This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft File: njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json) Hash identifier: xMToi4n0QgFDpd4QsZpkG0hpI3EhCEFUqhwMxzafhKg= Subject key identifier: 99:C7:FA:A0:B3:A2:54:30:88:C9:62:8A:53:33:76:28:E4:9C:43:CB Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a Certificate serial: 019C4246B5195372D22DB0322010A8D07737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft Manifest number: 0A08 Signing time: Mon 09 Feb 2026 12:00:56 +0000 Manifest this update: Mon 09 Feb 2026 12:00:56 +0000 Manifest next update: Tue 10 Feb 2026 12:00:56 +0000 Files and hashes: 1: OZYu8TXfUk-kbxX_bRvIgQ0oovM.roa (hash: Ny452KM+a4Sd+vTRDWLyo6c+SHTZU1CTK6tileQUJVE=) 2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: JeDXm8kxOi18BJdng0IGK7GeQ0TGTPZW7j/rKtY1P6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b5:19:53:72:d2:2d:b0:32:20:10:a8:d0:77:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a Validity Not Before: Feb 9 12:00:56 2026 GMT Not After : Feb 10 12:00:56 2026 GMT Subject: CN=99c7faa0b3a2543088c9628a53337628e49c43cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:eb:d8:b5:23:4f:22:11:7d:ae:c6:b4:fc: 07:7c:0f:4e:a6:78:93:bd:41:a5:48:13:d4:97:81: 81:bc:c6:9a:0c:d3:78:8c:97:9f:b0:c6:4f:ae:77: 37:88:fa:e9:de:1a:2c:25:8f:ec:de:14:d5:47:24: 93:ea:9f:af:03:df:b4:a7:09:24:2c:4d:09:49:3c: ff:b7:54:3a:3c:bf:d6:17:cb:87:de:0d:e6:07:42: f2:e4:a6:da:41:d5:a7:0f:6a:d2:e3:7d:aa:8e:78: a8:c3:5b:72:0f:ed:31:69:79:ee:dc:f1:69:5a:52: b9:98:68:3f:b5:0f:a4:75:fe:6f:e6:d1:25:ac:95: ca:50:06:1e:53:b3:d8:11:ef:e3:2c:d0:e1:ca:ab: 52:71:c2:9a:10:9a:42:8d:06:de:6d:f2:c2:1e:36: c9:fc:1e:ae:aa:b1:89:cc:35:dc:07:a3:29:de:ad: 21:5c:ef:ff:2a:d3:43:13:8d:78:18:1e:87:c3:a7: dc:f9:6a:47:c6:d8:9f:c7:33:fd:c3:2f:14:a2:25: ff:ce:cc:b4:15:d1:25:7e:70:89:e9:7c:f0:07:b4: da:9f:d9:e6:c1:0b:a7:4f:75:75:a2:f1:7d:4d:52: 1d:f6:c5:ae:e7:e0:c5:02:88:a6:de:84:28:e5:6b: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C7:FA:A0:B3:A2:54:30:88:C9:62:8A:53:33:76:28:E4:9C:43:CB X509v3 Authority Key Identifier: keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0b:5b:19:18:dd:e6:aa:b2:51:a8:6e:77:f8:b4:5a:58:9d: bf:9a:51:84:eb:52:5a:22:17:e4:52:0a:e3:9d:7d:58:e3:37: ce:f7:20:87:b5:18:16:d5:da:95:b5:5c:0b:ba:f5:9b:31:26: 3c:6c:76:aa:79:4f:71:1c:b4:d8:92:ae:6e:52:b1:07:41:9f: 07:31:78:bd:0d:9f:f4:7e:9d:c3:30:36:dc:78:92:59:2f:8b: 2c:55:cf:8b:64:b3:65:aa:96:0a:e6:63:cf:5f:d1:b6:67:37: b6:43:14:0a:2f:91:c0:1f:6e:2d:0c:c5:4f:cd:d1:ac:a3:6c: 0b:d8:c7:21:06:9a:3a:d8:71:d2:f5:2f:3f:fa:ec:4a:ac:d3: 6c:bd:0d:33:28:37:e1:88:42:8e:a5:66:64:39:45:30:d1:2d: 4e:2e:e2:89:95:44:5f:9f:79:3d:5a:19:d8:37:90:db:1d:ae: 9b:27:5c:03:43:98:63:9d:18:81:5b:16:2f:f4:03:70:ca:85: d9:7d:a2:b1:ea:ec:18:6d:19:7d:e0:76:59:43:8b:e3:48:fd: 1d:99:27:cc:56:6a:44:70:e1:5f:1b:ba:a3:eb:1b:67:b8:c0: 62:fe:49:52:ed:54:ff:fb:26:fd:bd:b1:36:56:7b:07:4b:a5: 67:26:81:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrUZU3LSLbAyIBCo0Hc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzRiMTg2MjcxY2NiODljNWU1OGIzMGU3MGJkNzQxMDlj YzI4NGEwHhcNMjYwMjA5MTIwMDU2WhcNMjYwMjEwMTIwMDU2WjAzMTEwLwYDVQQD Eyg5OWM3ZmFhMGIzYTI1NDMwODhjOTYyOGE1MzMzNzYyOGU0OWM0M2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj3r2LUjTyIRfa7GtPwHfA9OpniT vUGlSBPUl4GBvMaaDNN4jJefsMZPrnc3iPrp3hosJY/s3hTVRyST6p+vA9+0pwkk LE0JSTz/t1Q6PL/WF8uH3g3mB0Ly5KbaQdWnD2rS432qjniow1tyD+0xaXnu3PFp WlK5mGg/tQ+kdf5v5tElrJXKUAYeU7PYEe/jLNDhyqtSccKaEJpCjQbebfLCHjbJ /B6uqrGJzDXcB6Mp3q0hXO//KtNDE414GB6Hw6fc+WpHxtifxzP9wy8UoiX/zsy0 FdElfnCJ6XzwB7Tan9nmwQunT3V1ovF9TVId9sWu5+DFAoim3oQo5WueZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnH+qCzolQwiMliilMzdijknEPLMB8GA1UdIwQY MBaAFJ40sYYnHMuJxeWLMOcL10EJzChKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTkt ZGQ1ZmZkNTMxNTcxLzEvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTktZGQ1ZmZkNTMxNTcx LzEvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQtbGRjd 5qqyUahud/i0Wlidv5pRhOtSWiIX5FIK4519WOM3zvcgh7UYFtXalbVcC7r1mzEm PGx2qnlPcRy02JKublKxB0GfBzF4vQ2f9H6dwzA23HiSWS+LLFXPi2SzZaqWCuZj z1/Rtmc3tkMUCi+RwB9uLQzFT83RrKNsC9jHIQaaOthx0vUvP/rsSqzTbL0NMyg3 4YhCjqVmZDlFMNEtTi7iiZVEX595PVoZ2DeQ2x2umydcA0OYY50YgVsWL/QDcMqF 2X2isersGG0ZfeB2WUOL40j9HZknzFZqRHDhXxu6o+sbZ7jAYv5JUu1U//sm/b2x NlZ7B0ulZyaBSQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:28 2026 by rpki-client