This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft File: niAdSREFvoeXxfKjhatFb18K8Fs.mft (raw, json) Hash identifier: EPD2vSpJQQISSFTeiDYUXfptxJn4n3VI4sgmqN7Pr5I= Subject key identifier: 54:1E:87:35:E4:65:BF:80:FD:92:BF:F4:C2:E5:DB:F6:04:20:3B:88 Authority key identifier: 9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B Certificate issuer: /CN=9e201d491105be8797c5f2a385ab456f5f0af05b Certificate serial: 019C427E033F68178F0850CA79A1F3DB8FBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft Manifest number: 08E4 Signing time: Mon 09 Feb 2026 13:01:20 +0000 Manifest this update: Mon 09 Feb 2026 13:01:20 +0000 Manifest next update: Tue 10 Feb 2026 13:01:20 +0000 Files and hashes: 1: niAdSREFvoeXxfKjhatFb18K8Fs.crl (hash: NwcJk9uGCHp9Gh/e0FlaQm4I/YTxX25u8S7OlLVWLYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:03:3f:68:17:8f:08:50:ca:79:a1:f3:db:8f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e201d491105be8797c5f2a385ab456f5f0af05b Validity Not Before: Feb 9 13:01:20 2026 GMT Not After : Feb 10 13:01:20 2026 GMT Subject: CN=541e8735e465bf80fd92bff4c2e5dbf604203b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:51:82:77:be:6f:7a:b4:88:d7:23:e6:df:bd: cc:aa:d9:3f:ff:91:b3:c1:ec:44:53:8b:9f:6b:d4: 3a:bc:44:6f:69:84:61:d1:4f:95:7e:54:4c:8a:7b: ce:bb:15:f8:3a:cd:56:c5:6f:7c:58:21:cb:0d:45: 19:f9:44:21:ff:30:8d:40:24:e9:c1:be:63:ad:54: 55:23:d1:8d:da:dd:15:a2:94:3a:be:da:17:8b:1d: b0:b2:c7:51:d7:6c:13:81:94:22:cc:19:09:0e:b7: 3c:e7:d1:4c:ec:8d:fb:80:c2:10:44:a5:07:13:bc: 47:6c:a4:a6:a5:bb:43:97:f9:b6:0e:0e:de:78:8b: 46:ba:43:63:ba:f1:41:fc:ca:91:7f:92:ea:12:82: 40:a1:03:87:b0:ad:03:ce:82:5c:72:18:74:9b:c7: bb:a9:0d:45:6f:be:2e:38:f8:84:2a:99:b6:0c:93: ba:26:7f:32:72:e2:41:97:13:98:3c:25:61:19:28: 53:1a:f4:a8:bb:b5:c3:1b:bf:5c:3b:38:76:30:c6: b3:01:12:f1:6f:b1:82:54:ef:32:9d:dc:a4:85:94: ea:82:33:d9:00:8d:1d:7e:7e:87:a5:f6:27:cd:ad: 00:64:d0:02:f0:b1:8e:c7:72:a6:da:38:33:d3:d3: 9c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1E:87:35:E4:65:BF:80:FD:92:BF:F4:C2:E5:DB:F6:04:20:3B:88 X509v3 Authority Key Identifier: keyid:9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:69:e2:91:09:11:60:79:ef:c8:61:90:f0:5c:2b:46:31:fb: a5:cd:b9:3d:4d:0a:2f:ef:89:1d:f0:87:5a:bb:e7:2e:4b:0d: 75:e3:d4:04:8b:37:c8:50:e5:b7:0c:df:14:e0:48:15:b2:01: c0:87:33:55:f8:d0:9c:9d:40:e3:e3:b7:36:f1:09:97:21:e2: 57:7b:05:d5:b6:f9:cc:ad:66:29:bc:ff:bd:68:82:7b:91:a0: 3c:91:45:2d:a5:4f:e2:43:f1:aa:95:56:4e:1e:e9:d3:6c:4a: 00:cf:e9:df:43:75:94:88:f0:1f:ed:ac:ff:8c:d6:08:a2:a4: 6a:e7:4d:a0:42:53:52:6c:4d:c2:13:d1:dc:cc:88:4d:43:36: f0:3b:90:b7:77:e4:20:5d:21:3a:75:98:8c:43:05:44:3e:bd: 01:be:3b:3d:65:d5:86:3f:da:30:9f:42:a2:d4:6c:45:74:ef: 50:82:7a:2a:65:3c:36:b5:4b:56:af:cb:a4:de:3f:43:dd:9a: 59:41:25:02:70:0a:71:54:5f:8b:a6:81:31:24:ef:e4:b0:b0: 79:95:c2:c8:8a:ec:a9:e9:5a:87:b3:f7:9d:5b:72:6b:3b:14: ea:7d:24:a6:39:41:2f:c7:c5:41:e6:5f:85:87:e0:7a:ac:8c: a7:ee:64:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgM/aBePCFDKeaHz24+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMjAxZDQ5MTEwNWJlODc5N2M1ZjJhMzg1YWI0NTZmNWYw YWYwNWIwHhcNMjYwMjA5MTMwMTIwWhcNMjYwMjEwMTMwMTIwWjAzMTEwLwYDVQQD Eyg1NDFlODczNWU0NjViZjgwZmQ5MmJmZjRjMmU1ZGJmNjA0MjAzYjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolGCd75verSI1yPm373Mqtk//5Gz wexEU4ufa9Q6vERvaYRh0U+VflRMinvOuxX4Os1WxW98WCHLDUUZ+UQh/zCNQCTp wb5jrVRVI9GN2t0VopQ6vtoXix2wssdR12wTgZQizBkJDrc859FM7I37gMIQRKUH E7xHbKSmpbtDl/m2Dg7eeItGukNjuvFB/MqRf5LqEoJAoQOHsK0DzoJcchh0m8e7 qQ1Fb74uOPiEKpm2DJO6Jn8ycuJBlxOYPCVhGShTGvSou7XDG79cOzh2MMazARLx b7GCVO8yndykhZTqgjPZAI0dfn6HpfYnza0AZNAC8LGOx3Km2jgz09OcBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQehzXkZb+A/ZK/9MLl2/YEIDuIMB8GA1UdIwQY MBaAFJ4gHUkRBb6Hl8Xyo4WrRW9fCvBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmlBZFNSRUZ2b2VYeGZLamhhdEZiMThLOEZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMWRkZWItMmU5Yi00MmJiLTkyNTEt ZGY0OTFiZDAzNzRlLzEvbmlBZFNSRUZ2b2VYeGZLamhhdEZiMThLOEZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jMWRkZWItMmU5Yi00MmJiLTkyNTEtZGY0OTFiZDAzNzRl LzEvbmlBZFNSRUZ2b2VYeGZLamhhdEZiMThLOEZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2nikQkR YHnvyGGQ8FwrRjH7pc25PU0KL++JHfCHWrvnLksNdePUBIs3yFDltwzfFOBIFbIB wIczVfjQnJ1A4+O3NvEJlyHiV3sF1bb5zK1mKbz/vWiCe5GgPJFFLaVP4kPxqpVW Th7p02xKAM/p30N1lIjwH+2s/4zWCKKkaudNoEJTUmxNwhPR3MyITUM28DuQt3fk IF0hOnWYjEMFRD69Ab47PWXVhj/aMJ9CotRsRXTvUIJ6KmU8NrVLVq/LpN4/Q92a WUElAnAKcVRfi6aBMSTv5LCweZXCyIrsqelah7P3nVtyazsU6n0kpjlBL8fFQeZf hYfgeqyMp+5kRw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:03:55 2026 by rpki-client