This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json) Hash identifier: d2jkteC91hwU7T38WYqGcTA26eAo8L825R0kZFmQYeA= Subject key identifier: BB:AF:CE:E6:D9:FD:29:C6:21:E3:C3:81:BB:06:9B:F1:7F:F0:64:BD Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f Certificate serial: 019C424695DC572E078EC1037297854568C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft Manifest number: 0AC0 Signing time: Mon 09 Feb 2026 12:00:47 +0000 Manifest this update: Mon 09 Feb 2026 12:00:47 +0000 Manifest next update: Tue 10 Feb 2026 12:00:47 +0000 Files and hashes: 1: 1-w9hWaB0Y-QZTijfEO33ePRZy0.roa (hash: SgY+1sZqpVCfIbnHknsFg6v2g9JFPjHBp5HxZb7l6VM=) 2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: vleQ2ihHmEGn+jL88Se4CQHR/776u4SoQmOFf68CXcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:95:dc:57:2e:07:8e:c1:03:72:97:85:45:68:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f Validity Not Before: Feb 9 12:00:47 2026 GMT Not After : Feb 10 12:00:47 2026 GMT Subject: CN=bbafcee6d9fd29c621e3c381bb069bf17ff064bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:9c:be:bd:28:e3:28:b2:4f:b3:d6:b3:c9: a9:e5:40:c3:47:ad:9c:56:93:f6:4f:0d:0c:cf:7c: ad:49:e0:36:02:30:aa:98:d8:fb:8c:4d:a7:db:c6: de:e0:08:57:41:79:48:08:6b:13:12:5f:ef:6d:fe: 5c:78:29:3f:8e:18:1b:f6:ab:84:9d:20:b8:80:ac: 35:ee:39:c3:93:b1:35:c6:7e:5d:78:a2:b4:5b:b1: 1e:69:45:2b:d8:76:f8:7b:01:6b:52:cb:b0:cc:82: 6e:74:25:91:2f:6a:c6:1a:a3:1a:f0:87:1b:89:87: 98:ad:a9:b5:d4:0a:20:1d:53:41:d8:d5:50:19:dd: f9:e2:dd:5a:1d:fe:ec:f2:c6:b0:81:a3:d2:64:69: 31:86:bc:11:5d:07:55:86:0f:5f:5f:74:97:cc:48: 5a:1e:f6:6a:e6:e6:50:4a:91:9e:00:f7:0d:31:b5: 38:8f:b2:92:a9:61:09:72:92:a2:39:41:c2:a1:34: 94:57:f4:e7:8a:f1:3d:23:aa:88:0c:cd:fe:db:2e: a7:23:82:a0:da:42:e8:c3:3a:c5:9f:1b:18:83:3b: 98:0c:6d:c7:51:86:29:42:c9:6a:35:4e:7f:f6:aa: 25:a5:fa:8a:a6:30:a2:e2:9a:fa:6b:5a:23:0b:5d: 91:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AF:CE:E6:D9:FD:29:C6:21:E3:C3:81:BB:06:9B:F1:7F:F0:64:BD X509v3 Authority Key Identifier: keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:38:6e:46:16:98:48:b5:2f:94:1f:87:8a:bd:8d:17:f2:ff: 21:85:bc:bf:1f:a4:a8:60:e2:f5:14:3e:9f:58:73:ae:ff:9f: ea:de:88:0e:9f:3d:09:8c:ca:6d:28:bf:0c:43:cb:4f:14:6b: 6a:96:82:d3:89:b5:ff:df:a1:ad:63:8b:bd:f0:c0:d8:f9:7c: 20:98:eb:af:bd:60:4f:33:29:bc:dc:83:65:9b:73:b7:a5:41: 9e:dd:0a:9f:1c:91:af:f5:a5:44:27:1e:1e:15:5c:87:0c:cd: 8f:61:12:5c:ab:29:57:f9:22:23:2d:53:ab:ca:64:81:cb:9f: 34:8b:54:ad:ea:02:47:a6:98:63:c9:30:0f:f2:5f:b7:26:bb: e2:f9:6d:58:ca:44:f0:10:27:27:65:59:e5:a5:72:f8:2b:0b: 54:5c:b6:8d:97:92:ad:b0:98:be:23:4a:f1:72:68:d8:bc:6f: ea:26:f0:b1:52:4a:65:f3:c1:82:0a:72:47:92:70:39:80:07: ac:ec:19:a6:e3:64:c5:ed:2b:9b:e0:39:02:95:2f:06:cc:e6: 20:5d:55:f2:eb:8b:8f:3e:55:23:4c:fa:df:dc:5a:da:b6:8b: d4:b9:9a:fa:96:40:41:91:2c:a7:4f:84:25:c8:2e:6e:9a:70: 6b:27:cf:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRpXcVy4HjsEDcpeFRWjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjI0YWZiZmVjZGY2YTk5YzI4MmJmNTNiMzA0ZjNjMWU4 ZjQ3MGYwHhcNMjYwMjA5MTIwMDQ3WhcNMjYwMjEwMTIwMDQ3WjAzMTEwLwYDVQQD EyhiYmFmY2VlNmQ5ZmQyOWM2MjFlM2MzODFiYjA2OWJmMTdmZjA2NGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVacvr0o4yiyT7PWs8mp5UDDR62c VpP2Tw0Mz3ytSeA2AjCqmNj7jE2n28be4AhXQXlICGsTEl/vbf5ceCk/jhgb9quE nSC4gKw17jnDk7E1xn5deKK0W7EeaUUr2Hb4ewFrUsuwzIJudCWRL2rGGqMa8Icb iYeYram11AogHVNB2NVQGd354t1aHf7s8sawgaPSZGkxhrwRXQdVhg9fX3SXzEha HvZq5uZQSpGeAPcNMbU4j7KSqWEJcpKiOUHCoTSUV/TnivE9I6qIDM3+2y6nI4Kg 2kLowzrFnxsYgzuYDG3HUYYpQslqNU5/9qolpfqKpjCi4pr6a1ojC12RTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuvzubZ/SnGIePDgbsGm/F/8GS9MB8GA1UdIwQY MBaAFJ3ySvv+zfapnCgr9TswTzwej0cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQt N2VlZGY0ZGQ2YzEzLzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQtN2VlZGY0ZGQ2YzEz LzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzhuRhaY SLUvlB+Hir2NF/L/IYW8vx+kqGDi9RQ+n1hzrv+f6t6IDp89CYzKbSi/DEPLTxRr apaC04m1/9+hrWOLvfDA2Pl8IJjrr71gTzMpvNyDZZtzt6VBnt0KnxyRr/WlRCce HhVchwzNj2ESXKspV/kiIy1Tq8pkgcufNItUreoCR6aYY8kwD/Jftya74vltWMpE 8BAnJ2VZ5aVy+CsLVFy2jZeSrbCYviNK8XJo2Lxv6ibwsVJKZfPBggpyR5JwOYAH rOwZpuNkxe0rm+A5ApUvBszmIF1V8uuLjz5VI0z639xa2raL1Lma+pZAQZEsp0+E JcgubppwayfP5A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:56 2026 by rpki-client