This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: ZPUbpgXLoYOX27ug2yG5EUE5Ui9GEYCS9gFeluJWYdw=
Subject key identifier: 10:4C:AC:4B:DA:1B:97:19:B7:F2:8D:CF:71:DF:05:6B:3E:FD:18:1C
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 019C4358D462E925FD2AE7884081C10E2E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 0406
Signing time: Mon 09 Feb 2026 17:00:20 +0000
Manifest this update: Mon 09 Feb 2026 17:00:20 +0000
Manifest next update: Tue 10 Feb 2026 17:00:20 +0000
Files and hashes: 1: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: +Yo+6V6U1CCfZvk82kyL7bI0FC0sDfe8ynVPyjjZops=)
2: q2EEPg27aJ7MKxd4_2saW4PtwNs.roa (hash: TkB4YWmzDIPvVNQNni4Vn80uheBzxSDgJIan4fevymo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:d4:62:e9:25:fd:2a:e7:88:40:81:c1:0e:2e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Feb 9 17:00:20 2026 GMT
Not After : Feb 10 17:00:20 2026 GMT
Subject: CN=104cac4bda1b9719b7f28dcf71df056b3efd181c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:61:f3:c3:45:3b:ae:5d:0e:8d:b9:c1:9c:
14:6a:ff:04:7e:3f:7f:57:52:8d:d0:5f:75:e7:ea:
41:2c:9b:03:af:ee:ce:96:72:42:55:ec:69:2a:76:
ac:e0:a6:db:3e:3d:13:80:a1:8b:cf:98:64:22:f9:
f3:92:e2:1c:2b:23:82:6b:52:ba:73:9c:6f:ae:bd:
25:04:f5:d1:cf:be:d3:0f:fa:7e:c2:c9:48:a8:63:
90:ea:57:d4:c1:fd:40:ad:cc:9a:71:28:1f:04:be:
da:44:4c:04:3f:24:48:b9:f6:83:63:7b:36:1e:f1:
a9:27:8f:16:35:58:63:9c:a2:08:01:fe:a7:a9:01:
4e:b9:60:cd:a4:df:4d:40:c2:76:1a:57:2b:61:e1:
4e:2b:f3:cc:f9:7c:f2:1b:0a:3e:81:05:39:ae:d4:
da:50:d3:b9:75:0b:8b:60:52:b7:cf:dd:7d:21:f1:
5a:eb:b0:db:82:c3:5d:aa:9b:58:d0:a5:ed:d1:db:
19:88:4a:7e:a2:3d:51:d1:94:77:66:15:a7:58:12:
00:9d:d5:29:46:60:63:ba:5f:66:0a:45:f9:7d:8f:
64:f1:ff:e6:15:42:f0:39:00:df:30:53:7f:d6:da:
15:47:fd:27:79:90:21:32:77:6d:51:1f:d7:43:52:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4C:AC:4B:DA:1B:97:19:B7:F2:8D:CF:71:DF:05:6B:3E:FD:18:1C
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f9:27:c3:47:fa:6c:9b:f2:b1:73:22:9c:cf:55:29:87:89:
3a:0a:87:64:21:b8:64:f9:0c:7a:2e:bf:b0:1b:0d:4b:a0:70:
c3:cf:06:85:73:c7:d0:66:5d:5d:60:73:99:ff:4f:c4:23:4a:
09:6d:7e:86:16:e4:60:d6:1d:a5:99:f3:63:93:27:21:0d:96:
28:18:c3:1a:dc:b3:ab:34:45:c5:ca:c8:a0:86:cd:33:98:61:
8e:a1:b8:b0:af:e7:a8:99:6d:b9:02:60:85:90:06:ad:63:65:
44:bf:57:56:24:34:b6:29:4a:e5:37:46:f3:cb:24:2c:0a:f3:
79:22:ad:07:4d:43:6c:79:07:5d:c5:ea:a5:92:5d:1d:da:dd:
04:cf:b7:61:e8:da:cf:08:78:79:c9:a4:55:15:c8:13:68:ad:
99:52:56:86:9c:b2:71:1c:b8:ec:45:ab:ad:32:92:c8:16:29:
18:91:bd:87:6e:05:46:42:ed:b3:8d:9e:3d:c7:e7:e1:06:34:
a1:31:0c:9d:7a:70:2f:2e:46:96:2b:a1:a7:39:d3:f2:c3:a4:
27:83:1a:64:5d:fb:ea:52:ea:89:ae:56:15:58:c2:0c:09:b5:
53:fe:49:e5:4b:60:7a:3b:fa:3d:52:e7:80:e5:98:7b:02:7a:
fb:ab:48:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:11:26 2026 by rpki-client