This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json) Hash identifier: AqRXzTvP+PE2iuWg+O7+woAJjgp8gx5OO3PlM+t7Ixw= Subject key identifier: 51:AC:48:8A:2F:81:61:AD:64:6F:37:57:07:DB:D1:72:C4:FA:95:98 Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Certificate serial: 019C40FCC061B6D0EC98D9D73A89C5B7F26F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft Manifest number: 04D7 Signing time: Mon 09 Feb 2026 06:00:31 +0000 Manifest this update: Mon 09 Feb 2026 06:00:31 +0000 Manifest next update: Tue 10 Feb 2026 06:00:31 +0000 Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=) 2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: Y5cXPfdnp1Xn65fIRZW6vO+FkI6nmANmserEeBx3YUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fc:c0:61:b6:d0:ec:98:d9:d7:3a:89:c5:b7:f2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Validity Not Before: Feb 9 06:00:31 2026 GMT Not After : Feb 10 06:00:31 2026 GMT Subject: CN=51ac488a2f8161ad646f375707dbd172c4fa9598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8b:b7:65:e1:2c:bf:68:ac:ad:ff:e0:00:eb: 4b:62:6d:78:07:13:a5:87:4a:8d:fb:87:44:e8:ab: 52:2c:4c:40:4d:cd:33:3b:97:e0:bf:40:77:c4:b9: d7:dc:d6:cd:c9:45:08:a5:d5:07:aa:fb:7c:81:0e: cf:84:f1:bc:d3:f9:83:df:e1:27:e7:0e:8f:c0:31: 74:4d:36:60:28:3e:34:a2:0e:8f:ef:b7:d6:66:51: f3:fc:c6:9f:b1:99:83:6f:e4:c1:55:81:63:aa:9d: a8:56:d6:c9:aa:df:73:1c:66:7b:94:ca:a7:cb:12: bf:d6:cf:ed:c7:94:7f:3c:a4:91:e0:d9:75:a5:f7: 2b:60:f9:7a:47:28:31:aa:9b:17:b0:2a:fd:9d:61: 9e:25:40:aa:2d:47:6e:46:cc:37:c8:53:5a:c4:e6: ae:fd:73:f5:5a:83:c3:8c:7a:db:9f:6c:b2:f8:bb: 6d:fc:60:54:47:6b:68:3e:ea:55:23:a3:c8:f1:87: 37:a5:c6:38:1d:2e:f0:5b:4e:13:8c:5d:d6:ac:fa: 04:94:50:54:80:a2:fd:17:bf:08:c6:f2:12:bd:32: bc:e0:9b:06:86:d0:88:9c:10:74:89:2a:77:2a:eb: c7:35:6d:fe:b9:d0:0e:56:9c:a4:96:81:2c:f8:16: db:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AC:48:8A:2F:81:61:AD:64:6F:37:57:07:DB:D1:72:C4:FA:95:98 X509v3 Authority Key Identifier: keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f8:39:50:15:db:8d:7d:e4:80:a7:c4:8b:f1:cf:50:68:0b: 2c:4a:11:6e:8a:d8:42:a7:a5:d9:65:66:02:e8:2f:bc:63:d3: 2c:3e:52:e3:7e:a8:c1:37:c0:9c:b2:4a:13:0c:9a:02:02:71: c9:f9:03:da:03:92:28:1b:ff:af:50:0c:83:a6:9e:64:87:44: 2f:81:39:5f:34:4d:52:cb:a6:38:f4:99:b9:e7:97:b8:1f:f5: c7:91:b1:2b:da:24:7a:66:75:7a:1e:f9:76:60:4f:7e:53:4f: 81:09:02:51:b3:97:9d:d6:c6:ed:ef:3c:1f:8f:31:b1:a4:a0: a5:a0:8c:83:64:6f:79:3e:c6:8a:d5:58:1f:55:a4:7d:cd:43: ff:2e:00:b1:18:68:77:ac:c8:a5:ad:7b:99:3f:bc:40:60:13: a2:c5:79:a8:7f:13:d3:77:26:f9:00:31:bb:ae:22:34:12:a5: fb:25:29:95:d4:9a:45:24:4e:7d:f6:c5:53:75:5f:bd:ad:4d: b3:d9:40:e4:44:bd:47:04:80:25:f2:34:3a:3e:b3:8d:b7:9c: da:a6:b3:3a:77:69:46:1e:5f:d6:8a:96:fb:aa:5d:d8:a9:72: 72:d2:a7:65:36:14:3c:cd:9d:75:ce:98:32:9f:cf:9c:ad:67: 3e:b7:07:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/MBhttDsmNnXOonFt/JvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NmQ1Zjk0NTg4MzhmY2YxNmNjMjg3MDIyNWVlNWY4OGZm OTRkY2EwHhcNMjYwMjA5MDYwMDMxWhcNMjYwMjEwMDYwMDMxWjAzMTEwLwYDVQQD Eyg1MWFjNDg4YTJmODE2MWFkNjQ2ZjM3NTcwN2RiZDE3MmM0ZmE5NTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Yu3ZeEsv2isrf/gAOtLYm14BxOl h0qN+4dE6KtSLExATc0zO5fgv0B3xLnX3NbNyUUIpdUHqvt8gQ7PhPG80/mD3+En 5w6PwDF0TTZgKD40og6P77fWZlHz/MafsZmDb+TBVYFjqp2oVtbJqt9zHGZ7lMqn yxK/1s/tx5R/PKSR4Nl1pfcrYPl6RygxqpsXsCr9nWGeJUCqLUduRsw3yFNaxOau /XP1WoPDjHrbn2yy+Ltt/GBUR2toPupVI6PI8Yc3pcY4HS7wW04TjF3WrPoElFBU gKL9F78IxvISvTK84JsGhtCInBB0iSp3KuvHNW3+udAOVpykloEs+BbbFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGsSIovgWGtZG83Vwfb0XLE+pWYMB8GA1UdIwQY MBaAFDdtX5RYg4/PFswocCJe5fiP+U3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAt NDQxMTAxMmFiOTllLzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAtNDQxMTAxMmFiOTll LzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfg5UBXb jX3kgKfEi/HPUGgLLEoRborYQqel2WVmAugvvGPTLD5S436owTfAnLJKEwyaAgJx yfkD2gOSKBv/r1AMg6aeZIdEL4E5XzRNUsumOPSZueeXuB/1x5GxK9okemZ1eh75 dmBPflNPgQkCUbOXndbG7e88H48xsaSgpaCMg2RveT7GitVYH1Wkfc1D/y4AsRho d6zIpa17mT+8QGATosV5qH8T03cm+QAxu64iNBKl+yUpldSaRSROffbFU3Vfva1N s9lA5ES9RwSAJfI0Oj6zjbec2qazOndpRh5f1oqW+6pd2KlyctKnZTYUPM2ddc6Y Mp/PnK1nPrcHfQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:26 2026 by rpki-client