This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json) Hash identifier: 3pgy4f4oiGSMVPHfR6xYGNwG+jqCOC8xuJvPZ9xAyrU= Subject key identifier: D1:C1:13:FE:DD:1C:5C:91:7A:47:E2:81:BF:8A:4F:90:88:C3:45:34 Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41 Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541 Certificate serial: 019C438FAF56376DA08738CF40A7A31DDADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft Manifest number: 0862 Signing time: Mon 09 Feb 2026 18:00:15 +0000 Manifest this update: Mon 09 Feb 2026 18:00:15 +0000 Manifest next update: Tue 10 Feb 2026 18:00:15 +0000 Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: OQuv4kEHAdTk9SOI81c1MRW/tkBUnLjyZq5b1VoWoNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:af:56:37:6d:a0:87:38:cf:40:a7:a3:1d:da:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541 Validity Not Before: Feb 9 18:00:15 2026 GMT Not After : Feb 10 18:00:15 2026 GMT Subject: CN=d1c113fedd1c5c917a47e281bf8a4f9088c34534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dd:e5:40:12:7e:db:34:f9:c6:d4:45:e0:8c: 9b:15:72:d5:0e:be:5e:fe:aa:43:09:f3:cb:bb:46: 79:4a:b0:a0:7b:ae:a5:e3:d2:76:a2:8b:9b:45:62: 45:94:a4:87:64:28:82:5e:a6:99:32:65:b2:cb:54: 3d:b3:7b:d6:0d:5a:dd:19:79:29:59:30:17:30:3e: f1:7f:91:4f:00:8c:d1:81:00:f4:02:62:f3:d5:a2: d5:27:72:cd:dd:52:72:d4:b4:76:cf:39:14:a5:b2: 1e:70:1b:3e:a4:f5:38:79:85:41:2a:ea:e5:65:5f: bf:d0:1a:1f:0e:58:b1:ad:b4:8c:6e:07:39:20:6f: e0:17:ed:37:0f:4a:8b:cc:29:c0:e7:19:ef:e2:ab: 7e:a8:07:7f:2c:11:37:de:9c:b8:94:a9:63:ee:cf: 89:52:31:b9:e3:ea:5c:e2:d1:ba:8e:f1:9b:06:c0: ef:03:70:6b:a0:57:eb:7c:e6:d3:3b:37:f5:94:43: 5c:97:99:b2:e6:46:d4:8d:ad:23:60:33:95:39:4f: 2a:35:0a:2e:b0:5d:85:6c:85:f9:b5:24:96:69:eb: 02:0c:b7:cb:ab:ec:96:6d:06:6a:d3:c0:8d:32:7a: a0:27:96:a9:29:c0:7d:19:ec:92:25:5e:4b:22:54: f6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C1:13:FE:DD:1C:5C:91:7A:47:E2:81:BF:8A:4F:90:88:C3:45:34 X509v3 Authority Key Identifier: keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0a:dc:4d:73:5c:90:9b:5c:e9:4b:54:63:c8:b4:40:51:bd: 6b:21:ea:4e:dc:f2:cc:02:a7:33:8a:e0:d1:86:c2:2f:85:94: 8d:f5:1e:05:e6:de:f5:00:78:26:10:ed:9b:fb:77:54:43:f2: 9c:dc:f2:c1:89:0d:de:1a:15:39:f5:ea:6e:91:99:57:e7:98: f3:dc:59:50:59:26:f0:49:43:68:af:da:88:8d:93:77:22:1f: 58:52:f9:39:0a:df:8c:87:40:e1:f7:53:41:b0:d2:16:02:26: 41:77:8a:2e:e0:72:ac:89:4b:87:62:ac:e6:c0:12:5b:89:0e: 0c:dc:be:45:fd:ad:54:43:9d:9e:ad:de:a9:2e:fa:8b:ed:76: 77:12:d3:ed:67:f8:12:27:a3:19:74:3e:e0:a2:8a:18:4c:a3: 55:e2:e3:5e:60:fe:92:c9:4b:f2:32:63:a9:71:24:87:2d:97: 3c:2b:67:d2:c5:4f:ae:f2:9f:70:e4:59:72:60:4e:2e:08:c9: ca:4f:48:a7:d6:d5:ed:ac:10:87:ae:c1:f5:da:3c:e3:64:8e: 1c:22:40:22:ce:b7:a6:b5:bf:c2:5f:ca:d4:c6:65:d9:e0:72: 86:36:05:4e:b7:63:dd:b4:77:a1:9d:66:49:45:29:f9:85:c5: ff:ca:6a:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj69WN22ghzjPQKejHdrbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZDhkYTNhODg1MWI0NzZkZTRiZjM5YmY1MGMwMzdkOTRi Njc1NDEwHhcNMjYwMjA5MTgwMDE1WhcNMjYwMjEwMTgwMDE1WjAzMTEwLwYDVQQD EyhkMWMxMTNmZWRkMWM1YzkxN2E0N2UyODFiZjhhNGY5MDg4YzM0NTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid3lQBJ+2zT5xtRF4IybFXLVDr5e /qpDCfPLu0Z5SrCge66l49J2ooubRWJFlKSHZCiCXqaZMmWyy1Q9s3vWDVrdGXkp WTAXMD7xf5FPAIzRgQD0AmLz1aLVJ3LN3VJy1LR2zzkUpbIecBs+pPU4eYVBKurl ZV+/0BofDlixrbSMbgc5IG/gF+03D0qLzCnA5xnv4qt+qAd/LBE33py4lKlj7s+J UjG54+pc4tG6jvGbBsDvA3BroFfrfObTOzf1lENcl5my5kbUja0jYDOVOU8qNQou sF2FbIX5tSSWaesCDLfLq+yWbQZq08CNMnqgJ5apKcB9GeySJV5LIlT26QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHBE/7dHFyRekfigb+KT5CIw0U0MB8GA1UdIwQY MBaAFJ7Y2jqIUbR23kvzm/UMA32UtnVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRqYU9vaFJ0SGJlU19PYjlRd0RmWlMyZFVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lOGVkOGMtNDUzNC00MmI3LWI4NDYt MDU3YzM3NDJhMWE1LzEvbnRqYU9vaFJ0SGJlU19PYjlRd0RmWlMyZFVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lOGVkOGMtNDUzNC00MmI3LWI4NDYtMDU3YzM3NDJhMWE1 LzEvbnRqYU9vaFJ0SGJlU19PYjlRd0RmWlMyZFVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgArcTXNc kJtc6UtUY8i0QFG9ayHqTtzyzAKnM4rg0YbCL4WUjfUeBebe9QB4JhDtm/t3VEPy nNzywYkN3hoVOfXqbpGZV+eY89xZUFkm8ElDaK/aiI2TdyIfWFL5OQrfjIdA4fdT QbDSFgImQXeKLuByrIlLh2Ks5sASW4kODNy+Rf2tVEOdnq3eqS76i+12dxLT7Wf4 EiejGXQ+4KKKGEyjVeLjXmD+kslL8jJjqXEkhy2XPCtn0sVPrvKfcORZcmBOLgjJ yk9Ip9bV7awQh67B9do842SOHCJAIs63prW/wl/K1MZl2eByhjYFTrdj3bR3oZ1m SUUp+YXF/8pqvw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:16 2026 by rpki-client