This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json) Hash identifier: gg8mt8o9juFWZaWIk2hPwFesij8Xl7pLdBiQEpuv6Bc= Subject key identifier: 19:10:D3:6F:11:4D:97:80:5D:A8:8D:5D:5F:19:B7:A4:31:FD:92:4E Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Certificate serial: 019C2F9B5706B0EC9C099904FFBDA0628D49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft Manifest number: 1818 Signing time: Thu 05 Feb 2026 21:00:35 +0000 Manifest this update: Thu 05 Feb 2026 21:00:35 +0000 Manifest next update: Fri 06 Feb 2026 21:00:35 +0000 Files and hashes: 1: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=) 2: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=) 3: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: u3WsjJ9Y6VHkp6mSKwEtqFhyIt5DJedH/8xrjakk8zM=) 4: NZoSwUkLAmMwbEjAu-trHqR_V_k.roa (hash: 02rAztVjRcsdeDVwgkma6YqQyIyFyzIJO8lNQo5lD9o=) 5: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=) 6: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=) 7: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 21:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2f:9b:57:06:b0:ec:9c:09:99:04:ff:bd:a0:62:8d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Validity Not Before: Feb 5 21:00:35 2026 GMT Not After : Feb 6 21:00:35 2026 GMT Subject: CN=1910d36f114d97805da88d5d5f19b7a431fd924e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:90:06:47:d9:9f:29:c3:17:96:cd:11:1b:aa: ac:2a:23:93:9b:ce:f0:7c:aa:ed:f2:41:a0:b0:72: 73:92:dd:ea:d2:57:33:90:75:c5:02:f1:ed:ac:ea: bf:f5:24:3a:f6:6f:72:ad:0e:53:98:ea:2b:d5:ff: 71:4e:57:b0:62:74:62:f6:1c:85:d2:40:47:26:23: 40:7e:cc:5e:91:57:8e:82:26:31:70:df:a7:40:8b: e5:f3:35:f9:88:7f:d4:f3:a8:5b:fe:45:53:fd:34: 0e:ad:fc:90:40:0c:78:d5:81:32:99:d9:5c:62:4f: 1a:18:3b:4e:13:36:45:06:43:aa:af:3f:d1:92:0f: c6:8e:70:ec:d9:7b:93:03:0c:d9:c7:47:47:11:5b: 44:7e:33:78:cb:ef:d9:8d:3e:7b:40:e6:e8:ed:82: bd:cd:18:d3:4a:71:ef:53:9e:89:20:66:d4:48:2f: 92:65:a1:8c:41:ce:75:04:cf:c6:eb:c2:2e:21:ea: 9e:dd:49:ea:7d:9d:7f:27:0f:ec:5a:40:43:39:dc: 15:1b:4e:b6:d1:07:9c:1c:af:b1:24:49:f9:16:b4: 14:2c:5e:12:d7:44:c6:8b:6a:0d:77:3d:55:7d:13: 38:56:97:a7:21:0e:bd:96:dc:f9:00:59:fe:74:2f: 8d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:10:D3:6F:11:4D:97:80:5D:A8:8D:5D:5F:19:B7:A4:31:FD:92:4E X509v3 Authority Key Identifier: keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:7a:5b:00:0b:40:dc:ec:79:bb:c3:36:d3:ad:1b:f6:dd:9d: 33:2f:c4:8c:3c:de:1e:9e:76:c1:f2:f1:de:34:5c:af:12:a3: 4a:fd:c4:b4:b9:3b:d6:c0:4c:77:fa:d2:fd:14:1b:7e:22:e3: be:cf:25:83:d4:c5:2a:1a:d6:fc:80:9b:5e:81:95:f2:87:50: dd:e1:a1:22:4c:0a:ea:a3:83:97:64:ae:d4:6c:31:33:e3:0b: 17:14:3f:59:1a:6b:2a:a0:f7:a9:41:1a:42:2a:ba:f5:93:14: 65:67:c4:a7:56:71:26:96:93:e0:eb:53:d9:be:45:88:df:fe: e5:75:9f:ff:2e:a6:22:b0:60:bd:91:ca:5e:1a:e5:fd:90:82: 12:51:f7:15:80:b2:bb:55:79:84:a5:ec:99:d5:dc:6d:ef:8a: e7:c6:58:e0:79:49:02:78:a8:98:ff:18:b8:4f:26:97:74:fe: 68:c3:3e:f1:f2:62:b5:dd:c9:24:d2:85:90:da:75:ce:5b:59: c0:47:94:04:5b:a1:6c:74:cf:c7:26:b0:cb:48:9b:14:6e:79: 8e:99:f4:15:41:91:0e:ae:44:a3:f9:8c:7a:29:fb:f8:c9:7a: da:7a:92:44:b6:d2:21:b0:f7:2e:9d:47:45:0f:a9:fb:15:8c: b4:da:59:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwvm1cGsOycCZkE/72gYo1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl ZThkYTcwHhcNMjYwMjA1MjEwMDM1WhcNMjYwMjA2MjEwMDM1WjAzMTEwLwYDVQQD EygxOTEwZDM2ZjExNGQ5NzgwNWRhODhkNWQ1ZjE5YjdhNDMxZmQ5MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15AGR9mfKcMXls0RG6qsKiOTm87w fKrt8kGgsHJzkt3q0lczkHXFAvHtrOq/9SQ69m9yrQ5TmOor1f9xTlewYnRi9hyF 0kBHJiNAfsxekVeOgiYxcN+nQIvl8zX5iH/U86hb/kVT/TQOrfyQQAx41YEymdlc Yk8aGDtOEzZFBkOqrz/Rkg/GjnDs2XuTAwzZx0dHEVtEfjN4y+/ZjT57QObo7YK9 zRjTSnHvU56JIGbUSC+SZaGMQc51BM/G68IuIeqe3UnqfZ1/Jw/sWkBDOdwVG062 0QecHK+xJEn5FrQULF4S10TGi2oNdz1VfRM4VpenIQ69ltz5AFn+dC+NBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkQ028RTZeAXaiNXV8Zt6Qx/ZJOMB8GA1UdIwQY MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt MzBjZTgzNzAxYjM5LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5 LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHpbAAtA 3Ox5u8M2060b9t2dMy/EjDzeHp52wfLx3jRcrxKjSv3EtLk71sBMd/rS/RQbfiLj vs8lg9TFKhrW/ICbXoGV8odQ3eGhIkwK6qODl2Su1GwxM+MLFxQ/WRprKqD3qUEa Qiq69ZMUZWfEp1ZxJpaT4OtT2b5FiN/+5XWf/y6mIrBgvZHKXhrl/ZCCElH3FYCy u1V5hKXsmdXcbe+K58ZY4HlJAniomP8YuE8ml3T+aMM+8fJitd3JJNKFkNp1zltZ wEeUBFuhbHTPxyawy0ibFG55jpn0FUGRDq5Eo/mMein7+Ml62nqSRLbSIbD3Lp1H RQ+p+xWMtNpZwA== -----END CERTIFICATE-----Generated at Fri Feb 6 01:44:17 2026 by rpki-client