This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft File: nHIayAejJvhxu6oYSWPNYCtcwtY.mft (raw, json) Hash identifier: kGeJp0ZYvkc83zcxCF2818zUg1x8EHtqypM5mmKrWgk= Subject key identifier: D8:05:49:73:6B:87:66:CF:11:5D:69:29:BA:B5:96:F7:91:B9:56:6D Authority key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6 Certificate issuer: /CN=9c721ac807a326f871bbaa184963cd602b5cc2d6 Certificate serial: 019C416A6F31DB112E2E6EF6E073E32F3B79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 08:00:20 +0000 Manifest this update: Mon 09 Feb 2026 08:00:20 +0000 Manifest next update: Tue 10 Feb 2026 08:00:20 +0000 Files and hashes: 1: Om7ZQ-8XCQlgOaJIlxkUZHdp1tc.roa (hash: bjl4aARKpgl6sPBL+R2cds28ZzucnTcBrTeFC8PyXIc=) 2: nHIayAejJvhxu6oYSWPNYCtcwtY.crl (hash: slcmy3bZAg5MuYlOH70K+UzbMCwZND1NMcxt+GFOlF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:6f:31:db:11:2e:2e:6e:f6:e0:73:e3:2f:3b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6 Validity Not Before: Feb 9 08:00:20 2026 GMT Not After : Feb 10 08:00:20 2026 GMT Subject: CN=d80549736b8766cf115d6929bab596f791b9566d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:d7:0a:d0:02:05:fa:9f:7c:cc:74:65:2e: 19:af:c2:df:5a:0b:15:9a:71:1c:40:f4:e9:72:85: 7f:7e:4e:ef:84:d5:a5:31:83:18:30:ba:ef:a0:a3: 1a:be:02:2c:d3:08:68:bc:3c:c4:4f:c3:86:24:1c: dc:a9:3f:9a:85:92:95:8e:70:f2:23:6f:e0:18:54: 20:2e:a5:a8:8c:b3:fc:bb:e9:98:e7:b0:51:bd:eb: 86:3c:02:62:73:1b:5d:77:2e:eb:00:f9:51:3c:2a: e6:41:8e:67:35:7a:f5:58:3c:d7:b5:af:a0:67:54: 48:04:11:42:39:dd:61:1a:ac:7f:4e:15:0a:80:7b: 10:df:1e:88:28:bd:fe:b6:87:3d:1d:fc:8f:a0:cf: 6f:4b:96:9e:fe:76:00:3d:a8:ed:1f:9b:49:f4:6d: 4b:53:94:8c:4d:e8:9e:e0:31:02:61:99:b8:69:9c: 97:2e:b3:c6:51:2b:4a:72:fa:3a:b9:d9:3f:17:73: d5:f9:15:45:15:be:5f:2e:4b:3a:ff:f0:11:f2:aa: 56:36:5f:7e:86:0b:ba:af:fc:97:8b:3e:90:e8:21: d2:7b:95:ff:4b:26:ea:3c:26:ae:f4:f1:61:d8:44: 79:6d:43:28:5c:1e:53:fa:fb:8e:8f:77:68:04:ef: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:05:49:73:6B:87:66:CF:11:5D:69:29:BA:B5:96:F7:91:B9:56:6D X509v3 Authority Key Identifier: keyid:9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2b:37:ff:d9:59:0d:da:7a:30:02:20:95:6d:67:6e:ad:71: b3:6d:ad:03:79:79:8d:73:78:af:ba:58:07:a4:30:83:3e:af: 51:db:7e:b1:c6:5a:bb:42:04:43:a8:69:42:5c:a2:43:f5:cd: 03:15:0c:43:24:91:60:24:9e:76:f8:ff:56:97:4a:bd:0b:00: b0:a2:24:23:d6:6f:c8:0a:03:73:6f:ac:71:af:59:b7:96:6f: de:b8:1f:cb:91:7d:24:e1:ca:76:05:f0:ab:f6:3c:a4:00:a8: 1c:fc:ff:c6:b5:2a:e7:4c:f7:db:c6:f7:d0:a6:82:ea:ec:69: 0e:90:07:83:4d:7c:17:d8:f0:0a:2d:03:3f:48:8b:a8:20:b6: 0f:fc:4a:9d:08:3c:26:77:1a:14:05:26:c9:f3:8c:43:19:54: f0:59:3c:f6:ed:fc:82:61:f7:04:d9:35:73:8f:b5:79:1e:4b: dd:fb:73:7e:3c:b9:78:57:76:9d:b7:90:d6:1e:da:40:4b:63: b6:6c:c0:01:37:ad:81:9e:6f:74:83:32:ba:0f:b6:90:55:1f: 39:40:6f:15:fc:bf:21:62:b6:40:7c:74:d6:ce:9f:2a:ea:8f: 47:54:e1:f0:1e:05:7d:8a:40:d7:db:de:c1:fd:21:5c:2e:53: 43:26:11:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBam8x2xEuLm724HPjLzt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzIxYWM4MDdhMzI2Zjg3MWJiYWExODQ5NjNjZDYwMmI1 Y2MyZDYwHhcNMjYwMjA5MDgwMDIwWhcNMjYwMjEwMDgwMDIwWjAzMTEwLwYDVQQD EyhkODA1NDk3MzZiODc2NmNmMTE1ZDY5MjliYWI1OTZmNzkxYjk1NjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkLXCtACBfqffMx0ZS4Zr8LfWgsV mnEcQPTpcoV/fk7vhNWlMYMYMLrvoKMavgIs0whovDzET8OGJBzcqT+ahZKVjnDy I2/gGFQgLqWojLP8u+mY57BRveuGPAJicxtddy7rAPlRPCrmQY5nNXr1WDzXta+g Z1RIBBFCOd1hGqx/ThUKgHsQ3x6IKL3+toc9HfyPoM9vS5ae/nYAPajtH5tJ9G1L U5SMTeie4DECYZm4aZyXLrPGUStKcvo6udk/F3PV+RVFFb5fLks6//AR8qpWNl9+ hgu6r/yXiz6Q6CHSe5X/SybqPCau9PFh2ER5bUMoXB5T+vuOj3doBO8VkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgFSXNrh2bPEV1pKbq1lveRuVZtMB8GA1UdIwQY MBaAFJxyGsgHoyb4cbuqGEljzWArXMLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NjQyNjAtOGQ3ZS00NTA3LWI0NGIt Mjg2NDcwN2IyYjNmLzEvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80NjQyNjAtOGQ3ZS00NTA3LWI0NGItMjg2NDcwN2IyYjNm LzEvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWys3/9lZ Ddp6MAIglW1nbq1xs22tA3l5jXN4r7pYB6Qwgz6vUdt+scZau0IEQ6hpQlyiQ/XN AxUMQySRYCSedvj/VpdKvQsAsKIkI9ZvyAoDc2+sca9Zt5Zv3rgfy5F9JOHKdgXw q/Y8pACoHPz/xrUq50z328b30KaC6uxpDpAHg018F9jwCi0DP0iLqCC2D/xKnQg8 JncaFAUmyfOMQxlU8Fk89u38gmH3BNk1c4+1eR5L3ftzfjy5eFd2nbeQ1h7aQEtj tmzAATetgZ5vdIMyug+2kFUfOUBvFfy/IWK2QHx01s6fKuqPR1Th8B4FfYpA19ve wf0hXC5TQyYRHw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:30 2026 by rpki-client