This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: 3Xv4xFcaO/aam3J2d5FuVpahU6jZmT8Hlg31/33OZ2o=
Subject key identifier: 64:8F:7C:04:FD:43:A9:82:D0:74:11:40:1B:A6:D3:87:8F:20:C8:8C
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 019C42B48491F21EE1F82E328DC8267D60EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0BEE
Signing time: Mon 09 Feb 2026 14:00:52 +0000
Manifest this update: Mon 09 Feb 2026 14:00:52 +0000
Manifest next update: Tue 10 Feb 2026 14:00:52 +0000
Files and hashes: 1: 8sd6i61fK2pFKRyKUFXIcecWNdA.roa (hash: 0lP2EukbQ7lxiIB/1dg6Wt6kXv3T/8YmxZYQdbkSyU4=)
2: LZcyPq5gcVmCZJNsmUPn5VwCWKQ.roa (hash: qXtKcLjBnYcfm5KPZ6PRmpU8Z0A5pTm8Psp+7+d29jQ=)
3: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: KCpmTWSf3brz3S7TQuRcjBK1ez1KtMoNY/vwsr26JDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:84:91:f2:1e:e1:f8:2e:32:8d:c8:26:7d:60:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Feb 9 14:00:52 2026 GMT
Not After : Feb 10 14:00:52 2026 GMT
Subject: CN=648f7c04fd43a982d07411401ba6d3878f20c88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:3e:78:29:f8:d2:0f:70:d1:ec:4a:57:12:
f1:5a:7e:26:2c:ae:dc:b6:7c:b6:d5:04:1e:fa:63:
88:0e:8b:9a:2d:a3:d6:2c:4c:cf:57:0a:72:5a:34:
ea:f7:c8:eb:8f:05:65:c4:d6:62:ff:d1:4e:80:a6:
43:3d:09:81:f7:2a:3a:ec:21:30:3d:de:9d:35:db:
18:8c:04:e1:ce:01:35:c7:4e:ac:7b:63:2e:53:13:
9d:e1:8a:76:22:a0:c2:19:b5:84:a1:61:bc:ef:02:
63:62:24:0f:0a:2b:f5:32:98:bc:05:b9:74:15:8b:
ba:69:63:34:36:5c:bf:1a:83:c3:dc:e3:8e:53:f1:
f4:b5:94:c0:36:fd:7c:a4:31:1f:c7:22:fa:18:99:
29:71:d4:df:11:48:f9:22:7c:c1:3d:3b:84:1c:e5:
4a:19:9c:91:d5:04:14:53:db:49:fe:bf:9c:85:80:
b9:93:8f:70:c9:db:7e:2e:75:88:6b:28:78:a1:9c:
8b:05:fd:4e:ea:23:a8:15:50:7e:41:0c:46:84:3b:
8c:3e:ca:25:a4:75:51:d5:c3:dc:ab:ae:13:8f:0f:
8d:21:99:7a:05:63:92:73:59:d6:23:f3:f4:c7:9f:
e8:71:36:ba:0d:9a:a0:2e:ea:50:c7:ff:0e:36:5f:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8F:7C:04:FD:43:A9:82:D0:74:11:40:1B:A6:D3:87:8F:20:C8:8C
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ed:0d:8e:35:65:85:55:1d:76:06:16:63:54:b1:d9:09:9d:
ef:57:8a:af:5f:2b:75:c1:06:b5:f6:ff:26:44:0e:f4:40:c2:
51:b4:5e:09:8b:4b:77:eb:71:90:91:44:9c:a1:90:5b:9f:5e:
b2:9c:4d:cd:0c:47:61:a5:7e:a5:5b:33:dd:5b:fc:5c:20:2b:
09:d3:32:8e:90:27:d2:d3:c1:ff:20:c0:c6:50:7e:1f:89:e7:
bb:85:7a:43:14:d3:30:8d:e7:74:64:58:27:5f:2f:c1:a9:08:
62:1f:a4:e5:11:f1:5d:b7:c8:a6:16:2e:36:65:22:be:5e:21:
8f:fd:8d:82:8c:e7:d4:c4:d5:c6:1b:11:b7:bc:42:16:4f:ff:
50:5b:2c:80:2f:bf:e8:64:ee:35:41:c2:55:7e:d0:20:a2:4b:
d7:de:56:30:95:54:09:0f:c2:24:14:dd:38:21:5c:a5:51:d5:
8b:a7:b0:0e:92:9a:03:e3:8f:00:9e:cf:7e:bb:49:d0:56:0e:
58:96:99:d7:eb:9f:e1:8f:48:fd:d9:5b:d4:0b:e4:29:ec:71:
f3:e3:2f:c5:c4:9e:20:d8:fc:16:7e:70:d7:c3:7e:aa:04:d3:
4b:71:5c:5e:37:4c:10:d1:bd:e7:be:55:18:f6:32:e4:dc:2e:
50:6b:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:58 2026 by rpki-client