This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft File: nphC_lRy5id-eSB2x9OHcALi4lE.mft (raw, json) Hash identifier: KMXFTExhzlXyGhXsKkr4dyy+GokzswX0brnOWXWJ6cE= Subject key identifier: 45:9A:D3:25:2A:44:23:B7:E6:37:26:92:D5:66:72:CA:A3:B1:78:8D Authority key identifier: 9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51 Certificate issuer: /CN=9e9842fe5472e6277e792076c7d3877002e2e251 Certificate serial: 019C43C6CBC6C9C9AF8A34140C927D3FD37D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft Manifest number: 030F Signing time: Mon 09 Feb 2026 19:00:27 +0000 Manifest this update: Mon 09 Feb 2026 19:00:27 +0000 Manifest next update: Tue 10 Feb 2026 19:00:27 +0000 Files and hashes: 1: nphC_lRy5id-eSB2x9OHcALi4lE.crl (hash: OAvM18Z9bJUYz8r//ITyYQftypEQ3nT/+fj8I96FHJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:cb:c6:c9:c9:af:8a:34:14:0c:92:7d:3f:d3:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e9842fe5472e6277e792076c7d3877002e2e251 Validity Not Before: Feb 9 19:00:27 2026 GMT Not After : Feb 10 19:00:27 2026 GMT Subject: CN=459ad3252a4423b7e6372692d56672caa3b1788d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:11:80:40:ac:e1:5d:03:53:44:5b:25:26:76: 63:61:69:c2:5d:e5:71:de:fe:ba:0f:14:2f:16:f2: fd:24:d6:23:3a:50:9a:89:b6:9d:df:4b:b8:70:cf: 9a:7d:97:a4:f1:8a:9b:93:96:71:e5:e8:00:84:be: 13:4e:3c:b0:16:2f:55:aa:b8:37:90:48:76:d8:01: 79:ae:e4:de:f8:dd:4c:f8:d9:ae:9d:50:43:56:9f: bd:7c:00:9d:79:82:27:b1:fd:90:0a:7d:4e:0c:ed: ab:e7:25:93:89:ad:1a:a4:d6:5b:7a:e4:34:c4:f4: bc:f9:64:62:cf:9b:88:65:88:75:95:55:3b:b0:f3: cc:4d:b6:81:8b:b8:c7:11:3b:78:2f:7d:70:83:5e: 0e:58:76:3a:c4:cc:96:a1:da:a4:6c:25:6f:cb:d4: de:2a:b9:c9:b5:59:38:fd:2c:f8:2a:77:c2:a3:82: e3:a8:90:21:32:bf:a5:c4:a0:4e:ec:b5:10:85:83: 9f:50:2e:0f:5d:2f:47:48:c3:48:78:e5:fa:87:c6: 44:f9:cc:4a:49:a6:ae:6c:20:ff:44:b1:e0:eb:15: 01:9e:df:ca:75:84:d5:8e:92:f6:a1:c3:86:a5:33: 1c:ac:c0:4d:53:6e:20:aa:04:14:9b:87:a2:e9:dd: a4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9A:D3:25:2A:44:23:B7:E6:37:26:92:D5:66:72:CA:A3:B1:78:8D X509v3 Authority Key Identifier: keyid:9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:23:d2:76:36:a5:dc:4e:dd:3f:22:8e:c2:17:94:e2:3a:c2: 3c:a1:49:0d:b0:87:f3:0a:8d:d2:c1:5e:03:ee:9a:26:cf:ab: 35:3e:5d:aa:ac:39:ed:15:de:ca:24:09:0c:8a:00:5e:79:3f: 31:16:e1:0d:ff:3a:81:b5:11:02:bc:54:3f:4f:85:c2:10:95: 54:1a:cb:7f:bb:4f:3a:1e:75:ab:e4:e8:bd:bc:46:92:46:ce: 48:32:85:8c:a2:89:9e:c9:a5:e6:90:c7:68:6b:b8:fc:a1:ea: 0a:ed:2a:3a:48:81:5b:5c:47:9d:a5:a1:93:17:c5:fc:ae:7c: 28:46:e4:b4:70:bb:3d:f7:85:0c:2f:04:47:ad:4d:32:de:2b: 19:e0:d2:2c:f5:8b:a6:2e:6d:2a:56:26:32:a7:35:45:d2:c9: 2a:6f:4c:e7:b8:3e:9d:33:bb:c1:64:57:d8:96:62:86:19:d6: 01:63:56:11:57:39:83:fe:4d:c3:ae:b2:46:87:6e:8d:0d:b7: 6c:5c:35:59:a8:f0:f5:ec:98:04:0f:02:5d:cb:68:b3:4e:2c: 1b:7e:7f:64:20:55:83:0a:dd:c3:2e:58:0e:59:a0:69:a0:c1: 12:4d:a0:92:83:50:15:c4:a3:98:30:66:88:b4:cb:a2:3a:a1: 47:e4:ec:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxsvGycmvijQUDJJ9P9N9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTg0MmZlNTQ3MmU2Mjc3ZTc5MjA3NmM3ZDM4NzcwMDJl MmUyNTEwHhcNMjYwMjA5MTkwMDI3WhcNMjYwMjEwMTkwMDI3WjAzMTEwLwYDVQQD Eyg0NTlhZDMyNTJhNDQyM2I3ZTYzNzI2OTJkNTY2NzJjYWEzYjE3ODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhGAQKzhXQNTRFslJnZjYWnCXeVx 3v66DxQvFvL9JNYjOlCaibad30u4cM+afZek8Yqbk5Zx5egAhL4TTjywFi9Vqrg3 kEh22AF5ruTe+N1M+NmunVBDVp+9fACdeYInsf2QCn1ODO2r5yWTia0apNZbeuQ0 xPS8+WRiz5uIZYh1lVU7sPPMTbaBi7jHETt4L31wg14OWHY6xMyWodqkbCVvy9Te KrnJtVk4/Sz4KnfCo4LjqJAhMr+lxKBO7LUQhYOfUC4PXS9HSMNIeOX6h8ZE+cxK SaaubCD/RLHg6xUBnt/KdYTVjpL2ocOGpTMcrMBNU24gqgQUm4ei6d2kiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWa0yUqRCO35jcmktVmcsqjsXiNMB8GA1UdIwQY MBaAFJ6YQv5UcuYnfnkgdsfTh3AC4uJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBoQ19sUnk1aWQtZVNCMng5T0hjQUxpNGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84ZjExYjMtODljNS00YjExLTljMDkt M2EwN2Y5MjI0ZTIxLzEvbnBoQ19sUnk1aWQtZVNCMng5T0hjQUxpNGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS84ZjExYjMtODljNS00YjExLTljMDktM2EwN2Y5MjI0ZTIx LzEvbnBoQ19sUnk1aWQtZVNCMng5T0hjQUxpNGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCPSdjal 3E7dPyKOwheU4jrCPKFJDbCH8wqN0sFeA+6aJs+rNT5dqqw57RXeyiQJDIoAXnk/ MRbhDf86gbURArxUP0+FwhCVVBrLf7tPOh51q+TovbxGkkbOSDKFjKKJnsml5pDH aGu4/KHqCu0qOkiBW1xHnaWhkxfF/K58KEbktHC7PfeFDC8ER61NMt4rGeDSLPWL pi5tKlYmMqc1RdLJKm9M57g+nTO7wWRX2JZihhnWAWNWEVc5g/5Nw66yRodujQ23 bFw1Wajw9eyYBA8CXctos04sG35/ZCBVgwrdwy5YDlmgaaDBEk2gkoNQFcSjmDBm iLTLojqhR+TsJw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:17 2026 by rpki-client