This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft File: NWlXUM1GUx3eil-yZyzcgw09DG4.mft (raw, json) Hash identifier: P70dX3xfd/MIs8ubbMcE6YU36vVmXxlLjuLeKiHgbWw= Subject key identifier: 81:58:A3:E0:31:54:1A:83:58:41:EE:48:F6:E5:4F:11:44:BB:6D:16 Authority key identifier: 35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E Certificate issuer: /CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e Certificate serial: 019C4246863D5995108F2E51ABCC1CD3B1B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft Manifest number: 062C Signing time: Mon 09 Feb 2026 12:00:43 +0000 Manifest this update: Mon 09 Feb 2026 12:00:43 +0000 Manifest next update: Tue 10 Feb 2026 12:00:43 +0000 Files and hashes: 1: NWlXUM1GUx3eil-yZyzcgw09DG4.crl (hash: pr+MAixYrJWcVfRup7uF3ll7XNHyglhvOQnGb80MZck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:86:3d:59:95:10:8f:2e:51:ab:cc:1c:d3:b1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e Validity Not Before: Feb 9 12:00:43 2026 GMT Not After : Feb 10 12:00:43 2026 GMT Subject: CN=8158a3e031541a835841ee48f6e54f1144bb6d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:37:79:c3:81:1f:a6:a3:d0:97:de:1b:b4:19: 82:46:cc:4c:bf:cb:fd:1f:8c:31:11:b3:31:2f:79: a1:34:d4:d5:bd:59:ef:45:19:4b:bb:c8:cd:74:99: 4a:6a:b5:52:c8:d2:98:27:2e:9c:97:47:48:9a:43: 9b:05:20:af:89:ac:43:a2:22:a1:45:71:dd:82:73: 34:96:f1:40:b3:9d:87:1d:a8:ea:18:74:2e:a1:2d: 37:1e:23:bf:87:c3:4f:89:0f:d4:be:69:87:39:aa: 2d:bc:e9:98:10:f2:73:cf:f6:9b:35:69:c2:2b:fa: 79:e0:20:d0:9b:5d:df:f4:e5:41:80:24:4d:21:2a: ea:b7:f8:cd:45:d1:8f:11:a1:5f:7a:a9:bb:2d:d1: fc:ec:f0:0b:57:1f:8e:34:fb:3f:70:9f:bc:29:4c: e6:3a:ff:bd:ec:1c:c3:f2:71:ce:e5:30:a7:c7:d1: 57:d6:30:0b:a9:90:4f:dd:26:72:6f:14:87:ec:00: 99:32:0e:39:ac:6d:71:2f:69:27:1e:61:76:4d:bb: 49:c2:65:dd:b1:62:a8:70:ae:54:43:0f:d0:f0:9a: f2:68:6f:8e:ec:f2:85:9f:b1:0e:99:fa:99:b7:ee: 11:cf:fc:36:1f:27:4d:6c:35:c7:59:c1:0d:b4:7c: 62:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:58:A3:E0:31:54:1A:83:58:41:EE:48:F6:E5:4F:11:44:BB:6D:16 X509v3 Authority Key Identifier: keyid:35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ac:2c:c5:18:ba:28:80:f0:87:d7:45:7b:87:e6:7e:e1:7a: 3b:33:12:fe:35:8a:7c:11:d0:9b:59:46:ef:77:28:98:c0:0f: fa:f7:7e:0f:5d:57:d7:5e:9d:03:8f:d9:69:8a:b0:8e:c7:25: 75:48:00:c4:1f:c7:f9:33:cf:c3:88:ca:a0:29:ef:41:c4:06: 40:8c:9f:b0:6c:3a:3e:75:d9:16:98:66:14:ee:85:13:73:da: 6a:7e:1a:7e:d8:74:e6:6e:0a:32:f7:fb:5f:53:0c:ee:bf:05: 46:85:4e:52:b1:f2:cc:10:fc:82:42:95:ed:ca:48:80:25:f2: c6:69:d7:49:b0:dc:7f:20:46:d3:ca:f5:4c:88:7e:52:89:4e: 00:2a:84:f9:3d:3c:82:a6:2e:f8:ef:fc:f4:4b:90:cb:b7:9e: 1d:87:98:83:c7:16:e1:25:25:4f:17:95:67:32:3f:d6:51:5a: e7:02:c5:13:43:46:a7:9c:c5:9c:68:91:6c:d3:69:7e:5b:25: 9f:90:6b:f2:1a:c7:9e:8e:a8:79:af:14:3b:34:0e:a9:cc:da: d9:87:f7:42:7f:e2:61:be:e6:93:1f:29:aa:8b:39:39:ac:35: 19:e4:79:8b:d3:90:a5:73:77:6f:a0:ca:d8:9f:2f:71:38:60: 17:b9:58:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRoY9WZUQjy5Rq8wc07G1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1Njk1NzUwY2Q0NjUzMWRkZThhNWZiMjY3MmNkYzgzMGQz ZDBjNmUwHhcNMjYwMjA5MTIwMDQzWhcNMjYwMjEwMTIwMDQzWjAzMTEwLwYDVQQD Eyg4MTU4YTNlMDMxNTQxYTgzNTg0MWVlNDhmNmU1NGYxMTQ0YmI2ZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Td5w4EfpqPQl94btBmCRsxMv8v9 H4wxEbMxL3mhNNTVvVnvRRlLu8jNdJlKarVSyNKYJy6cl0dImkObBSCviaxDoiKh RXHdgnM0lvFAs52HHajqGHQuoS03HiO/h8NPiQ/UvmmHOaotvOmYEPJzz/abNWnC K/p54CDQm13f9OVBgCRNISrqt/jNRdGPEaFfeqm7LdH87PALVx+ONPs/cJ+8KUzm Ov+97BzD8nHO5TCnx9FX1jALqZBP3SZybxSH7ACZMg45rG1xL2knHmF2TbtJwmXd sWKocK5UQw/Q8JryaG+O7PKFn7EOmfqZt+4Rz/w2HydNbDXHWcENtHximwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFYo+AxVBqDWEHuSPblTxFEu20WMB8GA1UdIwQY MBaAFDVpV1DNRlMd3opfsmcs3IMNPQxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldsWFVNMUdVeDNlaWwteVp5emNndzA5REc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MTU2MTctMDkyZC00MjI4LWE0MDct NzdiZmEzN2ZhMDcxLzEvTldsWFVNMUdVeDNlaWwteVp5emNndzA5REc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy82MTU2MTctMDkyZC00MjI4LWE0MDctNzdiZmEzN2ZhMDcx LzEvTldsWFVNMUdVeDNlaWwteVp5emNndzA5REc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXawsxRi6 KIDwh9dFe4fmfuF6OzMS/jWKfBHQm1lG73comMAP+vd+D11X116dA4/ZaYqwjscl dUgAxB/H+TPPw4jKoCnvQcQGQIyfsGw6PnXZFphmFO6FE3Paan4afth05m4KMvf7 X1MM7r8FRoVOUrHyzBD8gkKV7cpIgCXyxmnXSbDcfyBG08r1TIh+UolOACqE+T08 gqYu+O/89EuQy7eeHYeYg8cW4SUlTxeVZzI/1lFa5wLFE0NGp5zFnGiRbNNpflsl n5Br8hrHno6oea8UOzQOqcza2Yf3Qn/iYb7mkx8pqos5Oaw1GeR5i9OQpXN3b6DK 2J8vcThgF7lYRA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:11 2026 by rpki-client