This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json) Hash identifier: BI9owK9w+wLdGpRAxUHrFv7V4CcLnZGzfsYEN1e6qsw= Subject key identifier: 97:E7:6A:A8:91:41:7C:32:5D:DB:EF:FF:6E:77:C4:C3:3A:3B:21:92 Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8 Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8 Certificate serial: 019C42EB03324E8C99F01C2EB750770B70A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft Manifest number: 132F Signing time: Mon 09 Feb 2026 15:00:23 +0000 Manifest this update: Mon 09 Feb 2026 15:00:23 +0000 Manifest next update: Tue 10 Feb 2026 15:00:23 +0000 Files and hashes: 1: QTigOcVAdf_ybq4yALkL6wD-Vpo.roa (hash: GLaLa+CpFjjdWnIOnhYXw5MIYp/169ESCt0275EXVGo=) 2: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: vjuMDB9rdWH/+sDFjrj3B46u14aef9w6ZO+je3fsM/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:03:32:4e:8c:99:f0:1c:2e:b7:50:77:0b:70:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8 Validity Not Before: Feb 9 15:00:23 2026 GMT Not After : Feb 10 15:00:23 2026 GMT Subject: CN=97e76aa891417c325ddbefff6e77c4c33a3b2192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:62:76:01:e0:47:6f:8b:6a:34:39:3a:49:da: 89:31:80:1c:fe:c2:9a:9f:b8:dd:65:89:bd:bc:4e: d9:04:b7:15:86:45:7c:4c:ba:28:c6:e7:37:c2:f3: 67:57:18:55:7e:e3:12:18:cf:76:a3:64:c6:87:3f: 18:73:30:49:2e:a7:47:02:ac:69:02:b1:c2:6e:c5: 75:e0:c6:8a:03:fa:ee:f3:aa:a8:f7:f7:d5:9b:b0: 9b:7e:34:db:60:81:97:2e:d7:9a:bd:07:6a:39:29: b7:98:9f:8d:11:12:61:df:a4:92:56:5a:da:3b:49: 1b:06:86:61:f8:a1:0f:6a:59:99:a1:7a:5b:d2:15: e4:74:d4:c1:cb:45:d5:0e:68:12:92:a4:5f:77:d9: 84:e6:d5:c5:9a:82:c7:fe:7d:55:10:be:bc:2f:cd: ce:7e:03:c8:ca:93:71:5a:df:e9:0a:e7:bc:b0:72: ca:66:5d:1c:3b:70:de:e2:16:2b:81:24:6b:6e:bf: 86:b1:dd:97:fc:1b:1c:2c:75:cd:5b:1d:58:23:55: c2:d0:af:1a:bc:fd:b1:6d:48:0d:91:e0:44:c5:40: 1f:a8:ff:fc:c7:e4:97:a6:12:84:6e:fb:6e:7f:f8: bb:93:c9:7d:af:99:55:fd:f4:66:f2:4a:59:0b:cc: f0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E7:6A:A8:91:41:7C:32:5D:DB:EF:FF:6E:77:C4:C3:3A:3B:21:92 X509v3 Authority Key Identifier: keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:90:53:32:07:36:56:71:fc:f9:7a:49:32:a5:ec:e4:b2:60: 8d:bf:09:3a:c1:69:af:0e:cf:36:94:a3:65:c6:e1:b6:5a:4c: 3a:bd:87:74:05:f0:1f:d7:0e:b6:e0:c4:2c:94:fa:e3:ce:af: 17:9e:7b:1d:5e:d2:44:94:09:c2:da:e2:e1:04:00:59:60:75: fb:4f:6e:4c:94:45:03:48:dc:95:9c:53:54:07:b7:95:40:6b: 40:a2:13:a3:0f:88:18:4f:2c:fc:b5:90:04:4a:51:ca:63:e6: b3:53:95:71:0b:df:f5:53:a1:71:32:a9:d0:9e:bd:dc:e9:e5: 43:17:b3:ad:7b:49:85:27:51:dd:fa:a9:08:c4:dd:ec:99:ef: 99:d8:ed:3b:65:39:49:c5:9b:fc:fb:15:61:8d:df:8f:f0:be: 69:1e:b9:57:82:76:99:31:d3:a5:db:ca:0e:65:03:32:c2:f9: 4a:fe:1c:4b:8c:fa:27:87:f2:e4:4b:b1:6a:c9:89:2b:45:16: c8:a2:7e:65:39:a8:c0:ca:88:5f:a6:3b:ba:ff:e1:41:35:70: d4:32:36:b0:61:b9:12:c4:20:ca:14:87:54:1f:33:0e:bd:4b: ff:89:ed:d1:97:fb:8d:a3:66:be:82:75:5d:06:5e:47:5c:b0: 0c:93:3b:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wMyToyZ8Bwut1B3C3CoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTFlN2UyZjhmMzE3NzU5ZjM0NjhmZDgxNWJmMTRlYjM2 ZTIxYzgwHhcNMjYwMjA5MTUwMDIzWhcNMjYwMjEwMTUwMDIzWjAzMTEwLwYDVQQD Eyg5N2U3NmFhODkxNDE3YzMyNWRkYmVmZmY2ZTc3YzRjMzNhM2IyMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGJ2AeBHb4tqNDk6SdqJMYAc/sKa n7jdZYm9vE7ZBLcVhkV8TLooxuc3wvNnVxhVfuMSGM92o2TGhz8YczBJLqdHAqxp ArHCbsV14MaKA/ru86qo9/fVm7CbfjTbYIGXLteavQdqOSm3mJ+NERJh36SSVlra O0kbBoZh+KEPalmZoXpb0hXkdNTBy0XVDmgSkqRfd9mE5tXFmoLH/n1VEL68L83O fgPIypNxWt/pCue8sHLKZl0cO3De4hYrgSRrbr+Gsd2X/BscLHXNWx1YI1XC0K8a vP2xbUgNkeBExUAfqP/8x+SXphKEbvtuf/i7k8l9r5lV/fRm8kpZC8zwQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfnaqiRQXwyXdvv/253xMM6OyGSMB8GA1UdIwQY MBaAFJ6h5+L48xd1nzRo/YFb8U6zbiHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFIbjR2anpGM1dmTkdqOWdWdnhUck51SWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYTM1NzctY2NiMy00ZWE2LTgzNjgt NzQ1ODYwOGY4ZDk5LzEvbnFIbjR2anpGM1dmTkdqOWdWdnhUck51SWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iYTM1NzctY2NiMy00ZWE2LTgzNjgtNzQ1ODYwOGY4ZDk5 LzEvbnFIbjR2anpGM1dmTkdqOWdWdnhUck51SWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZBTMgc2 VnH8+XpJMqXs5LJgjb8JOsFprw7PNpSjZcbhtlpMOr2HdAXwH9cOtuDELJT6486v F557HV7SRJQJwtri4QQAWWB1+09uTJRFA0jclZxTVAe3lUBrQKITow+IGE8s/LWQ BEpRymPms1OVcQvf9VOhcTKp0J693OnlQxezrXtJhSdR3fqpCMTd7JnvmdjtO2U5 ScWb/PsVYY3fj/C+aR65V4J2mTHTpdvKDmUDMsL5Sv4cS4z6J4fy5EuxasmJK0UW yKJ+ZTmowMqIX6Y7uv/hQTVw1DI2sGG5EsQgyhSHVB8zDr1L/4nt0Zf7jaNmvoJ1 XQZeR1ywDJM7LQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:58 2026 by rpki-client