This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
File: NLqcIjJB64DivHGFO7fS5YKGvdM.mft (raw, json)
Hash identifier: pAVO+7/9Ew/QvN0IWklY0DDbRb95rICLe2/7/Hs6LA0=
Subject key identifier: B9:0D:DC:A0:E4:22:80:CB:C3:E7:7E:5E:F6:CE:7C:3A:D0:3A:F4:FB
Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Certificate serial: 019C43C76200447D1A2F5A259FDFB41E5CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
Manifest number: 1819
Signing time: Mon 09 Feb 2026 19:01:05 +0000
Manifest this update: Mon 09 Feb 2026 19:01:05 +0000
Manifest next update: Tue 10 Feb 2026 19:01:05 +0000
Files and hashes: 1: 3WJjV42gX3UcYyB9uPxn6ReQPNE.roa (hash: xdAcfOJKPu9GkR2yJdt8tSxgO0xjvWuS026sQ/93JIc=)
2: NLqcIjJB64DivHGFO7fS5YKGvdM.crl (hash: 6xOMNEy1ATnK3bEmkCCDwnzmYPWDt4sbJR63ODAx42g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:62:00:44:7d:1a:2f:5a:25:9f:df:b4:1e:5c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Validity
Not Before: Feb 9 19:01:05 2026 GMT
Not After : Feb 10 19:01:05 2026 GMT
Subject: CN=b90ddca0e42280cbc3e77e5ef6ce7c3ad03af4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:c9:93:06:09:e5:26:bc:70:15:94:9c:d5:
f1:a1:a8:e3:08:f0:56:78:48:2b:5f:ac:5e:45:1e:
e0:ce:4f:be:40:c9:73:19:6a:28:95:13:21:94:e7:
9a:4e:15:74:cd:13:b2:84:a6:3a:16:7f:43:7b:5d:
fc:49:d6:49:cd:8e:35:43:15:32:23:94:6c:bc:35:
a9:f3:73:ca:cb:d4:a4:d4:8c:45:bd:3f:8a:4b:37:
35:4e:49:be:32:8a:c0:fa:06:dc:2f:73:ca:2d:96:
4a:13:37:97:aa:23:f5:4a:ef:fa:69:f0:9c:bd:f6:
b2:b0:67:41:7e:02:eb:f3:71:32:b7:f0:36:a0:f9:
60:5f:80:18:30:ab:e9:30:5d:d5:14:53:8f:2d:fa:
01:54:2e:27:b0:26:e5:40:c0:1b:ba:c7:06:0a:a6:
ee:8a:82:8b:1f:a7:6b:bd:82:79:30:81:67:00:fa:
50:5c:63:e7:25:d6:90:12:82:b5:bf:22:37:9f:cd:
64:36:bb:c5:f5:6c:1f:6f:b3:3e:5d:7d:dd:06:1c:
73:de:65:d6:52:e2:3b:29:00:b4:66:fd:cb:e0:36:
13:60:1f:0e:b7:39:0b:5b:8a:cc:0b:63:54:c8:f8:
97:26:43:55:8e:27:78:13:56:ed:80:59:96:2a:7d:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0D:DC:A0:E4:22:80:CB:C3:E7:7E:5E:F6:CE:7C:3A:D0:3A:F4:FB
X509v3 Authority Key Identifier:
keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ea:18:80:cd:f7:da:85:d2:29:5a:97:3d:0b:b9:2c:ba:a6:
0b:09:fe:a9:78:d8:a1:9a:42:d6:ec:a2:16:81:62:65:ff:5e:
aa:f8:28:c4:5e:26:5a:7f:ba:76:df:ad:6c:3d:e8:e3:23:23:
61:ea:ae:d1:0b:bf:0d:11:53:dc:1d:ea:b7:7e:38:4c:52:be:
20:68:1d:59:93:b9:d6:86:92:fa:61:2d:e3:6b:74:a0:37:be:
c3:22:8f:da:23:35:9d:f3:7c:d1:18:d1:5d:2c:f6:d5:af:ca:
6b:fd:a4:90:b4:10:55:24:2c:b3:96:db:ff:26:10:eb:07:31:
99:dc:4e:f4:cd:37:f3:4d:75:11:c0:5f:69:52:4a:c9:40:75:
99:fa:3f:df:a2:70:5e:84:54:33:e8:2b:57:56:4b:97:3b:b3:
5f:50:76:af:d7:7e:fd:e9:7b:de:70:59:5e:76:17:94:a0:b8:
44:58:a0:0a:92:a7:3b:a1:36:38:db:aa:ea:cd:e4:64:6f:7b:
be:84:22:94:ba:93:69:ad:e2:c0:6f:2c:4b:3f:6d:b8:12:1f:
a3:b9:1a:f3:b2:67:98:74:ce:b6:f9:32:94:88:da:ae:58:08:
e0:3c:9e:dd:3f:73:2f:ae:8d:8b:2a:fa:17:55:42:ea:1c:fc:
30:01:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:53 2026 by rpki-client