This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: YSiwNlBVXbocOPGhtUFSi9ndEYbpjO80VFMB9K//3l0=
Subject key identifier: D7:8A:B6:65:10:E7:C3:6A:F4:22:CB:D5:0D:6C:F6:92:1A:42:88:67
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 019C446C094A66E8A87EB2680DD0C444E1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 0804
Signing time: Mon 09 Feb 2026 22:00:56 +0000
Manifest this update: Mon 09 Feb 2026 22:00:56 +0000
Manifest next update: Tue 10 Feb 2026 22:00:56 +0000
Files and hashes: 1: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: JSri6xvrcvEOANH40zZcAAjT4kSoLKKAU/Tscetp7AM=)
2: zD32Xj3PcakiszsGIXBTPatK-9k.roa (hash: iQ8hQ52AgtodECYlHitEBw6MO3wK+GphXogbQ5umKAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:09:4a:66:e8:a8:7e:b2:68:0d:d0:c4:44:e1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Feb 9 22:00:56 2026 GMT
Not After : Feb 10 22:00:56 2026 GMT
Subject: CN=d78ab66510e7c36af422cbd50d6cf6921a428867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:df:51:a0:83:f9:a6:a2:a1:67:1e:8f:0f:
4d:e6:d5:04:67:ea:d6:39:29:78:9a:c9:f0:63:68:
98:65:36:32:33:8d:bf:fa:db:0d:8e:e3:e0:24:25:
8b:f7:8a:81:cb:f0:90:d3:44:a1:8d:a8:74:df:20:
cf:97:7a:9f:87:49:33:50:cc:b6:87:4b:34:cd:2c:
13:d6:b9:40:d8:db:28:7e:b9:a3:64:eb:03:e3:fe:
7b:da:92:b8:ed:d1:0f:18:de:47:42:cc:53:37:b4:
7a:09:b0:d0:97:86:45:ab:e6:35:66:1e:32:57:a8:
0a:59:fb:c0:cb:1c:c8:c7:46:a5:21:f5:2b:91:d8:
27:06:f5:d0:bf:15:38:dc:99:af:eb:6a:dc:f9:dd:
84:37:85:89:85:be:ed:65:95:9f:6b:d6:b6:1f:ed:
96:ba:66:a1:dc:8d:a9:3f:fc:39:c8:68:de:b3:fc:
b7:99:f9:a6:10:0c:9b:21:ce:e2:d4:7a:4b:e6:28:
7b:b3:10:83:f3:d4:eb:8a:82:75:c5:13:f7:63:36:
1b:c0:72:6f:04:d1:70:06:58:57:c6:59:65:f8:9c:
f4:db:3a:92:89:f1:17:54:62:4e:90:69:32:43:f9:
5a:f1:50:0a:0c:a4:a3:54:f6:1c:37:28:96:77:27:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8A:B6:65:10:E7:C3:6A:F4:22:CB:D5:0D:6C:F6:92:1A:42:88:67
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e0:91:ac:a4:43:ce:69:65:fe:c3:c9:71:3e:71:60:35:a9:
ba:16:1d:87:82:e9:5d:78:7d:c5:97:14:18:30:cc:1b:ca:79:
79:7b:ad:12:ca:5a:f4:bc:44:c7:11:29:9c:a9:4c:6f:52:27:
cf:46:8f:6c:f5:71:75:c3:69:58:54:68:4a:65:cd:1b:cd:42:
91:1c:72:b8:08:7f:2d:b2:63:7a:e3:69:c6:30:11:f4:6e:72:
9c:2f:5e:60:1d:36:b7:88:80:2e:2d:c4:c4:36:09:c9:ca:b6:
6e:b1:55:10:ac:7d:ba:a0:98:ce:e7:87:f5:ff:0b:9e:c1:e2:
20:3c:b2:d9:11:2c:69:d5:7f:dd:14:f4:ee:48:10:0f:8c:ca:
51:95:ea:fc:89:a1:8f:41:0c:4b:d2:5c:88:8d:2b:69:15:49:
b8:8b:bf:f0:20:f4:0f:af:27:ab:88:7a:eb:b3:33:12:56:d1:
77:ab:1f:c1:2d:dd:6f:40:f1:cc:d0:ef:5c:98:03:30:ea:f3:
87:13:fe:cb:e2:5f:2d:fe:70:50:e6:5e:bf:61:63:5a:ea:0c:
f5:f0:d7:c4:de:b3:e8:dd:3b:55:e6:a9:fb:06:dd:ee:23:8f:
7e:8b:85:61:1d:8f:5a:4e:44:95:cd:9d:0e:1f:a1:ca:b2:31:
9e:a9:00:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:51 2026 by rpki-client