This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json) Hash identifier: ZDi5sHx/5tCMEAN1/Og1XPF2ErzgmyQwYgaGW/q7eZI= Subject key identifier: E6:FA:83:11:7D:5F:6E:B1:AC:29:97:C2:4B:FD:77:67:DB:D3:A9:38 Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81 Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481 Certificate serial: 019C420FFE26773EAB11E9209D7252DEE28D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft Manifest number: 12B4 Signing time: Mon 09 Feb 2026 11:01:10 +0000 Manifest this update: Mon 09 Feb 2026 11:01:10 +0000 Manifest next update: Tue 10 Feb 2026 11:01:10 +0000 Files and hashes: 1: 4l82aU37AqmgAJlyCPGwmnooDcg.roa (hash: IgTUPhE8nSCBnJ2HPZrElAawWv50u6q/sojixDH5raQ=) 2: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: gztpZcPLVDqLU50mne0qpj/dUjGMMWZ5eGR+XpWXeO0=) 3: hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa (hash: 3UtzjBeSVvMSTFyNhnUR4ZuKLONPZvV6PMClfmnPEuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:fe:26:77:3e:ab:11:e9:20:9d:72:52:de:e2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481 Validity Not Before: Feb 9 11:01:10 2026 GMT Not After : Feb 10 11:01:10 2026 GMT Subject: CN=e6fa83117d5f6eb1ac2997c24bfd7767dbd3a938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:ca:c2:bb:16:7c:06:37:0d:e3:40:82:c0: 73:00:3c:c5:97:f6:e5:4f:49:51:a0:f1:ef:31:2c: 92:2c:43:41:a4:34:da:98:cb:ed:45:12:1b:d1:5a: b8:6c:ae:64:3d:f1:3b:8f:62:18:20:10:23:38:90: 8e:49:08:38:b5:b1:8c:4b:6c:e3:90:63:36:cc:23: 29:f1:90:6d:77:f7:0f:d8:93:a4:35:8d:f6:a2:00: b3:e9:bc:75:c8:45:2d:d8:e7:30:3a:62:34:90:50: fb:2a:04:52:e9:ec:92:0d:a3:f2:69:a7:5b:3c:3c: b8:47:d7:ce:99:07:c9:2e:a9:45:46:fc:a5:35:bc: aa:e7:e2:97:54:d1:4a:e7:f7:4e:cb:75:51:17:3a: 40:0e:5d:5c:d3:17:34:14:a0:21:69:ce:96:aa:42: 07:37:b5:cd:1c:6d:f4:2e:da:39:7e:ed:87:85:fe: de:e0:46:2b:ba:73:99:63:3b:10:5c:9d:15:20:51: e8:b1:08:f7:8c:98:f7:fb:61:3c:79:c4:ab:f1:c2: ed:22:cd:ef:37:de:63:ac:4d:be:d9:8a:09:ea:f8: aa:d8:c8:3d:b5:59:81:c7:fa:4f:e2:2a:27:5b:bb: b1:89:33:dd:05:a0:1e:ce:0f:5a:2f:d2:59:1b:d4: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FA:83:11:7D:5F:6E:B1:AC:29:97:C2:4B:FD:77:67:DB:D3:A9:38 X509v3 Authority Key Identifier: keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b7:3f:d3:c0:fd:f0:ca:e5:37:c0:a6:f3:b6:8e:49:69:72: f8:8c:79:0c:12:89:8b:36:66:29:92:ca:50:4b:dc:87:2d:2d: 3b:fa:69:80:95:39:ab:bf:81:4f:5a:81:78:63:81:95:54:c5: ce:ea:68:e6:2d:80:df:1e:d2:c2:8b:23:77:5d:56:10:7c:16: 9f:62:be:28:55:34:84:53:12:27:0b:a7:88:98:bb:57:f8:a2: 39:5f:0b:e7:c5:f4:d4:af:3b:0f:07:7d:90:9b:6f:a6:2f:a2: 9c:e4:8c:ed:d5:54:3b:99:08:d5:d7:86:c1:7a:df:72:f5:41: b2:9c:80:88:da:5d:e0:e3:3d:fd:db:ca:30:0d:44:61:34:c0: d2:57:48:89:81:3e:af:83:fe:1b:1e:f9:43:bb:ba:bd:82:83: 2b:80:a6:53:83:d2:c6:80:c7:56:eb:74:b1:e1:09:d9:f2:ff: 26:74:bd:93:ce:ff:d6:89:bc:69:16:a7:ea:ab:30:cf:bc:88: 4c:8e:c3:67:f8:21:f2:43:66:c3:b6:96:08:bb:a8:51:45:97: 79:c7:23:dd:7f:86:76:d9:2b:d1:61:9e:3e:e2:5c:6a:27:5e: c8:ce:db:62:18:ef:49:00:9b:22:79:61:4f:50:2f:91:cc:43: 2f:e5:54:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/4mdz6rEekgnXJS3uKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWI0ZjdiNGExNmRiOWU5MjRmMDkwOGNlZTNkYTI2ZjIy YWQ0ODEwHhcNMjYwMjA5MTEwMTEwWhcNMjYwMjEwMTEwMTEwWjAzMTEwLwYDVQQD EyhlNmZhODMxMTdkNWY2ZWIxYWMyOTk3YzI0YmZkNzc2N2RiZDNhOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXPKwrsWfAY3DeNAgsBzADzFl/bl T0lRoPHvMSySLENBpDTamMvtRRIb0Vq4bK5kPfE7j2IYIBAjOJCOSQg4tbGMS2zj kGM2zCMp8ZBtd/cP2JOkNY32ogCz6bx1yEUt2OcwOmI0kFD7KgRS6eySDaPyaadb PDy4R9fOmQfJLqlFRvylNbyq5+KXVNFK5/dOy3VRFzpADl1c0xc0FKAhac6WqkIH N7XNHG30Lto5fu2Hhf7e4EYrunOZYzsQXJ0VIFHosQj3jJj3+2E8ecSr8cLtIs3v N95jrE2+2YoJ6viq2Mg9tVmBx/pP4ionW7uxiTPdBaAezg9aL9JZG9SoNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOb6gxF9X26xrCmXwkv9d2fb06k4MB8GA1UdIwQY MBaAFDRbT3tKFtuekk8JCM7j2ibyKtSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUt NDA4NThiOTVmY2Y1LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUtNDA4NThiOTVmY2Y1 LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbc/08D9 8MrlN8Cm87aOSWly+Ix5DBKJizZmKZLKUEvchy0tO/ppgJU5q7+BT1qBeGOBlVTF zupo5i2A3x7Swosjd11WEHwWn2K+KFU0hFMSJwuniJi7V/iiOV8L58X01K87Dwd9 kJtvpi+inOSM7dVUO5kI1deGwXrfcvVBspyAiNpd4OM9/dvKMA1EYTTA0ldIiYE+ r4P+Gx75Q7u6vYKDK4CmU4PSxoDHVut0seEJ2fL/JnS9k87/1om8aRan6qswz7yI TI7DZ/gh8kNmw7aWCLuoUUWXeccj3X+Gdtkr0WGePuJcaideyM7bYhjvSQCbInlh T1AvkcxDL+VUKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:40 2026 by rpki-client