This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft File: nUkl6XatC_tz4JfaaRfoD1vObIw.mft (raw, json) Hash identifier: mxuCVgCrppmSySxg9xFP2dJ0pBovU70PqS/cg9zsmVM= Subject key identifier: 87:CF:76:0A:F0:E5:D6:1A:E0:D6:E3:BF:40:69:76:1B:BE:4A:95:4B Authority key identifier: 9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C Certificate issuer: /CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c Certificate serial: 019C41337627A7D22CDD2DA7B9F0D1A98312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft Manifest number: 126E Signing time: Mon 09 Feb 2026 07:00:17 +0000 Manifest this update: Mon 09 Feb 2026 07:00:17 +0000 Manifest next update: Tue 10 Feb 2026 07:00:17 +0000 Files and hashes: 1: nUkl6XatC_tz4JfaaRfoD1vObIw.crl (hash: astqmWT3X2mSTN3pPbkoRUxBcUXsAZzKcxJvFegdSBI=) 2: oXaYTtMVNJP1Fl7ZKs5QpgsqsMk.roa (hash: +RNVphol1dxO7daQTUBiRS/Hm7azf02WGvxKISPu3wM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:76:27:a7:d2:2c:dd:2d:a7:b9:f0:d1:a9:83:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c Validity Not Before: Feb 9 07:00:17 2026 GMT Not After : Feb 10 07:00:17 2026 GMT Subject: CN=87cf760af0e5d61ae0d6e3bf4069761bbe4a954b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:72:cc:6e:42:2e:2d:94:ee:1b:6c:d3:9e: dd:d7:72:3c:e3:8b:a2:55:f2:e5:ce:45:32:7d:ff: fe:08:87:b4:2a:a3:b2:ae:70:02:d9:f0:a9:bd:65: 3e:ac:8a:1c:8f:41:aa:45:1c:de:b5:af:06:f3:81: 1d:ce:03:7c:1e:d5:2b:35:ad:81:79:fe:33:fd:a7: ce:bf:ca:4e:33:ea:dc:16:76:96:4e:00:51:0a:89: 78:35:a4:6f:41:65:c3:e5:62:bf:67:70:6b:96:d6: eb:16:9c:b7:26:76:94:34:43:08:29:ac:b5:37:6e: b9:24:93:97:1c:9d:bf:0b:03:ef:8a:a6:72:f3:e3: 79:c3:a8:f1:13:fe:dd:ce:85:a3:8c:d3:87:58:79: c5:a2:b7:d4:8d:5a:15:5c:9c:ca:e3:95:7f:78:f9: 68:9a:19:8f:e2:23:b4:d5:3c:1a:6f:4e:11:62:a7: 5c:e1:62:6a:bc:ff:97:d7:3a:e4:ad:15:0f:f8:70: d9:98:c3:48:48:44:e4:2d:ab:97:6c:b2:23:db:96: 96:de:c6:2c:86:c9:ab:59:b2:1a:cb:70:f7:f2:f5: 6c:ac:8f:11:70:76:43:42:de:7a:57:c2:da:3a:be: 32:36:76:f5:ab:06:c6:1f:0e:38:68:e8:1e:0c:fb: 42:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CF:76:0A:F0:E5:D6:1A:E0:D6:E3:BF:40:69:76:1B:BE:4A:95:4B X509v3 Authority Key Identifier: keyid:9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:57:2c:8f:0e:0d:c0:f3:b3:42:27:1a:d9:b0:d5:19:96:14: a3:24:1e:e3:ba:74:fd:ed:3a:52:79:25:9d:98:46:26:1a:77: 97:50:70:df:d1:b1:ae:73:f2:c3:26:ba:50:c0:13:5e:ee:d8: 19:6d:3e:25:34:b8:42:c5:8e:e9:b7:07:af:00:8a:aa:fc:50: be:d1:b4:cf:07:b4:ff:df:91:44:dc:19:79:af:cd:ad:fa:4a: 79:f3:de:1b:c1:d2:03:5e:e1:0b:7a:7c:65:5b:3a:2f:8a:29: 65:54:4b:1f:16:f6:22:93:87:f0:de:ec:ad:85:78:29:f9:db: 70:30:fb:b7:f0:bc:e3:e6:06:29:f9:51:3f:1b:fd:9e:a3:b6: 48:3b:fd:30:7f:16:ca:4f:c3:33:62:2a:51:71:bf:98:26:a5: 34:41:22:8b:93:37:ac:99:ed:03:28:af:ce:53:f2:69:97:2e: 31:3d:f7:d9:5f:88:9b:65:7d:4a:84:b9:50:74:34:c0:61:3b: 6e:d3:fd:13:d2:a2:51:9f:7c:71:18:d9:c2:6c:e7:d5:cf:fa: b9:0f:09:49:cd:7f:6b:b7:12:ba:07:84:54:30:28:8a:6f:55: c7:26:d8:de:79:14:d2:ab:13:2a:1d:44:cb:bb:b1:7a:19:ff: d7:ec:15:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM3Ynp9Is3S2nufDRqYMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNDkyNWU5NzZhZDBiZmI3M2UwOTdkYTY5MTdlODBmNWJj ZTZjOGMwHhcNMjYwMjA5MDcwMDE3WhcNMjYwMjEwMDcwMDE3WjAzMTEwLwYDVQQD Eyg4N2NmNzYwYWYwZTVkNjFhZTBkNmUzYmY0MDY5NzYxYmJlNGE5NTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9FyzG5CLi2U7hts057d13I844ui VfLlzkUyff/+CIe0KqOyrnAC2fCpvWU+rIocj0GqRRzeta8G84EdzgN8HtUrNa2B ef4z/afOv8pOM+rcFnaWTgBRCol4NaRvQWXD5WK/Z3BrltbrFpy3JnaUNEMIKay1 N265JJOXHJ2/CwPviqZy8+N5w6jxE/7dzoWjjNOHWHnForfUjVoVXJzK45V/ePlo mhmP4iO01Twab04RYqdc4WJqvP+X1zrkrRUP+HDZmMNISETkLauXbLIj25aW3sYs hsmrWbIay3D38vVsrI8RcHZDQt56V8LaOr4yNnb1qwbGHw44aOgeDPtCJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfPdgrw5dYa4Nbjv0Bpdhu+SpVLMB8GA1UdIwQY MBaAFJ1JJel2rQv7c+CX2mkX6A9bzmyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblVrbDZYYXRDX3R6NEpmYWFSZm9EMXZPYkl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xZjFjYmQtZmVhNi00NTUzLThkYjYt NGUwOWY5ZTg1NzIzLzEvblVrbDZYYXRDX3R6NEpmYWFSZm9EMXZPYkl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xZjFjYmQtZmVhNi00NTUzLThkYjYtNGUwOWY5ZTg1NzIz LzEvblVrbDZYYXRDX3R6NEpmYWFSZm9EMXZPYkl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFcsjw4N wPOzQica2bDVGZYUoyQe47p0/e06UnklnZhGJhp3l1Bw39GxrnPywya6UMATXu7Y GW0+JTS4QsWO6bcHrwCKqvxQvtG0zwe0/9+RRNwZea/NrfpKefPeG8HSA17hC3p8 ZVs6L4opZVRLHxb2IpOH8N7srYV4KfnbcDD7t/C84+YGKflRPxv9nqO2SDv9MH8W yk/DM2IqUXG/mCalNEEii5M3rJntAyivzlPyaZcuMT332V+Im2V9SoS5UHQ0wGE7 btP9E9KiUZ98cRjZwmzn1c/6uQ8JSc1/a7cSugeEVDAoim9VxybY3nkU0qsTKh1E y7uxehn/1+wVeg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:57 2026 by rpki-client