This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json) Hash identifier: T6lYyDdDrLS4qeWMR4Wj0xRj31V52vgv6Qn6C99Ibe8= Subject key identifier: 62:F0:54:05:5F:0C:71:7C:37:5F:F4:6B:2A:08:A0:4C:69:2F:12:D1 Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78 Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978 Certificate serial: 019C41338620E4B21FCB7BB82D0B7A839BA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft Manifest number: 09A5 Signing time: Mon 09 Feb 2026 07:00:21 +0000 Manifest this update: Mon 09 Feb 2026 07:00:21 +0000 Manifest next update: Tue 10 Feb 2026 07:00:21 +0000 Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: 9jJcot2vsClR0eCmfBvavokGF7PZTx/QpULRESlYH98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:86:20:e4:b2:1f:cb:7b:b8:2d:0b:7a:83:9b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978 Validity Not Before: Feb 9 07:00:21 2026 GMT Not After : Feb 10 07:00:21 2026 GMT Subject: CN=62f054055f0c717c375ff46b2a08a04c692f12d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:51:fb:bc:7f:35:fb:f8:b6:6a:2a:f9:2b: 65:f7:22:d2:76:3f:47:69:48:b0:f6:cc:5e:b7:c0: af:6b:3e:9d:1f:26:9b:67:50:16:a9:fb:c2:57:c8: e5:a4:32:9d:95:c1:9f:80:b7:2d:9f:4c:8c:f0:21: ee:de:5d:4b:07:b1:27:f3:50:24:9a:ea:b1:92:d8: be:ae:52:d1:98:1e:dc:65:10:3c:b8:3f:67:10:78: 8c:e6:9d:d5:26:54:e1:78:20:01:55:d6:73:36:dc: c8:74:0e:fd:75:51:4b:b3:5c:f8:03:b4:cb:71:d6: 1b:ef:60:9d:66:77:5e:45:cb:ea:7b:27:39:5b:08: 06:a8:6c:c2:09:46:ac:07:4d:08:21:0b:9c:66:6a: 37:6d:ca:5e:de:04:05:24:67:a1:e8:21:a8:5e:52: 4f:c1:68:e0:c5:a7:8c:72:75:00:2d:19:cb:39:f6: 05:4c:6e:c7:1c:36:00:f2:b6:ad:9a:84:7c:b3:8d: 5f:0e:62:6d:23:41:b6:4c:0f:b2:79:e9:88:47:0e: 22:8c:63:9e:ce:d5:40:f0:6d:79:69:ac:d2:df:28: fa:fa:c3:3d:56:c8:18:1e:4b:ff:cc:5e:f9:53:f9: c7:98:ca:c7:a5:bc:6e:ef:df:94:57:28:b6:ec:47: 18:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F0:54:05:5F:0C:71:7C:37:5F:F4:6B:2A:08:A0:4C:69:2F:12:D1 X509v3 Authority Key Identifier: keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c0:a0:1c:80:53:9d:76:bd:3a:6c:77:46:49:b9:c3:af:a8: 94:89:22:9d:31:af:56:8d:9b:56:e9:f2:de:ae:f0:64:44:70: cb:09:72:f4:1c:61:ee:36:16:8c:7c:a7:77:04:8a:b9:55:c6: ad:d1:31:12:1d:de:a5:ec:cb:73:d0:a2:54:60:49:68:d3:4e: d7:dc:2c:52:31:6a:5b:5b:ea:c4:1d:32:b1:d0:2d:5d:40:c0: b7:39:74:9c:42:67:bd:88:0a:39:9d:f1:79:41:d3:e9:38:7f: 80:63:83:ad:d9:3b:1e:aa:ac:ae:b0:69:78:1a:e8:3c:90:28: 27:61:72:5a:6b:0b:97:21:b5:72:48:70:80:c1:17:ef:c1:8a: 3f:e4:e1:ab:c4:f8:67:9f:42:e6:50:ea:bd:2d:04:6c:52:8e: b6:b6:50:bb:1b:76:f7:8e:a5:f0:22:d6:ac:7f:64:41:52:ae: 2c:91:dc:74:3d:87:66:36:d3:56:ad:c0:7b:9f:3c:09:91:f8: 65:24:2c:3a:a1:e8:7a:14:03:dd:8c:c5:47:22:5b:8d:55:b5: 1a:33:b7:d5:d4:5d:da:6d:96:5a:74:e2:d6:9b:ec:55:3c:48: 0a:eb:c7:91:80:21:68:f5:e7:6f:ed:0c:26:6f:eb:5f:ba:5f: 48:d5:13:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM4Yg5LIfy3u4LQt6g5umMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjk4ODk2YTg4YWU4ZjM1NDBhZWI3N2VjYTFmMWE5NGJi ZDY5NzgwHhcNMjYwMjA5MDcwMDIxWhcNMjYwMjEwMDcwMDIxWjAzMTEwLwYDVQQD Eyg2MmYwNTQwNTVmMGM3MTdjMzc1ZmY0NmIyYTA4YTA0YzY5MmYxMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxpR+7x/Nfv4tmoq+Stl9yLSdj9H aUiw9sxet8Cvaz6dHyabZ1AWqfvCV8jlpDKdlcGfgLctn0yM8CHu3l1LB7En81Ak muqxkti+rlLRmB7cZRA8uD9nEHiM5p3VJlTheCABVdZzNtzIdA79dVFLs1z4A7TL cdYb72CdZndeRcvqeyc5WwgGqGzCCUasB00IIQucZmo3bcpe3gQFJGeh6CGoXlJP wWjgxaeMcnUALRnLOfYFTG7HHDYA8ratmoR8s41fDmJtI0G2TA+yeemIRw4ijGOe ztVA8G15aazS3yj6+sM9VsgYHkv/zF75U/nHmMrHpbxu79+UVyi27EcYdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLwVAVfDHF8N1/0ayoIoExpLxLRMB8GA1UdIwQY MBaAFJz5iJaoiujzVArrd+yh8alLvWl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWIxMDItNDIzZi00ZTkyLWI3YzUt NzNkMDE0ZTgzNDliLzEvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZWIxMDItNDIzZi00ZTkyLWI3YzUtNzNkMDE0ZTgzNDli LzEvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMCgHIBT nXa9Omx3Rkm5w6+olIkinTGvVo2bVuny3q7wZERwywly9Bxh7jYWjHyndwSKuVXG rdExEh3epezLc9CiVGBJaNNO19wsUjFqW1vqxB0ysdAtXUDAtzl0nEJnvYgKOZ3x eUHT6Th/gGODrdk7HqqsrrBpeBroPJAoJ2FyWmsLlyG1ckhwgMEX78GKP+Thq8T4 Z59C5lDqvS0EbFKOtrZQuxt2946l8CLWrH9kQVKuLJHcdD2HZjbTVq3Ae588CZH4 ZSQsOqHoehQD3YzFRyJbjVW1GjO31dRd2m2WWnTi1pvsVTxICuvHkYAhaPXnb+0M Jm/rX7pfSNUTHg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:55 2026 by rpki-client