This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json) Hash identifier: NN01wQwMtXn9xeRsHnXOK7tYVsKO1PZTduSmGeMEQ54= Subject key identifier: 8C:9C:F8:C3:06:42:CB:D1:11:A6:58:E4:07:88:90:E0:9E:DA:09:43 Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50 Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50 Certificate serial: 019C427D0D38D3EAB6B62B4F0A23AE164365 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft Manifest number: 125A Signing time: Mon 09 Feb 2026 13:00:17 +0000 Manifest this update: Mon 09 Feb 2026 13:00:17 +0000 Manifest next update: Tue 10 Feb 2026 13:00:17 +0000 Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: FbIgaTQKtSrCQHWF6lH0yFrhV29f7rk+14MqqVgrZQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:0d:38:d3:ea:b6:b6:2b:4f:0a:23:ae:16:43:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50 Validity Not Before: Feb 9 13:00:17 2026 GMT Not After : Feb 10 13:00:17 2026 GMT Subject: CN=8c9cf8c30642cbd111a658e4078890e09eda0943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e6:83:b9:a3:74:0c:47:0a:4e:79:85:c0:51: 31:6f:43:cc:39:77:35:5a:0f:94:9d:20:7f:9e:28: 1c:d0:a6:17:ce:1b:4d:7e:17:e7:32:49:2a:ad:a3: 57:d3:bd:78:02:c0:0c:f9:60:a6:e7:91:1b:95:76: 2e:a7:dc:fa:f5:39:e7:28:ae:9f:36:99:a4:bb:fe: a7:49:cd:66:ff:9a:7e:34:b2:0a:ea:03:71:92:9a: eb:01:7e:97:af:55:c1:27:4f:e9:a2:75:2a:79:80: 5b:58:c0:c4:5f:a1:13:b1:d6:2e:c1:af:75:07:77: fb:fe:ba:16:38:7e:48:60:82:8c:b0:0f:d8:e7:aa: 9e:d1:a8:21:00:f8:12:d1:b7:ce:a4:b4:fb:d6:db: d6:97:62:9f:67:f1:3c:e1:1f:99:68:37:0b:d6:9f: 23:f9:97:e3:36:40:ef:7b:31:a7:a5:be:5b:47:f1: de:77:ff:1d:14:ac:82:a9:d7:c2:18:bc:10:53:0d: 5a:a4:8e:e0:9f:df:18:81:f0:8e:c5:b2:71:ca:47: 64:4d:81:8e:e0:f4:35:04:e7:dc:93:29:3f:93:c5: 25:4b:f9:de:75:14:e0:10:5c:94:8c:4e:fa:95:6a: 6a:e2:e0:e6:c9:be:01:38:af:c1:3a:93:03:7f:96: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9C:F8:C3:06:42:CB:D1:11:A6:58:E4:07:88:90:E0:9E:DA:09:43 X509v3 Authority Key Identifier: keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:29:44:78:ce:7d:c9:5e:a9:07:96:0f:4d:c4:31:57:76:0a: 3c:8f:0f:64:11:ac:ff:ed:d9:62:3e:dc:73:7b:99:0d:fb:63: fd:18:15:b9:40:1b:00:7d:0b:50:04:9f:07:1b:16:39:fa:0f: 7e:ba:c7:9d:d3:7e:72:7f:75:aa:99:4c:dd:db:24:3c:15:b6: b6:bc:4d:6b:02:6d:b7:f0:66:7b:4e:3b:66:21:49:12:37:b9: 88:b2:51:e6:39:26:f2:e8:6b:d9:48:11:62:6b:b7:ab:94:66: a3:32:a4:23:00:34:f9:b8:69:d3:e2:de:1a:73:c5:1f:3d:d4: 5c:82:d7:77:e4:0d:73:81:36:c0:99:9d:d8:6a:50:35:37:26: 73:de:46:17:2c:8f:87:c6:ec:6d:a2:bd:18:18:d6:d2:62:84: 01:6a:e3:da:da:6d:95:e7:52:66:4a:3e:ad:39:6a:c4:fe:3e: 0e:bb:b7:c8:a9:c0:34:56:30:e7:9e:f8:a7:60:5d:5d:16:85: ad:76:e1:ff:be:58:55:21:05:84:e4:2e:ce:6d:df:68:d3:39: a3:57:b8:97:99:fb:6e:c2:91:21:21:26:c8:1e:da:49:be:bf: bc:72:fb:9b:59:c0:8b:34:f6:07:a1:d2:98:5b:96:f5:31:86: ea:58:56:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQ040+q2titPCiOuFkNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllM2U0YTMyZTA2YTE4NzIzNGUwMTc3ZjJjYmEwNTU2NGNk MWZiNTAwHhcNMjYwMjA5MTMwMDE3WhcNMjYwMjEwMTMwMDE3WjAzMTEwLwYDVQQD Eyg4YzljZjhjMzA2NDJjYmQxMTFhNjU4ZTQwNzg4OTBlMDllZGEwOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+aDuaN0DEcKTnmFwFExb0PMOXc1 Wg+UnSB/nigc0KYXzhtNfhfnMkkqraNX0714AsAM+WCm55EblXYup9z69TnnKK6f Npmku/6nSc1m/5p+NLIK6gNxkprrAX6Xr1XBJ0/ponUqeYBbWMDEX6ETsdYuwa91 B3f7/roWOH5IYIKMsA/Y56qe0aghAPgS0bfOpLT71tvWl2KfZ/E84R+ZaDcL1p8j +ZfjNkDvezGnpb5bR/Hed/8dFKyCqdfCGLwQUw1apI7gn98YgfCOxbJxykdkTYGO 4PQ1BOfckyk/k8UlS/nedRTgEFyUjE76lWpq4uDmyb4BOK/BOpMDf5a5dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyc+MMGQsvREaZY5AeIkOCe2glDMB8GA1UdIwQY MBaAFJ4+SjLgahhyNOAXfyy6BVZM0ftQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYzM4ZmItMmNjNi00NTUxLTliZjMt OGM3OTNjMDYyYTQ5LzEvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zYzM4ZmItMmNjNi00NTUxLTliZjMtOGM3OTNjMDYyYTQ5 LzEvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSlEeM59 yV6pB5YPTcQxV3YKPI8PZBGs/+3ZYj7cc3uZDftj/RgVuUAbAH0LUASfBxsWOfoP frrHndN+cn91qplM3dskPBW2trxNawJtt/Bme047ZiFJEje5iLJR5jkm8uhr2UgR Ymu3q5RmozKkIwA0+bhp0+LeGnPFHz3UXILXd+QNc4E2wJmd2GpQNTcmc95GFyyP h8bsbaK9GBjW0mKEAWrj2tptledSZko+rTlqxP4+Dru3yKnANFYw5574p2BdXRaF rXbh/75YVSEFhOQuzm3faNM5o1e4l5n7bsKRISEmyB7aSb6/vHL7m1nAizT2B6HS mFuW9TGG6lhWlQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:37 2026 by rpki-client