This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json) Hash identifier: I+4KurYU5P71alGJIrQBK7k9iUIOxwfxiJL0BQe2U/0= Subject key identifier: 42:1E:10:7A:C8:98:8C:B4:10:F7:B8:DC:3D:44:B8:0B:C1:16:55:A5 Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5 Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5 Certificate serial: 019C427D87B16D88AF6C9F2D25A8E9C4679F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 13:00:48 +0000 Manifest this update: Mon 09 Feb 2026 13:00:48 +0000 Manifest next update: Tue 10 Feb 2026 13:00:48 +0000 Files and hashes: 1: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: uFBBNWwyfleI3GDUIHRRpeq0eckgBd4qjU9XmQNFH1g=) 2: YIADlJEaOqXbDe848xRwPpNrR2E.roa (hash: GAf0RBlCvyX7yioFoOVmfF//A2GhSK/l+zTEgxM3/NE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:87:b1:6d:88:af:6c:9f:2d:25:a8:e9:c4:67:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5 Validity Not Before: Feb 9 13:00:48 2026 GMT Not After : Feb 10 13:00:48 2026 GMT Subject: CN=421e107ac8988cb410f7b8dc3d44b80bc11655a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:48:43:b6:e8:3f:ef:aa:65:bb:25:f0:37: 44:97:15:08:93:7d:9e:07:9f:67:1a:1a:42:d8:54: ec:59:22:50:85:f6:11:c1:97:ea:2f:ee:42:b8:2f: 81:4f:60:dd:d9:82:24:42:2a:60:10:ea:02:26:1e: d0:80:76:66:f5:7b:5e:f4:21:de:9a:f3:d9:1f:21: 82:d8:19:13:d4:f6:1a:94:9d:71:6f:e0:86:a4:ae: 36:3e:1e:2d:e5:42:41:30:b1:40:b7:23:e3:ed:0d: 66:03:54:44:cc:e6:e0:92:9f:1e:03:03:26:7c:5e: cb:00:12:2c:ee:7b:66:ef:16:57:0c:ab:90:c7:ec: c9:ce:87:65:0c:1d:d2:d3:b4:4e:e8:c2:44:f8:79: d0:78:af:28:1a:07:66:b2:5b:9f:b1:7d:c2:c1:37: be:77:00:e9:96:fd:cd:93:fd:f1:a6:8e:bf:cd:dc: b2:83:4c:e7:c7:83:25:41:22:2f:e2:40:a8:a2:05: 66:ee:9d:67:65:74:32:89:e9:11:f3:d5:71:a7:c7: e3:7c:8b:6d:f5:19:76:4a:a7:c9:50:18:21:8d:44: 08:df:43:57:1e:86:9c:8b:c3:7b:ba:fd:cf:6a:b7: b7:02:5f:06:02:aa:2d:c6:bb:b2:6f:1a:2d:4b:e1: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1E:10:7A:C8:98:8C:B4:10:F7:B8:DC:3D:44:B8:0B:C1:16:55:A5 X509v3 Authority Key Identifier: keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7c:9b:37:8d:be:a0:ef:c3:d9:53:43:40:31:e3:88:4d:ec: 99:a3:82:47:14:75:e1:cf:7a:90:a7:55:27:00:c8:8f:aa:ce: c8:8b:d1:90:b3:d4:23:d6:c8:67:89:06:00:9f:6d:58:4e:19: 50:3d:b3:56:5e:0f:c7:3e:76:60:57:9b:27:35:f7:4f:04:6d: 1a:e2:69:66:8a:1e:78:62:66:08:a7:23:ed:b5:9b:7c:2e:81: 7c:6b:ff:31:e0:d4:46:25:99:5b:98:f5:a8:29:50:6d:a6:f0: a5:8b:59:05:d7:59:2a:f8:74:e8:a6:54:bd:bb:6b:d4:b6:19: e9:ae:92:08:7e:8f:bf:65:98:b0:6a:4f:13:b2:06:a4:e9:27: bb:f0:6d:ea:75:61:c6:87:9a:65:88:c5:04:d6:12:fa:2f:ac: 8b:7c:3c:7d:f2:cb:86:ab:dc:bc:b9:d5:84:bc:0b:99:22:86: f5:a5:c4:64:f7:8a:77:1f:75:9d:a9:cb:5c:95:bc:7d:5f:63: fe:84:f9:36:9f:fa:43:e9:b1:0d:44:ef:0a:ac:d6:3b:8a:59: 69:44:22:d2:c4:ac:f4:33:13:5e:df:9f:68:5b:c5:d3:d5:e5: 95:c0:f3:a6:90:7a:e0:b6:73:8b:e5:ec:4d:f8:b8:31:04:c1: f1:49:7e:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYexbYivbJ8tJajpxGefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NGMwODM2ZGQ1YzczYjA3NzU5MDRlYWEzYjdlODdhNGEw YzBjZjUwHhcNMjYwMjA5MTMwMDQ4WhcNMjYwMjEwMTMwMDQ4WjAzMTEwLwYDVQQD Eyg0MjFlMTA3YWM4OTg4Y2I0MTBmN2I4ZGMzZDQ0YjgwYmMxMTY1NWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/lIQ7boP++qZbsl8DdElxUIk32e B59nGhpC2FTsWSJQhfYRwZfqL+5CuC+BT2Dd2YIkQipgEOoCJh7QgHZm9Xte9CHe mvPZHyGC2BkT1PYalJ1xb+CGpK42Ph4t5UJBMLFAtyPj7Q1mA1REzObgkp8eAwMm fF7LABIs7ntm7xZXDKuQx+zJzodlDB3S07RO6MJE+HnQeK8oGgdmslufsX3CwTe+ dwDplv3Nk/3xpo6/zdyyg0znx4MlQSIv4kCoogVm7p1nZXQyiekR89Vxp8fjfItt 9Rl2SqfJUBghjUQI30NXHoaci8N7uv3Pare3Al8GAqotxruybxotS+ErdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIeEHrImIy0EPe43D1EuAvBFlWlMB8GA1UdIwQY MBaAFDRMCDbdXHOwd1kE6qO36HpKDAz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTBkYzMtNGNlZi00NGUzLWFlOTIt MTllMTM0NzEyZTkyLzEvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8wMTBkYzMtNGNlZi00NGUzLWFlOTItMTllMTM0NzEyZTky LzEvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3ybN42+ oO/D2VNDQDHjiE3smaOCRxR14c96kKdVJwDIj6rOyIvRkLPUI9bIZ4kGAJ9tWE4Z UD2zVl4Pxz52YFebJzX3TwRtGuJpZooeeGJmCKcj7bWbfC6BfGv/MeDURiWZW5j1 qClQbabwpYtZBddZKvh06KZUvbtr1LYZ6a6SCH6Pv2WYsGpPE7IGpOknu/Bt6nVh xoeaZYjFBNYS+i+si3w8ffLLhqvcvLnVhLwLmSKG9aXEZPeKdx91nanLXJW8fV9j /oT5Np/6Q+mxDUTvCqzWO4pZaUQi0sSs9DMTXt+faFvF09XllcDzppB64LZzi+Xs Tfi4MQTB8Ul+sA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:11 2026 by rpki-client