This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
File: m-NDwvs9a40jeJq02m_NRlppBYM.mft (raw, json)
Hash identifier: oQ5nUnVSErUuDr4aNNzv/3kcVJYe/vu8hDSofb7/BSo=
Subject key identifier: 4C:D5:31:6A:E1:7B:AB:5C:97:F6:36:77:EE:C1:E3:19:50:89:30:E0
Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
Certificate issuer: /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Certificate serial: 019C427DB4F84D986A992D85233064F14E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
Manifest number: 0BFB
Signing time: Mon 09 Feb 2026 13:01:00 +0000
Manifest this update: Mon 09 Feb 2026 13:01:00 +0000
Manifest next update: Tue 10 Feb 2026 13:01:00 +0000
Files and hashes: 1: m-NDwvs9a40jeJq02m_NRlppBYM.crl (hash: PxTo/4prFwB57teMh/2lFSjOyHQPb91Yt5dYNLMX6RI=)
2: yIldRRlB5bm94vmFwH-N8K1Rolk.roa (hash: aHVLfMmPkPo5z8uQwk9maqTl2LVG/IoG19YLPq/oNr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:b4:f8:4d:98:6a:99:2d:85:23:30:64:f1:4e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Validity
Not Before: Feb 9 13:01:00 2026 GMT
Not After : Feb 10 13:01:00 2026 GMT
Subject: CN=4cd5316ae17bab5c97f63677eec1e319508930e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:53:21:79:5f:7a:57:a1:b8:20:f2:12:31:
bf:e6:04:fa:42:ef:9b:00:5f:60:8c:eb:5c:f3:7f:
94:fb:f7:56:b2:7d:79:06:0d:d6:f3:71:2a:84:51:
19:20:ce:f6:74:73:72:20:21:d7:2d:91:0a:c9:9d:
d2:78:9a:01:90:1e:b3:9f:57:4f:fe:ca:7d:04:cb:
a1:0d:94:01:02:9c:5b:7c:cd:f5:68:2e:8c:a0:98:
1c:bd:8c:08:19:56:2c:a5:2c:55:a5:c9:18:17:ed:
cc:fd:8d:67:c8:b7:e3:3d:76:f2:04:fb:71:fe:bb:
64:59:17:03:3a:66:ab:0d:ba:b5:1f:87:5b:12:bf:
dd:ac:b5:8c:c9:91:17:fc:0f:91:21:58:92:85:d7:
b4:b1:bb:91:9f:95:31:a0:0a:9f:e5:3c:32:73:83:
7e:17:73:95:ec:e1:40:84:bb:63:bd:46:1d:6b:df:
4b:2c:45:0b:3a:00:64:6c:bb:ae:93:3e:e2:0d:c6:
11:79:4a:42:da:1f:80:f6:1a:52:8c:a5:ff:57:31:
23:69:53:ea:f5:5b:38:e6:47:56:58:94:2f:52:78:
25:fd:d9:5c:b2:ce:31:47:db:d9:2e:46:12:38:76:
17:34:d2:63:5a:81:e3:a4:b9:4b:47:d1:78:bc:5c:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D5:31:6A:E1:7B:AB:5C:97:F6:36:77:EE:C1:E3:19:50:89:30:E0
X509v3 Authority Key Identifier:
keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:66:3c:bc:94:a8:5c:34:cf:88:5c:55:5f:89:13:bf:b0:a4:
f3:7c:35:7d:21:81:39:5d:88:80:49:72:47:99:74:d1:60:d6:
0a:7b:22:53:a0:67:af:08:0e:ec:a6:84:78:72:fd:d9:1a:f3:
08:66:a0:e6:01:b5:ab:91:a6:db:4a:83:fe:bb:f9:02:56:f6:
0a:cd:1f:67:ce:8d:b0:a9:4b:c6:0c:50:f3:00:e1:58:5d:7f:
50:ae:17:be:c1:6f:34:df:3f:24:e9:b9:e5:64:7f:fc:a6:9e:
cd:bd:c0:3a:c0:c9:1a:de:ae:b6:32:f2:7a:ba:2a:2d:12:1e:
81:88:7d:2c:ef:21:fd:0d:d0:ac:d2:d7:f9:33:80:1f:49:e6:
a9:9a:fa:9d:19:d4:b9:fe:be:d5:91:b9:63:7a:47:89:e0:28:
96:99:9c:89:ff:a8:e5:48:50:00:84:71:c7:e5:17:d7:85:73:
f2:1b:2c:d6:29:81:8f:ad:ca:d5:3d:61:94:91:2f:41:72:4b:
04:58:5f:6f:57:d4:5b:38:df:97:c0:9a:01:2f:01:78:fa:38:
47:dd:9e:57:61:29:37:28:b1:18:ed:1e:67:b6:57:c7:06:dd:
6e:6d:04:09:b0:30:fb:6f:1c:f3:37:c0:7d:e6:1c:16:1f:d6:
4f:5f:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:20 2026 by rpki-client