This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft File: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft (raw, json) Hash identifier: 2DDvm3BAuPBNvK9M7CrEPk6kAUtojYivWv16HI3QewY= Subject key identifier: 28:F5:B9:D7:83:7A:56:3E:6C:DE:CE:CD:70:2A:12:E0:1C:10:99:0F Authority key identifier: 9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A Certificate issuer: /CN=9cc32711ed68fba0584992943f9add1b1e0e873a Certificate serial: 019C42B44C8399ED9ABFEE85B254309C093E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 14:00:38 +0000 Manifest this update: Mon 09 Feb 2026 14:00:38 +0000 Manifest next update: Tue 10 Feb 2026 14:00:38 +0000 Files and hashes: 1: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl (hash: aQW4L4CVOtFz3hQ95OYUUrH2+bPz8y6Kl6dRpJvEWLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:4c:83:99:ed:9a:bf:ee:85:b2:54:30:9c:09:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc32711ed68fba0584992943f9add1b1e0e873a Validity Not Before: Feb 9 14:00:38 2026 GMT Not After : Feb 10 14:00:38 2026 GMT Subject: CN=28f5b9d7837a563e6cdececd702a12e01c10990f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c5:d3:f8:81:ea:e0:22:fd:b3:5b:f3:b3:ca: 75:9d:1a:14:83:69:dc:55:d4:3c:8c:ab:a2:fa:d3: 2b:2b:50:83:d9:bf:60:ae:48:79:4f:d9:a9:e9:bf: 92:b2:cd:30:a9:1f:e8:99:c1:71:7b:4b:f1:db:d2: 4b:72:ea:d7:b4:66:b4:2e:34:0b:47:0d:b0:cc:de: 0e:1f:d5:57:0c:b5:6d:cb:a7:9e:42:2f:d4:a8:b7: 76:7c:9f:1a:e2:3e:a1:7d:bb:fb:47:f9:1b:7c:00: a7:4c:db:87:71:71:e7:e5:0c:14:fa:32:a7:33:70: d9:73:44:eb:f7:50:62:31:e3:a6:87:b7:aa:c2:3c: 4e:97:e8:9c:d3:66:0f:ae:0d:fb:60:d7:3e:c2:ee: 5c:58:45:af:05:ba:8b:4e:80:4b:10:ad:df:ed:d9: 94:6e:1a:c8:99:3d:ac:c4:0f:d1:af:cb:ac:43:bb: 75:80:e4:7e:70:9d:e8:86:6c:bc:6c:91:17:f5:53: 39:68:9b:5a:28:7a:17:5b:38:cf:56:4e:d6:8d:be: d4:3a:91:bb:88:d0:2f:01:82:15:ce:eb:b4:66:bb: d9:4e:65:8c:3b:1c:53:8a:83:c3:ae:1a:54:53:9f: 41:ac:72:e8:7a:0b:5e:df:88:8c:d7:74:eb:fb:db: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F5:B9:D7:83:7A:56:3E:6C:DE:CE:CD:70:2A:12:E0:1C:10:99:0F X509v3 Authority Key Identifier: keyid:9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b3:10:d1:82:81:25:74:e9:86:c1:0e:c2:c7:b3:f3:f3:6f: 72:b8:d7:d5:7d:c9:1a:24:b9:0d:b1:82:b6:f5:a0:e1:c9:08: a8:59:31:1b:b4:f6:f7:91:a5:9f:bc:7d:14:89:78:59:af:1c: 4a:a9:11:9d:8f:93:1f:0b:e3:f0:7c:76:22:bd:ec:a2:66:2b: cc:98:1a:05:90:28:64:be:3d:15:4b:3f:4d:2f:99:14:02:f3: 06:a8:3b:55:66:9e:1c:06:a8:8a:0c:fc:a3:c5:47:58:f5:94: a7:af:99:37:f4:29:6b:fa:c5:3a:14:57:96:62:ef:e2:bc:2e: 45:17:04:28:f6:1e:af:c7:42:c0:5d:cc:29:44:ba:2b:52:41: f1:59:e6:f3:fa:7c:52:0a:da:1d:1a:7a:ad:a1:ff:43:da:9b: b9:36:fb:1b:d5:02:89:83:00:62:1f:94:2d:59:f3:df:80:de: 48:89:cf:ab:da:6d:c0:6f:77:52:c4:b7:d2:cd:96:25:cd:a4: 8b:4e:3b:9c:7d:fd:71:f3:60:7f:bb:27:ac:3e:4e:e6:10:8d: 1d:23:e0:63:69:a5:d0:69:ce:43:bf:4e:5e:da:b0:d1:44:93: 53:25:d9:ec:6b:a0:f1:23:88:66:b2:0a:3f:62:fb:15:2e:02: 03:d5:ab:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtEyDme2av+6FslQwnAk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzMyNzExZWQ2OGZiYTA1ODQ5OTI5NDNmOWFkZDFiMWUw ZTg3M2EwHhcNMjYwMjA5MTQwMDM4WhcNMjYwMjEwMTQwMDM4WjAzMTEwLwYDVQQD EygyOGY1YjlkNzgzN2E1NjNlNmNkZWNlY2Q3MDJhMTJlMDFjMTA5OTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sXT+IHq4CL9s1vzs8p1nRoUg2nc VdQ8jKui+tMrK1CD2b9grkh5T9mp6b+Sss0wqR/omcFxe0vx29JLcurXtGa0LjQL Rw2wzN4OH9VXDLVty6eeQi/UqLd2fJ8a4j6hfbv7R/kbfACnTNuHcXHn5QwU+jKn M3DZc0Tr91BiMeOmh7eqwjxOl+ic02YPrg37YNc+wu5cWEWvBbqLToBLEK3f7dmU bhrImT2sxA/Rr8usQ7t1gOR+cJ3ohmy8bJEX9VM5aJtaKHoXWzjPVk7Wjb7UOpG7 iNAvAYIVzuu0ZrvZTmWMOxxTioPDrhpUU59BrHLoegte34iM13Tr+9tFcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj1udeDelY+bN7OzXAqEuAcEJkPMB8GA1UdIwQY MBaAFJzDJxHtaPugWEmSlD+a3RseDoc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1NbkVlMW8tNkJZU1pLVVA1cmRHeDRPaHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9hZWZhODItNmVjNC00NzBiLWI5Y2It ZGUyMjVmNGIwYTA0LzEvbk1NbkVlMW8tNkJZU1pLVVA1cmRHeDRPaHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9hZWZhODItNmVjNC00NzBiLWI5Y2ItZGUyMjVmNGIwYTA0 LzEvbk1NbkVlMW8tNkJZU1pLVVA1cmRHeDRPaHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLMQ0YKB JXTphsEOwsez8/NvcrjX1X3JGiS5DbGCtvWg4ckIqFkxG7T295Gln7x9FIl4Wa8c SqkRnY+THwvj8Hx2Ir3somYrzJgaBZAoZL49FUs/TS+ZFALzBqg7VWaeHAaoigz8 o8VHWPWUp6+ZN/Qpa/rFOhRXlmLv4rwuRRcEKPYer8dCwF3MKUS6K1JB8Vnm8/p8 UgraHRp6raH/Q9qbuTb7G9UCiYMAYh+ULVnz34DeSInPq9ptwG93UsS30s2WJc2k i047nH39cfNgf7snrD5O5hCNHSPgY2ml0GnOQ79OXtqw0USTUyXZ7Gug8SOIZrIK P2L7FS4CA9WrJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:58 2026 by rpki-client