This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json) Hash identifier: qeG4NGOtQe24pXz1vbPoLCS4oXJn4lTWRokBPirSfac= Subject key identifier: 05:36:AE:D0:DC:6E:D3:EA:75:C6:CF:98:8D:B6:0F:3F:D6:81:BA:B0 Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93 Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93 Certificate serial: 019C420F530DD8E4DC333DA1AC636A81D221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft Manifest number: 0D9A Signing time: Mon 09 Feb 2026 11:00:26 +0000 Manifest this update: Mon 09 Feb 2026 11:00:26 +0000 Manifest next update: Tue 10 Feb 2026 11:00:26 +0000 Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: mGiU6l6K0l9s7uKb0R399BgV2lXj6KKjvVeE5Vcqfp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:53:0d:d8:e4:dc:33:3d:a1:ac:63:6a:81:d2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93 Validity Not Before: Feb 9 11:00:26 2026 GMT Not After : Feb 10 11:00:26 2026 GMT Subject: CN=0536aed0dc6ed3ea75c6cf988db60f3fd681bab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:da:e7:44:c8:79:84:c6:e2:66:40:e1:c5:d1: a2:50:0a:59:6a:13:0d:13:84:83:3c:a6:73:fd:a9: 33:7a:f8:42:90:0f:0e:21:5d:57:bf:f9:fe:49:d3: d1:38:ab:23:14:45:4f:15:2a:61:13:d2:f2:27:b6: 32:3c:c5:64:00:a1:64:fe:96:c5:54:df:1c:61:d2: 83:c3:42:89:d0:fb:fa:fc:28:ab:81:b7:bc:dd:97: 91:21:1e:ae:31:0f:65:42:f3:b6:ed:a2:b7:d6:cd: 1d:e3:30:ac:2c:0f:e5:bc:d3:85:3c:f1:78:20:8d: ef:42:47:6e:a3:57:4a:0e:20:e6:4d:aa:86:43:ea: 1a:d4:df:32:38:4e:f7:88:a4:2e:03:ba:b4:02:dc: 3b:c5:45:09:da:2b:39:56:41:9b:e1:14:84:2b:4b: 84:46:97:19:89:5b:07:29:bc:19:81:d8:c0:ac:e8: 85:0f:05:e6:d3:30:b6:b3:f1:c0:60:4e:8b:3b:12: 94:d7:99:9e:d9:36:10:2d:e0:b1:f4:5c:55:73:99: bb:08:31:d6:f5:ee:9f:54:e4:98:29:53:26:69:97: 5c:30:5f:fd:63:33:92:5a:90:50:55:f7:64:a1:3e: 06:92:37:ee:e0:4b:ae:22:9f:f5:d4:f5:da:e0:0c: a5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:36:AE:D0:DC:6E:D3:EA:75:C6:CF:98:8D:B6:0F:3F:D6:81:BA:B0 X509v3 Authority Key Identifier: keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:60:bf:ab:25:77:2c:2a:88:ad:a1:4c:7d:aa:8b:6f:27:e1: c8:bc:4d:38:42:c9:cf:9e:f1:6f:e1:45:97:2b:dc:2e:5a:4e: 4b:59:78:86:ca:56:36:f4:64:9b:73:dc:6b:31:70:66:93:c1: d0:a4:52:57:4b:a1:94:66:1b:d2:b2:ab:c4:9f:29:49:fd:be: 18:8b:c9:02:c8:29:84:0b:95:dc:09:98:64:60:f6:10:8a:d9: 5b:ad:4e:6e:e8:77:5c:85:51:68:1d:af:e7:00:bc:67:91:0e: ad:3a:1b:b1:53:0f:9e:6f:ad:7f:34:29:34:a9:e0:70:1b:22: fb:78:36:b8:24:a8:67:02:b8:fd:7b:c0:ca:2d:d8:c5:4e:fe: 93:0f:7e:c2:79:6b:60:c6:a9:3f:14:56:4c:81:fa:e5:9a:74: bb:66:f2:d5:2e:44:95:c9:15:8f:0d:ac:a3:69:96:01:a9:2c: c3:b3:bb:d9:92:d8:e5:95:48:3d:17:84:3a:20:60:cc:c3:11: ba:55:ae:ee:80:9d:86:f3:85:df:7c:60:68:50:37:09:91:04: 70:06:69:cc:43:03:1d:bc:25:bc:dc:a4:46:38:59:b5:57:b3: 9d:92:70:6d:f4:0a:a1:c6:ba:bb:d3:a2:e3:ec:d7:e3:32:7c: b6:fb:e1:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1MN2OTcMz2hrGNqgdIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OTBmNzFmYWE0M2M5YWY1YTBkY2Y2MDNmZDBiMmE3OGMy MjRhOTMwHhcNMjYwMjA5MTEwMDI2WhcNMjYwMjEwMTEwMDI2WjAzMTEwLwYDVQQD EygwNTM2YWVkMGRjNmVkM2VhNzVjNmNmOTg4ZGI2MGYzZmQ2ODFiYWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7trnRMh5hMbiZkDhxdGiUApZahMN E4SDPKZz/akzevhCkA8OIV1Xv/n+SdPROKsjFEVPFSphE9LyJ7YyPMVkAKFk/pbF VN8cYdKDw0KJ0Pv6/Cirgbe83ZeRIR6uMQ9lQvO27aK31s0d4zCsLA/lvNOFPPF4 II3vQkduo1dKDiDmTaqGQ+oa1N8yOE73iKQuA7q0Atw7xUUJ2is5VkGb4RSEK0uE RpcZiVsHKbwZgdjArOiFDwXm0zC2s/HAYE6LOxKU15me2TYQLeCx9FxVc5m7CDHW 9e6fVOSYKVMmaZdcMF/9YzOSWpBQVfdkoT4Gkjfu4EuuIp/11PXa4AylcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAU2rtDcbtPqdcbPmI22Dz/WgbqwMB8GA1UdIwQY MBaAFDeQ9x+qQ8mvWg3PYD/QsqeMIkqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YjE5MjgtOTkyOS00ZWU4LTlmMzUt MDc3YjI5NzMwY2U2LzEvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85YjE5MjgtOTkyOS00ZWU4LTlmMzUtMDc3YjI5NzMwY2U2 LzEvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2C/qyV3 LCqIraFMfaqLbyfhyLxNOELJz57xb+FFlyvcLlpOS1l4hspWNvRkm3PcazFwZpPB 0KRSV0uhlGYb0rKrxJ8pSf2+GIvJAsgphAuV3AmYZGD2EIrZW61Obuh3XIVRaB2v 5wC8Z5EOrTobsVMPnm+tfzQpNKngcBsi+3g2uCSoZwK4/XvAyi3YxU7+kw9+wnlr YMapPxRWTIH65Zp0u2by1S5ElckVjw2so2mWAaksw7O72ZLY5ZVIPReEOiBgzMMR ulWu7oCdhvOF33xgaFA3CZEEcAZpzEMDHbwlvNykRjhZtVeznZJwbfQKoca6u9Oi 4+zX4zJ8tvvhIA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:10 2026 by rpki-client