This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: 57P+6dgnGY6KDw/ObygdlCVUOJUPmUhgFSOTzPp5A44=
Subject key identifier: F4:80:35:D6:4D:FB:CC:BB:16:8E:38:A5:B1:9C:CF:B4:41:6D:31:4F
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 019C438FCF97B0094319B48C9F683543B7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 18:00:24 +0000
Manifest this update: Mon 09 Feb 2026 18:00:24 +0000
Manifest next update: Tue 10 Feb 2026 18:00:24 +0000
Files and hashes: 1: Gc2XvyP01-fby2wIcpCQAXK9NNI.roa (hash: TqTwmJ2kXyM/+f6YO1uN50U7uVnjd7tFzIbHZN9RIuA=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: 33S+Vgb2+Mf4BHg4hZVwme/QgIBow9YpjZC+TvvMnIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:cf:97:b0:09:43:19:b4:8c:9f:68:35:43:b7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Feb 9 18:00:24 2026 GMT
Not After : Feb 10 18:00:24 2026 GMT
Subject: CN=f48035d64dfbccbb168e38a5b19ccfb4416d314f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:b2:df:54:c0:c8:30:52:ef:c9:ea:11:3f:
8f:1e:82:c2:86:ed:0c:70:63:42:3a:08:53:37:cb:
94:d6:a7:fd:fa:ed:21:cb:ca:ab:31:8c:af:77:af:
b8:ad:be:3f:77:13:d5:c0:e4:17:d4:5b:26:ad:39:
fc:28:ab:3b:b9:a8:6e:83:7d:38:27:1f:8f:43:40:
9c:30:e2:04:d2:da:de:28:dd:39:6c:00:5d:59:3f:
8c:3f:d8:19:e1:de:3f:b7:d8:bc:2b:69:7a:8d:77:
70:a6:54:f7:40:91:8f:80:a7:70:9c:98:30:58:b1:
d2:7d:df:25:2a:42:50:a0:f5:64:29:5b:e2:2c:0c:
61:d3:8a:ab:57:d1:0e:31:44:05:c2:81:45:da:35:
3c:f4:2f:d1:d6:1c:d6:80:81:10:08:10:af:c2:9e:
c1:bd:ff:c0:b7:4c:a7:4b:0d:96:6f:5d:7e:e8:c8:
b5:24:ae:4b:27:5b:6f:94:f0:f1:50:67:a9:88:39:
61:f4:46:ee:32:04:9e:d5:ee:04:5d:d8:a2:7f:1c:
47:21:5c:1d:d8:b0:60:04:19:e0:17:b0:44:f7:34:
55:38:a8:ed:7f:67:2f:02:ab:d8:cc:0e:07:98:4a:
49:a3:bf:8a:6e:5b:ab:08:3a:62:04:bf:17:74:d3:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:80:35:D6:4D:FB:CC:BB:16:8E:38:A5:B1:9C:CF:B4:41:6D:31:4F
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a4:4a:50:9b:68:ea:d6:f2:3a:91:6c:e6:a8:f3:87:3e:19:
a4:14:34:5d:08:51:9f:13:5c:4d:14:4c:3e:fb:86:a9:0e:2a:
74:00:ed:9a:11:0c:06:a4:25:a7:f7:84:e2:7b:40:88:e7:16:
50:cf:ce:de:10:17:5e:ae:87:ee:45:53:e7:f8:4a:f9:55:61:
da:b1:83:08:34:4a:68:85:03:ac:36:a1:91:b5:fd:61:f6:d0:
21:59:00:84:8d:61:e5:eb:07:99:4d:59:66:d5:6c:79:8e:d8:
eb:02:64:a5:34:55:99:44:f6:92:06:04:9d:47:2f:b6:46:11:
de:f2:b5:17:f3:6d:bb:77:4a:dc:4a:18:03:ac:27:88:eb:31:
76:96:d1:6c:41:a8:f4:c1:d1:1d:af:61:5e:22:33:a7:57:3e:
73:7d:b4:02:68:b1:87:91:ae:02:b5:29:34:64:1f:4d:56:de:
83:3c:82:e2:a4:9c:af:db:bd:6d:8b:90:05:02:fa:a6:02:a1:
35:75:0f:39:5f:1d:24:16:6a:23:5a:e1:91:2c:19:45:8f:d9:
1b:89:76:64:d9:46:cd:fa:02:44:c5:f0:79:f6:3a:9a:26:33:
9e:f1:f7:fe:bc:4f:1e:d5:0c:0a:4b:93:cc:9e:7c:79:f8:f1:
b2:2c:8a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:35 2026 by rpki-client