This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft File: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft (raw, json) Hash identifier: dpK4Y69/t6mia/o0QyKYzh4MEFUMiWpd0VtNf+r7icA= Subject key identifier: 3C:48:6F:DE:46:34:56:74:BB:E0:99:6A:6D:9C:4B:57:A3:F9:B4:31 Authority key identifier: 9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA Certificate issuer: /CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa Certificate serial: 019C438FB38A4388C1612BE25D8ED05B4A5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft Manifest number: 069D Signing time: Mon 09 Feb 2026 18:00:16 +0000 Manifest this update: Mon 09 Feb 2026 18:00:16 +0000 Manifest next update: Tue 10 Feb 2026 18:00:16 +0000 Files and hashes: 1: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl (hash: hPJDSpfWzHKLnRnm41UYJIh7mMDYLhyIUQ23CKoH/do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:b3:8a:43:88:c1:61:2b:e2:5d:8e:d0:5b:4a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa Validity Not Before: Feb 9 18:00:16 2026 GMT Not After : Feb 10 18:00:16 2026 GMT Subject: CN=3c486fde46345674bbe0996a6d9c4b57a3f9b431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:d0:f5:d7:60:cb:72:81:79:7e:d7:25:92: 18:91:19:eb:c5:d7:5f:22:88:d2:02:45:66:72:75: a0:8d:76:16:43:4e:69:1f:2f:e1:d0:db:32:7d:d8: 96:ec:ea:91:03:16:59:87:34:bd:9b:28:37:e5:bc: 57:51:d4:89:78:8a:ef:6f:1e:de:f3:c0:3c:e9:e1: c9:2d:69:9d:70:28:27:c9:76:9f:02:66:e4:1f:3a: 16:ab:7d:32:4f:0f:e9:75:c4:8d:a2:05:72:95:a7: a8:c5:a6:5c:70:b5:4a:2e:80:df:66:58:67:52:b1: ad:10:c3:65:ca:53:d8:52:f0:2e:cf:47:f1:f7:63: 42:67:1c:67:3b:26:e3:8b:44:eb:5a:7a:64:ba:3b: 2c:97:6f:21:0e:98:c6:94:a7:8c:53:dd:3c:12:3a: 88:94:97:03:57:da:43:a6:c1:26:8f:e3:00:59:a4: 07:68:57:65:4e:b0:0a:03:9b:2f:e1:f2:49:7c:72: aa:8a:a6:ee:10:c2:7e:a3:ab:e3:43:47:54:eb:f5: e4:02:0a:dd:04:fd:76:51:d1:36:8b:77:d4:75:38: 50:5e:a6:be:a3:5c:20:06:5b:47:50:5e:a3:7f:00: ef:9c:40:fa:b4:2f:46:a3:56:fe:90:67:04:5e:fd: 23:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:6F:DE:46:34:56:74:BB:E0:99:6A:6D:9C:4B:57:A3:F9:B4:31 X509v3 Authority Key Identifier: keyid:9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:82:ad:cd:b2:75:89:5e:b9:80:72:40:6a:5c:d5:a1:af:52: 9f:81:ba:15:a8:09:de:d0:31:ba:84:02:8d:08:32:0e:76:53: ea:79:8a:16:37:46:ea:6f:07:4c:ad:dc:17:2d:06:76:5b:68: b2:56:09:ff:bf:12:0f:0e:53:54:7d:91:b5:4c:d5:dd:06:0f: 1f:ba:ff:25:02:f9:a7:32:75:a3:44:dd:15:73:15:cb:d5:31: 79:03:bd:ba:e2:7e:69:db:39:eb:1e:6f:c8:34:46:eb:7e:fa: 9a:04:6b:a2:a9:17:05:50:6d:46:68:06:2d:8c:72:cf:98:b2: 40:17:ce:ab:31:0f:c4:1f:8c:fa:cb:a1:14:d3:46:70:aa:0d: 8e:c3:cc:cf:b8:a7:07:da:2e:ad:0c:a4:0d:ad:c4:6c:5c:0e: 00:e8:ac:98:04:4e:59:6e:08:43:de:ec:eb:b4:87:47:3c:00: 80:1b:e5:21:8d:6d:61:3e:12:2c:0d:7b:9c:9c:b8:b3:f8:6d: 59:16:3a:0c:8f:0b:3b:80:56:d9:31:89:68:44:13:6b:0c:cb: 64:43:ae:65:96:0d:f6:8b:d7:b7:97:c7:63:94:38:de:6f:30: ea:72:29:bb:6a:1e:22:a8:88:41:7a:71:e9:54:7f:c3:2f:6b: b7:c3:8d:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj7OKQ4jBYSviXY7QW0peMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjA1ZDRiZDVkNDJiNDE3NWFjYzYzNGFjY2YwZmZhMTg3 M2YwYWEwHhcNMjYwMjA5MTgwMDE2WhcNMjYwMjEwMTgwMDE2WjAzMTEwLwYDVQQD EygzYzQ4NmZkZTQ2MzQ1Njc0YmJlMDk5NmE2ZDljNGI1N2EzZjliNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI/Q9ddgy3KBeX7XJZIYkRnrxddf IojSAkVmcnWgjXYWQ05pHy/h0NsyfdiW7OqRAxZZhzS9myg35bxXUdSJeIrvbx7e 88A86eHJLWmdcCgnyXafAmbkHzoWq30yTw/pdcSNogVylaeoxaZccLVKLoDfZlhn UrGtEMNlylPYUvAuz0fx92NCZxxnOybji0TrWnpkujssl28hDpjGlKeMU908EjqI lJcDV9pDpsEmj+MAWaQHaFdlTrAKA5sv4fJJfHKqiqbuEMJ+o6vjQ0dU6/XkAgrd BP12UdE2i3fUdThQXqa+o1wgBltHUF6jfwDvnED6tC9Go1b+kGcEXv0jhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxIb95GNFZ0u+CZam2cS1ej+bQxMB8GA1UdIwQY MBaAFJzwXUvV1CtBdazGNKzPD/oYc/CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBCZFM5WFVLMEYxck1ZMHJNOFAtaGh6OEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NzFkNzctMDhhYS00YTkxLTk5NmEt OGJiYTVmYTNjMzE3LzEvblBCZFM5WFVLMEYxck1ZMHJNOFAtaGh6OEtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84NzFkNzctMDhhYS00YTkxLTk5NmEtOGJiYTVmYTNjMzE3 LzEvblBCZFM5WFVLMEYxck1ZMHJNOFAtaGh6OEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYKtzbJ1 iV65gHJAalzVoa9Sn4G6FagJ3tAxuoQCjQgyDnZT6nmKFjdG6m8HTK3cFy0Gdlto slYJ/78SDw5TVH2RtUzV3QYPH7r/JQL5pzJ1o0TdFXMVy9UxeQO9uuJ+ads56x5v yDRG6376mgRroqkXBVBtRmgGLYxyz5iyQBfOqzEPxB+M+suhFNNGcKoNjsPMz7in B9ourQykDa3EbFwOAOismAROWW4IQ97s67SHRzwAgBvlIY1tYT4SLA17nJy4s/ht WRY6DI8LO4BW2TGJaEQTawzLZEOuZZYN9ovXt5fHY5Q43m8w6nIpu2oeIqiIQXpx 6VR/wy9rt8ONuw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:59 2026 by rpki-client