This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: 9SefZnMZIFQe9lDg0XNsSmLuk0yRkLTgZCTFoFNbTts=
Subject key identifier: D8:1B:71:AC:F2:B0:3D:FF:2C:1A:7D:20:EF:FA:E3:B8:1E:6E:A6:F1
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019C25F46B15589037364B4AE60034C46B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 112B
Signing time: Wed 04 Feb 2026 00:01:40 +0000
Manifest this update: Wed 04 Feb 2026 00:01:40 +0000
Manifest next update: Thu 05 Feb 2026 00:01:40 +0000
Files and hashes: 1: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=)
2: TxNd5pJ27uJYq-599NEcjd3YSFE.roa (hash: MKliCQJ8R1hwAnZ4kj94ssCz7Pi63lFdJSsHyJKq8Ko=)
3: _K2f6DqGYftLvCgaU9NJUnwx5uI.roa (hash: +bNWQeR+tOZFOesz+uNPp44EnwcVKTlHLLbRiXOcV/w=)
4: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=)
5: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=)
6: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: D5HM/qcokzrPxl6idEaKLofqULBPu7OL86pFCbl7D8Q=)
7: pVWucn62UZlUYEkLwtnRBuH29Ec.roa (hash: fEeXmrTbxDWYxdEIPNB+dmTYd1gfRV01N5PsV9sWN7U=)
8: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=)
9: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 19:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:25:f4:6b:15:58:90:37:36:4b:4a:e6:00:34:c4:6b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Feb 4 00:01:40 2026 GMT
Not After : Feb 5 00:01:40 2026 GMT
Subject: CN=d81b71acf2b03dff2c1a7d20effae3b81e6ea6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:3e:1d:13:8d:5e:7b:e8:97:61:25:2e:51:
06:f2:c8:ab:1b:03:b4:36:1e:2f:cb:b8:82:10:b5:
e2:cd:88:92:67:71:6b:ad:f9:80:c2:0f:47:e1:24:
8d:7c:62:17:ad:f4:da:a6:8b:3d:e8:3b:5a:a6:f3:
66:b7:18:72:72:c0:1a:7d:31:45:aa:55:ec:d8:32:
4a:07:f9:14:53:fa:20:04:9c:63:1d:2c:4c:53:cd:
04:ca:a5:ef:31:c1:bf:62:a1:ee:b2:08:01:0a:56:
85:a2:ca:65:5d:da:37:7e:c7:5b:aa:32:fa:e0:00:
49:a6:a4:70:44:35:75:1f:42:2d:32:f1:ea:50:10:
72:74:30:47:53:a2:4b:3d:77:97:4f:e6:ec:2f:93:
08:fc:af:45:ec:c1:b6:02:19:09:97:19:26:1a:fd:
ba:6a:97:0a:7c:d1:1b:c0:cd:ff:19:d7:d4:26:f0:
d5:bc:aa:6f:82:3b:ca:87:20:90:ab:8f:cf:19:fc:
9f:ba:8c:e9:26:03:91:40:78:42:d1:ff:8a:4b:c6:
46:ab:1e:10:54:fb:20:4d:93:f2:2e:b2:21:27:2f:
36:fa:a3:ac:b4:85:07:25:0a:69:22:51:e6:b8:cb:
94:52:74:2a:e7:6d:74:c1:be:b1:ec:71:68:a3:c5:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1B:71:AC:F2:B0:3D:FF:2C:1A:7D:20:EF:FA:E3:B8:1E:6E:A6:F1
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5e:ab:10:58:29:87:64:c9:79:c9:62:37:49:bd:0f:6f:18:
d4:60:85:56:03:84:67:8a:16:bf:40:1a:1f:83:9f:8d:1f:bf:
87:a6:e2:5b:d2:cb:01:7d:29:d7:6b:cc:fa:df:61:5a:af:da:
c3:4b:cc:22:71:ea:c0:56:99:c6:5b:e3:56:9e:0d:c7:4e:e8:
82:bc:0c:73:be:ce:d0:0b:19:f6:9d:7b:ab:e4:33:9a:ff:1c:
7b:14:46:de:ac:60:54:28:bc:8c:0d:fd:df:92:3b:26:90:98:
e7:67:e9:be:33:41:4f:c2:c1:45:b5:60:38:da:a1:98:af:1a:
2d:c5:02:26:b2:32:7a:87:a2:6e:bd:57:86:80:06:23:3f:c2:
25:85:8a:87:67:2e:14:34:ce:42:8b:ee:bf:2d:19:57:a9:fc:
f4:d9:62:f6:90:dc:13:1c:c2:eb:15:98:4e:a8:15:bf:4c:51:
5a:d5:7e:7c:00:ad:0a:3d:24:e0:9f:c7:6b:e0:5d:76:bc:7f:
de:0d:09:ba:75:70:29:46:ac:ad:01:c3:21:a5:e1:0f:24:82:
ee:fd:f6:d7:64:0a:d5:85:2d:a7:c7:45:b1:3b:a1:b5:1c:9b:
6a:c2:14:6a:6b:8b:f3:02:22:af:89:c7:6e:a8:f9:7f:e7:04:
63:2c:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:19:56 2026 by rpki-client