This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json) Hash identifier: +gwIGf0YfG5akkzwSacNWDD0FRAz0Qj2Wq//rb5bV44= Subject key identifier: 90:B2:15:7B:03:26:CC:7D:F8:45:E5:CD:53:43:88:F7:DD:02:B4:69 Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78 Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578 Certificate serial: 019C4133FFED232157E53E488F58B1E8069F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 07:00:52 +0000 Manifest this update: Mon 09 Feb 2026 07:00:52 +0000 Manifest next update: Tue 10 Feb 2026 07:00:52 +0000 Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: 7Y8kmaOnl4dUuBQISVfgqook2ceuG1NWIsOp973UWu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:ff:ed:23:21:57:e5:3e:48:8f:58:b1:e8:06:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578 Validity Not Before: Feb 9 07:00:52 2026 GMT Not After : Feb 10 07:00:52 2026 GMT Subject: CN=90b2157b0326cc7df845e5cd534388f7dd02b469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a7:e9:29:41:f1:cc:0d:a2:28:d5:ed:04:9d: 98:a7:0f:68:1b:58:f2:f6:62:07:e4:09:56:54:14: e9:77:0b:c2:9c:f4:29:ce:dc:d3:4d:74:94:b3:5a: 1c:9e:d0:83:3b:3d:82:e0:18:fd:fe:bf:1f:4d:55: 70:49:26:02:6a:9f:c2:cd:2e:35:5b:64:5a:05:a7: 9c:b2:db:98:5f:37:94:86:24:eb:62:7f:0b:a4:fb: 2c:5a:4f:79:57:29:87:97:b6:35:06:87:56:10:09: 99:50:c0:fc:4d:93:eb:ea:51:20:e0:e0:d3:ca:c5: 4a:f5:70:45:a1:25:be:c0:96:ca:81:2d:b6:b8:8f: 83:77:9e:de:cb:f0:79:a0:23:8a:e4:1a:e6:65:8e: 25:f4:1e:38:5c:63:f3:ee:67:22:8f:90:59:f9:a9: 61:6e:f4:33:54:e9:14:ac:19:b0:41:90:86:b9:24: 0e:cd:db:05:19:f3:15:44:ce:dc:9e:e6:bc:01:20: 9d:b6:31:8d:0f:cf:16:7a:15:27:54:f4:aa:ce:81: 21:01:47:10:83:ae:4c:71:9f:71:d7:87:38:77:5a: e7:f8:70:66:e7:fd:70:db:06:15:27:2f:d0:d8:1b: 93:71:fd:6b:e7:ce:7a:d2:52:b6:a0:3f:e7:39:7f: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B2:15:7B:03:26:CC:7D:F8:45:E5:CD:53:43:88:F7:DD:02:B4:69 X509v3 Authority Key Identifier: keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:70:34:d5:73:23:8a:c2:5f:e0:27:11:e1:a8:b7:28:2c:f2: 5c:a0:07:ee:e5:eb:d8:3e:7d:f3:e2:fc:35:09:52:1c:85:24: 2d:67:13:e1:76:06:5c:39:88:5c:dd:13:f2:4c:3d:4a:1a:85: 73:e8:bf:54:9a:0e:7b:d6:73:a3:17:f4:97:02:a8:68:40:00: 3b:e4:9d:a1:d5:5f:2c:65:f5:e5:f4:21:bb:37:12:3c:1f:2e: a4:f1:de:2d:e7:96:f5:54:25:74:11:d3:f1:cd:3d:79:5f:58: 5a:0a:94:8a:41:37:b8:d3:d4:0a:3d:4a:cc:6a:b1:c9:a6:94: 5e:17:9e:de:9f:2d:86:44:8b:3b:b1:01:15:7a:da:74:ea:33: 21:c8:3a:5f:fc:cb:8b:af:da:7a:3f:fa:fc:b1:c9:06:ea:67: c1:d6:3c:f5:87:5f:95:17:2f:09:6d:be:13:10:8c:9b:26:89: 96:3f:c4:53:7a:68:0b:e0:47:a4:1c:e2:e8:d4:8a:e1:81:22: 89:33:98:7e:09:72:33:9b:0e:c9:df:e3:72:96:c5:43:94:fb: dd:aa:41:88:2f:71:10:51:0e:9a:aa:fd:af:4d:05:56:2a:70: d2:9f:e4:97:b6:db:84:a1:d6:66:86:4a:6b:90:c4:ed:4b:f2: ad:4c:51:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM//tIyFX5T5Ij1ix6AafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZGM1NzBiYzFjOTY0YmFiN2VkNTZjNjczYWE0MDUxOGY4 NTQ1NzgwHhcNMjYwMjA5MDcwMDUyWhcNMjYwMjEwMDcwMDUyWjAzMTEwLwYDVQQD Eyg5MGIyMTU3YjAzMjZjYzdkZjg0NWU1Y2Q1MzQzODhmN2RkMDJiNDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6fpKUHxzA2iKNXtBJ2Ypw9oG1jy 9mIH5AlWVBTpdwvCnPQpztzTTXSUs1ocntCDOz2C4Bj9/r8fTVVwSSYCap/CzS41 W2RaBaecstuYXzeUhiTrYn8LpPssWk95VymHl7Y1BodWEAmZUMD8TZPr6lEg4ODT ysVK9XBFoSW+wJbKgS22uI+Dd57ey/B5oCOK5BrmZY4l9B44XGPz7mcij5BZ+alh bvQzVOkUrBmwQZCGuSQOzdsFGfMVRM7cnua8ASCdtjGND88WehUnVPSqzoEhAUcQ g65McZ9x14c4d1rn+HBm5/1w2wYVJy/Q2BuTcf1r58560lK2oD/nOX9c6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCyFXsDJsx9+EXlzVNDiPfdArRpMB8GA1UdIwQY MBaAFNDcVwvByWS6t+1WxnOqQFGPhUV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2Yt ZDM4ZGQwYjc4OTA5LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2YtZDM4ZGQwYjc4OTA5 LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnA01XMj isJf4CcR4ai3KCzyXKAH7uXr2D598+L8NQlSHIUkLWcT4XYGXDmIXN0T8kw9ShqF c+i/VJoOe9Zzoxf0lwKoaEAAO+SdodVfLGX15fQhuzcSPB8upPHeLeeW9VQldBHT 8c09eV9YWgqUikE3uNPUCj1KzGqxyaaUXhee3p8thkSLO7EBFXradOozIcg6X/zL i6/aej/6/LHJBupnwdY89YdflRcvCW2+ExCMmyaJlj/EU3poC+BHpBzi6NSK4YEi iTOYfglyM5sOyd/jcpbFQ5T73apBiC9xEFEOmqr9r00FVipw0p/kl7bbhKHWZoZK a5DE7UvyrUxR3w== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:06 2026 by rpki-client