This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json) Hash identifier: KZRZJYqjK62hyRp8/2pKs338vdNxgy3SAgodNQK3ZHc= Subject key identifier: 0B:AD:80:E4:DC:2D:F9:B3:15:24:2C:DA:34:8F:89:7C:84:E3:48:F0 Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f Certificate serial: 019C41D85ED9B0237B65E767359F49FCCDB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft Manifest number: 0B9C Signing time: Mon 09 Feb 2026 10:00:24 +0000 Manifest this update: Mon 09 Feb 2026 10:00:24 +0000 Manifest next update: Tue 10 Feb 2026 10:00:24 +0000 Files and hashes: 1: 3PK45Mc8PRaXojUs0ZBQA83YcGQ.roa (hash: JXEf/2aFK3BkZHNCEWJcH/8ouUNCu/50cDZ97h1t3QI=) 2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: k0Y16NLJsE1/AHGPQDgWHJsoPWj4a2x+paQy3KsFpwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:5e:d9:b0:23:7b:65:e7:67:35:9f:49:fc:cd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f Validity Not Before: Feb 9 10:00:24 2026 GMT Not After : Feb 10 10:00:24 2026 GMT Subject: CN=0bad80e4dc2df9b315242cda348f897c84e348f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c7:da:b2:7c:a8:d5:d3:80:ce:e6:98:8c:60: 1c:66:f4:23:e3:4a:80:15:69:f9:30:df:c6:f2:98: 2c:67:e4:1a:c8:ed:c0:6e:6f:f7:fb:c8:18:27:04: 9d:24:ca:a1:06:28:34:4e:59:f3:fe:c9:ee:32:7c: d6:c6:f9:a1:d2:c4:b6:45:cd:4b:2f:f9:9d:5c:14: 84:ef:e7:0e:f4:0c:3e:3c:cb:f3:91:7a:14:24:11: bf:a7:ac:f2:e6:88:f1:6e:6e:9b:a9:d8:3b:73:32: 0d:26:c4:b2:1b:41:80:2e:05:2a:15:a9:6a:5a:35: 35:04:2d:b8:b0:9e:c1:3e:6c:8f:09:a6:10:cc:a5: d5:95:a0:44:17:fa:92:92:a8:a9:55:c2:b4:a4:dd: 85:9a:12:a8:1c:cd:62:ae:af:c3:bc:18:5b:08:64: a9:a0:92:23:f9:b8:44:9b:e6:82:90:ea:c2:75:44: d0:83:f6:09:35:94:65:5f:4b:9f:0c:48:38:64:24: 6b:ae:2b:cd:39:70:17:0d:88:f4:03:35:0e:e3:d6: 93:ea:bf:6c:14:e5:07:2c:9b:bd:bf:23:7d:6d:57: a4:25:b7:bc:82:5c:6e:99:34:fb:da:55:5a:5d:64: c8:97:94:15:9a:c1:54:cd:25:dc:d7:d2:af:f5:04: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AD:80:E4:DC:2D:F9:B3:15:24:2C:DA:34:8F:89:7C:84:E3:48:F0 X509v3 Authority Key Identifier: keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d5:4b:ed:d1:ba:d0:e9:cc:7e:65:0c:39:eb:8e:96:5d:b6: 98:99:90:ff:ca:e8:09:83:11:64:1e:1c:41:40:c6:7f:7c:b1: 61:3f:67:68:ab:ef:a2:cf:47:4b:d5:0f:8c:d4:29:97:ad:a3: 9e:64:1a:9a:83:ca:05:24:3e:cd:20:f7:04:98:f8:62:7e:23: 8e:56:8c:fe:54:80:bf:ea:04:b5:87:dc:e4:7d:f5:7b:bb:52: 15:5d:b5:c5:e9:8d:2c:f8:49:b4:6f:17:d0:a9:c9:a5:79:f8: a9:db:6d:64:22:32:68:b5:8d:eb:4f:e6:88:62:4f:84:74:dd: db:37:cd:52:37:f2:12:12:fc:5d:cc:08:5d:41:73:86:b3:74: 8b:ab:19:23:9e:e2:85:18:d6:15:e2:73:3a:0c:fd:80:e2:73: 64:4c:d2:a0:39:1e:75:35:25:8a:12:6c:83:d9:9b:ef:7f:0e: f1:17:f8:0a:cc:9c:31:b7:07:48:3f:df:a9:6e:05:a6:e0:54: f8:57:b1:39:8e:ff:04:1e:df:66:5e:6d:3b:30:20:88:b5:9d: 4e:fa:00:27:5e:38:eb:8a:2a:bf:27:ca:b3:7a:8a:b5:b9:f4: 19:32:39:51:98:8f:a2:72:e2:89:7b:2b:fc:76:83:64:2d:69: 69:6b:84:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2F7ZsCN7ZednNZ9J/M20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjM1ZTM4M2U5Y2Q0NGE3MjQ5YWM1ZDQxYjZkZmFkZjQz NTdiNGYwHhcNMjYwMjA5MTAwMDI0WhcNMjYwMjEwMTAwMDI0WjAzMTEwLwYDVQQD EygwYmFkODBlNGRjMmRmOWIzMTUyNDJjZGEzNDhmODk3Yzg0ZTM0OGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cfasnyo1dOAzuaYjGAcZvQj40qA FWn5MN/G8pgsZ+QayO3Abm/3+8gYJwSdJMqhBig0Tlnz/snuMnzWxvmh0sS2Rc1L L/mdXBSE7+cO9Aw+PMvzkXoUJBG/p6zy5ojxbm6bqdg7czINJsSyG0GALgUqFalq WjU1BC24sJ7BPmyPCaYQzKXVlaBEF/qSkqipVcK0pN2FmhKoHM1irq/DvBhbCGSp oJIj+bhEm+aCkOrCdUTQg/YJNZRlX0ufDEg4ZCRrrivNOXAXDYj0AzUO49aT6r9s FOUHLJu9vyN9bVekJbe8glxumTT72lVaXWTIl5QVmsFUzSXc19Kv9QQFRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAutgOTcLfmzFSQs2jSPiXyE40jwMB8GA1UdIwQY MBaAFK/zXjg+nNRKckmsXUG23630NXtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTIt NTcwYWVkNThjMTk0LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTItNTcwYWVkNThjMTk0 LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdVL7dG6 0OnMfmUMOeuOll22mJmQ/8roCYMRZB4cQUDGf3yxYT9naKvvos9HS9UPjNQpl62j nmQamoPKBSQ+zSD3BJj4Yn4jjlaM/lSAv+oEtYfc5H31e7tSFV21xemNLPhJtG8X 0KnJpXn4qdttZCIyaLWN60/miGJPhHTd2zfNUjfyEhL8XcwIXUFzhrN0i6sZI57i hRjWFeJzOgz9gOJzZEzSoDkedTUlihJsg9mb738O8Rf4CsycMbcHSD/fqW4FpuBU +FexOY7/BB7fZl5tOzAgiLWdTvoAJ14464oqvyfKs3qKtbn0GTI5UZiPonLiiXsr /HaDZC1paWuEiw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:01 2026 by rpki-client