This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: fcke+n3LFieQ98TIQKQx5l+YOv4A/NWPr2ChPG63PUg=
Subject key identifier: 4B:DC:33:34:76:53:F6:D3:20:04:6D:36:F8:F4:35:21:BC:95:5C:87
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 019C446B7E02E615BA48CE3DCCB3BC027767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 07EC
Signing time: Mon 09 Feb 2026 22:00:21 +0000
Manifest this update: Mon 09 Feb 2026 22:00:21 +0000
Manifest next update: Tue 10 Feb 2026 22:00:21 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: SLFXOXOo4W0fXflNA1UaZvuLeq+l7ejP1bhsgsV5qoY=)
2: cGNM2kUYGwh1pqp3KDfnuGuO-40.roa (hash: RBzO91NF0DSPBv6o+tDtIFzqxm7krs8U6K6aFGD7SjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6b:7e:02:e6:15:ba:48:ce:3d:cc:b3:bc:02:77:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: Feb 9 22:00:21 2026 GMT
Not After : Feb 10 22:00:21 2026 GMT
Subject: CN=4bdc33347653f6d320046d36f8f43521bc955c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:18:02:65:f4:e8:96:d2:63:b1:70:97:f5:
8d:86:0c:6e:dd:8c:f6:cc:c9:58:11:7b:32:1c:f1:
86:6b:a8:22:6d:25:40:86:02:49:7c:92:0c:dc:2c:
e6:fa:17:15:12:7e:cc:1f:90:d5:8e:0a:96:d2:9c:
ad:29:2a:40:8a:57:28:fb:cf:bc:18:97:62:c7:aa:
ff:d3:e0:fc:32:51:ba:38:4e:d3:d5:ff:01:c0:63:
7a:fc:b5:46:30:9a:ab:75:d1:5a:2e:58:78:7a:ab:
bc:44:ac:94:a4:f7:66:57:b6:d7:d1:6a:36:e7:26:
f2:bb:f9:78:ce:96:6a:f3:ee:0f:f5:40:1e:38:ec:
33:44:71:ed:9c:37:05:ad:a7:2a:bb:54:26:45:cb:
bb:cc:ff:b8:12:01:4b:49:f1:51:b5:b9:9d:d8:b3:
af:39:a3:15:cc:a7:c9:ce:d2:c2:2a:cd:9e:6e:bb:
fe:87:d6:06:45:3e:a8:24:78:ee:8b:89:02:68:04:
ca:6f:68:14:23:a6:aa:87:b2:f5:5a:38:52:2c:24:
ff:9c:c2:3e:e6:3b:a7:7f:a5:05:e3:d4:90:dd:aa:
aa:57:1c:cf:1e:e0:ef:d9:f3:8d:67:bd:0c:c0:aa:
1d:6c:33:20:1c:19:d8:69:15:3a:df:fc:a1:d4:96:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DC:33:34:76:53:F6:D3:20:04:6D:36:F8:F4:35:21:BC:95:5C:87
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1c:ef:a3:a0:90:64:5d:5e:38:ad:3d:69:40:4b:f9:e2:d1:
d4:cc:65:bd:4b:aa:29:09:c6:d6:d7:73:c2:38:b0:4a:fe:52:
a9:4f:26:3d:23:52:33:1e:c5:db:e8:29:12:35:f7:7d:95:a3:
22:96:44:34:0a:3a:f5:65:38:25:9b:c1:e0:07:8e:c5:d7:48:
98:6b:fd:c0:1f:3a:d2:aa:e6:d4:86:16:6c:61:ba:0c:52:d1:
43:13:a5:9b:0f:6a:7c:55:fb:b1:4f:02:50:04:25:3c:02:71:
22:a0:fa:fc:b0:c0:6a:73:ee:3f:20:2a:f8:f2:d7:09:15:21:
55:4f:78:ba:ea:81:a0:80:13:3b:03:d6:8a:f3:a1:6b:32:77:
6b:ef:af:74:d3:f4:7e:d1:1c:ea:4e:9d:f4:be:5a:10:b0:03:
40:08:62:8e:b4:f9:d9:31:d5:17:25:9a:00:94:9b:e9:41:1d:
6c:c4:a4:2e:2e:7f:98:d7:14:18:93:17:95:02:8c:54:83:75:
7e:94:13:b4:2c:46:2d:d4:fc:bf:9e:02:5f:f9:5b:43:b3:c3:
96:40:b2:a8:96:51:95:84:ad:f5:d1:76:f5:f5:01:87:ec:ed:
c1:9c:00:ed:ba:df:1d:f2:6d:6b:06:da:9b:4a:36:a8:68:5b:
f6:9c:ef:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEa34C5hW6SM49zLO8AndnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDZkZWUwZjhiYTNjMjIyOTNkNjJlYzcwMWVmMjUwYmNj
OGQyZTcwHhcNMjYwMjA5MjIwMDIxWhcNMjYwMjEwMjIwMDIxWjAzMTEwLwYDVQQD
Eyg0YmRjMzMzNDc2NTNmNmQzMjAwNDZkMzZmOGY0MzUyMWJjOTU1Yzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAoYAmX06JbSY7Fwl/WNhgxu3Yz2
zMlYEXsyHPGGa6gibSVAhgJJfJIM3Czm+hcVEn7MH5DVjgqW0pytKSpAilco+8+8
GJdix6r/0+D8MlG6OE7T1f8BwGN6/LVGMJqrddFaLlh4equ8RKyUpPdmV7bX0Wo2
5ybyu/l4zpZq8+4P9UAeOOwzRHHtnDcFracqu1QmRcu7zP+4EgFLSfFRtbmd2LOv
OaMVzKfJztLCKs2ebrv+h9YGRT6oJHjui4kCaATKb2gUI6aqh7L1WjhSLCT/nMI+
5junf6UF49SQ3aqqVxzPHuDv2fONZ70MwKodbDMgHBnYaRU63/yh1JbKXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvcMzR2U/bTIARtNvj0NSG8lVyHMB8GA1UdIwQY
MBaAFPzW3uD4ujwiKT1i7HAe8lC8yNLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05iZTRQaTZQQ0lwUFdMc2NCN3lVTHpJMHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kMmRjOWItYmNkYy00MmRlLWExYWUt
NDJjZTJkMmJlMDk3LzEvX05iZTRQaTZQQ0lwUFdMc2NCN3lVTHpJMHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kMmRjOWItYmNkYy00MmRlLWExYWUtNDJjZTJkMmJlMDk3
LzEvX05iZTRQaTZQQ0lwUFdMc2NCN3lVTHpJMHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRzvo6CQ
ZF1eOK09aUBL+eLR1MxlvUuqKQnG1tdzwjiwSv5SqU8mPSNSMx7F2+gpEjX3fZWj
IpZENAo69WU4JZvB4AeOxddImGv9wB860qrm1IYWbGG6DFLRQxOlmw9qfFX7sU8C
UAQlPAJxIqD6/LDAanPuPyAq+PLXCRUhVU94uuqBoIATOwPWivOhazJ3a++vdNP0
ftEc6k6d9L5aELADQAhijrT52THVFyWaAJSb6UEdbMSkLi5/mNcUGJMXlQKMVIN1
fpQTtCxGLdT8v54CX/lbQ7PDlkCyqJZRlYSt9dF29fUBh+ztwZwA7brfHfJtawba
m0o2qGhb9pzvQg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:11:07 2026 by rpki-client