This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft File: nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json) Hash identifier: qBi4bvnBbxPxN12WpOJIrPIPSm+pel/vGcN994taHGs= Subject key identifier: A6:40:7B:0A:0E:39:FA:D7:BC:EA:E4:A7:D9:29:7E:F2:8E:3C:CE:95 Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8 Certificate issuer: /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8 Certificate serial: 019C4322354C8E8F2FFB1DE8C6C7E059F713 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft Manifest number: 0E39 Signing time: Mon 09 Feb 2026 16:00:41 +0000 Manifest this update: Mon 09 Feb 2026 16:00:41 +0000 Manifest next update: Tue 10 Feb 2026 16:00:41 +0000 Files and hashes: 1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: 6mMHdQxtEHS3p/ZhmmX2q3fCDHEYsoAXG0mh3cQaH7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:35:4c:8e:8f:2f:fb:1d:e8:c6:c7:e0:59:f7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8 Validity Not Before: Feb 9 16:00:41 2026 GMT Not After : Feb 10 16:00:41 2026 GMT Subject: CN=a6407b0a0e39fad7bceae4a7d9297ef28e3cce95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a9:56:af:3a:42:6f:bb:01:e0:47:44:b9:17: 57:16:19:0d:b2:81:75:87:43:2a:e9:58:13:7b:fc: 8b:79:f5:21:c9:f6:c4:d2:89:26:41:8c:2f:8f:09: f4:90:88:2d:d1:a6:61:95:ad:de:ab:f4:cc:f4:49: e1:2c:96:b6:10:8f:c7:29:9b:d3:00:3c:32:41:4b: 51:6b:f9:cc:f1:35:b6:29:e9:9f:b9:8c:f4:95:19: 4e:d6:0b:d7:36:f8:44:c0:b4:e7:12:fc:df:29:ec: f4:e7:fa:fa:fa:99:ac:05:05:c1:62:98:23:1b:2e: 91:7c:a2:26:c5:d4:2f:6a:b3:54:84:f7:27:15:6c: 17:70:be:96:c4:5c:12:6c:48:6a:8c:f5:14:8a:83: b7:b9:07:6d:6a:50:59:27:84:3b:54:33:21:9f:18: 54:bc:1d:24:1c:55:c1:45:44:e2:f5:81:74:b0:52: a4:ca:1d:a8:6f:03:b2:a7:8e:69:72:85:94:ed:36: d3:8d:1f:e3:49:6a:e6:b2:d0:98:8c:8f:3c:b2:e9: e7:7a:38:98:b2:46:7d:ad:8b:cc:bb:2e:60:a7:45: ae:73:96:9e:43:27:b5:7f:8e:c2:5f:cb:69:5d:ff: d3:71:1a:52:f9:ef:fe:94:39:dc:7b:4c:62:9e:a0: 8f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:40:7B:0A:0E:39:FA:D7:BC:EA:E4:A7:D9:29:7E:F2:8E:3C:CE:95 X509v3 Authority Key Identifier: keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:24:e5:a1:1c:0a:52:90:f5:33:1d:10:5d:1a:4d:75:94:15: 9d:2a:26:f1:d0:a5:0b:46:55:5e:fd:de:86:af:29:e7:13:1e: 15:b6:e0:06:e4:aa:c9:a4:8b:2d:06:e7:3f:a5:35:6b:cb:ed: f0:11:2e:68:23:91:74:70:f8:bc:9a:da:e0:e5:d9:ec:ee:1c: 95:8d:ac:c2:ab:1c:cf:29:63:cb:3e:1c:ab:55:54:9a:65:e8: 55:1b:07:25:cb:a9:b0:d1:de:1b:03:47:b1:85:e1:51:f6:8a: c1:c1:3f:4d:56:6a:99:6b:04:22:c7:f3:81:ee:04:53:d6:66: 3b:4c:3b:36:1e:ee:e0:c5:9a:45:16:d5:d5:2f:24:1b:c0:c6: 29:f5:6c:59:d8:0c:e1:84:77:3b:a1:72:21:40:9f:a6:aa:da: 0f:23:2a:1c:c5:9d:0d:81:bf:a9:69:69:39:0c:4f:d7:c4:bd: 61:be:dc:c9:f3:19:31:7d:e5:e3:1c:db:67:db:98:21:2e:81: a6:65:18:61:1b:46:74:f3:6b:ad:10:95:97:13:fa:98:fa:c3: 49:6a:a4:af:72:bb:55:c6:ae:0e:88:b6:79:de:b9:81:91:f9: e7:ad:13:55:98:29:9c:64:94:b1:f9:04:35:99:e2:90:f7:64: fd:6e:a8:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIjVMjo8v+x3oxsfgWfcTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzFjZjRiNmEyZDI3YmRjYjI2YTc4M2U4Mzc2ZWU2ZWIy OTVmZDgwHhcNMjYwMjA5MTYwMDQxWhcNMjYwMjEwMTYwMDQxWjAzMTEwLwYDVQQD EyhhNjQwN2IwYTBlMzlmYWQ3YmNlYWU0YTdkOTI5N2VmMjhlM2NjZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlalWrzpCb7sB4EdEuRdXFhkNsoF1 h0Mq6VgTe/yLefUhyfbE0okmQYwvjwn0kIgt0aZhla3eq/TM9EnhLJa2EI/HKZvT ADwyQUtRa/nM8TW2KemfuYz0lRlO1gvXNvhEwLTnEvzfKez05/r6+pmsBQXBYpgj Gy6RfKImxdQvarNUhPcnFWwXcL6WxFwSbEhqjPUUioO3uQdtalBZJ4Q7VDMhnxhU vB0kHFXBRUTi9YF0sFKkyh2obwOyp45pcoWU7TbTjR/jSWrmstCYjI88sunnejiY skZ9rYvMuy5gp0Wuc5aeQye1f47CX8tpXf/TcRpS+e/+lDnce0xinqCP0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZAewoOOfrXvOrkp9kpfvKOPM6VMB8GA1UdIwQY MBaAFJzBz0tqLSe9yyang+g3bubrKV/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1IUFMyb3RKNzNMSnFlRDZEZHU1dXNwWDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83OTE5NjMtYWY0Ny00YzRjLTg4Yjct YTMwZTk2ZGI0OWM0LzEvbk1IUFMyb3RKNzNMSnFlRDZEZHU1dXNwWDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS83OTE5NjMtYWY0Ny00YzRjLTg4YjctYTMwZTk2ZGI0OWM0 LzEvbk1IUFMyb3RKNzNMSnFlRDZEZHU1dXNwWDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiTloRwK UpD1Mx0QXRpNdZQVnSom8dClC0ZVXv3ehq8p5xMeFbbgBuSqyaSLLQbnP6U1a8vt 8BEuaCORdHD4vJra4OXZ7O4clY2swqsczyljyz4cq1VUmmXoVRsHJcupsNHeGwNH sYXhUfaKwcE/TVZqmWsEIsfzge4EU9ZmO0w7Nh7u4MWaRRbV1S8kG8DGKfVsWdgM 4YR3O6FyIUCfpqraDyMqHMWdDYG/qWlpOQxP18S9Yb7cyfMZMX3l4xzbZ9uYIS6B pmUYYRtGdPNrrRCVlxP6mPrDSWqkr3K7VcauDoi2ed65gZH5560TVZgpnGSUsfkE NZnikPdk/W6oIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:19:38 2026 by rpki-client