This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json) Hash identifier: XmK/VpdQ1R5bcX0x823oobdWyCRQ7UM+q2suxvgRSko= Subject key identifier: 6F:0F:3C:F7:97:4E:76:2D:FC:83:E8:29:03:C9:75:D0:5F:95:3E:A4 Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6 Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6 Certificate serial: 019C42EB6E03F9C8EF2B81459C40B44B4F91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft Manifest number: 17A4 Signing time: Mon 09 Feb 2026 15:00:51 +0000 Manifest this update: Mon 09 Feb 2026 15:00:51 +0000 Manifest next update: Tue 10 Feb 2026 15:00:51 +0000 Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: K2RUvCbulTpx0/VVra9tyIe9+d6f3U3ngch4kS3Blco=) 2: l04ryjfqbPZeuiZZejzJCWBinEU.roa (hash: qyO0LhlZBEPFvxWtxObTzuofXOhZhOAncGkjMZ9Xnlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:6e:03:f9:c8:ef:2b:81:45:9c:40:b4:4b:4f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6 Validity Not Before: Feb 9 15:00:51 2026 GMT Not After : Feb 10 15:00:51 2026 GMT Subject: CN=6f0f3cf7974e762dfc83e82903c975d05f953ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:26:46:8d:84:56:12:bc:f3:4f:3b:d9:af:74: a0:a0:b6:a6:3a:0c:99:5e:b3:8d:83:1b:56:a7:fd: 1d:70:9c:e2:a1:ac:6e:88:e8:73:d1:41:d0:91:ac: a8:84:04:56:5c:bd:c1:50:42:3c:98:fa:bc:73:14: 58:32:fe:ca:1a:03:8d:56:8d:e3:65:06:82:dd:d6: ee:54:58:7a:21:2e:cd:d6:0d:13:7c:21:cc:73:b9: e3:38:77:64:70:dd:88:ed:95:52:37:77:3d:2c:8b: 68:a8:2e:f3:af:ed:cd:2e:bb:2f:c5:33:f4:1d:96: c9:94:80:d7:ea:b6:43:40:a7:af:94:7e:53:7a:23: 93:3a:af:75:a8:bf:ae:3e:e7:06:2e:04:aa:6f:b9: c3:e3:6e:33:b9:eb:dd:e6:90:cd:3b:4a:39:ed:13: 64:1c:4a:c6:de:40:42:10:c2:75:b0:b0:2a:ab:f7: 76:7e:42:b9:28:a1:4e:c0:24:1f:99:48:0e:bf:28: 49:76:65:fe:45:88:81:9d:bf:49:32:76:c8:54:9a: d2:05:de:a7:8e:e2:0e:3b:8a:ce:ae:f1:a8:09:5b: e6:1c:69:9f:d0:95:46:79:8d:de:cb:4e:e0:9e:20: 65:29:0e:37:b3:96:c5:a7:34:6c:51:11:c4:38:f7: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0F:3C:F7:97:4E:76:2D:FC:83:E8:29:03:C9:75:D0:5F:95:3E:A4 X509v3 Authority Key Identifier: keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d1:f4:bf:45:e3:9d:a5:b0:3c:1a:8b:57:2f:40:08:da:73: c7:d2:46:69:3c:ea:97:c5:42:a4:0d:74:87:7c:b4:32:5d:a7: a2:61:eb:3c:08:13:21:d7:a5:6a:1d:21:48:22:73:fd:e9:56: 1d:42:e1:0c:bc:27:50:36:cd:d9:3b:5d:4a:88:e5:03:e7:bd: d8:15:25:9e:87:a0:ee:81:65:a7:19:3e:12:fc:e9:8d:65:94: a3:e1:01:a8:74:8e:6a:06:63:9f:72:0d:68:5c:d6:1b:c3:b4: 35:72:05:30:0f:08:cd:c0:50:e0:e3:2e:3f:fe:ba:67:e7:e8: a0:ec:9e:b9:13:e7:41:da:f7:a6:f7:e6:92:00:65:5e:6c:a3: ba:d1:1d:26:4f:6a:23:ff:18:96:e8:89:b6:58:d7:27:54:75: 55:c4:ff:25:a5:aa:f7:09:5b:be:c0:9f:b5:55:c5:62:e8:c2: f1:54:6c:61:8c:7b:d9:10:a6:c7:9f:d7:a1:52:93:04:d8:43: 15:c7:bf:8e:7e:33:7d:ee:c7:80:49:7c:66:ff:7d:1f:19:00: e1:7d:18:45:b0:fe:7a:02:ad:9e:e5:f7:f7:bc:64:80:f1:12: c5:1f:10:31:fe:19:b4:10:6f:ae:13:07:56:12:4a:90:c1:b8: 58:b5:28:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC624D+cjvK4FFnEC0S0+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTE5MjA0YjdhYzQ3NDI0YmFhYmZiMjkxYmQzZmM4ZmE5 ZTA1ZjYwHhcNMjYwMjA5MTUwMDUxWhcNMjYwMjEwMTUwMDUxWjAzMTEwLwYDVQQD Eyg2ZjBmM2NmNzk3NGU3NjJkZmM4M2U4MjkwM2M5NzVkMDVmOTUzZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CZGjYRWErzzTzvZr3SgoLamOgyZ XrONgxtWp/0dcJzioaxuiOhz0UHQkayohARWXL3BUEI8mPq8cxRYMv7KGgONVo3j ZQaC3dbuVFh6IS7N1g0TfCHMc7njOHdkcN2I7ZVSN3c9LItoqC7zr+3NLrsvxTP0 HZbJlIDX6rZDQKevlH5TeiOTOq91qL+uPucGLgSqb7nD424zuevd5pDNO0o57RNk HErG3kBCEMJ1sLAqq/d2fkK5KKFOwCQfmUgOvyhJdmX+RYiBnb9JMnbIVJrSBd6n juIOO4rOrvGoCVvmHGmf0JVGeY3ey07gniBlKQ43s5bFpzRsURHEOPfqnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8PPPeXTnYt/IPoKQPJddBflT6kMB8GA1UdIwQY MBaAFDSRkgS3rEdCS6q/spG9P8j6ngX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgt YTM3MWYyODg5MTM4LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgtYTM3MWYyODg5MTM4 LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNH0v0Xj naWwPBqLVy9ACNpzx9JGaTzql8VCpA10h3y0Ml2nomHrPAgTIdelah0hSCJz/elW HULhDLwnUDbN2TtdSojlA+e92BUlnoeg7oFlpxk+EvzpjWWUo+EBqHSOagZjn3IN aFzWG8O0NXIFMA8IzcBQ4OMuP/66Z+fooOyeuRPnQdr3pvfmkgBlXmyjutEdJk9q I/8YluiJtljXJ1R1VcT/JaWq9wlbvsCftVXFYujC8VRsYYx72RCmx5/XoVKTBNhD Fce/jn4zfe7HgEl8Zv99HxkA4X0YRbD+egKtnuX397xkgPESxR8QMf4ZtBBvrhMH VhJKkMG4WLUojw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:45 2026 by rpki-client