This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json) Hash identifier: ImbZUbQIRogUUf6gvhuESiFCY5q5mx0fwnzxEgXzEAI= Subject key identifier: FD:88:5F:80:75:55:76:6C:A2:5E:88:85:65:1C:9C:D0:3F:EA:03:C6 Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e Certificate serial: 019C26D01B3AC973D9F897E998567CB56F8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft Manifest number: 0F79 Signing time: Wed 04 Feb 2026 04:01:38 +0000 Manifest this update: Wed 04 Feb 2026 04:01:38 +0000 Manifest next update: Thu 05 Feb 2026 04:01:38 +0000 Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: SQYpz+ajTnqgrrzJgseOEnsDeAqGCFLxh1HSzDQVoDA=) 2: VqjhvtfIA_j9AGS9yJpDBA7pkTI.roa (hash: IZDq9Jb7er+qUs+ORA/YfhCgdw6n3hVb81p9+8Go++s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 04:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:26:d0:1b:3a:c9:73:d9:f8:97:e9:98:56:7c:b5:6f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e Validity Not Before: Feb 4 04:01:38 2026 GMT Not After : Feb 5 04:01:38 2026 GMT Subject: CN=fd885f807555766ca25e8885651c9cd03fea03c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ad:e1:90:36:4f:3a:72:a9:e2:b7:4e:c1:e0: 52:3f:55:b7:fe:fd:d8:e6:97:d3:51:c5:0e:75:96: 23:56:18:6b:36:99:7e:22:92:aa:7c:96:e4:e6:41: b3:fc:e2:6e:1b:09:ca:0f:9c:42:ac:47:23:1b:7b: 4f:f9:bc:30:db:44:b5:27:77:bc:06:86:f8:f7:33: 7e:8d:7f:85:24:22:b5:a6:52:fb:96:20:45:40:01: 03:95:a1:ce:1c:c0:f9:93:93:0c:f1:3c:b2:c3:d7: 76:6b:df:12:18:7a:a1:00:62:a2:16:12:09:ec:18: 2e:56:bf:c6:07:e7:02:64:42:e7:a8:b2:dd:02:af: dc:14:6a:2c:b7:60:76:e5:1d:e2:90:9f:43:bb:12: 36:04:74:8d:7c:e9:9a:67:42:10:92:d4:5e:d2:94: ab:ad:92:38:68:51:ea:61:ca:94:1c:a9:05:91:d5: 6c:08:e9:de:0f:7c:41:18:16:c2:80:6f:d9:fc:7b: 4e:50:e7:9f:8d:eb:8a:d0:b8:2d:8b:8c:ec:ca:5e: 0e:67:d8:06:1d:bb:30:dc:ce:98:81:34:8b:15:49: ed:52:62:ed:18:ac:30:2f:08:27:13:b1:52:a2:73: 42:d4:23:ea:1a:e8:20:ee:7d:82:b1:80:a7:d8:a7: 1e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:88:5F:80:75:55:76:6C:A2:5E:88:85:65:1C:9C:D0:3F:EA:03:C6 X509v3 Authority Key Identifier: keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b5:b6:64:89:6e:06:ae:74:8d:4a:07:56:ae:4d:3c:51:4c: b3:1e:cc:b0:81:20:25:cf:72:da:64:34:f5:2f:32:3c:fa:07: 28:44:26:15:36:b1:3d:14:3c:9a:1f:be:58:69:17:49:83:6f: 07:04:ce:39:5f:a5:e1:64:8c:c3:23:eb:c1:9c:72:ae:d0:fd: 66:06:a9:ac:be:ad:82:38:0e:34:07:43:a9:78:86:93:c3:e9: 31:02:73:bd:ae:1e:4a:31:5f:24:84:cf:79:9e:a3:a2:9b:e2: 3d:68:12:f4:4b:8d:69:31:2e:69:07:64:68:d5:fb:28:60:2e: 47:28:7f:75:59:a0:95:7b:ec:23:4b:d8:74:d6:9f:f6:ae:a5: dc:12:a2:4d:07:66:b9:a2:db:a4:a9:7c:db:c9:1f:57:ff:e2: 36:a4:c2:e7:65:0b:2a:89:20:9e:1e:b4:8d:5d:22:3e:d1:81: f3:94:4f:22:cb:73:5a:eb:75:aa:f7:87:0a:8b:e0:82:a0:d3: 26:30:33:7e:25:84:03:f1:1b:f0:f5:e8:fd:93:c4:b7:12:19: d3:1c:d8:78:58:c4:3b:01:f1:73:1e:98:f9:1f:12:52:68:e0: 5b:c2:78:2d:a6:c3:48:4d:16:7a:8c:49:1d:5f:ac:42:f2:52: 60:a3:d5:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwm0Bs6yXPZ+JfpmFZ8tW+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTExMGI1OTM2MmY2NzNlYWUzM2I2NmVlN2FlYTNjNDAy ODI5NGUwHhcNMjYwMjA0MDQwMTM4WhcNMjYwMjA1MDQwMTM4WjAzMTEwLwYDVQQD EyhmZDg4NWY4MDc1NTU3NjZjYTI1ZTg4ODU2NTFjOWNkMDNmZWEwM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk63hkDZPOnKp4rdOweBSP1W3/v3Y 5pfTUcUOdZYjVhhrNpl+IpKqfJbk5kGz/OJuGwnKD5xCrEcjG3tP+bww20S1J3e8 Bob49zN+jX+FJCK1plL7liBFQAEDlaHOHMD5k5MM8Tyyw9d2a98SGHqhAGKiFhIJ 7BguVr/GB+cCZELnqLLdAq/cFGost2B25R3ikJ9DuxI2BHSNfOmaZ0IQktRe0pSr rZI4aFHqYcqUHKkFkdVsCOneD3xBGBbCgG/Z/HtOUOefjeuK0Lgti4zsyl4OZ9gG Hbsw3M6YgTSLFUntUmLtGKwwLwgnE7FSonNC1CPqGugg7n2CsYCn2KceQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2IX4B1VXZsol6IhWUcnNA/6gPGMB8GA1UdIwQY MBaAFDThELWTYvZz6uM7Zu566jxAKClOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYt MWJiMjdjNWQzOTdlLzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYtMWJiMjdjNWQzOTdl LzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebW2ZIlu Bq50jUoHVq5NPFFMsx7MsIEgJc9y2mQ09S8yPPoHKEQmFTaxPRQ8mh++WGkXSYNv BwTOOV+l4WSMwyPrwZxyrtD9ZgaprL6tgjgONAdDqXiGk8PpMQJzva4eSjFfJITP eZ6jopviPWgS9EuNaTEuaQdkaNX7KGAuRyh/dVmglXvsI0vYdNaf9q6l3BKiTQdm uaLbpKl828kfV//iNqTC52ULKokgnh60jV0iPtGB85RPIstzWut1qveHCovggqDT JjAzfiWEA/Eb8PXo/ZPEtxIZ0xzYeFjEOwHxcx6Y+R8SUmjgW8J4LabDSE0WeoxJ HV+sQvJSYKPVJw== -----END CERTIFICATE-----Generated at Wed Feb 4 10:57:44 2026 by rpki-client