:95:49:fd:70:3c:66:
ec:8d:04:a6:34:76:32:fc:14:5f:4f:e7:79:15:a1:
bb:09:05:8d:92:a0:fc:34:df:65:38:7c:7d:d5:f4:
82:62:4e:b2:87:7a:74:44:58:2b:ad:99:b6:b3:79:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:97:9A:A1:CA:47:D7:C7:36:D8:BF:14:21:E7:17:03:CB:FE:46:9C
X509v3 Authority Key Identifier:
keyid:34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:71:00:28:1a:1c:8e:6e:98:2b:fa:80:a6:d0:ab:32:e8:58:
c2:40:0b:56:24:e1:3b:88:af:19:67:cb:79:b3:d0:36:e7:a8:
75:ba:34:72:16:52:6b:2f:b2:1e:f3:a1:d0:81:ac:9b:45:03:
82:d2:29:6c:01:c5:d1:9a:58:90:e5:72:b1:c0:d2:fd:a6:f8:
d9:09:30:99:3f:1b:d2:0f:0f:36:ef:8f:61:5b:d7:13:b1:29:
94:71:6a:1c:e1:50:41:71:9e:bf:6c:c6:19:15:2d:e9:d2:4e:
ca:21:f3:65:b1:2a:66:15:4e:ef:ca:9d:32:24:ec:ad:85:d2:
ad:02:1b:18:75:c1:2a:a2:d0:91:84:6b:ca:bc:61:19:fc:48:
5c:29:b7:8c:cd:6b:60:e8:f6:19:19:30:d8:0f:c9:70:f2:70:
f5:d8:f5:62:0e:e5:b4:70:6f:5b:3b:47:b4:df:a8:d9:88:70:
31:4d:cc:fd:4c:9a:fd:2a:e0:4d:f4:78:9d:a9:7e:c2:5f:2d:
86:9e:85:b5:07:3b:66:9b:48:b7:35:fa:d4:49:b9:4d:55:b4:
e3:e9:82:89:c6:93:56:d2:3d:56:96:5a:ab:f4:4d:bf:cc:24:
be:91:57:06:7b:24:c9:1b:16:2b:7e:29:ea:38:92:bf:4d:e2:
db:d7:8c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:06 2026 by rpki-client