This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json) Hash identifier: Il7PgEXa8snWgEWYh89bK7AZkcwfJR2G5kX16Xq2GGg= Subject key identifier: 01:9B:A6:32:51:BD:FD:19:30:4D:B4:28:90:F1:AD:DD:01:5E:8A:C1 Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08 Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008 Certificate serial: 019C420FFA8665C37EB422EAFA3A9DAA8975 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft Manifest number: 1005 Signing time: Mon 09 Feb 2026 11:01:09 +0000 Manifest this update: Mon 09 Feb 2026 11:01:09 +0000 Manifest next update: Tue 10 Feb 2026 11:01:09 +0000 Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: njVij1GGNgZWD2gzXM7WwXLV/PqLGrPmEC0sZANZcow=) 2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:fa:86:65:c3:7e:b4:22:ea:fa:3a:9d:aa:89:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008 Validity Not Before: Feb 9 11:01:09 2026 GMT Not After : Feb 10 11:01:09 2026 GMT Subject: CN=019ba63251bdfd19304db42890f1addd015e8ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fd:0a:6e:99:5a:38:ba:4c:b2:af:00:97:85: c9:dd:11:0e:a7:50:27:7a:08:ac:ae:a1:c5:b4:e1: 12:01:ca:89:5d:66:aa:f6:06:56:f0:ae:cd:2f:de: 1e:af:cb:cc:07:4f:0d:9e:ff:0c:e4:52:92:c9:98: 4d:29:84:8f:44:96:d9:32:2a:4d:07:d9:8a:98:24: d4:b2:fe:61:88:18:c2:9b:44:8a:c6:ed:84:4a:3e: 22:16:d0:8a:f0:ef:8e:11:80:c2:fa:ac:89:33:80: 11:4f:f4:56:a6:6d:c8:4f:ca:f9:c2:06:da:07:a8: 9a:7b:e1:de:2d:f5:7c:1c:d4:be:54:8f:8b:fb:a9: f7:3e:3f:20:6c:e5:6f:2a:06:f8:32:51:4c:57:07: f3:fa:99:45:74:4d:6b:cb:c0:3d:71:85:e4:03:bb: e5:43:b3:5f:f2:8c:f6:9d:3b:1c:08:15:f0:0d:50: 3d:dd:94:2f:47:fa:de:ba:b0:bd:68:06:4b:35:7d: bd:59:dc:8d:08:8f:74:7f:35:70:8a:1e:dc:8d:f4: a8:33:0e:d3:66:ab:2a:fa:2a:fb:3e:2e:72:db:09: f4:60:98:cb:ad:ea:22:63:b6:57:19:82:f6:a9:91: 1c:b6:53:1b:00:aa:d6:35:62:bf:30:e5:26:99:53: a2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9B:A6:32:51:BD:FD:19:30:4D:B4:28:90:F1:AD:DD:01:5E:8A:C1 X509v3 Authority Key Identifier: keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5c:40:b5:ad:5b:db:76:1d:3f:af:79:a8:64:2e:94:e7:97: 51:20:94:ce:5f:40:af:40:81:6c:00:36:e4:70:4b:37:2b:bd: cf:d0:42:f8:96:c9:db:ba:9f:87:85:a6:8b:dd:d7:91:f4:80: 35:8c:6f:40:68:d5:0d:da:f4:de:cd:1c:23:1d:22:6c:e5:db: 3e:dd:2a:94:ed:49:02:51:aa:8c:23:4e:9a:99:ff:38:ee:d0: 56:40:48:fe:e8:02:6d:b3:32:81:0c:d2:df:37:c3:cb:63:a3: 81:48:1d:65:4f:a1:66:35:4d:eb:3c:b5:b5:90:59:cc:02:e0: 2f:3d:29:21:bf:60:d1:a0:ea:66:54:fb:ff:df:c2:f7:ea:dd: 20:5a:fb:28:e9:35:3c:9e:91:62:d5:fa:b1:5a:ad:21:8c:58: 48:a7:90:ef:2d:29:19:c6:6e:0c:ec:a4:e6:03:2f:4d:12:6a: 32:ed:4f:40:7b:73:0b:89:36:b4:bb:96:b9:75:42:51:44:81: 02:9a:7c:48:63:4b:5e:7b:1e:1f:86:e8:4a:ac:08:cf:e2:d0: 15:a7:eb:ef:38:03:66:a5:18:1d:04:86:f9:db:b2:a7:6e:29: 48:f8:36:c4:40:b1:a9:a1:21:5a:8b:f7:c2:ce:6e:7f:d8:e6: 7b:3e:aa:56 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCD/qGZcN+tCLq+jqdqol1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDQwYTJhMTM4OWY1NGMyM2U3ODcxYjVhZTg3ZjY1M2Y2 NTkwMDgwHhcNMjYwMjA5MTEwMTA5WhcNMjYwMjEwMTEwMTA5WjAzMTEwLwYDVQQD EygwMTliYTYzMjUxYmRmZDE5MzA0ZGI0Mjg5MGYxYWRkZDAxNWU4YWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v0KbplaOLpMsq8Al4XJ3REOp1An egisrqHFtOESAcqJXWaq9gZW8K7NL94er8vMB08Nnv8M5FKSyZhNKYSPRJbZMipN B9mKmCTUsv5hiBjCm0SKxu2ESj4iFtCK8O+OEYDC+qyJM4ART/RWpm3IT8r5wgba B6iae+HeLfV8HNS+VI+L+6n3Pj8gbOVvKgb4MlFMVwfz+plFdE1ry8A9cYXkA7vl Q7Nf8oz2nTscCBXwDVA93ZQvR/reurC9aAZLNX29WdyNCI90fzVwih7cjfSoMw7T Zqsq+ir7Pi5y2wn0YJjLreoiY7ZXGYL2qZEctlMbAKrWNWK/MOUmmVOiGwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAGbpjJRvf0ZME20KJDxrd0BXorBMB8GA1UdIwQY MBaAFPjUCioTifVMI+eHG1rof2U/ZZAIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OUUtLaE9KOVV3ajU0Y2JXdWhfWlQ5bGtBZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvN2JjNWYwLWUyMWItNDIzZS1iZTFj LTJkNDYwZTA3MjZmYS8xLzEtTlFLS2hPSjlVd2o1NGNiV3VoX1pUOWxrQWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA0LzdiYzVmMC1lMjFiLTQyM2UtYmUxYy0yZDQ2MGUwNzI2 ZmEvMS8xLU5RS0toT0o5VXdqNTRjYld1aF9aVDlsa0FnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlxA ta1b23YdP695qGQulOeXUSCUzl9Ar0CBbAA25HBLNyu9z9BC+JbJ27qfh4Wmi93X kfSANYxvQGjVDdr03s0cIx0ibOXbPt0qlO1JAlGqjCNOmpn/OO7QVkBI/ugCbbMy gQzS3zfDy2OjgUgdZU+hZjVN6zy1tZBZzALgLz0pIb9g0aDqZlT7/9/C9+rdIFr7 KOk1PJ6RYtX6sVqtIYxYSKeQ7y0pGcZuDOyk5gMvTRJqMu1PQHtzC4k2tLuWuXVC UUSBApp8SGNLXnseH4boSqwIz+LQFafr7zgDZqUYHQSG+duyp24pSPg2xECxqaEh Wov3ws5uf9jmez6qVg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:29 2026 by rpki-client