This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json) Hash identifier: xPENSP17Au04e/nVx5AYvYRe3R8DoFQgWVwekqqvhys= Subject key identifier: 08:F2:CA:58:F4:80:07:B4:49:59:0A:C8:F1:A7:C9:D8:FE:A3:3E:AA Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45 Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045 Certificate serial: 019C40FCE2A5E333DE3EAD47F6464F733904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft Manifest number: 0BF9 Signing time: Mon 09 Feb 2026 06:00:40 +0000 Manifest this update: Mon 09 Feb 2026 06:00:40 +0000 Manifest next update: Tue 10 Feb 2026 06:00:40 +0000 Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: uD6a7fkrUanu8XkXJdKdI8tuivEpnEO2ts4z9WGPV4g=) 2: ghpA5fCdi4-vZdLYzD8KSMnNUUQ.roa (hash: z5taojLfDf55uPGabR8q/HQ0BFw+j/KvT8vFcA5Y8Zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fc:e2:a5:e3:33:de:3e:ad:47:f6:46:4f:73:39:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045 Validity Not Before: Feb 9 06:00:40 2026 GMT Not After : Feb 10 06:00:40 2026 GMT Subject: CN=08f2ca58f48007b449590ac8f1a7c9d8fea33eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:df:d7:5b:32:4b:05:59:c2:61:42:3a:cc: 5c:07:60:52:2f:bd:92:99:4c:02:d8:82:94:84:a3: df:bb:9c:27:a1:eb:01:78:1b:8d:c7:54:41:db:dd: 7e:7c:42:d5:9f:1e:01:66:68:14:19:b4:8a:0c:65: 58:c5:37:e9:79:fb:df:ee:3a:dd:9b:77:53:bc:e5: 70:1f:8d:73:ca:65:ca:9f:e8:35:ff:66:56:86:9a: 5e:89:53:03:53:f4:da:b1:c3:08:9b:39:78:0e:09: b3:d1:44:e7:0c:b8:ef:8f:01:c8:40:d8:05:13:c3: fe:e4:fa:e3:63:de:b2:64:c6:bd:0e:55:bb:a1:dd: 7b:6c:5f:1a:47:3f:4b:f8:18:a1:73:34:c1:32:f0: 89:1a:92:dd:1b:cf:75:ab:c8:81:c8:62:fe:9d:3e: f7:b0:24:22:08:84:2b:22:22:0a:c0:b3:96:c9:7c: 52:64:a9:bd:bc:de:47:b0:e0:89:93:59:20:38:41: 51:9a:b1:0a:d8:3c:0b:4f:db:7f:b3:8d:d2:42:1d: f1:09:01:f4:86:ad:2b:23:90:76:be:c1:10:1e:0f: b6:10:ae:73:20:9e:95:19:8b:aa:66:da:97:60:b0: bb:74:64:64:d1:40:63:b3:df:ca:df:6f:18:90:7a: 8c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F2:CA:58:F4:80:07:B4:49:59:0A:C8:F1:A7:C9:D8:FE:A3:3E:AA X509v3 Authority Key Identifier: keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:ae:ce:74:cf:67:72:b2:f4:55:11:34:7a:ca:c6:d6:e8:4e: 3f:66:df:3d:ff:13:1f:9f:8a:1e:05:bd:7b:57:b1:e4:b2:8a: 2f:e3:d2:a3:5d:2d:0d:9d:c9:64:7c:ed:c8:1e:cf:bc:4f:f1: 73:1d:85:ac:bd:8b:f8:97:32:a6:2a:ec:c0:6b:38:ad:84:0f: c3:dc:9a:a8:ed:90:6e:a7:dc:6a:ce:71:12:f7:94:17:91:85: af:a8:a6:99:6e:69:5a:33:1b:f4:cd:5a:d9:fa:43:2e:37:92: 76:16:ca:d4:3e:fe:85:42:38:43:bf:24:57:6b:50:1a:11:10: 6c:ba:bd:3f:97:bf:42:54:9d:a0:2c:c3:f6:09:18:ef:b7:eb: ed:75:fd:9d:2c:f2:75:bc:3f:b1:6e:03:fc:1f:c1:ab:9e:3b: 49:1a:a7:4b:ff:10:98:50:52:7f:20:f8:d8:49:54:a2:9c:4c: 24:55:a2:7f:5d:da:56:90:a5:60:1d:22:75:b9:c9:9f:f3:68: 3f:ea:c7:4b:d6:e1:c6:cc:4a:8c:3a:dd:ba:9a:0e:35:eb:ea: d5:59:a1:f7:62:d9:51:a5:53:2e:0d:80:b9:07:3c:4f:61:d3: 6f:75:8f:37:a3:88:b6:fc:19:d1:a5:6d:1b:9c:0e:4a:52:d0: 03:9c:48:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/OKl4zPePq1H9kZPczkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTQwMzQ4NDYzYzYwY2U5ZmM2OTQwNjBhMzdmNDY4MzA5 M2YwNDUwHhcNMjYwMjA5MDYwMDQwWhcNMjYwMjEwMDYwMDQwWjAzMTEwLwYDVQQD EygwOGYyY2E1OGY0ODAwN2I0NDk1OTBhYzhmMWE3YzlkOGZlYTMzZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEHf11sySwVZwmFCOsxcB2BSL72S mUwC2IKUhKPfu5wnoesBeBuNx1RB291+fELVnx4BZmgUGbSKDGVYxTfpefvf7jrd m3dTvOVwH41zymXKn+g1/2ZWhppeiVMDU/TascMImzl4Dgmz0UTnDLjvjwHIQNgF E8P+5PrjY96yZMa9DlW7od17bF8aRz9L+BihczTBMvCJGpLdG891q8iByGL+nT73 sCQiCIQrIiIKwLOWyXxSZKm9vN5HsOCJk1kgOEFRmrEK2DwLT9t/s43SQh3xCQH0 hq0rI5B2vsEQHg+2EK5zIJ6VGYuqZtqXYLC7dGRk0UBjs9/K328YkHqMywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjyylj0gAe0SVkKyPGnydj+oz6qMB8GA1UdIwQY MBaAFDTkA0hGPGDOn8aUBgo39Ggwk/BFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYt MWI5OWZkMDk3NjNlLzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYtMWI5OWZkMDk3NjNl LzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA167OdM9n crL0VRE0esrG1uhOP2bfPf8TH5+KHgW9e1ex5LKKL+PSo10tDZ3JZHztyB7PvE/x cx2FrL2L+JcypirswGs4rYQPw9yaqO2Qbqfcas5xEveUF5GFr6immW5pWjMb9M1a 2fpDLjeSdhbK1D7+hUI4Q78kV2tQGhEQbLq9P5e/QlSdoCzD9gkY77fr7XX9nSzy dbw/sW4D/B/Bq547SRqnS/8QmFBSfyD42ElUopxMJFWif13aVpClYB0idbnJn/No P+rHS9bhxsxKjDrdupoONevq1Vmh92LZUaVTLg2AuQc8T2HTb3WPN6OItvwZ0aVt G5wOSlLQA5xIEA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:41 2026 by rpki-client