This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: 90KR8miw+afsifAf09UyXBJr01KB41Y0VeRhD/akhKM=
Subject key identifier: 4B:04:41:EA:63:7E:74:EE:71:D3:F6:E1:6B:8C:07:AF:D4:89:A0:30
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019BF72CFAB0BE564E6FE11DCD63CC6C37F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 080A
Signing time: Sun 25 Jan 2026 22:01:18 +0000
Manifest this update: Sun 25 Jan 2026 22:01:18 +0000
Manifest next update: Mon 26 Jan 2026 22:01:18 +0000
Files and hashes: 1: 4OrfC0gESmi91J763IQoNP33VaY.roa (hash: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: ohp/MPTlUspWqYpe1L1JIKYZQUxHZxqYSEj9IsTgyNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2c:fa:b0:be:56:4e:6f:e1:1d:cd:63:cc:6c:37:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Jan 25 22:01:18 2026 GMT
Not After : Jan 26 22:01:18 2026 GMT
Subject: CN=4b0441ea637e74ee71d3f6e16b8c07afd489a030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:9f:5d:de:22:f0:cc:60:86:a5:40:49:ee:
64:47:3e:63:55:e5:a1:84:d2:72:0f:cb:b7:74:74:
0e:6e:b0:23:87:cd:f9:2b:05:3b:99:d9:14:14:fb:
fe:17:37:5b:ff:f2:d0:95:1a:70:3b:c0:e1:c4:84:
ad:b4:2d:a8:ef:71:ef:89:6c:ca:cb:7f:08:b0:56:
7e:4a:ed:d8:0e:5b:4a:da:30:0e:17:2a:15:b3:c6:
bf:00:d8:53:ae:27:54:3f:9e:a0:44:c9:99:39:4f:
da:83:ae:8f:3d:63:8e:74:b1:f8:71:9a:07:9f:23:
4a:8b:8a:ff:c6:a2:e9:ad:ad:9e:80:59:05:bb:e0:
b3:26:cb:37:e1:52:bd:45:30:99:e1:09:c4:b5:f0:
a8:93:39:6c:a3:e6:07:76:a4:34:ac:4d:68:1c:4e:
c2:f2:56:ac:ac:8d:83:eb:39:6e:d9:09:17:c1:b5:
17:a6:f6:a0:26:ff:d8:24:2b:c9:bd:2e:88:4f:fe:
47:51:33:7e:bf:aa:87:cc:e0:10:26:39:3e:7c:f1:
09:c5:b0:9b:aa:a4:4a:82:5b:c3:6c:a5:26:88:7d:
b0:93:d4:48:d3:d2:10:1b:ab:85:90:3e:00:9b:ec:
93:f9:fa:ef:98:f1:96:4e:e5:95:e4:12:61:03:b9:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:04:41:EA:63:7E:74:EE:71:D3:F6:E1:6B:8C:07:AF:D4:89:A0:30
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fd:a5:ab:86:47:e4:3d:a9:a0:a9:74:50:5e:c8:98:03:00:
99:fa:18:ef:0c:7b:7b:97:1d:e9:af:b7:df:d9:43:d0:d5:d6:
2a:86:a6:36:df:73:c5:a5:fe:e0:dc:15:b3:1c:1f:92:6b:ab:
5e:85:55:bc:bd:83:b4:08:e5:be:e7:c4:7a:68:63:b5:5b:54:
2d:4e:e5:95:78:c8:e5:77:39:87:ca:09:d8:6b:2b:1c:6c:3c:
c2:0b:03:96:21:01:7c:13:45:7f:a4:06:6c:35:8e:4b:53:7b:
6b:7f:49:f2:1c:95:f5:75:5b:99:c6:13:7d:cd:5c:a6:18:03:
fa:25:fb:e9:39:c5:37:bb:9c:07:e2:78:e5:d3:7b:99:04:8b:
c2:de:ab:26:8e:41:1f:f1:40:3e:bc:d3:ac:d4:ba:ca:ae:1a:
d6:29:e5:26:36:68:83:ab:f0:06:84:b6:59:b2:89:f4:3c:9d:
6b:35:94:94:4e:4f:35:10:68:01:95:ad:48:f8:63:5a:61:17:
55:64:fc:23:87:8e:c5:1c:83:da:9b:b0:35:49:99:e7:46:93:
a6:da:be:01:b2:f4:aa:c0:b7:57:0d:4b:5f:27:69:72:5e:ee:
99:73:f0:8d:b3:fa:7e:56:a0:29:4d:a5:af:84:69:4e:f1:5e:
72:6c:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:05 2026 by rpki-client