This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json) Hash identifier: QTGlZApu+pfvpBdIjUAKh4n7npipIl+QmALZQxL8VGo= Subject key identifier: D6:46:0D:74:E6:E8:21:C8:CD:8E:DB:C5:B1:33:19:6F:F6:EA:FC:44 Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22 Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422 Certificate serial: 019C43593B6B62E6B5BFF3643F55D6A92B54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 17:00:47 +0000 Manifest this update: Mon 09 Feb 2026 17:00:47 +0000 Manifest next update: Tue 10 Feb 2026 17:00:47 +0000 Files and hashes: 1: WgXn9G5ryVcoOunG4ZvkrJdWw94.roa (hash: TVpzuhy4mtyrOaTWx+19/cTwhYu2EZdbTfL5e2TtoDg=) 2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: x10Pzkw202X8qgURxUaJ+oqx2k5PrLClV1bG+kkEkOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:3b:6b:62:e6:b5:bf:f3:64:3f:55:d6:a9:2b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422 Validity Not Before: Feb 9 17:00:47 2026 GMT Not After : Feb 10 17:00:47 2026 GMT Subject: CN=d6460d74e6e821c8cd8edbc5b133196ff6eafc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:75:88:99:55:48:d0:cd:39:75:7e:0b:09:ed: 0d:e2:5e:6d:fd:50:00:78:4f:0a:4e:41:be:4b:6d: 79:51:77:29:17:f0:41:ba:e1:b8:28:4a:3f:68:16: 25:c8:11:0d:c9:7f:2d:b7:60:9f:87:a3:5e:d4:06: 8f:69:93:29:ca:be:7a:0a:f6:55:9b:19:57:e2:fc: ef:4d:cf:64:03:17:d5:bb:2f:54:d3:44:3f:ca:d9: 34:93:92:3b:ee:78:9d:7e:ed:e2:82:35:89:cb:23: 6b:23:33:37:7e:ae:f1:8f:8c:34:2e:c3:b5:59:b2: df:ee:94:51:dd:3b:5c:1d:f8:64:39:5d:e8:7a:cf: 41:03:64:80:b0:a8:a5:a0:d6:69:6b:7b:5a:aa:87: 30:4c:5d:d2:5d:18:53:d0:4e:78:25:89:3a:04:d1: 62:cf:de:53:62:ff:29:4b:45:86:75:fb:b6:9f:0e: a7:35:83:44:a5:05:21:c6:67:8e:f6:04:ce:71:0a: ea:06:80:89:fe:91:ad:d2:14:37:5d:fb:85:b8:2f: 30:dd:e3:58:44:4e:19:5e:8f:4f:fb:88:21:61:65: c8:1a:fd:41:1f:70:c1:4f:4a:0f:1c:b0:e1:a5:46: 2a:3d:3c:6f:39:b7:e4:64:ed:be:a9:c8:49:a8:aa: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:46:0D:74:E6:E8:21:C8:CD:8E:DB:C5:B1:33:19:6F:F6:EA:FC:44 X509v3 Authority Key Identifier: keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:82:da:87:d0:7c:34:20:e5:55:4b:20:36:7e:b5:cd:1e:d5: 80:5a:43:72:63:2e:46:9f:64:cb:5d:34:2b:40:35:b1:4b:91: b8:d0:4d:90:c0:3e:c2:7b:44:81:20:f6:b6:c3:4a:fd:0a:e2: 1c:9d:46:ce:cd:2a:53:96:9e:ba:54:37:ae:c9:19:7b:8a:f2: 7c:97:25:1b:f0:32:17:f3:93:87:b0:bb:64:cc:2c:bb:68:bb: 5d:bc:25:5e:c4:41:4d:4c:0c:7a:46:d1:85:2c:0d:29:fc:bd: b8:35:30:00:10:45:36:0e:a4:ee:93:3e:05:da:48:2d:73:be: 2f:60:08:77:e5:4a:eb:ee:dc:5a:1a:df:d3:93:f4:74:41:47: f7:04:4e:60:72:de:e1:b8:67:f8:90:60:bc:ee:e9:1f:6c:83: 5d:e1:1b:5f:53:9a:bc:a1:31:13:58:b6:ed:97:8d:1a:ad:81: 45:16:ec:8c:6b:fd:b5:db:d9:1c:b1:02:f5:bf:a8:8e:64:5a: a8:0b:81:86:f2:f5:f7:7c:8b:39:7a:42:63:17:8c:33:16:8b: c0:67:7f:6f:90:a6:8b:86:6c:28:fc:5a:f9:ca:a6:fd:0d:c8: af:b6:6b:a0:5f:36:18:09:e8:1f:4c:22:68:70:cb:92:51:e5: 2f:87:26:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTtrYua1v/NkP1XWqStUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlN2E4ZDdkYjMyYTQwZDRlMWQwMDI4YTdjZmQwODE0YjY1 MGY0MjIwHhcNMjYwMjA5MTcwMDQ3WhcNMjYwMjEwMTcwMDQ3WjAzMTEwLwYDVQQD EyhkNjQ2MGQ3NGU2ZTgyMWM4Y2Q4ZWRiYzViMTMzMTk2ZmY2ZWFmYzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XWImVVI0M05dX4LCe0N4l5t/VAA eE8KTkG+S215UXcpF/BBuuG4KEo/aBYlyBENyX8tt2Cfh6Ne1AaPaZMpyr56CvZV mxlX4vzvTc9kAxfVuy9U00Q/ytk0k5I77nidfu3igjWJyyNrIzM3fq7xj4w0LsO1 WbLf7pRR3TtcHfhkOV3oes9BA2SAsKiloNZpa3taqocwTF3SXRhT0E54JYk6BNFi z95TYv8pS0WGdfu2nw6nNYNEpQUhxmeO9gTOcQrqBoCJ/pGt0hQ3XfuFuC8w3eNY RE4ZXo9P+4ghYWXIGv1BH3DBT0oPHLDhpUYqPTxvObfkZO2+qchJqKrTNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZGDXTm6CHIzY7bxbEzGW/26vxEMB8GA1UdIwQY MBaAFP56jX2zKkDU4dACinz9CBS2UPQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmIt YjEyYTY5MzNmODI5LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmItYjEyYTY5MzNmODI5 LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWILah9B8 NCDlVUsgNn61zR7VgFpDcmMuRp9ky100K0A1sUuRuNBNkMA+wntEgSD2tsNK/Qri HJ1Gzs0qU5aeulQ3rskZe4ryfJclG/AyF/OTh7C7ZMwsu2i7XbwlXsRBTUwMekbR hSwNKfy9uDUwABBFNg6k7pM+BdpILXO+L2AId+VK6+7cWhrf05P0dEFH9wROYHLe 4bhn+JBgvO7pH2yDXeEbX1OavKExE1i27ZeNGq2BRRbsjGv9tdvZHLEC9b+ojmRa qAuBhvL193yLOXpCYxeMMxaLwGd/b5Cmi4ZsKPxa+cqm/Q3Ir7ZroF82GAnoH0wi aHDLklHlL4cm8g== -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:15 2026 by rpki-client