This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json) Hash identifier: jMLkLpFNGKUJ8IzNVzFRkSXcEEjzX5cruDV6F3nfFLc= Subject key identifier: 23:98:17:F4:92:C5:48:B0:BC:F9:E6:69:15:D5:C4:71:9D:30:A3:D6 Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22 Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522 Certificate serial: 019C21DFAD7B80EED923CEF80D255AC72994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft Manifest number: 0118 Signing time: Tue 03 Feb 2026 05:00:32 +0000 Manifest this update: Tue 03 Feb 2026 05:00:32 +0000 Manifest next update: Wed 04 Feb 2026 05:00:32 +0000 Files and hashes: 1: 0vgmqw6xycNNl0cWpB4qhyVyouw.roa (hash: FUonhc03FaZe1yF8ZpkvBUnS9tWVnGxjVteioipKBjo=) 2: 2pYvuOlm5MRdBUw8x5tLbdqZXpc.roa (hash: NAVOxCaqh4HjZblyl1Cz4XGohu72FpPNFdbVsVI0edE=) 3: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: HIuh/2GuOtZ5AW7i6Wqy79VV39SGXBIK3+UK/a6UP9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:21:df:ad:7b:80:ee:d9:23:ce:f8:0d:25:5a:c7:29:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522 Validity Not Before: Feb 3 05:00:32 2026 GMT Not After : Feb 4 05:00:32 2026 GMT Subject: CN=239817f492c548b0bcf9e66915d5c4719d30a3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:80:9e:1a:a3:60:68:cb:8e:7e:35:57:b6: 59:7b:8e:9f:a4:ef:27:7b:f3:79:b4:69:69:32:6b: b6:01:10:d1:f9:7b:74:0b:27:4f:68:48:2c:3a:1b: 4e:e6:ca:6a:92:49:54:db:e4:0b:c1:a4:8c:24:12: 65:55:35:0a:10:dc:8c:87:c4:d2:91:8b:28:bd:b0: ff:2f:f3:dd:5a:e7:28:7f:40:12:87:7b:97:14:d6: 8e:42:a1:a0:7e:a5:ce:da:28:d8:15:4e:c1:8f:a5: 69:b5:32:29:c7:16:28:9c:62:02:97:ac:d3:10:46: 05:b6:e4:f4:3d:22:03:24:4a:43:cd:8e:84:a6:30: dc:14:f7:dc:0a:6e:e0:c6:53:33:ef:75:74:45:cc: b6:53:b1:9c:a9:ed:92:bd:c7:15:77:81:9d:9f:ac: 77:c5:ed:ea:c4:5e:06:9a:78:dc:c4:a2:78:2b:14: 89:0e:e2:15:ec:db:9d:1a:53:c7:7e:1e:c6:46:bc: ba:c3:b3:f3:09:b3:b3:8e:ec:7c:33:9a:ef:f4:d7: e4:8e:cd:2d:07:be:29:c9:cd:e4:1b:64:d6:4f:95: bf:e8:b2:d1:ae:80:4f:0b:c3:13:d2:36:bf:6f:b1: b3:46:0b:61:d2:77:6d:af:4a:6f:6c:6d:be:55:a7: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:98:17:F4:92:C5:48:B0:BC:F9:E6:69:15:D5:C4:71:9D:30:A3:D6 X509v3 Authority Key Identifier: keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c6:4f:c8:0c:ec:4d:ee:35:2d:59:cc:09:87:bd:1e:c5:ca: 80:49:1c:09:72:40:88:3e:1d:8f:c5:5f:35:79:a9:5a:b8:4d: 1f:35:3d:0b:4f:eb:d3:2a:d1:0a:89:2d:23:ff:fe:ee:d1:85: dd:f3:59:10:f3:18:be:7d:ec:20:0d:60:66:fc:9b:a4:00:e5: 4b:6b:38:57:ef:52:44:02:3f:2e:98:08:6e:12:47:bf:a3:8e: b7:38:58:79:b3:19:9d:30:59:f5:cd:77:3f:7c:e0:0d:ba:08: 66:f7:e1:e3:60:3a:ad:99:af:67:d8:fa:d7:6a:f5:36:f2:86: 69:83:31:d5:21:77:61:a9:fd:04:5c:c6:b0:58:b6:1b:67:6c: d5:b8:0e:dc:de:a1:59:ae:3f:44:8c:b1:ad:e8:a2:94:a7:d0: e6:51:5b:30:df:16:55:4d:0c:9f:3d:2b:36:69:ec:ca:be:ea: f2:ed:ce:7e:ee:13:4f:68:25:0b:86:8e:76:d1:c3:75:49:d9: d8:fa:b4:34:1e:da:fd:24:c9:dc:5b:ba:a4:29:2f:e1:a7:f3: ec:51:8a:bc:22:8b:19:f2:27:0d:fc:93:ad:49:7d:44:72:b4: c5:09:e0:9c:ed:e8:49:e9:6f:4d:e6:7a:d7:32:1c:b8:e6:cc: cb:16:77:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwh3617gO7ZI874DSVaxymUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTZiNTFlZGYzOWViZjA2NjJiMmM4MzRkNjVkMWJkMWRl ODI1MjIwHhcNMjYwMjAzMDUwMDMyWhcNMjYwMjA0MDUwMDMyWjAzMTEwLwYDVQQD EygyMzk4MTdmNDkyYzU0OGIwYmNmOWU2NjkxNWQ1YzQ3MTlkMzBhM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo6AnhqjYGjLjn41V7ZZe46fpO8n e/N5tGlpMmu2ARDR+Xt0CydPaEgsOhtO5spqkklU2+QLwaSMJBJlVTUKENyMh8TS kYsovbD/L/PdWucof0ASh3uXFNaOQqGgfqXO2ijYFU7Bj6VptTIpxxYonGICl6zT EEYFtuT0PSIDJEpDzY6EpjDcFPfcCm7gxlMz73V0Rcy2U7Gcqe2SvccVd4Gdn6x3 xe3qxF4GmnjcxKJ4KxSJDuIV7NudGlPHfh7GRry6w7PzCbOzjux8M5rv9Nfkjs0t B74pyc3kG2TWT5W/6LLRroBPC8MT0ja/b7GzRgth0ndtr0pvbG2+VadmCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOYF/SSxUiwvPnmaRXVxHGdMKPWMB8GA1UdIwQY MBaAFJ5WtR7fOevwZissg01l0b0d6CUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNjNmMmUtOTdiMC00ZGU4LTg3ZWQt NTYzYTE0ZTg2ZDYwLzEvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lNjNmMmUtOTdiMC00ZGU4LTg3ZWQtNTYzYTE0ZTg2ZDYw LzEvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcZPyAzs Te41LVnMCYe9HsXKgEkcCXJAiD4dj8VfNXmpWrhNHzU9C0/r0yrRCoktI//+7tGF 3fNZEPMYvn3sIA1gZvybpADlS2s4V+9SRAI/LpgIbhJHv6OOtzhYebMZnTBZ9c13 P3zgDboIZvfh42A6rZmvZ9j612r1NvKGaYMx1SF3Yan9BFzGsFi2G2ds1bgO3N6h Wa4/RIyxreiilKfQ5lFbMN8WVU0Mnz0rNmnsyr7q8u3Ofu4TT2glC4aOdtHDdUnZ 2Pq0NB7a/STJ3Fu6pCkv4afz7FGKvCKLGfInDfyTrUl9RHK0xQngnO3oSelvTeZ6 1zIcuObMyxZ3Jw== -----END CERTIFICATE-----Generated at Tue Feb 3 14:23:29 2026 by rpki-client