This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
File: NPwYIZBVFuYYMg6eRxoTsqqslv8.mft (raw, json)
Hash identifier: Ojso6gXS3AOp1x6KESpIRA1N7OYZHkWnKJh03pFz9Gk=
Subject key identifier: 13:4A:CD:C0:14:DA:67:E0:3D:ED:F2:61:1A:8E:BA:BA:76:10:60:E6
Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff
Certificate serial: 019C41A1866C0127E48AFCFF21A1203A3BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 09:00:30 +0000
Manifest this update: Mon 09 Feb 2026 09:00:30 +0000
Manifest next update: Tue 10 Feb 2026 09:00:30 +0000
Files and hashes: 1: FT4kAT6lWQN00FHh3OTXw40E65E.roa (hash: GFS78DgVCOqhb0Wz+qsE+LrfZ/kjwcDR1Tvaz5iQcCc=)
2: NPwYIZBVFuYYMg6eRxoTsqqslv8.crl (hash: qeSiW+ellSSblK07N9lNq9VdqfHYd5hxsoZNmbTjpkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:86:6c:01:27:e4:8a:fc:ff:21:a1:20:3a:3b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff
Validity
Not Before: Feb 9 09:00:30 2026 GMT
Not After : Feb 10 09:00:30 2026 GMT
Subject: CN=134acdc014da67e03dedf2611a8ebaba761060e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:91:e4:55:41:34:65:5b:c8:5f:b9:e0:56:
f8:3d:b1:17:e7:22:39:95:2f:89:b5:a4:5b:30:0a:
f9:3a:a4:2f:a4:e7:4d:ca:d0:23:66:c1:88:43:ce:
f8:2d:28:19:81:8d:70:6b:49:65:85:af:e8:97:3a:
ac:bd:e4:01:26:49:af:4e:d0:f9:35:f9:a7:a7:d0:
14:89:0c:81:51:40:a4:cf:be:55:70:42:9c:13:08:
53:68:55:9c:d6:00:80:72:a7:04:70:56:69:80:e0:
ff:16:d8:db:fd:98:5a:45:39:25:0d:25:e6:96:7c:
59:2f:c7:54:be:7f:b7:6c:fa:e4:18:de:93:c2:9d:
1e:83:b7:30:72:a9:8b:b1:7b:34:ad:5e:12:43:5c:
93:53:f5:1e:7f:05:99:48:73:d6:02:a9:81:a9:e6:
95:f0:c5:ef:cf:c1:4d:fa:f7:f1:52:67:98:27:5a:
d0:79:a9:8a:9b:ad:e4:90:c5:93:22:c8:8e:5f:5d:
69:9d:38:d4:8d:1b:be:01:de:71:ed:75:4e:89:a9:
fe:12:d6:da:f4:1e:22:e3:be:5b:7f:65:86:83:bd:
b2:5e:de:2f:27:53:26:e6:4b:fc:d2:6b:18:9f:f7:
d9:a4:24:d3:9e:b5:04:3b:fc:e9:a7:b1:32:a5:88:
b4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:CD:C0:14:DA:67:E0:3D:ED:F2:61:1A:8E:BA:BA:76:10:60:E6
X509v3 Authority Key Identifier:
keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:20:cf:5d:73:35:8b:ca:af:7d:ba:5d:39:18:fd:1e:b7:88:
5f:5e:b9:4d:7e:36:fc:3c:87:7c:e8:2b:87:12:b4:61:db:59:
cf:60:2a:14:d5:ce:d2:73:1b:f4:70:0a:34:24:53:28:b7:4f:
65:78:57:83:b7:0e:b5:68:39:eb:a0:20:9c:09:49:d0:9c:58:
9f:6d:cb:bd:60:19:d8:94:c6:ce:5e:c7:e8:8d:0d:1a:e3:62:
7c:5a:94:a5:70:74:64:78:cb:a0:44:0e:7b:02:25:78:cf:d8:
3b:04:1b:cc:0b:39:16:f1:70:b0:65:f5:71:b8:af:c7:aa:30:
76:62:f9:99:21:a0:ff:59:a1:57:77:9d:a2:bf:a5:fc:9b:84:
d0:3d:17:07:13:f9:97:0c:c9:bb:27:6f:62:48:bf:d1:1d:fa:
e8:10:e7:2d:42:59:4a:bd:d2:84:fb:50:51:09:7c:fe:56:c6:
5f:4c:a6:ed:ba:dc:e2:30:fb:39:14:41:3d:e2:54:0b:6f:cf:
68:a9:27:72:ae:e5:c3:71:e6:6f:49:d3:8a:74:ca:60:63:28:
97:68:ea:7d:df:69:6b:5d:5c:56:f6:23:80:79:52:35:7c:a3:
13:30:f7:51:83:fc:65:ed:64:82:40:1b:88:76:e7:30:3d:86:
ef:a5:e5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:54 2026 by rpki-client