This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: PJXDcsELWFKN8xmv19P7lJ6J2Y08E2gaF5CnU2IPGdg=
Subject key identifier: BA:94:CE:74:3F:3C:6F:CA:37:00:86:5C:69:8D:8D:C3:06:3D:42:5B
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 019C420F4075EFA0C6A02FBF7D71F6FA313A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0EBB
Signing time: Mon 09 Feb 2026 11:00:21 +0000
Manifest this update: Mon 09 Feb 2026 11:00:21 +0000
Manifest next update: Tue 10 Feb 2026 11:00:21 +0000
Files and hashes: 1: WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa (hash: 5/0dAfxj8roSB2N+rzuNs50RghH7Q+7eLmnDrf3ejec=)
2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: nTg10XCE1+sQfm1kcGAG5xMUS+JR7nqEbi6PEIyV+LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:40:75:ef:a0:c6:a0:2f:bf:7d:71:f6:fa:31:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Feb 9 11:00:21 2026 GMT
Not After : Feb 10 11:00:21 2026 GMT
Subject: CN=ba94ce743f3c6fca3700865c698d8dc3063d425b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:04:c3:f2:c9:72:dd:e0:88:cc:f9:88:3b:
6e:d1:44:a0:9f:2a:e2:46:bb:00:2b:4b:9b:08:19:
62:7c:99:67:1f:18:0d:94:f3:57:1d:56:fd:e3:fe:
36:1b:14:5d:8d:ec:e3:a1:8b:ac:aa:e2:6d:bd:ed:
09:4d:6c:c2:4d:d4:70:4e:3d:41:c7:c9:9a:5c:62:
9f:4f:b6:d8:54:54:c9:30:0b:f7:46:18:cf:6f:fe:
f9:ff:5e:1f:0a:d3:8e:6b:e9:29:49:a7:ec:2e:a7:
28:fb:7c:3f:c2:0e:d4:ef:70:7c:dd:ba:fd:eb:34:
80:14:c4:74:9d:95:b4:b0:44:ed:a0:44:23:d8:fd:
8c:08:58:38:1a:5b:c1:17:59:d3:f6:c2:cc:c0:83:
81:d6:b2:03:8d:8f:85:90:61:e5:35:6b:ae:e1:f0:
e9:e5:a7:e3:73:20:dd:f4:3f:b1:13:10:5c:bc:03:
5f:67:1a:b8:e1:94:7c:d1:95:44:07:d2:f5:f6:d2:
58:1a:0b:d7:1f:9c:40:b6:cb:4f:02:a7:0a:34:87:
8d:dd:68:e5:8b:4f:c6:be:22:65:d2:0c:13:24:3d:
6f:bc:30:79:94:5c:a3:72:9f:00:a6:0d:b5:65:8d:
0e:37:05:7d:46:51:50:3b:3d:51:14:d9:2c:03:86:
85:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:CE:74:3F:3C:6F:CA:37:00:86:5C:69:8D:8D:C3:06:3D:42:5B
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b9:ad:a6:ca:8b:88:d9:ae:de:81:3e:27:02:7f:e6:e6:83:
4c:ed:9f:6b:1f:22:21:7b:53:c4:61:da:4b:dc:d9:ae:39:c1:
3c:d2:a7:e0:0f:80:8e:f3:92:62:5a:bd:70:05:90:9a:b7:5a:
e2:30:7c:16:bb:f5:98:ad:68:9c:7e:93:38:b1:4c:f8:b2:61:
18:fe:45:44:84:45:4c:08:af:39:45:a9:9a:04:07:d8:46:25:
fc:05:c6:32:31:8f:9e:a1:76:f6:29:30:ee:56:d7:0b:36:c8:
4e:07:75:5f:b9:eb:27:cc:be:34:63:76:d9:22:1a:77:8d:a3:
d5:e9:e9:62:9f:d8:c6:ba:24:ba:1d:ba:06:7a:e6:b4:d2:0d:
a7:54:62:ef:98:f9:51:fe:d8:d6:32:e8:80:51:7d:26:6a:01:
05:d9:35:40:2a:3b:cd:b6:a9:e1:59:18:69:75:69:78:14:2c:
31:3f:62:67:44:52:97:72:14:8e:2d:b0:13:ce:7c:84:ed:b9:
9f:ba:6f:0c:95:9c:c9:aa:3a:f0:52:95:e9:43:2c:6d:e4:86:
ca:1e:6b:ed:25:27:2c:f5:85:6f:d5:d9:f1:b4:c2:05:db:98:
13:92:f8:51:a0:e5:ab:49:d1:11:2b:5c:65:c7:22:f8:72:e4:
ee:a9:a0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:31 2026 by rpki-client