This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json) Hash identifier: Vclfn8CmMAmo6eWjGpgwHkYLAJRj+NP5nrfDY8zXSwQ= Subject key identifier: 12:BA:E2:57:47:75:10:73:06:F6:99:2B:6C:D5:5F:1D:19:9E:41:F6 Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3 Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3 Certificate serial: 019C446BCD9575F8FC9D7669F48052A71768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 22:00:41 +0000 Manifest this update: Mon 09 Feb 2026 22:00:41 +0000 Manifest next update: Tue 10 Feb 2026 22:00:41 +0000 Files and hashes: 1: 1-sDBo1h39Efa-H3ly5K8_3PMd8E.roa (hash: nnHWf61PhBu5tpbkXsvcIaf2sAJomeNe4RjS/qDyEu8=) 2: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: 7no9orFrcwk9BfFKjvtvC8D4nmjTulisty/RcjD0uyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:cd:95:75:f8:fc:9d:76:69:f4:80:52:a7:17:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3 Validity Not Before: Feb 9 22:00:41 2026 GMT Not After : Feb 10 22:00:41 2026 GMT Subject: CN=12bae2574775107306f6992b6cd55f1d199e41f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:47:f0:47:35:5e:2a:ed:62:23:ff:89:d5: 38:2a:1e:42:43:ea:1a:64:41:78:9b:72:69:18:ff: 50:55:07:bd:d7:a1:f9:25:47:f4:ac:b1:5e:8d:ac: 0a:0b:67:9a:16:8f:79:5d:dd:4b:8f:4a:82:fc:2a: 96:43:27:c1:59:c4:a6:a5:69:45:4a:ba:40:0b:95: a2:4d:84:df:a2:e2:13:e4:3b:71:2b:37:08:22:49: ad:ad:b7:8e:3e:b5:ae:22:9b:c1:73:7a:11:04:ce: a4:c3:c8:64:7e:be:9a:6f:fa:25:c5:53:a6:72:6e: 27:4a:7b:c5:21:53:57:45:5e:f6:21:9d:8f:e5:f1: f7:36:c7:78:ed:9e:e7:e7:ae:a3:36:a9:a1:b2:c1: a5:09:b0:08:52:e3:bc:05:1d:1a:c1:73:2e:6f:03: a1:fe:09:ad:76:34:85:e8:2e:4d:25:70:16:2f:b8: 47:0c:4f:f2:a2:74:bf:0e:8c:6b:29:af:f1:da:d0: 5c:94:fb:9a:34:ce:74:ea:65:07:13:8c:f2:27:2f: a7:e3:1c:49:c8:32:19:5b:7b:96:e6:43:fa:1a:90: 51:2b:f3:85:34:4d:d6:51:64:fd:e2:69:74:c7:c2: 5d:52:e5:ad:22:a0:68:e9:61:f8:0b:0c:02:05:ae: 15:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BA:E2:57:47:75:10:73:06:F6:99:2B:6C:D5:5F:1D:19:9E:41:F6 X509v3 Authority Key Identifier: keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1d:b7:69:fa:f7:d2:8a:76:c9:f2:dd:35:c3:40:46:2a:56: af:b9:d8:59:43:85:2a:0d:ea:2e:38:72:a6:a3:4e:4d:a9:eb: 71:f5:87:b5:11:32:ba:cd:c9:46:84:dd:d0:64:3b:1e:0b:0a: 86:3c:2a:3b:a2:ce:d4:b4:c0:d3:b0:dd:4c:11:b5:19:cf:e9: fa:1d:1f:91:8f:7b:c3:c9:84:d3:14:8a:1a:38:6a:93:73:d3: 76:8a:0c:44:15:20:99:90:c2:0f:38:4f:83:c3:a4:8d:6c:f6: 38:90:94:2d:1f:82:b9:a7:3b:4e:1f:a0:6c:4f:64:30:bd:d4: 2a:33:98:52:08:37:70:9e:ae:45:2a:38:b5:7b:dc:95:bb:a5: d6:ab:90:a5:39:e8:ca:59:74:36:a1:17:e9:ae:4c:2c:6f:2a: 95:c2:9c:cb:24:b2:a4:9c:66:2a:36:2b:3c:12:a0:ea:bf:ee: 6a:0c:7b:68:6a:1b:e3:68:00:48:ef:d1:cd:e0:5a:ca:a0:ec: 25:06:60:6f:b8:b7:30:b0:ec:7c:74:8c:bf:b8:84:58:b7:ce: cc:93:ed:b0:0e:66:a5:a4:ee:2a:0b:97:e1:0d:ba:93:ef:2f: fe:a9:15:c8:35:a4:e1:89:3f:b9:fe:a5:b4:47:72:0c:a1:12: 18:f1:f3:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa82Vdfj8nXZp9IBSpxdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NzAxN2E1N2Y5YzcwZGZhZjY2OTNhMzI0YmJhNjg2Nzdi ODc4ZjMwHhcNMjYwMjA5MjIwMDQxWhcNMjYwMjEwMjIwMDQxWjAzMTEwLwYDVQQD EygxMmJhZTI1NzQ3NzUxMDczMDZmNjk5MmI2Y2Q1NWYxZDE5OWU0MWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNhH8Ec1XirtYiP/idU4Kh5CQ+oa ZEF4m3JpGP9QVQe916H5JUf0rLFejawKC2eaFo95Xd1Lj0qC/CqWQyfBWcSmpWlF SrpAC5WiTYTfouIT5DtxKzcIIkmtrbeOPrWuIpvBc3oRBM6kw8hkfr6ab/olxVOm cm4nSnvFIVNXRV72IZ2P5fH3Nsd47Z7n566jNqmhssGlCbAIUuO8BR0awXMubwOh /gmtdjSF6C5NJXAWL7hHDE/yonS/DoxrKa/x2tBclPuaNM506mUHE4zyJy+n4xxJ yDIZW3uW5kP6GpBRK/OFNE3WUWT94ml0x8JdUuWtIqBo6WH4CwwCBa4V1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK64ldHdRBzBvaZK2zVXx0ZnkH2MB8GA1UdIwQY MBaAFDVwF6V/nHDfr2aToyS7poZ3uHjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2Ut OTJlZDFhZjE2Yjg4LzEvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2UtOTJlZDFhZjE2Yjg4 LzEvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbx23afr3 0op2yfLdNcNARipWr7nYWUOFKg3qLjhypqNOTanrcfWHtREyus3JRoTd0GQ7HgsK hjwqO6LO1LTA07DdTBG1Gc/p+h0fkY97w8mE0xSKGjhqk3PTdooMRBUgmZDCDzhP g8OkjWz2OJCULR+Cuac7Th+gbE9kML3UKjOYUgg3cJ6uRSo4tXvclbul1quQpTno yll0NqEX6a5MLG8qlcKcyySypJxmKjYrPBKg6r/uagx7aGob42gASO/RzeBayqDs JQZgb7i3MLDsfHSMv7iEWLfOzJPtsA5mpaTuKguX4Q26k+8v/qkVyDWk4Yk/uf6l tEdyDKESGPHzlg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:23 2026 by rpki-client