This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json) Hash identifier: NaT7Jd2XTjTHdGnkh6kQ/HV/Qz8IBkdGt9Mv7eZDXr8= Subject key identifier: 9D:A8:C5:8F:E7:FE:DD:70:28:C6:BE:FA:45:C8:BC:98:32:34:7F:D0 Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57 Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957 Certificate serial: 019C420FC350EAEDD5E147CC1F620B37DCDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft Manifest number: 121B Signing time: Mon 09 Feb 2026 11:00:55 +0000 Manifest this update: Mon 09 Feb 2026 11:00:55 +0000 Manifest next update: Tue 10 Feb 2026 11:00:55 +0000 Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: KsAM85dKhvi5FX/Sj9Jqs2mS3NzsPkl/QoQp/uNUHow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:c3:50:ea:ed:d5:e1:47:cc:1f:62:0b:37:dc:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957 Validity Not Before: Feb 9 11:00:55 2026 GMT Not After : Feb 10 11:00:55 2026 GMT Subject: CN=9da8c58fe7fedd7028c6befa45c8bc9832347fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:80:95:ac:7c:a1:f9:ab:8c:83:0e:fe:15: b1:18:c8:3d:8a:8f:af:c1:f7:3a:43:35:2f:df:01: bc:20:ff:07:8e:ea:85:f0:b6:c2:e7:bf:86:21:01: 59:99:eb:c2:8d:14:3d:8c:50:1b:02:86:5e:9b:85: 7c:7b:c6:96:26:d6:44:e9:66:be:24:4a:56:ac:95: d1:99:b7:39:62:15:d1:8b:13:a5:6e:12:12:01:7b: 07:f8:38:87:50:b2:a2:78:4d:c7:93:77:ef:f0:1c: 16:ab:a0:c9:8d:9b:e1:3f:f4:da:db:7e:3d:50:41: b3:50:86:89:05:20:e5:54:74:22:32:a7:a9:82:12: 65:72:cb:5d:5a:ca:f6:85:50:2f:79:3d:dc:e9:74: 06:ab:e9:5b:e1:8c:3c:c0:eb:d1:d9:cb:66:2e:27: 48:dc:4b:28:46:ec:9e:5d:04:94:ec:19:2a:aa:76: fc:15:7a:a2:e7:d4:8e:83:9a:e2:fb:eb:e1:15:e5: 7f:63:d5:a0:ad:23:3f:37:85:a1:4c:07:a8:99:3f: 50:3f:d9:28:e4:62:1e:1e:07:cf:59:db:0b:b8:e4: b3:f2:57:f4:fd:95:0a:e9:47:c2:27:8c:a6:ee:e3: af:36:ce:ea:e5:65:35:78:90:a0:a0:03:b3:82:f7: bc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A8:C5:8F:E7:FE:DD:70:28:C6:BE:FA:45:C8:BC:98:32:34:7F:D0 X509v3 Authority Key Identifier: keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:51:51:e2:5e:cb:bb:a4:e6:8d:ae:a1:3a:6f:70:82:19:0c: 79:23:86:9a:fd:55:60:c2:98:0b:04:f9:75:cc:e1:fc:19:77: c2:e3:49:11:2a:55:df:f6:48:55:c3:7f:6f:ab:a5:67:1e:db: 7e:6c:fd:a6:48:cc:6d:56:fc:36:9f:eb:05:9a:dd:81:3e:6d: ca:f7:7a:fb:8b:a3:d4:cb:b2:5e:3f:30:43:66:13:e7:3c:48: d2:96:f6:4d:8b:8a:9c:91:3f:ae:b2:5b:4d:46:e3:a8:b5:48: 6b:2e:44:d5:cf:d8:e6:d9:46:03:bb:c6:40:02:32:5b:0b:f1: af:12:6e:c7:78:ff:2f:c6:c9:cc:65:d7:1c:78:39:3a:66:70: df:d4:7f:a7:30:45:f7:3c:23:62:6a:f4:0c:11:2b:ae:59:31: 66:3e:c2:6e:3e:a3:9c:c6:2b:54:aa:58:a4:a4:73:c8:4a:97: 97:87:50:82:d5:1c:b9:72:1a:b8:96:24:b7:e0:e2:c1:a6:d7: 83:d7:96:be:fe:d6:3b:d0:a0:c0:b8:f0:bb:9e:02:53:b9:35: 86:66:22:b4:9b:94:1d:b5:b2:02:f5:7c:f8:3e:c5:6e:bc:61: 88:65:6d:94:75:c6:fe:3e:c6:7c:4d:bd:47:5b:87:94:81:57: fe:2e:8f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD8NQ6u3V4UfMH2ILN9zeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZDhjMWE3M2IxNTk1MTA5ZDI2MDY3YjQyOTFmNzFkYzFk Yjk5NTcwHhcNMjYwMjA5MTEwMDU1WhcNMjYwMjEwMTEwMDU1WjAzMTEwLwYDVQQD Eyg5ZGE4YzU4ZmU3ZmVkZDcwMjhjNmJlZmE0NWM4YmM5ODMyMzQ3ZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthqAlax8ofmrjIMO/hWxGMg9io+v wfc6QzUv3wG8IP8HjuqF8LbC57+GIQFZmevCjRQ9jFAbAoZem4V8e8aWJtZE6Wa+ JEpWrJXRmbc5YhXRixOlbhISAXsH+DiHULKieE3Hk3fv8BwWq6DJjZvhP/Ta2349 UEGzUIaJBSDlVHQiMqepghJlcstdWsr2hVAveT3c6XQGq+lb4Yw8wOvR2ctmLidI 3EsoRuyeXQSU7Bkqqnb8FXqi59SOg5ri++vhFeV/Y9WgrSM/N4WhTAeomT9QP9ko 5GIeHgfPWdsLuOSz8lf0/ZUK6UfCJ4ym7uOvNs7q5WU1eJCgoAOzgve81wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2oxY/n/t1wKMa++kXIvJgyNH/QMB8GA1UdIwQY MBaAFDbYwac7FZUQnSYGe0KR9x3B25lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lZWNjYTUtYzMzOS00OTE4LWEwYTgt ZjYxZWM4NWQwZjU3LzEvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lZWNjYTUtYzMzOS00OTE4LWEwYTgtZjYxZWM4NWQwZjU3 LzEvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVFR4l7L u6Tmja6hOm9wghkMeSOGmv1VYMKYCwT5dczh/Bl3wuNJESpV3/ZIVcN/b6ulZx7b fmz9pkjMbVb8Np/rBZrdgT5tyvd6+4uj1MuyXj8wQ2YT5zxI0pb2TYuKnJE/rrJb TUbjqLVIay5E1c/Y5tlGA7vGQAIyWwvxrxJux3j/L8bJzGXXHHg5OmZw39R/pzBF 9zwjYmr0DBErrlkxZj7Cbj6jnMYrVKpYpKRzyEqXl4dQgtUcuXIauJYkt+DiwabX g9eWvv7WO9CgwLjwu54CU7k1hmYitJuUHbWyAvV8+D7FbrxhiGVtlHXG/j7GfE29 R1uHlIFX/i6Pqg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:52 2026 by rpki-client