This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File: npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier: 4rJfO6RedjM1gMGBhVc8Uwj7+WfTcP5tFNbhak0/K2U=
Subject key identifier: FE:DC:84:A2:01:5C:2F:23:F5:E3:28:C3:41:58:5C:9D:E4:C9:EF:AB
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer: /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial: 019BF53EA7D3D469AB8753819DFB14B291A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number: 08A6
Signing time: Sun 25 Jan 2026 13:01:22 +0000
Manifest this update: Sun 25 Jan 2026 13:01:22 +0000
Manifest next update: Mon 26 Jan 2026 13:01:22 +0000
Files and hashes: 1: npTVvz231nNNzxvmItX97i_sO48.crl (hash: xrTkH65OOc6uiV7o1H/2aP6vwb5c+FAm3dXa4Ig/E4Q=)
2: zcxoOaYQZVz0kyNkbAvoL7_cGOo.roa (hash: cbQCnBDpdRHmtA6XlyYrBSpV92ISXXC3TjEjSfaVLUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:a7:d3:d4:69:ab:87:53:81:9d:fb:14:b2:91:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Validity
Not Before: Jan 25 13:01:22 2026 GMT
Not After : Jan 26 13:01:22 2026 GMT
Subject: CN=fedc84a2015c2f23f5e328c341585c9de4c9efab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:c9:e7:6d:0b:dd:d4:32:1e:d0:7b:3d:53:
83:d2:fd:51:f5:8f:38:7a:d7:c1:b2:ef:95:fb:b4:
07:0c:df:ff:28:e2:b6:08:2d:ec:54:92:95:c0:ba:
0c:9b:9e:fe:8e:08:f2:62:21:64:26:6a:77:80:90:
1f:7a:d4:dc:d3:42:b2:d3:58:bc:34:cb:c9:77:47:
8c:52:a7:e1:57:79:45:0a:4f:49:bd:34:9f:8b:30:
7b:f1:25:0c:d9:45:c8:d4:a5:51:0a:28:12:30:07:
d9:08:ca:80:f8:1b:30:e7:3b:54:10:a8:ef:e7:8c:
f0:8d:3e:c6:82:99:6b:6d:2a:60:d3:82:4b:41:38:
a9:f5:06:12:48:ae:07:28:ac:76:26:f0:8a:06:69:
1d:fc:62:7d:32:47:b4:91:4c:fa:61:8f:3e:20:80:
3b:d2:ad:2e:ad:21:57:e0:33:f2:3c:c6:c3:29:74:
11:96:50:8d:1a:80:73:a1:83:16:79:49:8b:bb:24:
19:58:e1:47:33:98:9f:63:4f:90:13:00:43:90:06:
04:6f:2a:0f:a3:d3:2e:66:fb:93:a2:97:0f:0f:1f:
06:6f:8f:f7:ac:0f:5a:a8:a2:a3:f2:a7:f0:4c:1a:
e7:6f:1b:17:18:c2:05:8e:be:14:24:0f:5e:cc:32:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DC:84:A2:01:5C:2F:23:F5:E3:28:C3:41:58:5C:9D:E4:C9:EF:AB
X509v3 Authority Key Identifier:
keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f1:82:44:4b:88:4c:2c:1b:c5:bc:ed:9e:34:a6:ae:c1:b8:
8e:79:7c:45:c0:af:91:d4:a5:b4:f4:58:bd:0a:46:9f:47:1d:
95:77:fc:94:80:0f:b1:bb:98:90:42:f5:00:ef:ca:4b:30:78:
22:b3:ed:8d:aa:b7:de:69:63:b8:ac:49:63:5e:58:fc:c3:02:
ae:b4:f9:86:10:4e:51:2f:2c:4b:07:f9:47:45:6e:f8:dc:74:
2a:99:39:5e:43:be:b8:44:8d:c1:86:fa:70:f6:17:98:71:cc:
a6:ac:d9:5f:58:19:e2:75:a7:49:73:7f:b0:23:23:a8:d4:e1:
ee:0e:4b:87:3e:73:53:ab:3b:07:c1:7c:22:cf:e9:e2:8e:73:
83:69:97:4f:e4:9f:35:04:10:2b:04:91:68:ab:6c:f1:af:65:
fc:5f:c6:a7:47:3c:4a:a1:07:6d:34:e5:fe:ce:b2:f0:4b:90:
b5:e7:fd:3a:26:eb:eb:10:0c:61:29:bf:db:1c:61:35:c5:30:
6b:98:8d:63:2d:d6:80:42:ed:f8:ef:07:7a:56:53:ab:ce:b8:
26:1d:94:8d:c1:0b:60:c3:bf:dd:9b:6d:e4:21:6f:b7:9a:c8:
f9:53:2e:69:ce:f9:88:65:fc:cc:e1:79:a9:e8:e2:c6:47:3e:
47:42:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:23:59 2026 by rpki-client