This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json) Hash identifier: olm06W+0oaYjQ782ZMBJt690QJUM3FTYXO348ejCFsk= Subject key identifier: C9:07:60:ED:F4:88:7F:8E:35:A9:4E:25:E1:3E:EF:83:61:E0:1F:67 Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb Certificate serial: 019C43FE2E8B81065FDA9E98DB8732D24BA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft Manifest number: 02C6 Signing time: Mon 09 Feb 2026 20:00:57 +0000 Manifest this update: Mon 09 Feb 2026 20:00:57 +0000 Manifest next update: Tue 10 Feb 2026 20:00:57 +0000 Files and hashes: 1: 4MiAJwzR0PPxr-dliGFjke8_QaQ.roa (hash: ZxnOdzgWsAp09tFBm2XqBvLkxANnIjozT0brrxAIWL4=) 2: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: IaTkTD3s5+JOz6VxFKF3vz90mwwDz2oBqbGL01S0nIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:2e:8b:81:06:5f:da:9e:98:db:87:32:d2:4b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb Validity Not Before: Feb 9 20:00:57 2026 GMT Not After : Feb 10 20:00:57 2026 GMT Subject: CN=c90760edf4887f8e35a94e25e13eef8361e01f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fe:e8:25:4e:e0:81:4c:80:5d:13:54:31:20: 75:28:47:de:78:27:c5:f4:cc:a2:32:f8:90:70:d7: 23:f3:73:2a:ff:3a:d4:98:bc:f5:a4:87:6e:78:de: e0:ca:52:32:50:76:d3:1d:83:65:ab:c5:c0:c1:5b: 79:41:f0:df:1a:ce:98:44:01:70:67:f6:55:23:eb: 03:bb:e4:7f:e3:41:45:7f:70:7c:98:98:1e:11:3c: cc:a2:a5:eb:c0:a9:b4:13:37:b3:84:76:72:bf:0b: 31:ef:8b:3d:89:5d:59:0d:39:da:7e:f7:07:f4:44: 3b:57:3c:c8:8e:d9:b7:5d:37:70:dc:db:26:f5:6b: ac:1c:fa:3b:8e:a8:83:6c:c4:49:d2:54:81:6b:19: b9:c7:e1:e7:aa:93:f7:5f:44:46:2a:f8:75:3b:9e: bc:c2:c8:3f:2e:f6:ed:78:82:1d:7b:fd:f6:78:bf: 71:15:2b:ac:4a:d8:0e:e2:b4:e0:d2:5d:4e:c5:06: d3:d7:64:99:b6:57:78:d5:91:f9:df:de:fc:82:6c: 31:4b:ed:b4:ba:b9:d4:ac:42:b1:1b:96:85:b2:2b: 6f:bb:4d:db:d2:2c:26:7f:73:3e:38:d8:c2:17:90: 00:6b:c7:30:8f:3c:2a:3a:4a:09:9a:79:6e:0c:d9: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:07:60:ED:F4:88:7F:8E:35:A9:4E:25:E1:3E:EF:83:61:E0:1F:67 X509v3 Authority Key Identifier: keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:92:c9:6f:c5:14:5b:81:c7:0c:ae:05:8e:7d:0b:10:7c:81: 24:ea:df:eb:67:fa:0d:53:b8:32:1b:08:98:d5:3c:d4:3f:1a: b3:19:9b:3c:14:fc:eb:16:51:e4:58:c6:85:2a:6a:1c:60:a0: a8:0b:f1:02:ea:69:65:d5:65:a8:f8:98:d0:dc:cd:34:f3:37: 9b:6e:16:e6:d4:ac:93:87:8a:2f:53:df:fd:3f:a9:f4:4b:12: 62:23:60:6e:50:27:13:6e:48:fb:cb:fc:14:95:69:72:46:57: d8:22:43:d4:27:19:15:f8:35:6b:77:ac:49:51:f1:6a:5b:08: cc:e7:8e:a6:f2:c1:05:f1:88:da:b8:9f:72:66:05:49:a4:a5: 62:b7:d5:9c:0c:b0:f8:f3:1a:3c:2f:ca:62:34:04:ac:c5:1b: 1a:1a:c4:1d:7b:5a:32:4a:35:2e:3e:19:6b:ea:51:af:aa:66: 6d:d9:1f:62:e4:2c:a4:03:5a:b5:7d:c7:38:d3:ed:f8:73:57: 42:f7:1e:12:87:a6:43:fb:c9:f1:44:10:1d:96:c0:69:16:47: 34:50:b4:9d:c7:34:ce:1b:98:9c:73:ca:5d:bc:dc:f8:d9:33: 70:1c:83:3e:9b:5f:fd:ac:5f:41:59:4a:1a:5e:17:3d:2b:96: c5:40:65:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/i6LgQZf2p6Y24cy0kumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzgwY2ZiYTM0YjYxZjVkYjQ1NjUxNDU5MjhkOWU0YWRk OTMwZWIwHhcNMjYwMjA5MjAwMDU3WhcNMjYwMjEwMjAwMDU3WjAzMTEwLwYDVQQD EyhjOTA3NjBlZGY0ODg3ZjhlMzVhOTRlMjVlMTNlZWY4MzYxZTAxZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/7oJU7ggUyAXRNUMSB1KEfeeCfF 9MyiMviQcNcj83Mq/zrUmLz1pIdueN7gylIyUHbTHYNlq8XAwVt5QfDfGs6YRAFw Z/ZVI+sDu+R/40FFf3B8mJgeETzMoqXrwKm0EzezhHZyvwsx74s9iV1ZDTnafvcH 9EQ7VzzIjtm3XTdw3Nsm9WusHPo7jqiDbMRJ0lSBaxm5x+HnqpP3X0RGKvh1O568 wsg/LvbteIIde/32eL9xFSusStgO4rTg0l1OxQbT12SZtld41ZH53978gmwxS+20 urnUrEKxG5aFsitvu03b0iwmf3M+ONjCF5AAa8cwjzwqOkoJmnluDNlHiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkHYO30iH+ONalOJeE+74Nh4B9nMB8GA1UdIwQY MBaAFDQ4DPujS2H120VlFFko2eSt2TDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQt MzI3OTEzN2ZkZTQ0LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQtMzI3OTEzN2ZkZTQ0 LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpLJb8UU W4HHDK4Fjn0LEHyBJOrf62f6DVO4MhsImNU81D8asxmbPBT86xZR5FjGhSpqHGCg qAvxAuppZdVlqPiY0NzNNPM3m24W5tSsk4eKL1Pf/T+p9EsSYiNgblAnE25I+8v8 FJVpckZX2CJD1CcZFfg1a3esSVHxalsIzOeOpvLBBfGI2rifcmYFSaSlYrfVnAyw +PMaPC/KYjQErMUbGhrEHXtaMko1Lj4Za+pRr6pmbdkfYuQspANatX3HONPt+HNX QvceEoemQ/vJ8UQQHZbAaRZHNFC0ncc0zhuYnHPKXbzc+NkzcByDPptf/axfQVlK Gl4XPSuWxUBlQw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:53 2026 by rpki-client