This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json) Hash identifier: bVQORCoIi6kJSq5j2rFvREh7VqtFp0ob0vDjSc2ijHk= Subject key identifier: 60:A5:EE:F6:28:86:DD:08:A8:84:49:14:0B:0A:EE:BB:03:30:1A:74 Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91 Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291 Certificate serial: 019C43C715A688BF72392C5A8C12291D6A22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 19:00:46 +0000 Manifest this update: Mon 09 Feb 2026 19:00:46 +0000 Manifest next update: Tue 10 Feb 2026 19:00:46 +0000 Files and hashes: 1: A1iR6bQzfWrt-3S-DrDY84sQ1JU.roa (hash: yW7YhSTGjTCd5hdSGTzNJGlqpUw27PcefgpccczhLt0=) 2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: wnBOawwXGa2SN+uEzIuKfz1zU7P1VG26pXeoU0abio0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:15:a6:88:bf:72:39:2c:5a:8c:12:29:1d:6a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291 Validity Not Before: Feb 9 19:00:46 2026 GMT Not After : Feb 10 19:00:46 2026 GMT Subject: CN=60a5eef62886dd08a88449140b0aeebb03301a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:c4:ef:13:8b:75:6b:c6:db:15:eb:87:2d: c8:8b:4e:49:43:8c:41:69:ce:8c:27:9f:b4:95:f9: 73:28:9d:82:16:31:26:e5:b0:da:92:95:c4:dd:37: 66:ed:c2:22:69:f4:52:e0:3b:a7:2d:4e:22:00:ab: 81:ea:99:f5:19:65:a6:80:6d:e9:7a:c9:78:3b:1e: 19:7e:bf:05:04:f1:f2:ce:36:a0:86:6b:e7:38:ba: 4e:47:9c:30:37:4f:a3:69:c2:f6:9d:99:91:e2:f8: d5:95:42:03:fe:7a:7d:9b:b7:d3:89:4d:7e:7c:84: 5c:6f:bb:e2:26:04:bd:bf:a7:bc:d5:fc:be:31:6a: 7d:68:91:19:0d:59:ee:d3:11:6e:2e:75:f0:3e:3e: 40:d0:39:70:08:7e:2b:02:38:15:3b:46:d0:6d:2f: 5f:4d:c3:2a:f1:c2:a0:76:7a:0b:03:1e:49:85:64: 04:c4:7c:ea:5b:20:b8:02:14:c5:50:82:2d:9c:90: d1:3e:37:5a:de:ed:09:a7:bf:36:94:66:dc:ef:85: 07:68:3e:28:05:f7:5e:be:6f:76:ac:db:34:cb:9f: e1:6b:11:6e:d5:4f:fc:a2:29:c3:82:81:35:1e:c7: 66:47:4d:32:05:b1:28:bc:43:66:e4:7c:18:30:5a: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A5:EE:F6:28:86:DD:08:A8:84:49:14:0B:0A:EE:BB:03:30:1A:74 X509v3 Authority Key Identifier: keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ac:24:7d:d3:1b:13:d4:c2:f1:0f:15:c9:88:9c:84:89:46: ce:92:2c:25:69:96:c0:88:80:43:8b:44:6e:cc:9b:97:73:2c: e4:d9:38:e5:63:09:4b:42:c2:c4:fb:f5:5d:d2:80:1e:c5:c0: d9:e5:de:9b:98:42:2c:e6:60:d2:0c:5a:cb:66:70:44:74:91: c3:69:03:8d:ed:45:76:15:3e:de:7c:4e:6b:32:8a:4e:f6:a5: 65:ac:9e:76:73:35:b3:6d:2b:82:c2:df:30:fb:19:f8:97:ff: 97:d7:11:11:54:18:85:ce:71:59:95:0e:9e:6e:ff:9a:fc:5a: a2:f2:fb:ff:70:81:13:2a:4a:cb:e7:93:0b:15:5f:c9:3c:2f: 36:d6:9e:71:f3:47:d8:9e:6a:55:dd:3f:d6:b4:4b:c8:22:3a: 96:4d:22:6d:00:6b:fe:42:c6:b4:3c:2f:6e:b4:5c:40:ec:74: 59:2d:eb:a6:b0:ad:f6:e6:14:49:eb:22:ab:02:02:59:90:a5: 88:d0:2e:de:9b:02:74:b0:cb:34:38:25:15:80:33:95:70:a3: ed:05:ce:89:36:c7:03:26:46:03:05:56:1c:7e:77:bb:44:40: 0a:ca:10:69:a7:14:60:83:1b:57:6a:30:8a:be:61:da:c8:af: 14:0e:f7:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxxWmiL9yOSxajBIpHWoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Y2IxNmU0NGNmYmYwN2U5N2Y2ZjVlNDRhZTcxOGFhNTBk MDUyOTEwHhcNMjYwMjA5MTkwMDQ2WhcNMjYwMjEwMTkwMDQ2WjAzMTEwLwYDVQQD Eyg2MGE1ZWVmNjI4ODZkZDA4YTg4NDQ5MTQwYjBhZWViYjAzMzAxYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1afE7xOLdWvG2xXrhy3Ii05JQ4xB ac6MJ5+0lflzKJ2CFjEm5bDakpXE3Tdm7cIiafRS4DunLU4iAKuB6pn1GWWmgG3p esl4Ox4Zfr8FBPHyzjaghmvnOLpOR5wwN0+jacL2nZmR4vjVlUID/np9m7fTiU1+ fIRcb7viJgS9v6e81fy+MWp9aJEZDVnu0xFuLnXwPj5A0DlwCH4rAjgVO0bQbS9f TcMq8cKgdnoLAx5JhWQExHzqWyC4AhTFUIItnJDRPjda3u0Jp782lGbc74UHaD4o Bfdevm92rNs0y5/haxFu1U/8oinDgoE1HsdmR00yBbEovENm5HwYMFq3swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCl7vYoht0IqIRJFAsK7rsDMBp0MB8GA1UdIwQY MBaAFDbLFuRM+/B+l/b15ErnGKpQ0FKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmIt MTBjYmM1OTdhNzFhLzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmItMTBjYmM1OTdhNzFh LzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqwkfdMb E9TC8Q8VyYichIlGzpIsJWmWwIiAQ4tEbsybl3Ms5Nk45WMJS0LCxPv1XdKAHsXA 2eXem5hCLOZg0gxay2ZwRHSRw2kDje1FdhU+3nxOazKKTvalZayednM1s20rgsLf MPsZ+Jf/l9cREVQYhc5xWZUOnm7/mvxaovL7/3CBEypKy+eTCxVfyTwvNtaecfNH 2J5qVd0/1rRLyCI6lk0ibQBr/kLGtDwvbrRcQOx0WS3rprCt9uYUSesiqwICWZCl iNAu3psCdLDLNDglFYAzlXCj7QXOiTbHAyZGAwVWHH53u0RACsoQaacUYIMbV2ow ir5h2sivFA73jg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:27 2026 by rpki-client