This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft File: N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json) Hash identifier: riBsxgytq/L8T0cw1c22/5IzolYAS7X73qhNn/vIuDM= Subject key identifier: 64:40:F4:B8:46:37:12:4D:0B:A7:ED:CA:F7:A9:4E:AA:4F:A4:65:2F Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19 Certificate issuer: /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19 Certificate serial: 019C41A20A208B20625EDF9DA954496C9049 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft Manifest number: 0695 Signing time: Mon 09 Feb 2026 09:01:04 +0000 Manifest this update: Mon 09 Feb 2026 09:01:04 +0000 Manifest next update: Tue 10 Feb 2026 09:01:04 +0000 Files and hashes: 1: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: N/3CJZw2EuyWz0KIa/lePMctRfg/cXLHWqWbl2/Zn4w=) 2: ptyQIs6zOdQaePAf0264xdbfsHE.roa (hash: zeWTG0uQV8YLaSyS7vNW/ey9XtXZbEHMRMH0ynFCKsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:0a:20:8b:20:62:5e:df:9d:a9:54:49:6c:90:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19 Validity Not Before: Feb 9 09:01:04 2026 GMT Not After : Feb 10 09:01:04 2026 GMT Subject: CN=6440f4b84637124d0ba7edcaf7a94eaa4fa4652f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:95:26:1b:d6:4a:de:19:cf:ef:fb:fd:73:9c: d4:5d:34:22:98:32:20:da:64:9d:97:40:87:f7:0f: d2:e0:4f:0b:ee:dd:04:03:e0:4f:eb:6a:db:d5:7b: 8f:89:2f:c4:7c:da:c4:57:77:98:48:8d:da:25:6f: 75:c4:10:52:cd:37:3d:61:9c:2c:d6:50:08:95:5b: 28:25:18:4f:37:65:b7:36:a2:be:f3:33:6b:8b:49: 8d:14:bc:d5:7f:9c:55:60:3e:8c:9b:19:80:da:9d: d4:fe:93:6a:9f:a0:f3:8d:6c:65:b3:a0:ab:c3:7f: de:bc:15:25:98:05:e6:20:72:29:c2:e1:bf:64:42: 69:6f:a8:e6:45:d9:86:91:4a:64:6a:1f:38:b6:1a: 3f:ca:11:7d:02:53:34:b8:c9:ca:1d:28:be:f5:e8: ad:62:8d:cb:fe:7a:e5:a9:10:8f:99:56:9e:50:02: 31:33:30:aa:2a:5d:20:d7:e4:1f:13:a6:78:e6:16: 13:18:b5:1f:fa:33:f9:5c:cc:4b:4e:da:18:7c:df: cf:05:2a:84:15:9e:88:b5:ef:ea:26:04:01:6d:3b: 1a:e5:70:d7:6a:4d:86:ca:d5:e0:02:79:84:91:c9: f3:8c:53:98:bf:10:14:62:44:7f:a4:ae:c5:45:3b: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:40:F4:B8:46:37:12:4D:0B:A7:ED:CA:F7:A9:4E:AA:4F:A4:65:2F X509v3 Authority Key Identifier: keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:47:ad:1e:18:05:43:0c:04:aa:37:58:43:2a:d1:81:40:cc: fa:8f:22:19:3d:18:30:42:fd:c5:72:0a:4d:47:a2:a2:0a:22: 03:86:63:46:49:21:b9:59:2c:10:ac:2e:1d:f8:16:3a:79:3f: 8b:fe:56:93:bf:fd:f4:d6:28:ec:7f:e5:72:af:3d:38:48:c3: 13:85:d2:f3:7f:d8:8c:7c:78:2d:95:3f:71:9d:01:9a:62:a7: 25:00:3a:6b:52:f9:f2:e3:02:4d:ee:d8:b2:d7:ab:1a:35:22: bd:6f:a2:53:71:33:1c:4c:1f:f1:4c:15:d7:d9:bf:5b:e8:2c: 97:54:4d:1d:5f:c9:5f:b6:d9:9a:58:ee:0c:ca:5c:ef:6b:85: 7d:ca:76:a7:fc:0c:0c:23:50:d1:5a:32:44:32:71:07:99:3e: 19:dd:9f:c5:f7:bf:83:1c:ab:a5:b7:47:f6:a7:d7:28:26:a2: 26:cb:98:78:ff:9e:06:e0:00:b1:4b:77:a3:26:ca:69:71:54: 87:2d:bf:db:ae:03:48:b0:55:5a:ad:ea:8f:be:31:d8:01:ac: be:0e:53:e1:6b:db:d1:a9:d4:b5:22:6b:8b:b6:f5:e8:d9:76: b4:d8:b2:7d:c9:dd:7d:5c:43:29:1b:84:6d:94:14:06:e0:f2: e1:1f:bc:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBogogiyBiXt+dqVRJbJBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGJiNmE5ZmIyNDVhNGZhZmNiOGQ2MjFkMWM3NWY1OWQ2 ZWNhMTkwHhcNMjYwMjA5MDkwMTA0WhcNMjYwMjEwMDkwMTA0WjAzMTEwLwYDVQQD Eyg2NDQwZjRiODQ2MzcxMjRkMGJhN2VkY2FmN2E5NGVhYTRmYTQ2NTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JUmG9ZK3hnP7/v9c5zUXTQimDIg 2mSdl0CH9w/S4E8L7t0EA+BP62rb1XuPiS/EfNrEV3eYSI3aJW91xBBSzTc9YZws 1lAIlVsoJRhPN2W3NqK+8zNri0mNFLzVf5xVYD6MmxmA2p3U/pNqn6DzjWxls6Cr w3/evBUlmAXmIHIpwuG/ZEJpb6jmRdmGkUpkah84tho/yhF9AlM0uMnKHSi+9eit Yo3L/nrlqRCPmVaeUAIxMzCqKl0g1+QfE6Z45hYTGLUf+jP5XMxLTtoYfN/PBSqE FZ6Ite/qJgQBbTsa5XDXak2GytXgAnmEkcnzjFOYvxAUYkR/pK7FRTuH2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRA9LhGNxJNC6ftyvepTqpPpGUvMB8GA1UdIwQY MBaAFDdLtqn7JFpPr8uNYh0cdfWdbsoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTIt ZjIyNmIxNDRhODlhLzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTItZjIyNmIxNDRhODlh LzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEetHhgF QwwEqjdYQyrRgUDM+o8iGT0YMEL9xXIKTUeiogoiA4ZjRkkhuVksEKwuHfgWOnk/ i/5Wk7/99NYo7H/lcq89OEjDE4XS83/YjHx4LZU/cZ0BmmKnJQA6a1L58uMCTe7Y sterGjUivW+iU3EzHEwf8UwV19m/W+gsl1RNHV/JX7bZmljuDMpc72uFfcp2p/wM DCNQ0VoyRDJxB5k+Gd2fxfe/gxyrpbdH9qfXKCaiJsuYeP+eBuAAsUt3oybKaXFU hy2/264DSLBVWq3qj74x2AGsvg5T4Wvb0anUtSJri7b16Nl2tNiyfcndfVxDKRuE bZQUBuDy4R+8cw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:44 2026 by rpki-client