This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: 3NqEbtTqCT31/6veCSMRjItzyG54DCxffbusaLbHuEM=
Subject key identifier: 74:5E:33:AD:2F:C2:B9:07:A8:93:3F:FF:42:20:53:66:00:39:2D:5E
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 019C1EDEC0E35DC46D9E9E0E7C409B7C6574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 1801
Signing time: Mon 02 Feb 2026 15:00:40 +0000
Manifest this update: Mon 02 Feb 2026 15:00:40 +0000
Manifest next update: Tue 03 Feb 2026 15:00:40 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: KwKkFY5xxEFX5qFv6n+IWAcMpNLQXK/VXYuavgHxbVE=)
2: rNGlVa8TkjQC_3M9tVgFauOAU3E.roa (hash: AR/uZQW7gtN2BjMz+6MNQeE7vlvGCoJ/untsTNbYdcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:de:c0:e3:5d:c4:6d:9e:9e:0e:7c:40:9b:7c:65:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Feb 2 15:00:40 2026 GMT
Not After : Feb 3 15:00:40 2026 GMT
Subject: CN=745e33ad2fc2b907a8933fff4220536600392d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:70:4c:d6:75:fa:69:0a:1c:31:d4:85:26:
a8:f9:d5:c1:f2:81:1e:37:2c:3e:99:51:6a:51:d3:
e8:01:71:4c:14:c9:8d:19:2c:76:5d:01:f3:59:4b:
24:69:59:a5:e5:a2:e8:1e:f1:3d:fe:e0:b6:61:d6:
a4:1d:f0:5f:20:f5:b9:9d:aa:a4:5c:bf:32:59:f4:
d9:c3:a2:16:76:51:b7:0e:05:9d:11:92:77:84:99:
80:3d:28:3e:c0:54:7e:57:11:8e:e9:d0:b0:1f:ff:
81:c9:51:06:b0:74:c6:8e:12:9c:2e:7c:dc:36:ea:
62:95:4a:bd:9e:b6:d0:eb:02:d0:c3:39:bf:45:e8:
81:22:ca:8b:ec:5c:5e:f2:0c:ff:37:5d:f7:37:f9:
b0:83:a5:10:cb:b9:1b:e7:5d:01:6e:ee:02:5f:3d:
71:89:44:de:7a:34:9b:b5:a8:62:1e:5f:f3:25:24:
50:5f:96:0c:5e:9d:3d:ce:7f:f5:26:06:a3:48:dd:
1e:49:54:a0:b3:66:4e:a8:57:a5:c3:9b:5c:97:a8:
a0:6e:29:6e:d5:fe:89:ff:86:cc:8f:9f:cc:9c:92:
05:e2:e0:02:33:36:97:3d:b2:5d:4b:e6:80:c8:75:
89:b8:50:56:1b:85:7c:7a:20:6f:a3:27:c6:7e:27:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:33:AD:2F:C2:B9:07:A8:93:3F:FF:42:20:53:66:00:39:2D:5E
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1c:97:73:8f:98:5d:3f:a7:df:d4:4e:2e:d7:b7:8e:12:cf:
fa:1c:d2:c7:60:9f:2b:8c:ee:72:04:3a:76:55:78:01:6d:ec:
ab:39:31:ec:ee:57:f7:23:46:8e:5e:2a:89:66:62:b6:91:53:
fa:af:09:db:ce:34:30:46:7c:eb:f8:e0:c6:38:97:20:c5:de:
36:e7:d5:ec:c5:75:d3:ad:fc:23:fe:b9:fb:c9:57:f2:71:10:
a2:f5:34:55:bc:7d:e2:31:14:72:62:3c:1f:c1:43:53:ca:45:
0b:5a:9b:6a:ef:55:b9:9e:8f:77:2d:fb:8d:71:aa:68:b2:df:
e2:cd:15:ee:d8:34:16:6f:d8:df:26:07:62:18:7c:0e:a8:8c:
86:d3:a5:e3:ce:4a:b8:df:db:d0:67:7e:18:d2:66:58:20:d4:
7f:b1:5d:1e:f1:54:67:59:f4:9f:1d:44:5c:d2:16:14:4c:18:
56:a5:a6:66:27:22:2e:bf:76:4d:bc:f9:b5:ef:86:b0:55:16:
db:dc:53:0f:48:fd:8e:61:fd:8d:5f:aa:96:59:e2:28:3d:3a:
e1:91:cd:33:62:7a:92:42:c2:83:c5:3f:79:d7:32:54:b8:64:
23:07:dc:92:75:a8:48:e8:dd:2c:6b:ac:00:29:c5:05:7e:b3:
72:72:31:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwe3sDjXcRtnp4OfECbfGV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTViOGNkZmQxZDc5N2Q4NjA2NjBlMzRiZmExYTJhZDg1
ZmY5ZDkwHhcNMjYwMjAyMTUwMDQwWhcNMjYwMjAzMTUwMDQwWjAzMTEwLwYDVQQD
Eyg3NDVlMzNhZDJmYzJiOTA3YTg5MzNmZmY0MjIwNTM2NjAwMzkyZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fdwTNZ1+mkKHDHUhSao+dXB8oEe
Nyw+mVFqUdPoAXFMFMmNGSx2XQHzWUskaVml5aLoHvE9/uC2YdakHfBfIPW5naqk
XL8yWfTZw6IWdlG3DgWdEZJ3hJmAPSg+wFR+VxGO6dCwH/+ByVEGsHTGjhKcLnzc
NupilUq9nrbQ6wLQwzm/ReiBIsqL7Fxe8gz/N133N/mwg6UQy7kb510Bbu4CXz1x
iUTeejSbtahiHl/zJSRQX5YMXp09zn/1JgajSN0eSVSgs2ZOqFelw5tcl6igbilu
1f6J/4bMj5/MnJIF4uACMzaXPbJdS+aAyHWJuFBWG4V8eiBvoyfGfifMWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHReM60vwrkHqJM//0IgU2YAOS1eMB8GA1UdIwQY
MBaAFDeluM39HXl9hgZg40v6GirYX/nZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zYTkwMjEtMjk1OS00N2U3LWE2MTUt
ODExNDRmZDAxNTY0LzEvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zYTkwMjEtMjk1OS00N2U3LWE2MTUtODExNDRmZDAxNTY0
LzEvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhyXc4+Y
XT+n39ROLte3jhLP+hzSx2CfK4zucgQ6dlV4AW3sqzkx7O5X9yNGjl4qiWZitpFT
+q8J2840MEZ86/jgxjiXIMXeNufV7MV10638I/65+8lX8nEQovU0Vbx94jEUcmI8
H8FDU8pFC1qbau9VuZ6Pdy37jXGqaLLf4s0V7tg0Fm/Y3yYHYhh8DqiMhtOl485K
uN/b0Gd+GNJmWCDUf7FdHvFUZ1n0nx1EXNIWFEwYVqWmZiciLr92Tbz5te+GsFUW
29xTD0j9jmH9jV+qllniKD064ZHNM2J6kkLCg8U/edcyVLhkIwfcknWoSOjdLGus
ACnFBX6zcnIxKw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 17:24:27 2026 by rpki-client