This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft File: NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json) Hash identifier: uHgdvwYp4nyStKacBwpRTOpFLPC4CUpJfFpkr8pYe7s= Subject key identifier: DB:BB:0F:94:F7:03:C2:4B:C3:E2:82:ED:C3:7C:4C:37:12:53:A7:01 Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57 Certificate issuer: /CN=347a04e1ac24c79776347839e5134c9aaa38bf57 Certificate serial: 019C438FF26B4650DAE1B7729016C11FBE3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft Manifest number: 1355 Signing time: Mon 09 Feb 2026 18:00:32 +0000 Manifest this update: Mon 09 Feb 2026 18:00:32 +0000 Manifest next update: Tue 10 Feb 2026 18:00:32 +0000 Files and hashes: 1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: /APOxL5rGVYKiXqJVH7L95lF9DXNfurZpzL9l7sfKJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:f2:6b:46:50:da:e1:b7:72:90:16:c1:1f:be:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57 Validity Not Before: Feb 9 18:00:32 2026 GMT Not After : Feb 10 18:00:32 2026 GMT Subject: CN=dbbb0f94f703c24bc3e282edc37c4c371253a701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4a:b8:1f:1c:76:96:43:eb:b6:2f:c3:a8:ff: 75:47:dc:42:7d:84:70:22:fa:b0:99:6f:9e:b1:58: 4a:aa:a5:28:3e:4f:2c:6b:7d:b3:6e:80:88:db:15: 30:bc:ce:e2:e7:14:82:4a:f3:8a:14:41:83:cc:5a: ef:ca:76:87:31:d0:5f:cc:d2:42:67:a0:95:4d:2b: 59:c4:ac:ba:dc:67:32:41:81:76:ea:36:78:d6:c0: 17:1d:29:dc:93:3a:3a:0a:2f:f0:b4:04:49:f5:46: 83:c5:89:83:db:57:eb:38:c4:4a:79:32:2d:a0:e4: 66:8c:bc:03:a4:91:a8:6f:17:bf:ee:80:bc:c5:f8: db:62:54:5d:2c:b6:f1:10:13:5b:2f:b0:c6:0d:36: a2:99:a9:aa:ee:6b:e9:c4:27:c0:72:93:e4:26:f8: df:1c:76:67:3c:b7:65:7d:6c:b6:99:d1:03:9e:4e: 29:53:bb:38:14:e7:bc:ae:1d:cd:64:35:18:fb:91: 36:1f:7e:f8:96:31:45:d9:0f:6c:9f:03:4d:1e:6a: ee:c4:e5:a9:a9:10:86:4b:47:e4:ca:d5:db:a9:a5: 38:3f:4a:24:1e:7f:20:c2:78:f4:5b:1d:33:46:05: f3:77:27:70:85:78:17:7b:aa:e7:1b:a6:53:c7:21: 95:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BB:0F:94:F7:03:C2:4B:C3:E2:82:ED:C3:7C:4C:37:12:53:A7:01 X509v3 Authority Key Identifier: keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:19:d5:0d:e5:20:30:16:2c:53:96:7a:88:88:fa:b1:10:97: 96:84:ba:ee:48:b3:a9:26:08:14:a0:47:5b:1f:00:4c:98:e1: a9:51:77:88:e9:62:ac:c3:02:10:43:3d:a8:0b:30:eb:76:43: 9a:6e:08:7e:be:3e:97:0f:bb:2c:ec:4b:0a:30:2e:bb:5e:8d: 99:c8:7e:cc:80:20:f2:79:27:01:17:19:18:5d:71:8d:c1:09: 7f:10:80:26:ae:6e:8d:e3:7a:e3:f9:cb:5f:a5:f4:9b:46:72: 98:ba:b4:fd:1e:fb:1d:8d:95:8d:e8:16:6c:c0:18:66:23:b8: af:ac:5a:b0:6d:3a:43:32:c5:0a:bf:ea:3a:0f:d1:d9:0f:46: 3e:bf:bb:9f:89:d2:9f:84:3d:e6:96:d8:57:fd:7f:50:6c:69: 4c:3d:0f:07:11:39:c5:51:db:1f:b7:02:26:ec:2c:86:30:19: 58:d4:1c:52:10:31:f4:ed:d4:ad:96:7e:e8:3a:78:49:1d:22: 93:1c:9f:d8:5a:2a:32:61:8e:5e:70:45:e6:71:a3:f0:c4:b6: f7:e6:3d:e8:ed:37:3a:35:6b:17:50:04:1a:4e:68:14:36:16: d5:c6:e3:7c:fc:b9:a7:38:0b:3b:d0:2c:8c:7b:96:14:88:72: c2:7d:95:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/JrRlDa4bdykBbBH749MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0N2EwNGUxYWMyNGM3OTc3NjM0NzgzOWU1MTM0YzlhYWEz OGJmNTcwHhcNMjYwMjA5MTgwMDMyWhcNMjYwMjEwMTgwMDMyWjAzMTEwLwYDVQQD EyhkYmJiMGY5NGY3MDNjMjRiYzNlMjgyZWRjMzdjNGMzNzEyNTNhNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Eq4Hxx2lkPrti/DqP91R9xCfYRw IvqwmW+esVhKqqUoPk8sa32zboCI2xUwvM7i5xSCSvOKFEGDzFrvynaHMdBfzNJC Z6CVTStZxKy63GcyQYF26jZ41sAXHSnckzo6Ci/wtARJ9UaDxYmD21frOMRKeTIt oORmjLwDpJGobxe/7oC8xfjbYlRdLLbxEBNbL7DGDTaimamq7mvpxCfAcpPkJvjf HHZnPLdlfWy2mdEDnk4pU7s4FOe8rh3NZDUY+5E2H374ljFF2Q9snwNNHmruxOWp qRCGS0fkytXbqaU4P0okHn8gwnj0Wx0zRgXzdydwhXgXe6rnG6ZTxyGVEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNu7D5T3A8JLw+KC7cN8TDcSU6cBMB8GA1UdIwQY MBaAFDR6BOGsJMeXdjR4OeUTTJqqOL9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhvRTRhd2t4NWQyTkhnNTVSTk1tcW80djFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mYWM4NmItZmYwNi00ODg4LTgzOGQt YzQ0OTc0YWRkMjMwLzEvTkhvRTRhd2t4NWQyTkhnNTVSTk1tcW80djFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9mYWM4NmItZmYwNi00ODg4LTgzOGQtYzQ0OTc0YWRkMjMw LzEvTkhvRTRhd2t4NWQyTkhnNTVSTk1tcW80djFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxnVDeUg MBYsU5Z6iIj6sRCXloS67kizqSYIFKBHWx8ATJjhqVF3iOlirMMCEEM9qAsw63ZD mm4Ifr4+lw+7LOxLCjAuu16Nmch+zIAg8nknARcZGF1xjcEJfxCAJq5ujeN64/nL X6X0m0ZymLq0/R77HY2VjegWbMAYZiO4r6xasG06QzLFCr/qOg/R2Q9GPr+7n4nS n4Q95pbYV/1/UGxpTD0PBxE5xVHbH7cCJuwshjAZWNQcUhAx9O3UrZZ+6Dp4SR0i kxyf2FoqMmGOXnBF5nGj8MS29+Y96O03OjVrF1AEGk5oFDYW1cbjfPy5pzgLO9As jHuWFIhywn2VBw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:08 2026 by rpki-client