This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft File: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json) Hash identifier: 5HEnwgf8hnGYbGW5triWAd7DdLE6lYd2tmL7C74B2GI= Subject key identifier: 2D:3B:13:A0:D6:FC:98:4D:D4:A5:69:D8:08:75:C4:50:1D:34:EE:F3 Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9 Certificate issuer: /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9 Certificate serial: 019C42B43B01F74F626D830D8EF3203CDE35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft Manifest number: 0A91 Signing time: Mon 09 Feb 2026 14:00:33 +0000 Manifest this update: Mon 09 Feb 2026 14:00:33 +0000 Manifest next update: Tue 10 Feb 2026 14:00:33 +0000 Files and hashes: 1: hLo6C6tebjFQtQDmI0Q3b6kPR3w.roa (hash: 9sKjJMjkVL/S9kl3FSQOk76oCUEVM9PGOrM1vKQrGA0=) 2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: +2k4enVthZwb7XXeQwa2AY926Q3wBfRhDsdZz9UaSpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:3b:01:f7:4f:62:6d:83:0d:8e:f3:20:3c:de:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9 Validity Not Before: Feb 9 14:00:33 2026 GMT Not After : Feb 10 14:00:33 2026 GMT Subject: CN=2d3b13a0d6fc984dd4a569d80875c4501d34eef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:7e:58:a6:93:c1:f9:2b:19:2c:6a:95:1b: 22:8a:3e:67:12:56:ed:62:0c:69:04:c3:b1:0d:7d: ab:32:fa:c3:be:61:69:4b:98:71:a4:07:a4:69:6a: 74:98:b5:b5:f6:5e:61:2b:54:0d:97:9f:5a:15:b4: bc:e9:b4:a4:e0:db:c9:45:c3:7a:12:74:8e:76:df: c0:5e:29:2a:d2:39:d3:b9:fb:7d:a7:ce:cd:ef:32: 5a:cd:ae:d7:2e:c7:b8:f6:38:9e:ce:6d:9b:19:0c: 99:a1:22:fd:e2:d3:64:e6:60:3f:1c:da:28:21:09: 81:49:97:77:a2:fe:30:f1:48:68:19:d2:3c:19:d1: c9:76:3b:7e:31:cd:c7:7a:39:b0:de:0d:d6:b3:d9: 59:3f:af:31:bc:4c:da:77:a4:88:73:8f:95:94:7e: 6d:6b:d3:0d:81:30:02:f6:1d:aa:33:e7:a8:97:80: 52:b4:f5:f2:78:03:a5:7e:f9:71:f9:23:41:5b:e5: c0:93:58:ac:a0:93:f4:5a:29:33:7a:5b:4b:74:1a: 81:2c:00:60:ea:0a:78:db:23:f5:ae:78:fc:d4:7c: cb:ef:c7:10:9c:82:a4:c1:5f:5a:56:6c:d9:21:b4: 1a:ee:6b:46:b5:b7:38:8d:b8:47:8b:e3:2f:13:dc: b5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3B:13:A0:D6:FC:98:4D:D4:A5:69:D8:08:75:C4:50:1D:34:EE:F3 X509v3 Authority Key Identifier: keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:34:2d:74:b5:1a:04:21:81:23:d9:77:77:41:6e:b0:6b:2d: 4d:62:44:ef:bf:43:15:aa:b1:4c:82:c8:09:7f:de:ec:7a:63: 31:49:37:cd:66:7e:74:e4:4d:5e:bf:2b:5e:78:3a:12:e6:bf: c7:a3:d7:ae:d9:24:ee:48:b5:61:f8:bf:77:9c:ec:cd:6a:b5: 6f:d7:c8:0a:de:eb:3d:d9:30:d3:1c:2a:e7:c9:70:e5:b7:f0: 2d:39:b1:ce:4b:bb:a2:15:f1:89:7c:8c:c9:ff:1c:b8:63:a0: 34:a4:87:90:30:e1:27:76:c9:01:29:d5:b4:2b:62:69:37:77: 32:67:7f:62:c3:bd:1f:5d:08:a7:25:bb:97:dd:c0:80:74:91: 4b:41:81:d4:db:eb:0f:7e:0f:5f:ef:34:52:5a:cf:b7:44:76: 3c:a0:b4:7c:a5:b2:11:d7:87:e8:60:a7:a4:98:6f:6b:76:96: e5:0d:b1:48:ee:98:8e:92:3e:cc:1e:dc:4f:1f:85:40:02:8f: 7f:cf:83:d2:2e:f7:81:b1:2b:28:a7:57:0e:b9:41:d5:be:09: de:09:58:6b:2f:1a:2e:22:5e:59:00:78:74:ea:5e:64:b7:9f: 38:f3:e3:dc:e0:4e:13:b5:09:26:d8:74:57:ee:3c:c4:03:ed: 0d:4a:4e:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDsB909ibYMNjvMgPN41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjE4NWU5OWZmZTYxMTUyN2EwZTk0MzMxMTUxZmZlMmVl NzJhZTkwHhcNMjYwMjA5MTQwMDMzWhcNMjYwMjEwMTQwMDMzWjAzMTEwLwYDVQQD EygyZDNiMTNhMGQ2ZmM5ODRkZDRhNTY5ZDgwODc1YzQ1MDFkMzRlZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtB+WKaTwfkrGSxqlRsiij5nElbt YgxpBMOxDX2rMvrDvmFpS5hxpAekaWp0mLW19l5hK1QNl59aFbS86bSk4NvJRcN6 EnSOdt/AXikq0jnTuft9p87N7zJaza7XLse49jiezm2bGQyZoSL94tNk5mA/HNoo IQmBSZd3ov4w8UhoGdI8GdHJdjt+Mc3Hejmw3g3Ws9lZP68xvEzad6SIc4+VlH5t a9MNgTAC9h2qM+eol4BStPXyeAOlfvlx+SNBW+XAk1isoJP0WikzeltLdBqBLABg 6gp42yP1rnj81HzL78cQnIKkwV9aVmzZIbQa7mtGtbc4jbhHi+MvE9y1RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC07E6DW/JhN1KVp2Ah1xFAdNO7zMB8GA1UdIwQY MBaAFJ3xhemf/mEVJ6DpQzEVH/4u5yrpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2Et ZjI5OTBjZWI5NGVjLzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2EtZjI5OTBjZWI5NGVj LzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTQtdLUa BCGBI9l3d0FusGstTWJE779DFaqxTILICX/e7HpjMUk3zWZ+dORNXr8rXng6Eua/ x6PXrtkk7ki1Yfi/d5zszWq1b9fICt7rPdkw0xwq58lw5bfwLTmxzku7ohXxiXyM yf8cuGOgNKSHkDDhJ3bJASnVtCtiaTd3Mmd/YsO9H10IpyW7l93AgHSRS0GB1Nvr D34PX+80UlrPt0R2PKC0fKWyEdeH6GCnpJhva3aW5Q2xSO6YjpI+zB7cTx+FQAKP f8+D0i73gbErKKdXDrlB1b4J3glYay8aLiJeWQB4dOpeZLefOPPj3OBOE7UJJth0 V+48xAPtDUpO4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:16 2026 by rpki-client