This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: 7wRWgd73mwiRF899OmOkPCx4bY7igNvIRWdx7dROIX8=
Subject key identifier: 78:BA:7F:80:A4:D6:1F:D5:1C:2D:33:3C:22:55:DC:CB:52:73:B4:90
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 019C427D10E46E4540AC236AAB6C88CF9371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 13:00:18 +0000
Manifest this update: Mon 09 Feb 2026 13:00:18 +0000
Manifest next update: Tue 10 Feb 2026 13:00:18 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: jZSzw7CKUrl4CSl0bdBrpnkTkQ6iiQI9HGQknkesjiQ=)
2: fk9U3XR8wWwd2opanzwEAz6eKk4.roa (hash: 5EeRjXWRWUv9RoV34Pw35rxYHtcF/8u2AEnciChzLxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:10:e4:6e:45:40:ac:23:6a:ab:6c:88:cf:93:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Feb 9 13:00:18 2026 GMT
Not After : Feb 10 13:00:18 2026 GMT
Subject: CN=78ba7f80a4d61fd51c2d333c2255dccb5273b490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2f:88:19:7e:11:cf:12:cc:f3:af:d1:71:8c:
70:80:79:f0:0d:7d:a9:41:ec:4c:86:3e:9b:f7:bf:
2a:6a:50:0a:66:f7:fd:f9:aa:fb:dc:21:c5:c6:ae:
fb:8c:aa:77:6c:c3:b3:a1:27:3e:93:62:0d:aa:64:
b4:01:8f:16:a7:e6:90:29:66:02:5b:e3:fc:9b:f9:
e7:b5:3f:66:e8:00:1b:bd:d9:4f:8c:6a:ea:ef:c8:
4e:2f:1a:5c:b2:4d:c7:cf:a8:67:6b:d1:26:02:71:
01:ad:87:30:ca:dc:80:1c:29:ec:c3:e8:15:94:2d:
b0:65:b2:8c:07:74:18:dc:3a:bc:49:a7:5e:be:0e:
72:30:e1:71:f4:dc:12:bb:b1:0f:19:79:15:54:96:
bf:db:5e:d7:81:e5:c3:4d:50:e1:85:7c:d8:6a:ad:
19:bb:6c:be:cf:bb:0e:97:7e:3e:f1:30:08:27:60:
28:53:2c:18:98:c2:28:20:e6:cc:a1:c7:d3:e6:71:
1a:d1:41:8a:33:28:82:15:2f:e1:f8:12:98:27:5f:
06:b4:b7:ba:8f:59:4b:2e:cd:6d:34:75:21:ab:c7:
33:d3:3b:28:83:91:41:ac:bf:ac:ff:03:82:c5:08:
68:6c:2d:6a:c7:b6:50:4c:54:09:bf:60:90:f9:36:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BA:7F:80:A4:D6:1F:D5:1C:2D:33:3C:22:55:DC:CB:52:73:B4:90
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:68:76:9c:93:af:37:25:2d:44:18:70:87:b0:44:93:80:cd:
09:64:7c:e0:95:f9:0b:55:1e:d8:5e:0e:36:dd:58:cb:dc:9c:
70:0f:fe:b1:39:bc:c8:7a:f6:2a:50:9a:89:ae:53:22:77:b5:
3d:03:24:25:9b:7e:ae:c3:b7:ad:14:63:67:7a:33:af:8f:fb:
32:76:69:bd:39:59:05:a1:b9:c8:fe:8c:b9:70:e5:a1:09:3b:
7c:8e:ef:da:18:e8:2e:3b:da:40:63:48:c3:6f:87:d3:dd:34:
5f:31:ab:3a:c6:e9:1d:54:52:03:b6:00:3b:14:91:9c:6c:fc:
0c:ec:b9:01:d9:df:91:ef:a8:4b:74:6c:54:ca:c9:fa:49:21:
67:c9:ea:0e:86:8a:4c:f2:93:36:8f:c3:82:8a:d9:bb:a1:3f:
0e:8c:23:35:ce:b5:e2:0b:63:6c:6f:4f:08:e4:72:7f:05:40:
28:74:1a:10:37:d2:3d:43:e1:34:e1:37:17:bb:db:46:bb:34:
f2:a1:9d:d2:a2:3c:1c:df:c2:57:82:c3:e0:78:f1:56:be:68:
cd:20:b1:57:35:cb:3d:76:24:3c:f2:9d:f1:85:1d:9c:94:23:
36:b5:ca:ed:ae:60:63:a3:c0:10:54:8b:90:a9:ae:bf:93:59:
d6:b8:ca:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:03 2026 by rpki-client