This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft File: NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json) Hash identifier: dy11LL8uP04iV3jdAYy8r+k1khYk/8atZm1jN8ng+e8= Subject key identifier: 04:43:00:B8:79:6C:11:DA:64:DB:48:70:89:44:47:23:A1:57:50:05 Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Certificate serial: 019C42EB5A86F601A7BB0512E095664F8595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft Manifest number: 1093 Signing time: Mon 09 Feb 2026 15:00:46 +0000 Manifest this update: Mon 09 Feb 2026 15:00:46 +0000 Manifest next update: Tue 10 Feb 2026 15:00:46 +0000 Files and hashes: 1: 5aUFJ1nRNDZXvDlW5Ib7ApLcjzU.roa (hash: CM2yuZbmUG7aD/W6YESLWl+Ll1dOOpDPDyQg/E7d6L8=) 2: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: qnWlvSZkB+wmTOiTrjGsBzF5JylgcsqquPFxWfauQp0=) 3: OXINEPIBnVaglpO2WDs_RqIzbkc.roa (hash: aSnB+0+0CnA11ivltYbXw+kEcjRN69vsEQ+sqlBivaA=) 4: PSJHF0T7csTccKL_3bcCSL4cmds.roa (hash: gSWHMoNkvXzeD2od1079ScFl5g/lvv5imGebCIsGgDs=) 5: WnoEZcRKFsEIGDrcD6eNi-NlUKc.roa (hash: 8G8cCnlz9tk6XzMq2zPRRygvIM2OH91XUUZ803rheUU=) 6: jBtjySCq2ld1Ntg6smiqyHDsdNs.roa (hash: zVyG6ZDReg9r2lMt4sCY0P5PMeh7pF+y9sNnS21ueDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:5a:86:f6:01:a7:bb:05:12:e0:95:66:4f:85:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Validity Not Before: Feb 9 15:00:46 2026 GMT Not After : Feb 10 15:00:46 2026 GMT Subject: CN=044300b8796c11da64db487089444723a1575005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:08:c1:1c:51:bc:a1:65:e0:5c:72:05:3e:61: 61:65:9f:c7:c5:d9:8d:52:98:7e:08:9e:fd:df:c0: 14:ae:1f:39:3e:38:53:9c:8d:f7:e3:5d:69:ff:d1: 11:6b:dd:76:dd:03:68:20:3b:20:a5:61:95:0e:0f: 66:f1:36:51:4c:23:0d:bf:2b:8b:24:bf:99:de:d7: ba:8c:78:f0:f0:56:d4:fa:b1:5e:3c:b1:1a:22:c8: 55:4c:de:54:bd:d8:60:10:d7:09:27:70:a9:c1:ad: 15:f0:33:2f:51:56:de:c5:54:c9:ba:f7:34:a7:31: 3a:2f:25:8a:06:bc:64:5b:26:b0:46:e2:c2:f2:3a: b1:72:e3:d6:77:c4:a6:dc:93:0d:73:bd:61:a3:08: 01:fe:7d:22:19:88:93:c4:0a:b0:9d:42:98:b3:69: 26:ea:19:e6:3d:99:36:ec:e2:20:ef:32:e3:d3:54: 26:1e:3d:2f:9a:d2:30:3d:78:17:10:a4:f3:cc:be: 2f:b3:cf:63:d8:f4:15:87:c8:f3:b0:96:69:43:9d: 78:1a:b1:a4:74:65:1a:20:d7:59:e1:29:f6:aa:8d: 15:13:b1:39:ed:52:b9:c5:ea:b9:3e:56:0f:33:03: 5c:2e:8f:47:62:e9:10:4f:3f:7c:59:78:66:76:a9: 48:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:43:00:B8:79:6C:11:DA:64:DB:48:70:89:44:47:23:A1:57:50:05 X509v3 Authority Key Identifier: keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:de:b6:e2:c5:12:19:5a:bd:e7:5b:c1:7f:e8:f0:33:aa:f3: 08:bd:56:20:e3:41:dd:95:0a:15:ce:40:4f:b0:a2:ef:84:8d: 67:2c:b1:c5:55:19:61:22:ec:06:ce:3f:c1:db:65:97:69:d8: 89:04:14:20:08:8d:22:83:4d:8f:6f:f0:02:28:61:0a:10:8a: 02:84:cb:f5:bb:ca:fd:58:fd:22:94:25:68:f3:45:61:8b:63: d4:a7:b6:39:77:32:3a:d1:f5:1b:a8:92:f0:5d:a1:56:30:a8: bc:f1:49:61:56:4e:6d:fd:b4:cf:b8:28:a0:9a:e9:f2:d3:bd: d7:d6:c2:04:d3:e0:f0:c6:08:b2:d3:31:d7:90:6e:3d:41:1d: 88:be:e8:8d:bb:1c:50:bd:78:da:08:54:2a:c6:e2:f9:99:c9: 67:7c:1d:c6:4f:35:5d:6d:59:72:c8:84:17:8f:06:81:fa:5d: d1:95:89:34:b1:48:36:7e:dc:78:b4:f3:69:df:fc:24:0c:ce: 16:ca:93:3a:c7:b0:73:0d:53:6f:62:89:0e:9a:2d:02:fd:36: e3:d2:0e:13:41:b6:9b:4a:1c:fa:ab:75:e0:47:06:03:fb:0b: c1:48:08:f4:9e:a8:d2:63:84:b3:20:5a:aa:6e:ef:4c:4a:c4: 79:39:25:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC61qG9gGnuwUS4JVmT4WVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl YmY5MzQwHhcNMjYwMjA5MTUwMDQ2WhcNMjYwMjEwMTUwMDQ2WjAzMTEwLwYDVQQD EygwNDQzMDBiODc5NmMxMWRhNjRkYjQ4NzA4OTQ0NDcyM2ExNTc1MDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QjBHFG8oWXgXHIFPmFhZZ/HxdmN Uph+CJ7938AUrh85PjhTnI33411p/9ERa9123QNoIDsgpWGVDg9m8TZRTCMNvyuL JL+Z3te6jHjw8FbU+rFePLEaIshVTN5UvdhgENcJJ3Cpwa0V8DMvUVbexVTJuvc0 pzE6LyWKBrxkWyawRuLC8jqxcuPWd8Sm3JMNc71howgB/n0iGYiTxAqwnUKYs2km 6hnmPZk27OIg7zLj01QmHj0vmtIwPXgXEKTzzL4vs89j2PQVh8jzsJZpQ514GrGk dGUaINdZ4Sn2qo0VE7E57VK5xeq5PlYPMwNcLo9HYukQTz98WXhmdqlIWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARDALh5bBHaZNtIcIlERyOhV1AFMB8GA1UdIwQY MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt YjdjMjY5NmJhZTUwLzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANd624sUS GVq951vBf+jwM6rzCL1WIONB3ZUKFc5AT7Ci74SNZyyxxVUZYSLsBs4/wdtll2nY iQQUIAiNIoNNj2/wAihhChCKAoTL9bvK/Vj9IpQlaPNFYYtj1Ke2OXcyOtH1G6iS 8F2hVjCovPFJYVZObf20z7gooJrp8tO919bCBNPg8MYIstMx15BuPUEdiL7ojbsc UL142ghUKsbi+ZnJZ3wdxk81XW1ZcsiEF48Ggfpd0ZWJNLFINn7ceLTzad/8JAzO FsqTOsewcw1Tb2KJDpotAv0249IOE0G2m0oc+qt14EcGA/sLwUgI9J6o0mOEsyBa qm7vTErEeTklxw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:07 2026 by rpki-client