This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: raJkJ9GSb9gEyVeHIzDZvZRLtaQ84tR953od8YusyjA=
Subject key identifier: 24:4B:BE:04:BF:3E:FC:C5:FA:45:91:CE:DF:31:82:6B:FF:77:73:C0
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 019C42B434AB1F5C75CCDE5E9792F41EADA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0F03
Signing time: Mon 09 Feb 2026 14:00:31 +0000
Manifest this update: Mon 09 Feb 2026 14:00:31 +0000
Manifest next update: Tue 10 Feb 2026 14:00:31 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: fKOHCGafxjqhmZhGYXO7hRj5sDVHS7aFSy/ziPPzNuQ=)
2: E53XM9bwcUdhNes8XtMe3ZWybN8.roa (hash: MGupxfszh7a8rx7tMG0y7Bj5FjeIlETaabShTOh0AgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:34:ab:1f:5c:75:cc:de:5e:97:92:f4:1e:ad:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Feb 9 14:00:31 2026 GMT
Not After : Feb 10 14:00:31 2026 GMT
Subject: CN=244bbe04bf3efcc5fa4591cedf31826bff7773c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:ae:4e:20:bf:46:50:98:b2:b3:07:e4:97:
ec:d8:21:9e:5f:09:d3:5b:d8:67:72:5a:30:e0:62:
98:8c:f9:f9:29:ef:fa:68:b1:dc:80:d3:da:e9:66:
99:82:c0:d5:05:11:22:7a:b9:0a:f3:71:96:64:b2:
40:77:ba:50:67:94:05:a7:46:25:02:bb:27:88:41:
68:97:04:3e:e8:bd:6d:48:99:b4:29:08:07:2f:e1:
d6:fe:dd:7f:f7:72:f9:7a:20:50:d7:26:aa:03:26:
67:b4:ec:79:14:34:89:06:bc:bf:06:e7:1b:13:94:
75:26:41:04:e3:90:dd:f0:b7:ae:6f:1b:3a:58:ab:
81:75:db:87:b5:db:92:52:4f:4e:ed:2c:60:3e:69:
35:f4:42:1e:e1:bc:48:88:14:25:e4:8b:ca:7f:69:
fb:56:76:9d:b6:46:b9:41:72:d9:84:3c:0e:ca:42:
6d:07:d7:86:d6:3d:d5:6b:60:56:b7:46:e1:96:59:
11:f1:63:de:82:41:fc:7b:5e:61:e8:e6:7d:16:1f:
9c:e2:fd:2c:44:f9:cc:70:7d:70:0a:f8:2b:33:28:
17:d2:19:0e:0c:42:a7:a9:10:b7:08:94:61:d1:7a:
fa:47:86:44:41:92:cd:6e:af:96:4c:ad:c1:b7:f7:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4B:BE:04:BF:3E:FC:C5:FA:45:91:CE:DF:31:82:6B:FF:77:73:C0
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:89:88:1c:93:5d:86:78:6d:8b:ec:b2:da:ea:23:3f:7b:86:
74:37:1a:f1:88:51:47:6c:08:fb:3b:fa:19:63:be:48:44:94:
8c:66:2b:62:06:af:a4:12:fb:aa:0e:a2:58:b4:2d:64:3b:24:
ea:2c:96:26:94:ec:f8:7a:54:c6:03:98:d6:9f:ae:15:bf:20:
cf:f8:c3:b8:5d:40:09:69:f1:f4:03:b3:89:f4:e8:e3:c8:c0:
b6:be:54:15:ac:3e:5d:48:a6:18:50:d2:d7:5f:ce:06:ee:4c:
2c:47:cb:d1:5d:e8:bf:66:78:4b:1c:2d:3f:7e:ca:e7:d4:09:
9c:17:ee:89:de:6f:61:2c:43:9d:de:df:d3:5b:30:fc:20:14:
c7:41:4c:dc:51:4f:b5:07:ae:7e:37:96:36:d7:6a:71:dd:74:
a6:66:d1:51:65:18:a8:d4:fc:ac:3f:4f:64:ec:cf:6a:ce:a8:
9e:98:44:ae:03:25:a3:c6:3e:84:81:0e:9a:a2:82:f5:df:13:
8f:28:c4:2b:19:c2:e5:5d:d5:b6:07:30:62:b0:57:e5:d2:0c:
92:29:34:83:a2:c2:a0:10:36:8a:71:58:06:52:00:4f:31:07:
e1:eb:3e:b9:7a:8c:ec:8b:e4:f9:c5:f4:71:30:41:0a:fe:42:
e7:c8:69:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:49 2026 by rpki-client