This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json) Hash identifier: bnIWrnDlZNUq5Dcqwsd0JJODVUaQ5Tfrhe7LYdPp0C0= Subject key identifier: 44:D3:91:E5:3A:B7:D9:C3:EA:66:52:2D:0B:67:30:6A:B1:46:B3:53 Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80 Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80 Certificate serial: 019C438FE85C40CA0159B2AC87ADA6342141 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft Manifest number: 0D03 Signing time: Mon 09 Feb 2026 18:00:30 +0000 Manifest this update: Mon 09 Feb 2026 18:00:30 +0000 Manifest next update: Tue 10 Feb 2026 18:00:30 +0000 Files and hashes: 1: 7pgJyQEhPGE9dXbf6EcHY0j7uuY.roa (hash: ptYDlgyfUaBAmMsMOgj+f0CY335JokuQ/NfrWH0iFkk=) 2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: PkLKEMI3tciNC9poMpH3yUO04VV0CGJ7lP4atQHI/lE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:e8:5c:40:ca:01:59:b2:ac:87:ad:a6:34:21:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80 Validity Not Before: Feb 9 18:00:30 2026 GMT Not After : Feb 10 18:00:30 2026 GMT Subject: CN=44d391e53ab7d9c3ea66522d0b67306ab146b353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fc:12:d0:09:2a:46:7a:1e:38:25:61:4a:f5: 70:38:ef:a4:07:e5:73:b9:05:70:86:f2:e9:5c:26: 57:36:d0:dc:31:9d:5b:43:c6:37:a0:9c:c8:01:6f: bd:72:7e:e9:dd:13:20:84:ae:0a:80:90:ae:05:8a: 9d:cc:a6:3a:8f:e0:8c:4a:28:6a:be:bc:58:de:0a: 3b:18:a0:e4:6b:51:84:16:ae:75:62:9b:3c:d2:7d: 0b:a8:66:30:92:f4:f8:2d:dc:53:d1:55:4a:f9:7c: 8d:f8:83:b5:94:73:08:fa:a7:62:a3:59:7a:fc:5c: fe:29:91:4c:fd:52:57:58:e3:6a:2f:17:10:8f:10: 1a:b0:b4:5a:0a:4c:f4:b7:8c:0b:08:d6:8e:f4:f6: 42:9f:e5:68:c0:fa:2b:a6:73:91:03:e0:b9:93:f0: e0:44:1a:91:41:a5:a2:64:b2:44:d2:69:b5:38:16: ee:e3:0e:3f:16:75:43:92:b5:0b:6c:89:02:12:25: 1d:12:a8:48:c1:9c:50:0a:b2:f1:92:7b:67:98:4a: 15:4d:b4:10:87:24:cf:cc:5f:55:c7:4d:bb:03:50: c4:6e:30:b3:05:e2:3c:9f:15:47:6e:39:cf:a2:e6: c2:f8:36:60:2f:86:cb:ae:a0:4e:e2:26:2f:e8:10: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D3:91:E5:3A:B7:D9:C3:EA:66:52:2D:0B:67:30:6A:B1:46:B3:53 X509v3 Authority Key Identifier: keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6b:71:45:c8:cd:d0:d9:0f:76:3a:96:09:6f:ce:32:96:16: 24:9b:b3:89:92:3f:7f:6f:80:da:c3:31:57:8d:70:3a:98:9c: 47:c1:6d:ba:dd:77:00:31:05:ad:c2:2d:27:11:b1:36:02:38: 44:b9:ee:11:42:b6:a4:bf:39:db:22:9f:40:45:6c:7c:5b:04: ac:23:92:30:69:3b:a7:48:a8:8f:df:f0:51:e6:5e:8c:99:e5: a3:65:25:34:b3:07:55:5d:6b:ad:35:d7:f0:61:a1:f8:0c:c8: d8:46:12:8e:d0:a4:16:b6:12:49:90:a8:e9:c9:d9:50:24:d6: 32:37:cf:ec:ae:da:a3:d5:94:d5:9e:f2:91:30:85:89:58:e1: af:3d:6d:c9:be:4a:55:5a:7f:4d:3c:ff:f1:18:aa:26:58:a0: df:f1:52:68:68:98:ca:a5:7b:67:ba:30:fb:bd:b3:3a:b2:b0: 50:0e:c8:87:9b:6e:4b:fc:ee:53:47:54:1c:cb:f6:ab:39:fd: 80:da:dd:d3:d3:eb:12:f9:da:18:9b:59:f3:59:24:14:2e:1e: 0e:0a:72:a0:64:fa:69:37:f2:9b:55:63:13:ef:c4:53:8a:ba: eb:1b:c1:13:2e:31:60:37:d1:b9:18:93:9e:00:b3:4d:b2:40: 62:20:52:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj+hcQMoBWbKsh62mNCFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMGQ1NTQwYmRjZDMzMDUyYmMwMGZmZjI2NjMzOGJmM2Nj ODJhODAwHhcNMjYwMjA5MTgwMDMwWhcNMjYwMjEwMTgwMDMwWjAzMTEwLwYDVQQD Eyg0NGQzOTFlNTNhYjdkOWMzZWE2NjUyMmQwYjY3MzA2YWIxNDZiMzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/wS0AkqRnoeOCVhSvVwOO+kB+Vz uQVwhvLpXCZXNtDcMZ1bQ8Y3oJzIAW+9cn7p3RMghK4KgJCuBYqdzKY6j+CMSihq vrxY3go7GKDka1GEFq51Yps80n0LqGYwkvT4LdxT0VVK+XyN+IO1lHMI+qdio1l6 /Fz+KZFM/VJXWONqLxcQjxAasLRaCkz0t4wLCNaO9PZCn+VowPorpnORA+C5k/Dg RBqRQaWiZLJE0mm1OBbu4w4/FnVDkrULbIkCEiUdEqhIwZxQCrLxkntnmEoVTbQQ hyTPzF9Vx027A1DEbjCzBeI8nxVHbjnPoubC+DZgL4bLrqBO4iYv6BCeowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETTkeU6t9nD6mZSLQtnMGqxRrNTMB8GA1UdIwQY MBaAFJwNVUC9zTMFK8AP/yZjOL88yCqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUt MTZmYzlkNDRlYzdkLzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUtMTZmYzlkNDRlYzdk LzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmtxRcjN 0NkPdjqWCW/OMpYWJJuziZI/f2+A2sMxV41wOpicR8Ftut13ADEFrcItJxGxNgI4 RLnuEUK2pL852yKfQEVsfFsErCOSMGk7p0ioj9/wUeZejJnlo2UlNLMHVV1rrTXX 8GGh+AzI2EYSjtCkFrYSSZCo6cnZUCTWMjfP7K7ao9WU1Z7ykTCFiVjhrz1tyb5K VVp/TTz/8RiqJlig3/FSaGiYyqV7Z7ow+72zOrKwUA7Ih5tuS/zuU0dUHMv2qzn9 gNrd09PrEvnaGJtZ81kkFC4eDgpyoGT6aTfym1VjE+/EU4q66xvBEy4xYDfRuRiT ngCzTbJAYiBSRA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:22 2026 by rpki-client