This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft File: NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json) Hash identifier: U5b6v52EdcqnWtwrcVVzJRhXung9t6YkaWbMUr8xPoo= Subject key identifier: 08:D1:3C:77:73:FB:7A:B7:B5:DD:C7:A9:5C:F9:3D:E9:49:A7:ED:14 Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3 Certificate issuer: /CN=36310a959489d1ac5b8796af626e07c3f1c171f3 Certificate serial: 019C4133E0C6A007D165839388F6C71D9C38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft Manifest number: 179F Signing time: Mon 09 Feb 2026 07:00:44 +0000 Manifest this update: Mon 09 Feb 2026 07:00:44 +0000 Manifest next update: Tue 10 Feb 2026 07:00:44 +0000 Files and hashes: 1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: dfk2gAAoQ8qreUEjQQfIeN7XluBcmGEgsXzhCT0jx88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:e0:c6:a0:07:d1:65:83:93:88:f6:c7:1d:9c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3 Validity Not Before: Feb 9 07:00:44 2026 GMT Not After : Feb 10 07:00:44 2026 GMT Subject: CN=08d13c7773fb7ab7b5ddc7a95cf93de949a7ed14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:93:a4:f4:74:69:ae:b3:8a:84:f0:06:cf:eb: ae:d5:92:23:63:ac:b7:f4:30:fc:69:44:01:62:5c: 55:ac:b6:19:ba:a3:68:ef:1c:77:b6:f3:29:64:95: 35:86:8a:f2:3e:3d:21:6c:7c:d9:d2:48:fb:4a:38: a8:4b:b1:64:2d:19:fb:99:d9:4d:7e:ce:bf:3a:89: 59:0a:3b:ee:c4:5b:3d:7d:d5:e6:96:83:89:81:2f: 06:f4:12:8e:73:75:a7:ee:f6:af:a3:af:0d:4e:85: 1d:18:33:aa:dc:28:01:eb:1f:58:39:28:7c:7f:0f: 69:fc:6d:1b:e8:fd:91:b0:10:40:f5:25:83:b2:32: 1e:3d:43:56:79:24:79:ce:33:12:63:24:6a:b4:58: 1a:05:e6:3c:f9:58:14:25:81:e6:95:f0:7b:71:ac: 6d:8a:aa:b3:47:a0:80:85:91:c0:57:8a:71:c7:f9: 2f:2b:73:0c:d1:50:dd:24:6a:3c:29:31:cd:6f:6f: db:1b:57:ba:bc:f2:c6:ac:91:62:23:ed:08:4c:84: 8b:55:c1:42:3f:f7:6e:13:4c:7e:25:99:6f:56:9b: 61:71:2d:a4:3c:7c:59:69:15:2a:90:20:fc:70:70: 96:fc:b5:0d:b4:9d:b4:6f:53:fe:52:a5:1e:2d:28: 9a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D1:3C:77:73:FB:7A:B7:B5:DD:C7:A9:5C:F9:3D:E9:49:A7:ED:14 X509v3 Authority Key Identifier: keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:29:e0:91:d2:dc:d0:2f:3f:41:df:6e:cd:3b:3f:36:5a:00: 98:ee:f2:12:46:54:84:0c:24:33:da:22:36:74:16:d2:c6:9a: 45:9b:67:bf:4d:72:72:fe:97:a9:0b:45:ff:c5:a9:a0:44:29: 4c:03:d6:5c:8e:6c:23:8f:89:dc:4a:d7:d8:bd:72:1d:08:4b: a9:20:78:3e:6d:65:ba:f6:be:d3:1e:11:35:df:23:8f:07:67: ec:11:48:66:20:8c:e5:b7:05:72:b0:0d:76:17:9c:f0:5c:f9: c3:11:63:ab:92:50:08:57:f3:fd:b7:f9:a3:f9:9e:0b:56:77: fe:df:b1:de:ac:c1:e9:39:96:8a:a3:96:ba:a0:51:c0:49:b7: f8:b9:0d:ac:4a:2c:2f:62:cb:b6:89:f8:fd:f4:b2:47:43:ba: aa:e3:61:33:16:05:88:5c:fc:45:7b:e7:88:05:f7:0c:17:8e: 75:b7:5b:f3:12:ce:30:3d:c2:91:4c:c9:84:20:cc:b4:4a:55: 73:88:5b:8d:df:df:3a:c8:c2:fd:42:8b:fc:76:30:6f:ca:f1: 7f:52:77:9f:a4:50:1c:6f:be:66:54:b4:6d:61:5f:b3:f5:10: 83:72:84:ce:14:29:1a:b7:77:1d:b3:2e:8b:4e:47:31:53:21: 1e:48:a3:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM+DGoAfRZYOTiPbHHZw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MzEwYTk1OTQ4OWQxYWM1Yjg3OTZhZjYyNmUwN2MzZjFj MTcxZjMwHhcNMjYwMjA5MDcwMDQ0WhcNMjYwMjEwMDcwMDQ0WjAzMTEwLwYDVQQD EygwOGQxM2M3NzczZmI3YWI3YjVkZGM3YTk1Y2Y5M2RlOTQ5YTdlZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Ok9HRprrOKhPAGz+uu1ZIjY6y3 9DD8aUQBYlxVrLYZuqNo7xx3tvMpZJU1horyPj0hbHzZ0kj7SjioS7FkLRn7mdlN fs6/OolZCjvuxFs9fdXmloOJgS8G9BKOc3Wn7vavo68NToUdGDOq3CgB6x9YOSh8 fw9p/G0b6P2RsBBA9SWDsjIePUNWeSR5zjMSYyRqtFgaBeY8+VgUJYHmlfB7caxt iqqzR6CAhZHAV4pxx/kvK3MM0VDdJGo8KTHNb2/bG1e6vPLGrJFiI+0ITISLVcFC P/duE0x+JZlvVpthcS2kPHxZaRUqkCD8cHCW/LUNtJ20b1P+UqUeLSiaawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjRPHdz+3q3td3HqVz5PelJp+0UMB8GA1UdIwQY MBaAFDYxCpWUidGsW4eWr2JuB8PxwXHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85M2Y2ZGYtYzNmNS00MDEzLWE3ZmMt YmQ1YzNiYzExY2ZhLzEvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85M2Y2ZGYtYzNmNS00MDEzLWE3ZmMtYmQ1YzNiYzExY2Zh LzEvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeingkdLc 0C8/Qd9uzTs/NloAmO7yEkZUhAwkM9oiNnQW0saaRZtnv01ycv6XqQtF/8WpoEQp TAPWXI5sI4+J3ErX2L1yHQhLqSB4Pm1luva+0x4RNd8jjwdn7BFIZiCM5bcFcrAN dhec8Fz5wxFjq5JQCFfz/bf5o/meC1Z3/t+x3qzB6TmWiqOWuqBRwEm3+LkNrEos L2LLton4/fSyR0O6quNhMxYFiFz8RXvniAX3DBeOdbdb8xLOMD3CkUzJhCDMtEpV c4hbjd/fOsjC/UKL/HYwb8rxf1J3n6RQHG++ZlS0bWFfs/UQg3KEzhQpGrd3HbMu i05HMVMhHkijVA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:27 2026 by rpki-client