This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft File: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json) Hash identifier: G0Fpxx//VPjaogkm1TWBWtQApLYk/2CuaXRuakwzmoY= Subject key identifier: C1:98:77:91:AC:B7:C3:EC:66:22:62:74:99:E2:12:59:25:04:AD:D7 Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78 Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78 Certificate serial: 019C43FDC1C8980DD69F7A03B2FFFEA5C783 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 20:00:29 +0000 Manifest this update: Mon 09 Feb 2026 20:00:29 +0000 Manifest next update: Tue 10 Feb 2026 20:00:29 +0000 Files and hashes: 1: lS_7ElVJSzohGwkrzoM9Rl9Uaeo.roa (hash: 2GOJmUxu3DZ3m6sSBQN+fyPKa6u0tmi0xc6B6mGHemU=) 2: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: 39ssaTBMSA364Xh4ytBufelLLdISif7L2/J/rhlJgyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:c1:c8:98:0d:d6:9f:7a:03:b2:ff:fe:a5:c7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78 Validity Not Before: Feb 9 20:00:29 2026 GMT Not After : Feb 10 20:00:29 2026 GMT Subject: CN=c1987791acb7c3ec6622627499e212592504add7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:ad:c1:48:1c:f8:32:f3:8a:99:04:31:16: 6b:66:8f:87:5d:0a:69:47:3e:29:b0:89:43:c3:34: b5:8d:73:57:ed:90:23:1f:2b:c4:55:62:2f:94:70: 49:5c:6d:a5:7f:36:dc:13:68:d6:22:c6:19:07:2a: e5:2c:94:a2:b5:8b:42:60:41:bf:d1:7c:6f:e0:14: 78:31:44:35:d9:06:70:b3:85:30:9f:b4:08:6d:41: c5:10:07:ea:a0:f6:f1:e8:af:47:1b:d2:f4:06:d4: a2:7a:de:fe:44:75:5d:ff:40:86:3f:fd:5f:50:d4: 41:9b:25:68:9b:d8:18:c7:03:8f:09:6b:09:fe:58: c5:0d:3a:0d:d0:f7:4c:d1:aa:23:15:84:ea:47:fb: 28:ff:0c:4d:08:37:78:a1:f3:54:c3:57:53:95:81: 91:b0:83:bd:9b:3f:51:e4:0e:a3:6e:9a:5f:25:12: 39:7a:77:93:e0:3b:a3:36:e6:58:b0:e9:ed:33:03: 7f:2f:b7:6d:00:54:fb:fa:bb:0a:ad:23:a9:c6:26: 51:65:fc:6b:ed:70:24:a2:e8:18:1b:7f:2d:5d:0b: a4:4d:d6:46:29:f3:29:d5:71:08:67:43:c7:96:3b: a9:4c:a6:2b:f0:0e:79:89:71:30:5b:71:eb:00:03: 2d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:98:77:91:AC:B7:C3:EC:66:22:62:74:99:E2:12:59:25:04:AD:D7 X509v3 Authority Key Identifier: keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f8:cb:e3:dc:7f:a2:da:3b:94:8a:82:74:c6:8b:97:d9:47: c9:47:b3:d3:22:d1:8a:de:35:d1:9a:c6:af:cc:1b:92:d1:a1: b6:7a:08:0a:56:74:b1:05:18:39:0b:b3:1b:b4:db:00:79:dc: 96:58:bf:0e:b8:c2:34:98:d1:27:d3:0b:a7:5c:c4:28:17:07: d9:71:0a:a6:49:05:68:12:39:4c:67:68:3d:6a:e9:e3:a1:95: 33:6c:7d:76:a9:a4:db:23:7b:7f:2a:d7:28:39:8a:f0:77:78: 29:06:d8:30:b7:01:74:4b:62:44:21:ce:5c:ee:e0:cb:e0:45: 39:4d:26:06:ec:ec:e5:80:e7:97:85:40:ad:84:8f:50:d9:7f: 48:d6:3d:32:92:ca:b6:9f:64:a1:a8:f8:b7:eb:37:43:5d:a3: be:f3:67:ce:0e:41:bb:9f:18:49:0f:75:ca:75:4f:b3:79:43: 33:4d:15:e8:f4:21:f9:7e:d9:3c:2d:51:73:3f:bd:4d:e7:63: 40:3f:cb:51:85:49:2a:27:e8:de:56:e3:9d:1a:15:c2:95:e5: 0b:f9:c0:52:fb:cd:b2:2d:2c:c8:0c:e9:13:3e:80:13:94:97: 80:6e:6a:46:9a:1f:41:69:06:b4:b6:42:2d:b1:6a:e6:cd:2c: ef:97:d7:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/cHImA3Wn3oDsv/+pceDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTA1ZjJlNjdhMWU2MDRiM2Y5NjNjZTRjMzY3ZDE5NThi ZDRiNzgwHhcNMjYwMjA5MjAwMDI5WhcNMjYwMjEwMjAwMDI5WjAzMTEwLwYDVQQD EyhjMTk4Nzc5MWFjYjdjM2VjNjYyMjYyNzQ5OWUyMTI1OTI1MDRhZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuetwUgc+DLzipkEMRZrZo+HXQpp Rz4psIlDwzS1jXNX7ZAjHyvEVWIvlHBJXG2lfzbcE2jWIsYZByrlLJSitYtCYEG/ 0Xxv4BR4MUQ12QZws4Uwn7QIbUHFEAfqoPbx6K9HG9L0BtSiet7+RHVd/0CGP/1f UNRBmyVom9gYxwOPCWsJ/ljFDToN0PdM0aojFYTqR/so/wxNCDd4ofNUw1dTlYGR sIO9mz9R5A6jbppfJRI5eneT4DujNuZYsOntMwN/L7dtAFT7+rsKrSOpxiZRZfxr 7XAkougYG38tXQukTdZGKfMp1XEIZ0PHljupTKYr8A55iXEwW3HrAAMt/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGYd5Gst8PsZiJidJniElklBK3XMB8GA1UdIwQY MBaAFJ5QXy5noeYEs/ljzkw2fRlYvUt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAt MDg1NDI0NTRkMTZiLzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAtMDg1NDI0NTRkMTZi LzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/jL49x/ oto7lIqCdMaLl9lHyUez0yLRit410ZrGr8wbktGhtnoIClZ0sQUYOQuzG7TbAHnc lli/DrjCNJjRJ9MLp1zEKBcH2XEKpkkFaBI5TGdoPWrp46GVM2x9dqmk2yN7fyrX KDmK8Hd4KQbYMLcBdEtiRCHOXO7gy+BFOU0mBuzs5YDnl4VArYSPUNl/SNY9MpLK tp9koaj4t+s3Q12jvvNnzg5Bu58YSQ91ynVPs3lDM00V6PQh+X7ZPC1Rcz+9Tedj QD/LUYVJKifo3lbjnRoVwpXlC/nAUvvNsi0syAzpEz6AE5SXgG5qRpofQWkGtLZC LbFq5s0s75fXWQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:47:10 2026 by rpki-client