This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json) Hash identifier: 9frFLDB5zVMDNvrRTnoyGmikEQeLdcj3AZZ62dZPbNk= Subject key identifier: 8C:7E:31:91:09:5A:91:81:A4:82:9F:16:29:2B:50:6C:FC:AE:77:C0 Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44 Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144 Certificate serial: 019C4322AF39B59EF0A2B1442CFB719E2D8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft Manifest number: 0150 Signing time: Mon 09 Feb 2026 16:01:12 +0000 Manifest this update: Mon 09 Feb 2026 16:01:12 +0000 Manifest next update: Tue 10 Feb 2026 16:01:12 +0000 Files and hashes: 1: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (hash: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams=) 2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: knsbYY907WJReivMqpBgT9T+gVG65U3mfIBBrTYqiTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:af:39:b5:9e:f0:a2:b1:44:2c:fb:71:9e:2d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144 Validity Not Before: Feb 9 16:01:12 2026 GMT Not After : Feb 10 16:01:12 2026 GMT Subject: CN=8c7e3191095a9181a4829f16292b506cfcae77c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:8c:1f:94:09:5f:93:51:34:dd:be:b0:c3: f0:74:6f:b1:d6:26:a8:89:80:28:10:f6:91:36:50: 4c:48:20:60:f3:70:0c:b2:ff:33:f6:72:22:fd:d6: 8d:28:19:30:fb:b3:05:2c:eb:91:98:1e:44:b4:ef: 54:cd:d9:f4:7d:e6:4b:78:75:91:35:43:fd:56:d9: 8f:9e:38:b7:b2:ed:e3:aa:5c:07:f3:74:6b:87:87: 73:d5:6e:31:03:bf:b1:2b:b2:80:72:d6:4b:1b:ce: e3:43:9c:eb:44:68:12:4b:8c:04:4a:7d:93:c9:90: 49:78:9b:05:b6:71:2e:46:03:26:6b:8f:da:ae:15: 3e:4c:a1:c4:1b:01:b5:1c:68:f1:f1:28:9b:ad:9f: ef:dd:e4:21:70:fc:83:66:c0:ff:51:92:b9:32:3c: 07:90:ff:52:50:44:9b:04:9c:3c:41:2a:e5:33:d9: 08:ab:1f:1a:d2:09:bc:0f:29:fd:9e:08:11:22:3c: 8b:20:c2:d6:24:72:56:e0:9f:b6:bc:44:b4:bc:68: 04:47:7b:70:90:19:be:01:c4:b9:42:a5:97:93:67: 30:85:f4:df:fd:6c:ad:ce:11:81:ec:d7:6c:12:91: 57:fd:f9:0d:e5:c6:49:02:af:fc:4b:59:e9:14:8b: cc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7E:31:91:09:5A:91:81:A4:82:9F:16:29:2B:50:6C:FC:AE:77:C0 X509v3 Authority Key Identifier: keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:fb:2f:7d:be:e0:df:d1:ab:a7:5a:43:2b:1a:f8:a3:12:18: 64:4b:d8:fe:7c:8e:2f:ad:a9:92:0b:36:e4:77:6c:c9:5e:9f: 7f:d4:21:c8:84:b0:39:a5:bc:fe:9f:f0:67:df:a8:82:2d:3e: 34:a5:92:1b:65:c1:59:49:55:ce:82:65:cf:2a:e6:1d:77:fe: 8c:78:a2:49:77:8f:20:e1:97:48:fa:8e:35:b0:e1:ef:ab:97: f0:3b:a5:7f:41:4c:42:9b:bc:8d:63:c6:af:4c:86:02:f6:bd: f9:9d:9a:e1:7d:b0:13:6c:42:4f:9e:49:6f:8b:38:7a:4c:d7: 3d:b7:c5:32:4e:af:66:aa:f4:4a:e4:b3:df:9f:a8:18:63:4a: 29:01:bd:95:05:34:70:9a:d7:81:74:e3:f3:d1:1d:4d:d9:82: 58:4d:87:53:3c:2d:5b:e0:d4:d9:2d:d6:1d:45:e2:34:56:95: 65:40:83:80:ab:73:62:eb:88:d6:66:68:cd:b8:06:ba:8a:5c: 02:ad:05:71:80:47:ee:c2:f7:88:5d:55:6f:52:7d:88:31:2b: 1d:72:ef:19:24:c3:2d:8b:0e:99:c1:cc:ae:0a:14:c6:48:07: 33:91:03:ca:d8:17:57:9f:4e:1d:21:92:74:9e:7a:ae:c5:fe: 5f:32:23:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIq85tZ7worFELPtxni2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MTlmMTliMGFkZDhkMGMyODc3YzhiYTdmZTBhNTg5MzA5 YmIxNDQwHhcNMjYwMjA5MTYwMTEyWhcNMjYwMjEwMTYwMTEyWjAzMTEwLwYDVQQD Eyg4YzdlMzE5MTA5NWE5MTgxYTQ4MjlmMTYyOTJiNTA2Y2ZjYWU3N2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRSMH5QJX5NRNN2+sMPwdG+x1iao iYAoEPaRNlBMSCBg83AMsv8z9nIi/daNKBkw+7MFLOuRmB5EtO9Uzdn0feZLeHWR NUP9VtmPnji3su3jqlwH83Rrh4dz1W4xA7+xK7KActZLG87jQ5zrRGgSS4wESn2T yZBJeJsFtnEuRgMma4/arhU+TKHEGwG1HGjx8SibrZ/v3eQhcPyDZsD/UZK5MjwH kP9SUESbBJw8QSrlM9kIqx8a0gm8Dyn9nggRIjyLIMLWJHJW4J+2vES0vGgER3tw kBm+AcS5QqWXk2cwhfTf/WytzhGB7NdsEpFX/fkN5cZJAq/8S1npFIvMTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIx+MZEJWpGBpIKfFikrUGz8rnfAMB8GA1UdIwQY MBaAFDcZ8ZsK3Y0MKHfIun/gpYkwm7FEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUt NzdhOWM1Mjk3NzdjLzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUtNzdhOWM1Mjk3Nzdj LzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvsvfb7g 39Grp1pDKxr4oxIYZEvY/nyOL62pkgs25HdsyV6ff9QhyISwOaW8/p/wZ9+ogi0+ NKWSG2XBWUlVzoJlzyrmHXf+jHiiSXePIOGXSPqONbDh76uX8Dulf0FMQpu8jWPG r0yGAva9+Z2a4X2wE2xCT55Jb4s4ekzXPbfFMk6vZqr0SuSz35+oGGNKKQG9lQU0 cJrXgXTj89EdTdmCWE2HUzwtW+DU2S3WHUXiNFaVZUCDgKtzYuuI1mZozbgGuopc Aq0FcYBH7sL3iF1Vb1J9iDErHXLvGSTDLYsOmcHMrgoUxkgHM5EDytgXV59OHSGS dJ56rsX+XzIjMQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:35 2026 by rpki-client