This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: JrAh2ZK7sw8zsmqSn1ELB5bZY7Kc+5Ay45oCRxe42Kc=
Subject key identifier: 56:D7:B9:8F:64:DE:79:3A:0D:7D:C5:A8:05:E1:41:95:F0:09:72:40
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 019C1CF095B29EA6884491598D046CE31DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 1800
Signing time: Mon 02 Feb 2026 06:00:54 +0000
Manifest this update: Mon 02 Feb 2026 06:00:54 +0000
Manifest next update: Tue 03 Feb 2026 06:00:54 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: 6ajH7Z2qhyXdRYDKPYLvQD4TkV6Q5ND14UmqCx9oITE=)
2: rNGlVa8TkjQC_3M9tVgFauOAU3E.roa (hash: AR/uZQW7gtN2BjMz+6MNQeE7vlvGCoJ/untsTNbYdcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:f0:95:b2:9e:a6:88:44:91:59:8d:04:6c:e3:1d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Feb 2 06:00:54 2026 GMT
Not After : Feb 3 06:00:54 2026 GMT
Subject: CN=56d7b98f64de793a0d7dc5a805e14195f0097240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:c0:40:e4:19:6f:98:50:e7:55:73:d2:8c:
5f:d4:d7:d1:fc:93:22:ca:ea:e2:35:97:0e:d1:41:
ad:34:1d:4a:2c:83:1e:c1:60:36:64:75:3a:f6:50:
71:09:cc:42:f8:42:cd:c4:51:0e:5e:0f:49:8f:95:
7e:4a:ee:8a:39:1a:76:8d:4c:8e:23:db:00:7a:82:
5c:a7:3a:43:e5:87:aa:bf:52:94:cc:db:29:9e:a2:
8f:24:f1:13:64:ba:e5:2f:86:df:57:37:3f:a5:df:
bc:8a:cb:1e:b5:30:4b:d3:fe:2d:94:0a:f1:76:0d:
1e:6a:1d:cb:cf:a5:d1:d0:e4:82:ad:b2:18:40:5e:
a1:44:b0:4f:b7:a0:df:7d:23:16:b7:a5:8f:e1:15:
39:42:fc:92:6c:62:90:a8:ef:25:97:12:01:82:7b:
4c:48:82:ff:ad:b9:43:04:b0:7d:fa:7e:f0:ad:72:
e6:eb:4b:a1:bf:c6:fa:f2:5e:c6:13:dd:27:19:11:
45:bb:a3:f3:96:13:29:eb:47:da:60:0b:4b:d9:53:
fa:19:8c:b8:90:71:e1:58:f9:f0:de:4d:9a:f1:9b:
0b:0a:2e:fa:d9:29:55:d4:98:36:9a:65:4a:8e:fb:
90:eb:9f:6e:66:a8:6b:2a:75:83:36:bc:1d:fd:60:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D7:B9:8F:64:DE:79:3A:0D:7D:C5:A8:05:E1:41:95:F0:09:72:40
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:70:81:49:53:14:c7:89:20:a4:50:e6:40:60:e0:d0:8e:a4:
bf:88:44:f0:93:05:76:9b:c7:18:87:e1:c3:29:44:24:25:fb:
7a:1c:ec:47:a0:fd:01:c0:08:a2:ad:a0:c8:56:46:ab:1a:bf:
da:64:81:14:58:2e:0b:b0:68:5c:28:48:78:38:6f:5c:de:aa:
22:4c:46:77:4a:25:32:55:31:6a:21:d8:e2:df:45:e9:c4:70:
46:b9:0b:51:5c:df:0f:85:71:85:ef:c8:b1:2c:95:f2:c1:47:
fb:27:0f:77:58:73:93:33:2a:c3:27:99:65:e8:92:09:aa:0c:
46:6d:78:51:a8:47:62:3a:3c:8e:4b:2b:e4:5d:c9:56:86:0e:
e8:c4:ee:3b:c0:2d:0b:d8:fd:3e:ee:99:11:38:fe:0a:00:0b:
f9:58:85:b2:e0:77:52:db:32:86:59:45:0f:32:cd:d3:5b:b0:
36:22:c1:78:b8:74:2c:17:71:c7:bc:b5:19:3a:a3:9a:b6:20:
2c:82:b0:18:9f:50:8f:e2:08:71:ab:95:6c:47:08:0f:87:ec:
f8:f2:06:c9:99:15:3f:64:83:a6:4f:d7:79:61:fe:5b:4c:45:
05:6a:5e:b3:1c:b5:97:d4:41:e9:ef:b7:3c:49:27:cd:9a:fa:
72:54:dd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:48:35 2026 by rpki-client