This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json) Hash identifier: UWqs5whkgJfTW6e74ncnijbcvAsTjrZ9lBB0oOO/yUk= Subject key identifier: CC:0B:DE:F3:62:18:58:AB:30:2C:7B:55:43:A0:A5:F9:AE:CB:27:D1 Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0 Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0 Certificate serial: 019C43FE5BC1B5580CA8692DBF24EA471221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft Manifest number: 07B7 Signing time: Mon 09 Feb 2026 20:01:08 +0000 Manifest this update: Mon 09 Feb 2026 20:01:08 +0000 Manifest next update: Tue 10 Feb 2026 20:01:08 +0000 Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: keESm/3WrOYZq3PELLrZNquBuKY8wDlycTZpBa1WyMY=) 2: y0EXH7ROarOi9kpgsz591gLVxK4.roa (hash: k4u5/XxA6Sf9mSKxl8oxoWnS212/XxShJpEKu6orXMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:5b:c1:b5:58:0c:a8:69:2d:bf:24:ea:47:12:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0 Validity Not Before: Feb 9 20:01:08 2026 GMT Not After : Feb 10 20:01:08 2026 GMT Subject: CN=cc0bdef3621858ab302c7b5543a0a5f9aecb27d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e3:43:db:1e:ea:2d:d4:e5:99:53:28:f5:54: b4:9d:28:fd:58:db:bc:18:09:fb:22:67:d4:e9:d8: b6:7e:8a:81:4e:a8:02:39:3f:fe:85:e3:c8:da:b9: 1c:a8:7c:63:54:ec:d7:8d:d6:69:8b:c8:b1:33:d9: 7e:57:15:93:51:46:a1:ae:bf:d3:12:68:91:a0:23: 9c:49:4e:54:a1:4f:10:7d:31:32:31:25:3a:af:ea: 5e:91:b0:6c:09:e6:9a:8d:e3:33:5a:44:61:98:a8: 06:47:14:52:98:c0:57:c8:af:f4:f8:12:51:80:89: 18:9b:77:f3:0e:c1:a3:6b:aa:a8:b6:d6:c2:67:48: 60:ca:c3:40:4e:14:41:ae:a1:e6:9c:d0:1f:0a:1f: 32:17:b4:3d:33:07:68:a7:85:b6:c8:ee:c6:59:0b: 67:7b:60:55:7c:5d:9b:b2:69:bf:d0:3e:45:04:3a: c7:22:0f:bb:f5:08:7a:65:11:0e:d9:69:3e:55:5e: cc:9b:94:3d:8d:74:f8:7e:15:81:80:5e:ea:a8:98: 41:f4:4d:30:96:08:2b:d5:f5:71:a2:f1:a6:3c:8c: ac:c9:90:e8:47:f2:ff:9d:a8:a4:09:56:45:82:22: d5:d8:93:a8:d2:24:e3:c3:5a:68:bb:32:c3:78:81: 38:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0B:DE:F3:62:18:58:AB:30:2C:7B:55:43:A0:A5:F9:AE:CB:27:D1 X509v3 Authority Key Identifier: keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:57:71:bd:7d:93:e3:e4:82:5d:67:4a:54:88:69:c4:4f:39: cc:75:57:9e:a2:bc:42:93:fe:f9:9c:1c:c3:c9:24:03:3e:c4: b9:5f:5e:bb:6e:92:ea:97:a3:ec:9d:1b:b1:3c:cc:31:62:ec: b1:a9:be:32:17:18:e8:15:2d:3b:48:64:16:ff:18:63:12:20: c9:22:e0:56:3b:8a:93:6d:10:03:76:82:de:01:36:1a:9d:9d: 4f:ce:13:6d:f1:08:26:c8:bf:f6:50:c2:a5:3d:69:d3:73:69: 8b:ef:ca:78:fb:c1:26:81:81:96:a3:b6:50:85:ba:3c:c8:9b: bf:f1:9c:73:a1:81:6f:f0:36:7f:c1:ca:45:10:50:1f:57:cf: 65:e1:a6:55:86:de:e7:6b:5a:ec:fa:47:6d:3d:55:3f:77:d5: 63:a4:ef:7a:7b:a8:f9:e9:1e:41:e4:7a:e7:2b:2d:db:19:31: 89:35:e3:f2:f8:c1:5b:62:23:2d:29:29:74:fd:23:42:a7:b7: e8:d1:65:1e:c0:8c:4c:b1:71:4c:81:e4:00:87:b5:44:4d:d4: 3f:61:96:f7:2a:83:98:d0:39:36:52:3b:e5:28:11:8b:0c:fa: 3a:cd:34:e1:f2:24:dd:ca:1a:14:a0:58:0c:15:db:a5:4b:2b: 66:54:f0:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/lvBtVgMqGktvyTqRxIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MGU1MzAxNGJmMDM4YWRlMGQ3N2FlNjc4ZmY2ZGYzNGNh NTNkYzAwHhcNMjYwMjA5MjAwMTA4WhcNMjYwMjEwMjAwMTA4WjAzMTEwLwYDVQQD EyhjYzBiZGVmMzYyMTg1OGFiMzAyYzdiNTU0M2EwYTVmOWFlY2IyN2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OND2x7qLdTlmVMo9VS0nSj9WNu8 GAn7ImfU6di2foqBTqgCOT/+hePI2rkcqHxjVOzXjdZpi8ixM9l+VxWTUUahrr/T EmiRoCOcSU5UoU8QfTEyMSU6r+pekbBsCeaajeMzWkRhmKgGRxRSmMBXyK/0+BJR gIkYm3fzDsGja6qottbCZ0hgysNAThRBrqHmnNAfCh8yF7Q9Mwdop4W2yO7GWQtn e2BVfF2bsmm/0D5FBDrHIg+79Qh6ZREO2Wk+VV7Mm5Q9jXT4fhWBgF7qqJhB9E0w lggr1fVxovGmPIysyZDoR/L/naikCVZFgiLV2JOo0iTjw1pouzLDeIE4JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwL3vNiGFirMCx7VUOgpfmuyyfRMB8GA1UdIwQY MBaAFDQOUwFL8Dit4Nd65nj/bfNMpT3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lNjA4MjgtODhkYi00ZTNiLTlhNDct ZTE0ODIzNWI3NzIzLzEvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lNjA4MjgtODhkYi00ZTNiLTlhNDctZTE0ODIzNWI3NzIz LzEvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFdxvX2T 4+SCXWdKVIhpxE85zHVXnqK8QpP++Zwcw8kkAz7EuV9eu26S6pej7J0bsTzMMWLs sam+MhcY6BUtO0hkFv8YYxIgySLgVjuKk20QA3aC3gE2Gp2dT84TbfEIJsi/9lDC pT1p03Npi+/KePvBJoGBlqO2UIW6PMibv/Gcc6GBb/A2f8HKRRBQH1fPZeGmVYbe 52ta7PpHbT1VP3fVY6Tvenuo+ekeQeR65yst2xkxiTXj8vjBW2IjLSkpdP0jQqe3 6NFlHsCMTLFxTIHkAIe1RE3UP2GW9yqDmNA5NlI75SgRiwz6Os004fIk3coaFKBY DBXbpUsrZlTwsw== -----END CERTIFICATE-----Generated at Tue Feb 10 05:50:44 2026 by rpki-client