This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft File: NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json) Hash identifier: u13PCB8Zm5yTKt5hBAuRWzGbdrSeziAHf5PrPgs6TsI= Subject key identifier: 9C:56:E6:07:1D:53:2E:B0:64:FB:57:46:61:E4:C7:0B:E1:2B:85:9B Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb Certificate serial: 019C41A18A64E281C2BB2776CB1F308CF1FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft Manifest number: 17CF Signing time: Mon 09 Feb 2026 09:00:31 +0000 Manifest this update: Mon 09 Feb 2026 09:00:31 +0000 Manifest next update: Tue 10 Feb 2026 09:00:31 +0000 Files and hashes: 1: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: Ga12a6TpfHKujlYU57Yq88aas3GsAicD/QkFgahn2lU=) 2: YgtG-eXPQuYp4oVS-PRtPNrxxe4.roa (hash: RWCfa29kamid4Jj9pOqOGZ7EXsOuYoZh2w0x+4VeWGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:8a:64:e2:81:c2:bb:27:76:cb:1f:30:8c:f1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb Validity Not Before: Feb 9 09:00:31 2026 GMT Not After : Feb 10 09:00:31 2026 GMT Subject: CN=9c56e6071d532eb064fb574661e4c70be12b859b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:c0:03:0d:bf:4d:2a:ad:17:15:9d:a0:de: 17:45:bc:c7:ee:af:27:d0:aa:11:3c:e7:95:d9:67: c6:0a:ba:c3:8d:27:bf:ce:90:3e:fe:b6:9e:d5:27: 5a:9d:88:43:b8:98:8f:a5:52:dc:a9:10:b9:b8:c2: 4a:27:25:de:26:f5:f6:68:e0:c8:b4:6d:2b:43:84: 93:8b:18:50:59:3d:df:cb:09:bc:94:cb:ba:39:47: 20:12:91:8b:b7:5a:b4:8c:eb:fc:4c:0c:79:94:cc: 5c:48:75:86:7d:2e:40:39:b3:bc:2d:be:c9:a3:80: 2d:43:bf:ee:1f:bf:c5:1b:52:f3:18:36:c3:69:25: b8:f0:8f:bc:b1:f0:74:c1:0c:c1:a9:70:96:48:d1: b2:25:ac:6f:e0:21:a7:ff:62:72:9a:1e:5e:49:ec: 59:d9:8e:10:f5:80:dc:6e:a4:55:59:eb:79:f5:1c: 86:44:55:ae:1a:4e:56:07:b7:e5:e0:f8:03:a4:2b: bd:a6:4e:fa:07:94:14:29:b0:1d:15:4f:66:23:94: 68:b3:1d:5d:53:c1:65:81:36:6e:ea:35:9a:16:d8: 5d:c6:35:e8:57:c5:48:dd:fb:b9:f0:b6:01:fa:47: e8:b6:6f:44:7d:d3:81:c2:6f:e7:f0:b8:dc:1e:f6: ee:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:56:E6:07:1D:53:2E:B0:64:FB:57:46:61:E4:C7:0B:E1:2B:85:9B X509v3 Authority Key Identifier: keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b5:39:96:37:30:af:1e:db:e4:e8:e0:ec:ae:13:70:b5:03: ac:57:dc:83:a1:a5:89:7c:10:07:10:63:b0:b9:3e:00:c3:b9: 0b:1a:b9:c3:49:15:66:14:68:d0:86:19:2a:3a:b8:9a:46:e4: e6:90:81:8a:58:11:00:3c:a4:f2:30:aa:b4:29:84:75:cb:ab: 87:da:2b:a9:24:1a:73:3c:3d:ba:d4:fe:9f:83:12:ea:ac:6e: ca:1b:41:1f:04:0c:b4:b4:74:d7:a0:02:48:18:e1:2b:5a:61: 4c:d8:b8:54:f1:b5:ec:e6:a6:a2:59:41:2e:58:03:b4:b2:06: 54:38:1d:8a:a0:fb:f9:f8:a8:16:64:cf:6d:60:bb:be:17:93: f2:ae:c1:fe:45:1f:06:c0:f1:93:f0:d7:de:5c:7b:72:5e:e7: 1c:f3:d4:84:8b:75:7c:81:dc:3c:97:64:60:0e:88:5c:58:43: 7b:d8:64:35:ae:29:3c:11:00:2b:f0:a4:4c:44:84:2e:60:3a: f5:b0:9f:14:c0:a6:88:df:2c:84:42:56:ca:9f:8b:c3:f5:06: 3d:20:be:d9:69:36:6b:03:0a:2d:2b:ea:9e:6b:bd:d2:b3:cc: 8a:ba:bb:2a:2f:47:0e:61:1d:a1:99:9d:b2:1b:86:6e:96:35: 3c:14:3e:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoYpk4oHCuyd2yx8wjPH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDI5MjlmMTY1MmY5NTg4MTJkMDk5YTIzM2YzM2FkMzQ0 NWJiZmIwHhcNMjYwMjA5MDkwMDMxWhcNMjYwMjEwMDkwMDMxWjAzMTEwLwYDVQQD Eyg5YzU2ZTYwNzFkNTMyZWIwNjRmYjU3NDY2MWU0YzcwYmUxMmI4NTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqbAAw2/TSqtFxWdoN4XRbzH7q8n 0KoRPOeV2WfGCrrDjSe/zpA+/rae1SdanYhDuJiPpVLcqRC5uMJKJyXeJvX2aODI tG0rQ4STixhQWT3fywm8lMu6OUcgEpGLt1q0jOv8TAx5lMxcSHWGfS5AObO8Lb7J o4AtQ7/uH7/FG1LzGDbDaSW48I+8sfB0wQzBqXCWSNGyJaxv4CGn/2Jymh5eSexZ 2Y4Q9YDcbqRVWet59RyGRFWuGk5WB7fl4PgDpCu9pk76B5QUKbAdFU9mI5Rosx1d U8FlgTZu6jWaFthdxjXoV8VI3fu58LYB+kfotm9EfdOBwm/n8LjcHvbu4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxW5gcdUy6wZPtXRmHkxwvhK4WbMB8GA1UdIwQY MBaAFDXSkp8WUvlYgS0JmiM/M600Rbv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNDljYTAtOTUyZS00OTVhLThlYjEt YjI4MGQ0YzYyNzQ1LzEvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jNDljYTAtOTUyZS00OTVhLThlYjEtYjI4MGQ0YzYyNzQ1 LzEvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrU5ljcw rx7b5Ojg7K4TcLUDrFfcg6GliXwQBxBjsLk+AMO5Cxq5w0kVZhRo0IYZKjq4mkbk 5pCBilgRADyk8jCqtCmEdcurh9orqSQaczw9utT+n4MS6qxuyhtBHwQMtLR016AC SBjhK1phTNi4VPG17OamollBLlgDtLIGVDgdiqD7+fioFmTPbWC7vheT8q7B/kUf BsDxk/DX3lx7cl7nHPPUhIt1fIHcPJdkYA6IXFhDe9hkNa4pPBEAK/CkTESELmA6 9bCfFMCmiN8shEJWyp+Lw/UGPSC+2Wk2awMKLSvqnmu90rPMirq7Ki9HDmEdoZmd shuGbpY1PBQ+QQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:09 2026 by rpki-client