This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft File: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json) Hash identifier: 9J5sVSm31O+oXkS9G/8hNB55UYxi8QxVqqDzxMleRH4= Subject key identifier: EB:A7:77:C7:3A:11:27:BD:34:B4:F4:A4:59:30:FF:BC:25:94:DF:82 Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0 Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0 Certificate serial: 019C43FDCFDA3E72E143C1AE660B4551E06B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 20:00:33 +0000 Manifest this update: Mon 09 Feb 2026 20:00:33 +0000 Manifest next update: Tue 10 Feb 2026 20:00:33 +0000 Files and hashes: 1: 5MfrvFJHqhqYrR1Oc9h-OkMPeG4.roa (hash: QQ5YRKyPOHLwW62MQSDhBmGI/lB6OrTfowyUhMbXM7A=) 2: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: 2B67loRfJCMHhC1U9w1xAfiy+rkpPsymmRoO7BIEh24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:cf:da:3e:72:e1:43:c1:ae:66:0b:45:51:e0:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0 Validity Not Before: Feb 9 20:00:33 2026 GMT Not After : Feb 10 20:00:33 2026 GMT Subject: CN=eba777c73a1127bd34b4f4a45930ffbc2594df82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:fd:22:d1:c8:21:73:45:cd:1e:14:22:2a: 75:99:5d:52:f7:12:f9:86:1b:50:01:c2:8e:1e:8b: 6f:4f:f9:12:13:21:1f:c2:ef:51:48:20:f0:38:59: eb:41:59:77:e2:25:91:c6:70:02:2d:1d:02:9d:99: 7a:66:45:3b:2a:6a:b5:f0:69:51:0d:ed:9a:da:42: 42:ae:4b:29:c3:91:36:a9:de:3b:0c:c7:d0:9a:f2: f0:31:2c:7e:cc:14:fc:bf:ee:9b:f0:b4:59:d4:6b: 37:c7:01:e1:97:87:9d:18:94:47:9e:de:c1:b2:07: 74:35:02:d6:0d:47:b9:1a:cb:fc:fa:9a:8f:da:36: 4e:a3:77:5b:be:f0:b0:d4:a1:0b:a9:da:90:3d:22: b5:71:d3:0d:91:b5:4f:9d:d7:fa:46:f6:26:2d:5f: 30:4a:ef:50:13:37:6b:e8:8f:80:a5:67:27:b9:71: 69:0d:55:9e:0a:ba:c5:65:cd:dd:dd:a2:4a:b1:ec: 4c:11:3c:3e:84:bb:f1:cf:d3:92:90:b5:d9:3f:70: 65:fa:9e:0d:ec:07:8c:c7:5a:ed:c0:12:b6:9f:3d: 75:76:44:f2:b7:82:3a:5a:d3:0b:77:2a:2c:36:3e: f7:b4:82:b1:34:cf:e6:ac:eb:c8:d4:25:3e:03:82: 9b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A7:77:C7:3A:11:27:BD:34:B4:F4:A4:59:30:FF:BC:25:94:DF:82 X509v3 Authority Key Identifier: keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ae:f9:ba:3a:ee:8a:de:7e:9a:75:77:1b:18:87:cb:45:f2: 53:29:bd:dc:09:62:e9:b6:72:f6:76:e4:96:88:95:b7:ea:39: d3:84:d9:2c:ef:b6:e8:e3:97:b6:8f:5a:24:3a:33:ed:30:dd: 4c:a7:75:3d:84:18:87:9c:94:31:87:36:3d:fc:08:f0:d1:32: ab:47:5f:72:25:22:55:79:36:c7:96:96:df:a7:3d:07:7f:4f: cd:59:7b:3a:09:d4:b1:4c:8c:50:a4:bf:3e:1a:57:19:ca:fd: a5:bc:90:cb:b3:53:4c:ab:05:08:54:4d:07:0d:1b:02:d2:fa: 4f:6d:20:51:19:f6:93:8e:ea:3a:5b:50:cd:4f:bd:83:1b:5c: cf:cb:28:59:ec:18:72:73:77:44:1b:03:84:8d:d5:6c:8e:7b: 3f:f8:e2:7a:1c:07:1a:ee:11:f2:65:60:4a:5d:01:7d:fa:11: 33:30:66:cc:64:18:12:76:bd:a5:af:24:3e:c7:b9:36:22:d6: df:99:8c:25:9f:50:c3:99:42:56:31:a7:95:80:02:8d:66:71: be:1a:d8:69:c8:9c:b7:78:fd:64:9a:ab:a2:eb:25:8f:d1:7c: a6:46:1a:63:07:df:05:05:83:6f:a5:73:fd:b7:b0:e4:e5:a5: 1c:8b:c0:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/c/aPnLhQ8GuZgtFUeBrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OGZkOTc3Y2NiZTdiYjk2ZDNjMGYzMTc0Yzk5NTFiZjg3 MGZlYjAwHhcNMjYwMjA5MjAwMDMzWhcNMjYwMjEwMjAwMDMzWjAzMTEwLwYDVQQD EyhlYmE3NzdjNzNhMTEyN2JkMzRiNGY0YTQ1OTMwZmZiYzI1OTRkZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3r9ItHIIXNFzR4UIip1mV1S9xL5 hhtQAcKOHotvT/kSEyEfwu9RSCDwOFnrQVl34iWRxnACLR0CnZl6ZkU7Kmq18GlR De2a2kJCrkspw5E2qd47DMfQmvLwMSx+zBT8v+6b8LRZ1Gs3xwHhl4edGJRHnt7B sgd0NQLWDUe5Gsv8+pqP2jZOo3dbvvCw1KELqdqQPSK1cdMNkbVPndf6RvYmLV8w Su9QEzdr6I+ApWcnuXFpDVWeCrrFZc3d3aJKsexMETw+hLvxz9OSkLXZP3Bl+p4N 7AeMx1rtwBK2nz11dkTyt4I6WtMLdyosNj73tIKxNM/mrOvI1CU+A4KbTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOund8c6ESe9NLT0pFkw/7wllN+CMB8GA1UdIwQY MBaAFDSP2XfMvnu5bTwPMXTJlRv4cP6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2Yt YmU3NzBlMWU2YzEzLzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2YtYmU3NzBlMWU2YzEz LzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvK75ujru it5+mnV3GxiHy0XyUym93Ali6bZy9nbkloiVt+o504TZLO+26OOXto9aJDoz7TDd TKd1PYQYh5yUMYc2PfwI8NEyq0dfciUiVXk2x5aW36c9B39PzVl7OgnUsUyMUKS/ PhpXGcr9pbyQy7NTTKsFCFRNBw0bAtL6T20gURn2k47qOltQzU+9gxtcz8soWewY cnN3RBsDhI3VbI57P/jiehwHGu4R8mVgSl0BffoRMzBmzGQYEna9pa8kPse5NiLW 35mMJZ9Qw5lCVjGnlYACjWZxvhrYacict3j9ZJqrouslj9F8pkYaYwffBQWDb6Vz /bew5OWlHIvA3Q== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:12 2026 by rpki-client