This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: tdWUmq6t/9rPQ4IBbTb/jL1wXEj8aY01wONIEO2wUdM=
Subject key identifier: 03:54:CD:B4:03:51:B8:11:B8:A2:32:AA:1F:C1:44:E5:4A:CF:E2:FA
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019BF876538E8678A3D8F2A279C071548F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 07A1
Signing time: Mon 26 Jan 2026 04:01:02 +0000
Manifest this update: Mon 26 Jan 2026 04:01:02 +0000
Manifest next update: Tue 27 Jan 2026 04:01:02 +0000
Files and hashes: 1: 5h6iiCzzgrx94impUF3-0E0VH4M.roa (hash: gAmFQIrj0BhLKJIyD6cNTjoBJomwxcy0Bn5O+lbR7yM=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: bIN8zV17/REjAzQF+/stoW3ghcZWDIdqpWBH21QwpiI=)
3: NpNK-uzEZJdDjk5ocRPUpbcQCm4.roa (hash: +hYy5E8CGoO0sLwCG7Df7i4TXDNBZcQohk0iKBpaPD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:76:53:8e:86:78:a3:d8:f2:a2:79:c0:71:54:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Jan 26 04:01:02 2026 GMT
Not After : Jan 27 04:01:02 2026 GMT
Subject: CN=0354cdb40351b811b8a232aa1fc144e54acfe2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:77:01:e1:d0:c6:21:8b:5d:9d:83:b5:02:
6d:3f:45:12:01:c5:82:85:8f:0e:d9:c7:9b:2e:fb:
37:d8:49:b0:c7:c9:ce:08:32:1b:eb:52:67:0d:12:
17:21:c2:68:36:5a:e0:00:06:fe:7d:bf:39:ec:2e:
20:71:3e:f9:23:a9:4b:f9:e6:0b:08:6b:bc:3e:f0:
48:84:76:9f:9b:84:b6:7d:a4:99:93:2b:63:7f:39:
78:e2:37:63:64:70:5a:33:26:41:f9:7f:eb:b5:69:
67:ce:c0:b8:d2:b0:83:ce:ea:50:1c:f3:0e:43:81:
c0:61:f3:12:bc:01:b5:df:22:9f:28:29:b7:41:5e:
8d:1f:58:5d:01:08:26:5b:99:db:31:10:5e:39:ee:
bd:a8:a0:93:fe:67:c6:f3:78:10:2b:51:db:e3:7f:
f9:6f:93:b5:10:34:ed:d7:97:15:87:3b:5c:d0:ad:
90:fd:dc:db:c4:d1:ff:c6:b0:4e:46:f6:c1:01:0a:
5b:38:22:95:5c:31:40:35:49:80:c9:df:51:8a:2a:
18:52:8f:89:ed:21:b9:58:b6:0e:98:fd:57:f4:86:
47:f8:e3:d4:37:12:8c:e6:cb:10:8f:63:c5:bb:64:
be:c3:65:6f:8a:55:b8:1e:e3:66:84:5a:a7:e2:97:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:54:CD:B4:03:51:B8:11:B8:A2:32:AA:1F:C1:44:E5:4A:CF:E2:FA
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5a:6f:5d:48:4d:05:c5:06:5c:a2:d2:31:ef:2b:22:bf:79:
31:de:ae:cf:17:f6:d7:cf:46:1a:d5:00:0e:a3:fb:99:a4:eb:
56:66:4a:ce:c0:0a:49:3e:40:a7:41:af:29:77:94:29:04:90:
a9:09:89:b9:70:69:dd:2b:09:2d:af:a9:c6:b4:07:34:76:db:
97:91:49:69:a8:ec:83:e7:3a:fe:bc:21:94:79:19:4b:21:96:
e1:e4:1b:72:6f:95:43:e5:a5:3f:aa:4c:78:1a:ab:aa:78:d8:
d8:10:6b:d9:23:30:07:fb:1d:de:00:78:5e:c7:72:ba:8d:8e:
92:fe:7d:7a:47:3d:d7:37:7a:d5:cf:39:f2:27:4f:c7:b3:1b:
5d:ca:67:0d:70:cd:f9:4d:74:ca:2b:a5:32:25:6e:d8:74:03:
20:ae:bd:38:7c:e2:b9:48:50:7c:8c:16:a1:e0:43:34:ae:44:
8e:1a:95:27:dd:57:1f:00:96:18:b1:bd:40:29:88:d7:66:fa:
a0:60:5d:bb:82:70:ff:ed:fb:fa:03:15:70:f3:10:14:2f:2d:
74:0e:72:b3:61:71:76:58:d4:3e:50:23:08:e4:ef:d6:4e:2e:
72:d7:1c:79:e8:f9:3a:99:0c:f3:e4:11:86:69:94:e8:c7:69:
f0:8f:b2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:14:16 2026 by rpki-client