This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
File: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft (raw, json)
Hash identifier: 0QYFIUvZIqwhAJXC/w71+2hjACkzIawCJhq94ZSBf78=
Subject key identifier: 83:32:82:70:8A:A2:FF:47:83:8E:FF:DE:B0:16:CA:4A:DB:4F:E4:A3
Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
Certificate issuer: /CN=9d8ada352982a319b54d5e483d34426346733ea4
Certificate serial: 019C43FE81746B4850E37AB13A1F929EB1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
Manifest number: 1701
Signing time: Mon 09 Feb 2026 20:01:18 +0000
Manifest this update: Mon 09 Feb 2026 20:01:18 +0000
Manifest next update: Tue 10 Feb 2026 20:01:18 +0000
Files and hashes: 1: fPpcTKJECfYoksYEZEcUM_j0qkQ.roa (hash: E5+q7rc6m3t9onZOzrQMasG/CbDzH+1hOPd2cCu+nT4=)
2: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl (hash: Ckmc6+57xFwQhTWeLg89VPI6PbJejO96SbJA1IViRAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:81:74:6b:48:50:e3:7a:b1:3a:1f:92:9e:b1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4
Validity
Not Before: Feb 9 20:01:18 2026 GMT
Not After : Feb 10 20:01:18 2026 GMT
Subject: CN=833282708aa2ff47838effdeb016ca4adb4fe4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:7b:bc:15:a3:14:fe:11:5f:01:6a:8d:bc:
20:56:93:19:75:40:c4:73:19:26:fe:7a:bf:1c:91:
95:d1:2c:02:8f:8b:0e:32:a1:6a:46:0d:98:3d:32:
17:cf:62:8b:09:af:3c:10:1a:a4:59:9a:17:0d:c1:
75:3c:12:bc:85:85:1e:45:6f:c9:b3:8c:33:49:f9:
b6:07:c1:c2:22:9b:73:1e:05:9b:3c:72:65:8f:d4:
59:36:64:13:b2:07:42:4b:39:e7:df:52:be:3f:21:
ac:c8:d8:95:ad:4c:31:b2:5e:65:3e:da:63:9e:77:
ee:31:81:d9:af:e8:e2:3e:7f:13:c0:14:69:b9:fc:
51:c7:8a:12:a6:e2:e6:07:e5:7a:a0:34:06:79:09:
93:4f:51:58:8e:8e:42:8f:f3:a0:e0:45:1b:3f:d3:
72:49:7c:5b:10:1b:0b:85:e5:94:4e:cd:43:2a:60:
1d:12:70:b1:2c:69:57:42:93:96:95:8c:d9:49:40:
d5:c4:49:80:62:07:4a:e5:d4:ee:d9:a2:6f:42:31:
84:4c:db:34:4e:e7:7f:ec:cc:6a:10:25:06:9f:72:
d2:ad:d4:6b:18:f4:34:db:7d:a4:86:b0:30:4e:21:
b4:eb:60:ec:49:31:2a:07:90:eb:d8:f3:3d:12:ac:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:32:82:70:8A:A2:FF:47:83:8E:FF:DE:B0:16:CA:4A:DB:4F:E4:A3
X509v3 Authority Key Identifier:
keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8a:58:05:ad:5b:0b:47:77:6e:f6:85:bb:92:03:21:19:21:
84:b3:25:21:79:f0:0d:4f:dd:6a:0b:a3:d3:99:9b:a3:32:5c:
bd:c9:18:b2:cb:9d:87:4c:f3:09:9c:e0:7a:b9:39:11:cd:ff:
30:5c:a1:68:6c:f5:76:b4:8d:24:cc:36:47:ae:4b:b7:45:3a:
fc:58:d7:9b:31:ea:19:e5:82:ce:3b:09:ec:18:ec:8c:34:5d:
7e:e9:e4:c7:bb:07:3f:9d:21:c0:92:92:97:5d:69:3e:a9:d2:
13:96:a4:73:ab:b7:4d:3d:b6:68:c4:1c:28:94:49:0c:f4:fb:
b5:c8:1f:7f:53:71:29:e3:6e:39:e5:5b:e4:d7:4c:22:b3:0f:
ad:31:3b:2d:4e:d5:db:5c:7e:c7:01:4e:8a:82:2f:9b:02:c5:
07:7c:30:20:3b:b2:99:59:54:0c:95:24:86:53:80:ab:7f:d6:
72:b4:de:c8:a1:93:f9:35:8f:8b:4d:cf:d2:81:81:51:b3:2c:
6e:d9:bd:a8:8a:af:1b:ee:0c:3e:39:87:a7:7e:23:2e:3a:a4:
78:4c:f7:45:22:b3:42:26:21:81:8d:8d:4f:c6:42:12:f7:d2:
e6:0a:fd:2a:03:b8:29:54:9e:66:19:40:95:63:94:d1:96:36:
a5:d1:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:52:28 2026 by rpki-client