This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json) Hash identifier: bdmxWTzavVw16er42Cw8re5CeFWHGi7izEstXhCAMIY= Subject key identifier: 48:57:2C:2C:F2:C3:97:A7:4C:3D:21:C7:0A:2B:A8:DB:0D:E0:D4:F1 Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e Certificate serial: 019C41A2127BD7611C1E1CDA36E953DEDAFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft Manifest number: 04FD Signing time: Mon 09 Feb 2026 09:01:06 +0000 Manifest this update: Mon 09 Feb 2026 09:01:06 +0000 Manifest next update: Tue 10 Feb 2026 09:01:06 +0000 Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: 7k0skfsc0xwqUvmR86UEgF/I77Fn/iGFsdnLGIwPFj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:12:7b:d7:61:1c:1e:1c:da:36:e9:53:de:da:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e Validity Not Before: Feb 9 09:01:06 2026 GMT Not After : Feb 10 09:01:06 2026 GMT Subject: CN=48572c2cf2c397a74c3d21c70a2ba8db0de0d4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:1b:a8:7b:92:b1:75:e6:1b:ee:81:7a:1d: f3:ba:9b:0d:47:c6:f5:72:e5:0c:29:2c:b5:a7:d1: b3:bb:40:cc:4b:43:98:fc:ef:e2:67:91:bd:59:d4: 61:ac:53:53:b4:e3:b6:87:a6:3c:32:5e:5d:8d:76: 69:6d:69:52:8d:d3:8b:45:18:cd:08:b2:1b:7b:c8: 9c:9f:f7:01:16:12:0e:8e:55:ed:a8:7d:04:a9:58: c4:0b:95:e7:e7:06:35:64:c4:89:60:3f:39:b2:cf: 60:c1:33:9a:93:e9:a6:a9:0a:95:0a:72:89:57:8c: 35:00:4c:1f:fd:32:6b:0c:7f:db:7c:d8:2a:6f:a8: bc:b9:a2:7e:59:66:78:3c:f8:2d:75:ea:ca:d6:12: 7b:0d:52:e9:7b:df:2e:f9:a3:fc:c8:29:7f:19:e3: 9e:3a:9e:2a:d0:f3:39:e2:3d:a4:52:13:49:2c:0d: 21:d8:45:7d:d0:ca:e3:7a:fa:56:d1:d9:55:da:42: f4:5d:01:c1:41:64:0e:a6:ee:20:50:8d:45:4a:54: 34:e2:03:51:d1:ea:d4:a3:93:0d:0e:55:b1:a6:18: 35:25:b3:a7:05:01:fa:b3:21:74:89:65:68:69:45: 1f:a8:85:ab:e1:46:1a:98:18:0c:03:0c:06:84:b3: ab:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:57:2C:2C:F2:C3:97:A7:4C:3D:21:C7:0A:2B:A8:DB:0D:E0:D4:F1 X509v3 Authority Key Identifier: keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a6:86:7f:9d:9d:ec:68:75:d2:24:b1:b3:c7:8a:a2:52:3e: 52:5a:3e:a3:32:42:76:aa:66:45:2c:6f:3a:fe:86:91:2d:30: cb:9f:df:77:d9:62:45:2b:88:6f:4e:3e:f7:ab:22:90:6b:3b: a0:68:76:cc:3e:c1:88:7c:41:2c:5a:6a:14:37:7c:1d:b1:d9: 55:12:56:1b:d8:3f:2e:ff:4a:ac:9a:b9:34:31:17:a3:53:39: c3:17:3e:e2:c7:e3:1e:23:b6:d9:a3:00:87:c5:2b:87:ea:ac: c2:b9:ff:e5:7c:24:68:a6:80:5c:46:8e:48:ec:35:51:3c:6d: ee:dc:6d:e1:02:a1:df:23:35:20:dc:e5:1c:89:80:97:9b:99: 3f:14:2e:96:77:1f:3c:b9:45:17:59:79:6d:02:9d:a9:84:36: 77:c9:5f:3d:5b:5b:2e:b1:d3:48:d7:ea:9d:98:65:dd:a3:ba: e9:20:0c:be:16:23:3d:c8:9b:7c:2a:08:b8:10:54:d6:b3:57: 0a:6a:52:93:d2:c1:e6:a4:d0:84:65:ff:d7:d0:7f:05:89:c0: a8:e2:71:ef:60:32:eb:c1:a9:01:6f:5e:67:00:10:48:13:f4: e2:8c:43:6c:d7:fd:ca:b5:93:e4:ed:91:b4:eb:da:a6:d2:66: 63:e1:7e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohJ712EcHhzaNulT3tr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NmZhMGNhMThhZmYyMTRlYzA1YjVkNDc4MGViM2M2ZWVl NjZlM2UwHhcNMjYwMjA5MDkwMTA2WhcNMjYwMjEwMDkwMTA2WjAzMTEwLwYDVQQD Eyg0ODU3MmMyY2YyYzM5N2E3NGMzZDIxYzcwYTJiYThkYjBkZTBkNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniobqHuSsXXmG+6Beh3zupsNR8b1 cuUMKSy1p9Gzu0DMS0OY/O/iZ5G9WdRhrFNTtOO2h6Y8Ml5djXZpbWlSjdOLRRjN CLIbe8icn/cBFhIOjlXtqH0EqVjEC5Xn5wY1ZMSJYD85ss9gwTOak+mmqQqVCnKJ V4w1AEwf/TJrDH/bfNgqb6i8uaJ+WWZ4PPgtderK1hJ7DVLpe98u+aP8yCl/GeOe Op4q0PM54j2kUhNJLA0h2EV90MrjevpW0dlV2kL0XQHBQWQOpu4gUI1FSlQ04gNR 0erUo5MNDlWxphg1JbOnBQH6syF0iWVoaUUfqIWr4UYamBgMAwwGhLOr9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhXLCzyw5enTD0hxworqNsN4NTxMB8GA1UdIwQY MBaAFDZvoMoYr/IU7AW11HgOs8bu5m4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm0tZ3loaXY4aFRzQmJYVWVBNnp4dTdtYmo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82NTQ0ODctOWEyZC00ZjY3LThmNzMt ODZlMzY0MmMwNTIzLzEvTm0tZ3loaXY4aFRzQmJYVWVBNnp4dTdtYmo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82NTQ0ODctOWEyZC00ZjY3LThmNzMtODZlMzY0MmMwNTIz LzEvTm0tZ3loaXY4aFRzQmJYVWVBNnp4dTdtYmo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqaGf52d 7Gh10iSxs8eKolI+Ulo+ozJCdqpmRSxvOv6GkS0wy5/fd9liRSuIb04+96sikGs7 oGh2zD7BiHxBLFpqFDd8HbHZVRJWG9g/Lv9KrJq5NDEXo1M5wxc+4sfjHiO22aMA h8Urh+qswrn/5XwkaKaAXEaOSOw1UTxt7txt4QKh3yM1INzlHImAl5uZPxQulncf PLlFF1l5bQKdqYQ2d8lfPVtbLrHTSNfqnZhl3aO66SAMvhYjPcibfCoIuBBU1rNX CmpSk9LB5qTQhGX/19B/BYnAqOJx72Ay68GpAW9eZwAQSBP04oxDbNf9yrWT5O2R tOvaptJmY+F+Ng== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:53 2026 by rpki-client