This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft File: nTXgMBWeVx-qvTebUsHZoa77FEQ.mft (raw, json) Hash identifier: v1SPhXJkj9ykYJHffpbYn4iRxiBxXrHKV1fhxq34TJs= Subject key identifier: 8A:E5:8F:0D:0A:68:08:4C:24:6F:40:00:43:93:BF:B0:48:B1:35:07 Authority key identifier: 9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44 Certificate issuer: /CN=9d35e030159e571faabd379b52c1d9a1aefb1444 Certificate serial: 019C43FE73F6173F4366E3BC35660DFA7120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft Manifest number: 0299 Signing time: Mon 09 Feb 2026 20:01:14 +0000 Manifest this update: Mon 09 Feb 2026 20:01:14 +0000 Manifest next update: Tue 10 Feb 2026 20:01:14 +0000 Files and hashes: 1: nTXgMBWeVx-qvTebUsHZoa77FEQ.crl (hash: PF2SYnqdAWmE6J3XjzMlqb9PXrxfdOs7Y+7QsC9LjIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:73:f6:17:3f:43:66:e3:bc:35:66:0d:fa:71:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d35e030159e571faabd379b52c1d9a1aefb1444 Validity Not Before: Feb 9 20:01:14 2026 GMT Not After : Feb 10 20:01:14 2026 GMT Subject: CN=8ae58f0d0a68084c246f40004393bfb048b13507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7f:31:bb:b0:fc:4f:e1:74:6b:48:47:64:2a: 03:26:b8:18:96:be:f2:7d:e5:7d:75:52:be:36:2b: b1:6f:f0:d7:8e:ee:22:10:91:68:bf:3e:89:30:91: fa:9d:fe:ef:11:d0:a8:ec:e5:6b:a9:d3:3e:48:7a: 92:f3:c2:aa:65:3d:9c:dc:69:4b:1e:55:4b:ad:40: cd:f5:0a:b3:89:61:53:3a:b9:96:55:a4:94:14:bb: a8:72:82:88:4d:00:28:8c:42:03:64:3a:13:bd:19: 10:fc:28:cf:fa:5f:82:30:e0:a4:f2:e3:5e:24:8b: a5:4f:6a:80:76:0a:96:1e:fc:bd:e7:66:6e:d7:20: 6d:98:2b:0a:a3:f7:0b:60:5c:28:6e:88:09:86:38: a6:f0:81:83:b1:08:6a:1d:80:ac:8e:b1:43:79:99: 48:a9:62:c3:49:7d:be:df:a1:67:cf:88:6a:ff:2f: 6a:3f:e4:ad:48:45:d0:04:1f:ef:f7:dc:50:d5:42: f8:ba:88:b0:ad:3a:cb:63:22:72:2a:73:0b:43:08: a7:1b:7c:4b:f8:34:a0:ff:90:9b:a6:b7:af:1e:2c: 95:47:b9:5b:59:73:f6:95:da:b1:c6:05:4f:b5:91: 66:c6:29:6b:1f:9a:7b:82:07:60:4f:ac:8b:95:7e: 1e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E5:8F:0D:0A:68:08:4C:24:6F:40:00:43:93:BF:B0:48:B1:35:07 X509v3 Authority Key Identifier: keyid:9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:91:d0:38:55:0c:68:50:e9:44:b3:68:ff:fe:b6:05:d4:90: 69:e2:37:40:4f:35:f2:53:17:57:02:f6:54:1a:ac:b1:e8:93: 55:07:7a:20:4c:97:5c:58:3c:5a:da:63:e8:6e:16:97:12:43: 25:01:5f:56:8f:4b:c5:e2:26:02:b9:05:34:8c:27:ee:4a:b9: ec:fe:31:19:72:b9:8c:1d:5e:28:9c:aa:bd:58:be:cb:4c:52: 19:e0:5a:32:d6:67:84:26:57:38:56:bb:31:b5:9b:37:fa:05: 79:e9:5f:ba:9a:60:6e:1d:20:c6:8f:22:8c:16:75:76:01:ca: 6f:0f:b5:4f:36:63:4f:9b:20:4a:c7:5b:93:3d:91:67:d0:d1: eb:84:29:e7:f6:15:f3:78:cc:b4:85:19:76:6f:82:a2:12:94: 91:38:10:50:aa:be:43:a0:26:3d:a0:ba:40:00:93:23:91:09: 74:7c:f5:ef:88:65:51:53:96:eb:88:70:2c:37:e4:1a:5e:95: d7:8b:8e:90:5d:97:ed:62:21:88:6f:b1:72:4c:c8:27:d6:ea: ce:ab:12:6b:27:bc:0e:63:65:07:78:e3:d9:ab:73:2f:e7:fe: 6d:37:15:56:29:b1:31:45:7a:45:b2:b1:8d:cf:66:32:ea:d8: d9:be:3e:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/nP2Fz9DZuO8NWYN+nEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMzVlMDMwMTU5ZTU3MWZhYWJkMzc5YjUyYzFkOWExYWVm YjE0NDQwHhcNMjYwMjA5MjAwMTE0WhcNMjYwMjEwMjAwMTE0WjAzMTEwLwYDVQQD Eyg4YWU1OGYwZDBhNjgwODRjMjQ2ZjQwMDA0MzkzYmZiMDQ4YjEzNTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX8xu7D8T+F0a0hHZCoDJrgYlr7y feV9dVK+Niuxb/DXju4iEJFovz6JMJH6nf7vEdCo7OVrqdM+SHqS88KqZT2c3GlL HlVLrUDN9QqziWFTOrmWVaSUFLuocoKITQAojEIDZDoTvRkQ/CjP+l+CMOCk8uNe JIulT2qAdgqWHvy952Zu1yBtmCsKo/cLYFwobogJhjim8IGDsQhqHYCsjrFDeZlI qWLDSX2+36Fnz4hq/y9qP+StSEXQBB/v99xQ1UL4uoiwrTrLYyJyKnMLQwinG3xL +DSg/5CbprevHiyVR7lbWXP2ldqxxgVPtZFmxilrH5p7ggdgT6yLlX4eBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrljw0KaAhMJG9AAEOTv7BIsTUHMB8GA1UdIwQY MBaAFJ014DAVnlcfqr03m1LB2aGu+xREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblRYZ01CV2VWeC1xdlRlYlVzSFpvYTc3RkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZDczMjMtOWU4NC00Zjg3LWI1Zjkt Mjg2YTgyOGRkN2Q1LzEvblRYZ01CV2VWeC1xdlRlYlVzSFpvYTc3RkVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83ZDczMjMtOWU4NC00Zjg3LWI1ZjktMjg2YTgyOGRkN2Q1 LzEvblRYZ01CV2VWeC1xdlRlYlVzSFpvYTc3RkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5HQOFUM aFDpRLNo//62BdSQaeI3QE818lMXVwL2VBqsseiTVQd6IEyXXFg8Wtpj6G4WlxJD JQFfVo9LxeImArkFNIwn7kq57P4xGXK5jB1eKJyqvVi+y0xSGeBaMtZnhCZXOFa7 MbWbN/oFeelfuppgbh0gxo8ijBZ1dgHKbw+1TzZjT5sgSsdbkz2RZ9DR64Qp5/YV 83jMtIUZdm+CohKUkTgQUKq+Q6AmPaC6QACTI5EJdHz174hlUVOW64hwLDfkGl6V 14uOkF2X7WIhiG+xckzIJ9bqzqsSaye8DmNlB3jj2atzL+f+bTcVVimxMUV6RbKx jc9mMurY2b4+dg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:36 2026 by rpki-client