This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft File: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json) Hash identifier: XTwzqBE6yMaVdKFkJeXvkzsyKQ3cIcL+920XmNymBgI= Subject key identifier: 8D:43:CF:73:BC:29:9B:B3:5B:4E:19:2A:6C:80:C0:2E:10:19:5E:AD Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA Certificate issuer: /CN=363bd1b29c89edb944e28710d193874c94323eaa Certificate serial: 019C4322E9141F934F3DDC6E00831CC736AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft Manifest number: 04F3 Signing time: Mon 09 Feb 2026 16:01:27 +0000 Manifest this update: Mon 09 Feb 2026 16:01:27 +0000 Manifest next update: Tue 10 Feb 2026 16:01:27 +0000 Files and hashes: 1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: cutqexvTEmedshEiCay95ll4mj+TQu+unL6vdxBjw2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:e9:14:1f:93:4f:3d:dc:6e:00:83:1c:c7:36:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa Validity Not Before: Feb 9 16:01:27 2026 GMT Not After : Feb 10 16:01:27 2026 GMT Subject: CN=8d43cf73bc299bb35b4e192a6c80c02e10195ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:8c:d4:7e:0b:ec:60:51:89:17:7b:58:30: 7f:c8:fa:2a:40:19:4d:c4:e3:fa:9b:4a:42:4e:ca: 9f:1a:04:9b:c0:ba:d7:10:84:6f:1e:70:27:5e:f2: 69:17:62:97:f2:42:76:f1:35:f8:0a:8d:38:33:b3: 7f:94:59:b6:6e:42:d8:f7:6f:bf:98:61:0c:eb:2d: 9d:62:e7:0b:6f:08:97:db:4a:3a:b8:7f:d6:d2:47: f4:94:27:76:e6:3a:e1:38:90:f2:57:2b:5e:e8:26: 77:a4:7d:74:1e:3e:d9:cf:80:41:1a:a6:13:2f:40: 18:da:0e:5d:34:16:88:dd:8b:0c:62:ed:a5:fd:ea: 61:9a:70:5b:4c:43:a6:7f:f8:da:b8:32:49:48:09: 49:0c:e9:8b:46:70:a5:fb:45:54:ee:98:a0:bc:1c: 49:78:30:b2:30:98:9a:f3:9e:31:75:d0:88:03:45: f8:c3:a7:9a:7b:1e:63:22:62:be:1b:b9:83:1d:f3: 11:e7:c9:f6:a9:ea:d2:af:de:1d:e3:fe:f7:95:b4: bf:bc:54:96:6b:6b:d0:f3:72:ff:82:c6:a9:59:87: 4c:41:c6:9b:2a:dc:a7:6f:a8:da:18:0c:d3:7d:55: 37:b9:18:ef:8b:b7:32:01:79:17:5c:3f:27:ee:f0: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:43:CF:73:BC:29:9B:B3:5B:4E:19:2A:6C:80:C0:2E:10:19:5E:AD X509v3 Authority Key Identifier: keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d0:57:99:b6:81:9b:a1:3e:42:19:6d:5a:99:40:c2:2c:5f: c9:1c:32:a8:af:92:e7:d7:f1:42:f2:d5:8e:f9:9c:db:3f:7e: bd:52:45:99:d9:c6:9c:d3:06:76:8d:93:a9:d6:4b:d2:07:ab: 37:e8:5f:93:6a:b7:8f:f9:5c:76:f0:dd:7f:cd:02:f0:af:3c: 3c:d4:a1:84:19:5b:a6:82:82:ca:f5:a4:b8:4c:0e:e7:2a:c2: 4a:96:75:31:82:00:2a:70:a4:89:20:4d:34:dc:14:46:9c:73: 75:cd:83:84:fe:73:62:60:bd:3f:2e:ff:50:fb:01:3b:f6:f9: 57:ed:9a:ec:35:ec:1b:aa:11:bc:f6:0c:67:38:96:d8:53:56: b8:31:82:47:10:d5:0c:74:04:f5:64:d3:4a:ad:2c:f3:3c:30: 1c:48:5a:49:42:a0:50:42:c8:24:2d:f9:63:86:45:e4:6f:82: e2:8a:f2:fd:a8:b0:57:84:c8:d3:f4:cd:80:cf:0c:ca:bd:05: a1:41:3e:da:0a:15:1b:c5:fd:c1:73:7b:40:58:13:69:72:f6: f6:a7:99:6d:05:b6:65:4c:5e:08:23:ef:8c:c8:d3:52:21:99: db:a5:d3:b6:f8:24:f6:bd:53:9b:03:f5:91:86:4f:e5:83:81: e7:b5:78:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIukUH5NPPdxuAIMcxzaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2M2JkMWIyOWM4OWVkYjk0NGUyODcxMGQxOTM4NzRjOTQz MjNlYWEwHhcNMjYwMjA5MTYwMTI3WhcNMjYwMjEwMTYwMTI3WjAzMTEwLwYDVQQD Eyg4ZDQzY2Y3M2JjMjk5YmIzNWI0ZTE5MmE2YzgwYzAyZTEwMTk1ZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MaM1H4L7GBRiRd7WDB/yPoqQBlN xOP6m0pCTsqfGgSbwLrXEIRvHnAnXvJpF2KX8kJ28TX4Co04M7N/lFm2bkLY92+/ mGEM6y2dYucLbwiX20o6uH/W0kf0lCd25jrhOJDyVyte6CZ3pH10Hj7Zz4BBGqYT L0AY2g5dNBaI3YsMYu2l/ephmnBbTEOmf/jauDJJSAlJDOmLRnCl+0VU7pigvBxJ eDCyMJia854xddCIA0X4w6eaex5jImK+G7mDHfMR58n2qerSr94d4/73lbS/vFSW a2vQ83L/gsapWYdMQcabKtynb6jaGAzTfVU3uRjvi7cyAXkXXD8n7vDBmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1Dz3O8KZuzW04ZKmyAwC4QGV6tMB8GA1UdIwQY MBaAFDY70bKcie25ROKHENGTh0yUMj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYt MTI0NjU4YjM2ZGZkLzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYtMTI0NjU4YjM2ZGZk LzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9BXmbaB m6E+QhltWplAwixfyRwyqK+S59fxQvLVjvmc2z9+vVJFmdnGnNMGdo2TqdZL0ger N+hfk2q3j/lcdvDdf80C8K88PNShhBlbpoKCyvWkuEwO5yrCSpZ1MYIAKnCkiSBN NNwURpxzdc2DhP5zYmC9Py7/UPsBO/b5V+2a7DXsG6oRvPYMZziW2FNWuDGCRxDV DHQE9WTTSq0s8zwwHEhaSUKgUELIJC35Y4ZF5G+C4ory/aiwV4TI0/TNgM8Myr0F oUE+2goVG8X9wXN7QFgTaXL29qeZbQW2ZUxeCCPvjMjTUiGZ26XTtvgk9r1TmwP1 kYZP5YOB57V4ow== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:16 2026 by rpki-client