This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json) Hash identifier: TY9MmeOMWlwcK6kbnZzoW+hOOyppAyHACGzcSKRNBZ4= Subject key identifier: 94:A0:0F:69:6C:0E:3F:24:9F:0D:15:8E:D9:A2:BE:59:4B:59:87:CC Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c Certificate serial: 019C4434B2AF93D54D98EEDFC60B37878882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft Manifest number: 053F Signing time: Mon 09 Feb 2026 21:00:30 +0000 Manifest this update: Mon 09 Feb 2026 21:00:30 +0000 Manifest next update: Tue 10 Feb 2026 21:00:30 +0000 Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: QnB00ZVCiDArHzDPF0NsyLDRojpYlzE9xZUGUcq6SXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:b2:af:93:d5:4d:98:ee:df:c6:0b:37:87:88:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c Validity Not Before: Feb 9 21:00:30 2026 GMT Not After : Feb 10 21:00:30 2026 GMT Subject: CN=94a00f696c0e3f249f0d158ed9a2be594b5987cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5e:25:97:08:e8:fe:32:49:cf:af:b0:a5:77: 59:a5:9a:75:c5:e2:2a:51:19:99:57:3d:a3:fe:1a: 4d:d3:dd:12:16:5d:b6:51:45:82:6e:46:c4:c3:98: d7:44:29:19:2d:86:88:c6:aa:6c:2c:40:46:3c:95: d3:d2:48:da:01:e2:71:29:78:df:4a:27:1c:83:a8: 70:7f:ed:61:4f:0c:4a:1a:3a:25:8f:5e:32:84:48: 8d:d8:18:ab:e3:b5:56:ff:a6:55:83:56:6e:b8:9a: c0:b4:0a:fa:63:b1:0f:45:06:f2:23:62:2b:40:bf: 15:7f:92:f6:78:2e:f8:f5:64:f4:ee:e2:91:d8:5e: 24:79:c6:64:e3:02:3d:e3:31:c6:db:20:04:cc:5e: 3b:d1:b5:e4:82:0d:90:61:56:44:36:e1:9f:4b:6a: ae:a0:89:db:7f:2e:39:73:b2:f1:8f:9f:6b:00:6b: 6b:45:0d:cd:d6:66:47:ba:d6:25:a5:9b:92:3d:ae: 89:ca:50:50:95:a4:5a:7e:ad:34:f8:30:c3:15:44: 4d:72:96:b1:66:20:46:3e:f8:24:2b:ab:36:ea:1e: d3:91:5f:c2:99:42:90:72:05:39:32:14:7b:f2:c8: f3:19:6a:d5:f9:89:da:f6:74:ec:b4:3e:b6:51:63: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A0:0F:69:6C:0E:3F:24:9F:0D:15:8E:D9:A2:BE:59:4B:59:87:CC X509v3 Authority Key Identifier: keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:29:95:a9:5c:5a:82:cc:dc:5b:ec:83:83:16:a1:a0:77:c6: 9d:5c:06:ec:cc:18:d1:05:0e:43:f0:ae:14:48:72:8c:59:09: 00:78:f1:2c:2c:03:c6:81:d9:a3:84:63:15:a6:f1:9b:9b:1e: 94:05:b5:dc:b9:b4:05:ad:24:67:7c:d0:9b:25:c2:65:8c:7c: b7:b3:ea:c7:a9:13:a9:48:e4:5e:65:e9:50:85:68:59:7c:73: de:e8:ad:fd:e4:0d:ea:ab:e9:e4:ab:92:be:c6:d2:c5:de:fd: 5d:9a:ef:10:50:8a:98:36:24:d5:3b:dd:50:fb:22:5f:71:ab: b6:19:b9:54:0f:71:21:88:ee:65:a1:5b:00:3d:88:a3:67:17: 23:64:36:20:a3:59:51:29:3c:dc:7f:68:38:5a:5f:cf:6b:89: 37:7f:12:8c:6c:a2:5a:11:cc:07:7f:40:17:84:f7:87:78:77: 91:3b:0d:55:f5:2d:00:f5:0a:a1:50:d9:f7:40:88:81:c1:d5: 6c:e6:3a:c1:21:92:f2:80:89:1a:7d:0c:69:f3:3d:32:ec:63: 55:51:24:3e:80:bd:12:bb:9b:a6:fb:28:2c:f6:74:72:51:d8: 1a:87:3b:4a:17:5f:15:55:32:f1:8a:68:1c:b1:d6:28:10:01: 83:90:9e:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENLKvk9VNmO7fxgs3h4iCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllM2YxNTc5YWUxNzY2NjJkNjYzYTM4MzRjMGZlZjgyNGNl ZTAzM2MwHhcNMjYwMjA5MjEwMDMwWhcNMjYwMjEwMjEwMDMwWjAzMTEwLwYDVQQD Eyg5NGEwMGY2OTZjMGUzZjI0OWYwZDE1OGVkOWEyYmU1OTRiNTk4N2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj14llwjo/jJJz6+wpXdZpZp1xeIq URmZVz2j/hpN090SFl22UUWCbkbEw5jXRCkZLYaIxqpsLEBGPJXT0kjaAeJxKXjf Siccg6hwf+1hTwxKGjolj14yhEiN2Bir47VW/6ZVg1ZuuJrAtAr6Y7EPRQbyI2Ir QL8Vf5L2eC749WT07uKR2F4kecZk4wI94zHG2yAEzF470bXkgg2QYVZENuGfS2qu oInbfy45c7Lxj59rAGtrRQ3N1mZHutYlpZuSPa6JylBQlaRafq00+DDDFURNcpax ZiBGPvgkK6s26h7TkV/CmUKQcgU5MhR78sjzGWrV+Yna9nTstD62UWOXzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSgD2lsDj8knw0VjtmivllLWYfMMB8GA1UdIwQY MBaAFJ4/FXmuF2Zi1mOjg0wP74JM7gM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NjI4NDAtNTE2OS00ZmYzLTg5Zjkt NDgwNzM0ZTM4ZGE4LzEvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85NjI4NDAtNTE2OS00ZmYzLTg5ZjktNDgwNzM0ZTM4ZGE4 LzEvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCmVqVxa gszcW+yDgxahoHfGnVwG7MwY0QUOQ/CuFEhyjFkJAHjxLCwDxoHZo4RjFabxm5se lAW13Lm0Ba0kZ3zQmyXCZYx8t7Pqx6kTqUjkXmXpUIVoWXxz3uit/eQN6qvp5KuS vsbSxd79XZrvEFCKmDYk1TvdUPsiX3Grthm5VA9xIYjuZaFbAD2Io2cXI2Q2IKNZ USk83H9oOFpfz2uJN38SjGyiWhHMB39AF4T3h3h3kTsNVfUtAPUKoVDZ90CIgcHV bOY6wSGS8oCJGn0MafM9MuxjVVEkPoC9ErubpvsoLPZ0clHYGoc7ShdfFVUy8Ypo HLHWKBABg5Cecw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:55:06 2026 by rpki-client