This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json) Hash identifier: YSx4Mbbt4OhqAEDZxb4PRaZLcbDNwFW/zStxv9Sg4HQ= Subject key identifier: 4F:80:33:BE:8E:CB:E4:D0:24:AA:C7:66:52:40:EF:D6:66:A8:2E:12 Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca Certificate serial: 019C42B4910F42077501680971CF804827E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft Manifest number: 08A9 Signing time: Mon 09 Feb 2026 14:00:55 +0000 Manifest this update: Mon 09 Feb 2026 14:00:55 +0000 Manifest next update: Tue 10 Feb 2026 14:00:55 +0000 Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: 1IL8fV+kAlES+w6Ss6WR0R6UxxoQl1hnEEXFFt34CdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:91:0f:42:07:75:01:68:09:71:cf:80:48:27:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca Validity Not Before: Feb 9 14:00:55 2026 GMT Not After : Feb 10 14:00:55 2026 GMT Subject: CN=4f8033be8ecbe4d024aac7665240efd666a82e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:35:7e:4c:c0:06:eb:21:cf:ee:76:f0:1b: ce:69:61:0b:06:60:c1:e9:7a:c3:3a:23:9d:ca:c2: 2b:50:69:e4:86:45:61:5e:ce:e3:f5:62:6e:2d:23: a8:7e:5f:de:93:03:88:c0:1b:41:f0:8e:07:29:70: d5:89:3f:7b:e5:e3:8c:d5:64:a6:3e:b2:30:4f:8f: cd:d8:b3:a9:a5:96:46:e5:d0:a8:bb:f4:1c:90:30: b4:4a:37:df:3f:e2:52:03:e6:93:8a:89:41:13:aa: 11:05:e5:bf:4e:82:40:67:0d:9d:05:b8:26:9e:82: 4a:14:3d:90:4e:ca:2b:59:67:db:2b:2c:2d:78:a2: f7:1c:88:ed:a4:c0:de:a8:ec:85:36:1d:69:76:7b: 3e:a8:29:02:43:4b:8b:55:a7:51:04:83:f9:4d:62: da:48:ae:c0:c4:b4:4e:0d:14:a4:f6:42:32:1d:39: 6d:37:57:70:f0:2e:ba:05:19:16:c8:0c:f9:22:d4: 07:96:28:9b:66:f4:ea:71:0b:aa:f3:37:fe:c9:b2: 92:7b:9a:ac:c8:5c:fb:d9:8c:bc:b3:07:50:13:fd: 62:3d:6f:a1:1f:30:9c:3c:45:fd:40:9c:94:c1:0a: d3:05:51:4b:72:24:28:e6:32:9b:68:cc:10:2b:e2: a1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:80:33:BE:8E:CB:E4:D0:24:AA:C7:66:52:40:EF:D6:66:A8:2E:12 X509v3 Authority Key Identifier: keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:54:c8:d8:90:38:ae:60:09:db:a8:57:2f:f8:81:b0:46:7a: 26:7a:bb:fd:58:f1:a9:12:d4:fe:8a:6f:ef:4e:d5:1d:bd:06: 6a:63:bd:bc:d6:03:c9:15:b6:ab:19:28:a4:b7:d5:a5:7b:73: 10:ac:e4:c7:74:46:93:a1:ec:41:0d:0c:de:64:10:9f:ca:ce: d6:af:5d:14:a5:60:be:58:bc:cc:82:3e:bc:29:84:cd:9c:c1: 5d:f4:bc:ce:14:64:b0:bd:ba:a0:9f:ca:2b:b9:e8:30:d8:d0: 47:8f:22:6f:61:f2:11:79:45:9b:89:ad:8f:87:43:d5:51:76: 18:1e:59:c4:10:42:b2:11:9a:ae:16:fd:a7:f0:88:67:85:c8: 72:cb:46:47:c7:b1:4a:b6:7a:60:1b:5d:da:8d:65:2c:ef:f8: e4:a2:39:a4:57:df:af:1d:35:9b:20:b1:7f:8a:69:99:ba:9d: f2:d2:f6:c8:28:d4:2d:ae:d1:3a:d8:f2:62:e0:2c:79:e0:f4: e2:e8:fd:f6:71:48:d4:97:86:28:05:39:65:96:e8:29:0a:97: 12:c1:ce:9f:aa:64:bd:f5:4a:a5:a4:fb:bf:95:8b:05:d6:c0: 1b:01:a0:21:f4:ad:c8:e4:67:28:53:b8:cf:70:d0:13:43:44: e8:6b:93:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJEPQgd1AWgJcc+ASCfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MTE3YTY4MTVhOTE4NDc4ZDNmOGMwMGQ2NzFhNTcxNjZi ZmVlY2EwHhcNMjYwMjA5MTQwMDU1WhcNMjYwMjEwMTQwMDU1WjAzMTEwLwYDVQQD Eyg0ZjgwMzNiZThlY2JlNGQwMjRhYWM3NjY1MjQwZWZkNjY2YTgyZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIA1fkzABushz+528BvOaWELBmDB 6XrDOiOdysIrUGnkhkVhXs7j9WJuLSOofl/ekwOIwBtB8I4HKXDViT975eOM1WSm PrIwT4/N2LOppZZG5dCou/QckDC0SjffP+JSA+aTiolBE6oRBeW/ToJAZw2dBbgm noJKFD2QTsorWWfbKywteKL3HIjtpMDeqOyFNh1pdns+qCkCQ0uLVadRBIP5TWLa SK7AxLRODRSk9kIyHTltN1dw8C66BRkWyAz5ItQHliibZvTqcQuq8zf+ybKSe5qs yFz72Yy8swdQE/1iPW+hHzCcPEX9QJyUwQrTBVFLciQo5jKbaMwQK+KhawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+AM76Oy+TQJKrHZlJA79ZmqC4SMB8GA1UdIwQY MBaAFDYRemgVqRhHjT+MANZxpXFmv+7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYmI3NDEtYjY5Mi00ZjA5LThjYmEt YzZhZWM2OGFiMzY0LzEvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jYmI3NDEtYjY5Mi00ZjA5LThjYmEtYzZhZWM2OGFiMzY0 LzEvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslTI2JA4 rmAJ26hXL/iBsEZ6Jnq7/VjxqRLU/opv707VHb0GamO9vNYDyRW2qxkopLfVpXtz EKzkx3RGk6HsQQ0M3mQQn8rO1q9dFKVgvli8zII+vCmEzZzBXfS8zhRksL26oJ/K K7noMNjQR48ib2HyEXlFm4mtj4dD1VF2GB5ZxBBCshGarhb9p/CIZ4XIcstGR8ex SrZ6YBtd2o1lLO/45KI5pFffrx01myCxf4ppmbqd8tL2yCjULa7ROtjyYuAseeD0 4uj99nFI1JeGKAU5ZZboKQqXEsHOn6pkvfVKpaT7v5WLBdbAGwGgIfStyORnKFO4 z3DQE0NE6GuT6g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:28 2026 by rpki-client