This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json) Hash identifier: a/ZEVLiB+I4ck/31W/Wme/cOuFDkHVCq4p7rcimYh3A= Subject key identifier: E0:43:3B:59:A0:9B:38:00:A5:02:19:E0:59:9A:64:D9:EA:75:47:93 Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c Certificate serial: 019C420FF25A0D4720841CC5AD948050FCD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 11:01:07 +0000 Manifest this update: Mon 09 Feb 2026 11:01:07 +0000 Manifest next update: Tue 10 Feb 2026 11:01:07 +0000 Files and hashes: 1: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: 0KSuawRGIXNrzR32b/G6cOFzl0xQLX0qPtEmZFLATbg=) 2: vw7eBru87ahloA7D5EH6hOtMUII.roa (hash: 2mimZ134P7WFkHrXJ/TfKbuB976ftfTz/nzdDHlC6dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:f2:5a:0d:47:20:84:1c:c5:ad:94:80:50:fc:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c Validity Not Before: Feb 9 11:01:07 2026 GMT Not After : Feb 10 11:01:07 2026 GMT Subject: CN=e0433b59a09b3800a50219e0599a64d9ea754793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:1d:73:ea:cb:2c:04:6e:e8:16:b7:b6:72: cd:cb:91:d3:1a:9f:1d:c8:c6:d4:1e:1c:d0:2e:9e: df:b4:0c:28:c5:84:49:f4:e6:69:78:e1:08:e7:87: 05:01:ee:a8:52:d0:96:77:c9:b2:df:b6:08:62:36: 2c:2d:37:f7:41:69:a1:51:b2:48:d7:80:0a:3a:c7: e1:3a:d5:8c:28:0b:53:a9:8e:0c:4e:be:11:cd:1a: ea:c1:03:66:2b:de:b7:9b:85:33:32:30:5e:bc:23: 47:86:1c:1a:79:05:e1:f7:15:5d:e5:fe:82:1e:b8: 37:36:32:8c:7d:7a:1e:90:d8:18:2a:6f:20:f4:7a: 7c:0b:e5:c7:1d:a7:8a:1c:b1:a2:59:c2:e8:14:8d: 82:db:fe:92:78:b3:ee:a4:43:4e:bc:12:5c:3d:d6: 37:c4:15:96:9b:98:20:a5:55:ac:74:da:95:7f:46: 83:46:f6:e8:60:ec:27:12:92:b6:3c:11:2a:02:ea: 14:e3:a5:ca:95:9f:e4:3b:72:ec:83:98:b1:0a:be: 4c:6a:37:01:3e:72:d6:96:43:a6:01:76:27:8c:2b: b0:b1:1e:77:fb:8c:f3:81:f2:61:38:41:f0:4c:04: 0b:ce:82:52:01:13:95:47:bf:1d:68:6b:c7:38:ca: 0e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:43:3B:59:A0:9B:38:00:A5:02:19:E0:59:9A:64:D9:EA:75:47:93 X509v3 Authority Key Identifier: keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0a:8b:7d:04:ee:96:80:0f:c3:cb:ed:6e:47:6e:e9:b5:68: 17:c8:3a:c1:5f:2a:ca:6b:14:f8:cd:5c:31:a4:0a:12:97:9b: 06:f3:a0:d8:53:3f:c7:23:0a:6a:08:8d:c0:8d:2b:27:6a:71: 95:28:fd:4e:44:7d:66:83:69:18:cc:ed:e6:81:4b:84:02:2e: 31:a4:4d:49:7c:4c:cb:6d:7c:91:c9:06:62:63:40:28:ca:32: de:f7:db:01:4f:15:20:c9:ad:b6:46:c4:80:23:b6:e0:7d:4a: 9f:99:9c:9d:fb:02:3d:62:b2:45:e8:20:79:2f:90:9f:8b:f6: d9:d6:b4:1d:15:d8:a8:b9:66:1b:6e:95:22:de:e0:b5:98:f3: 01:ae:7a:1f:01:7d:10:7f:f1:fc:e2:eb:34:3b:f1:bb:b4:44: ec:98:de:4a:78:c7:5c:33:ac:cb:9f:9a:f4:cc:c8:50:f9:25: 5c:86:d8:ba:36:be:09:a3:95:7c:a7:d7:2a:6a:84:83:ef:6c: ea:63:93:48:e4:03:06:d4:4b:12:94:99:1c:be:f5:3f:90:c3: 70:cd:fb:f3:5a:e2:10:83:ff:15:74:97:66:96:79:66:62:8a: ad:95:a5:d1:8c:14:10:ef:86:ff:66:59:a9:c3:96:d3:af:36: 77:78:4e:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/JaDUcghBzFrZSAUPzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMGFhZTZkNDVkMDZkZjdjNDI3OGVmNGYyMThlNDJkYjgw NzA5NGMwHhcNMjYwMjA5MTEwMTA3WhcNMjYwMjEwMTEwMTA3WjAzMTEwLwYDVQQD EyhlMDQzM2I1OWEwOWIzODAwYTUwMjE5ZTA1OTlhNjRkOWVhNzU0NzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHgdc+rLLARu6Ba3tnLNy5HTGp8d yMbUHhzQLp7ftAwoxYRJ9OZpeOEI54cFAe6oUtCWd8my37YIYjYsLTf3QWmhUbJI 14AKOsfhOtWMKAtTqY4MTr4RzRrqwQNmK963m4UzMjBevCNHhhwaeQXh9xVd5f6C Hrg3NjKMfXoekNgYKm8g9Hp8C+XHHaeKHLGiWcLoFI2C2/6SeLPupENOvBJcPdY3 xBWWm5ggpVWsdNqVf0aDRvboYOwnEpK2PBEqAuoU46XKlZ/kO3Lsg5ixCr5MajcB PnLWlkOmAXYnjCuwsR53+4zzgfJhOEHwTAQLzoJSAROVR78daGvHOMoOJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBDO1mgmzgApQIZ4FmaZNnqdUeTMB8GA1UdIwQY MBaAFJwKrm1F0G33xCeO9PIY5C24BwlMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQt Yjk4YmJiMTYzN2MwLzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQtYjk4YmJiMTYzN2Mw LzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAqLfQTu loAPw8vtbkdu6bVoF8g6wV8qymsU+M1cMaQKEpebBvOg2FM/xyMKagiNwI0rJ2px lSj9TkR9ZoNpGMzt5oFLhAIuMaRNSXxMy218kckGYmNAKMoy3vfbAU8VIMmttkbE gCO24H1Kn5mcnfsCPWKyReggeS+Qn4v22da0HRXYqLlmG26VIt7gtZjzAa56HwF9 EH/x/OLrNDvxu7RE7JjeSnjHXDOsy5+a9MzIUPklXIbYuja+CaOVfKfXKmqEg+9s 6mOTSOQDBtRLEpSZHL71P5DDcM3781riEIP/FXSXZpZ5ZmKKrZWl0YwUEO+G/2ZZ qcOW0682d3hOAA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:38 2026 by rpki-client