This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
File: neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json)
Hash identifier: NEKcxcOqa2VoYW4KAJ/uarL0B4Iz3V+N98qkvZnV8/Q=
Subject key identifier: CD:76:29:A4:C9:9E:05:2D:72:A2:8D:04:F8:71:66:F5:83:23:3F:E7
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Certificate issuer: /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial: 019C4321C7634243130EAE75B14C77CA404A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
Manifest number: 0840
Signing time: Mon 09 Feb 2026 16:00:13 +0000
Manifest this update: Mon 09 Feb 2026 16:00:13 +0000
Manifest next update: Tue 10 Feb 2026 16:00:13 +0000
Files and hashes: 1: 0dKz27FXmEvTUAS97w6oezHQSJM.roa (hash: O/nMJnxeA2xWpfnp6SVdaMqFKXk+z2ftNLJ81ExuMdU=)
2: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: fO/3wp/qMQMX5JFx5DR3cPXRQpJhTDC1GNp3LfrjDCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:c7:63:42:43:13:0e:ae:75:b1:4c:77:ca:40:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
Validity
Not Before: Feb 9 16:00:13 2026 GMT
Not After : Feb 10 16:00:13 2026 GMT
Subject: CN=cd7629a4c99e052d72a28d04f87166f583233fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:91:c4:e2:11:d7:71:62:a4:c9:b9:80:8f:
ca:37:b7:02:0d:c0:70:1c:f7:65:a4:7a:93:03:c0:
5d:34:8a:59:bd:8c:17:a3:7a:b4:ba:42:37:3e:fb:
56:68:c8:b9:44:4b:93:65:6c:a0:e0:54:13:d1:9a:
d0:0f:1e:39:06:4d:cf:0f:8b:65:b5:21:20:0c:d4:
4d:b4:39:ff:11:19:aa:da:a6:10:20:5b:21:cd:e3:
01:2b:fc:db:50:cb:fa:db:a3:29:f0:70:85:54:db:
cd:34:ef:54:ce:55:49:f6:a6:84:3c:c4:eb:c4:f3:
8c:d4:a7:ba:ff:38:db:fc:86:4c:19:6b:23:fa:19:
46:91:db:11:6a:1f:84:dd:9c:c7:3f:d6:0a:78:b2:
ec:ec:4e:7e:b7:49:67:27:a0:4c:80:b3:00:0b:51:
06:d1:10:76:45:75:d8:8d:58:d5:25:0b:52:32:3e:
44:6d:9a:33:7d:a7:e2:4e:41:7e:00:07:54:bb:b5:
22:85:b3:ea:40:dc:04:00:fa:64:9d:16:ac:4a:d6:
a4:a4:99:38:eb:ae:5e:ed:c6:e0:0c:73:6f:84:07:
4f:01:75:bd:c3:bb:e1:79:75:6b:0b:3c:64:01:39:
39:66:e2:70:4c:17:af:bf:f9:99:b6:0b:d7:ce:48:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:76:29:A4:C9:9E:05:2D:72:A2:8D:04:F8:71:66:F5:83:23:3F:E7
X509v3 Authority Key Identifier:
keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5a:d4:a6:a9:11:4a:20:2e:2f:90:6e:58:67:0f:1b:7c:51:
a0:62:ab:c6:d9:df:5d:09:18:41:81:df:78:c7:1e:e5:91:e5:
bb:ab:36:51:4a:18:bc:0e:57:1c:01:dd:6f:d7:78:55:0d:a6:
44:44:84:33:dd:03:d5:4b:b0:7d:0e:9d:af:c0:de:ab:f5:04:
05:07:ea:01:34:3c:8d:2e:64:5b:39:2a:88:ad:a0:71:77:49:
df:20:29:f3:e7:f2:5e:63:f0:a1:de:35:5e:bc:dd:34:52:1e:
87:99:c1:bf:d4:74:31:8f:83:d3:03:45:bd:f1:f9:16:3e:f6:
3b:f2:30:2e:7d:5b:1c:37:44:c6:71:e0:96:c5:11:2f:f8:7a:
af:6a:0f:13:e0:dc:80:cd:88:80:d0:cc:1f:cf:91:bd:44:f0:
e8:8c:3c:ec:d7:a0:7a:0c:31:cb:54:6c:2b:94:41:fb:f7:19:
16:22:42:77:dc:4f:11:e1:0a:d0:00:c0:f0:43:fb:a6:e7:f5:
b2:a7:4c:79:fd:43:02:6b:c2:57:f0:78:80:36:6a:6f:65:07:
d2:f4:61:23:90:23:4a:8c:f1:92:8d:77:1d:04:1f:8f:73:4f:
b5:5e:96:e3:c3:44:c7:ae:f5:0d:8d:8a:90:4b:d7:63:6e:79:
9f:7a:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:21 2026 by rpki-client