This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft File: NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json) Hash identifier: kjH6AEEs/9jdyVoHwu9OFbPqwrgnESgc/iBcTXJk4DM= Subject key identifier: EE:99:3D:CE:C6:63:00:D2:5B:B8:A9:5B:88:9B:37:CD:D6:32:1E:05 Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05 Certificate issuer: /CN=34c4956f85671125882c574cd2e2d203aabded05 Certificate serial: 019C4358BD34DEE38692D78F85D8CE76B806 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 17:00:14 +0000 Manifest this update: Mon 09 Feb 2026 17:00:14 +0000 Manifest next update: Tue 10 Feb 2026 17:00:14 +0000 Files and hashes: 1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: Hm7RUbpTjrKFVqHiLYO744GlvQOAfXi4qAfxj6zGqbE=) 2: hzNlIQcoKwn0_37jGrfuWRGbt1g.roa (hash: yGgP4/jvKs4NKsaE3O2vHcLj+aOCBWAi35uwjfvRjck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:bd:34:de:e3:86:92:d7:8f:85:d8:ce:76:b8:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05 Validity Not Before: Feb 9 17:00:14 2026 GMT Not After : Feb 10 17:00:14 2026 GMT Subject: CN=ee993dcec66300d25bb8a95b889b37cdd6321e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:57:a8:91:8b:01:57:d4:63:88:6b:f7:1c: 46:33:d4:02:17:8b:b7:9f:b8:6d:cf:0d:54:81:4a: db:46:fa:f9:33:91:26:06:76:17:cd:53:c1:40:a8: 88:e2:cb:ca:6b:64:12:57:24:10:fd:5a:db:77:00: 47:e8:db:68:55:1a:c4:bb:e4:0b:59:d5:4c:14:9b: c4:4b:8d:5f:2d:5b:66:3d:56:64:b6:d1:34:cf:aa: 5d:c0:cf:f3:8d:a0:eb:1c:74:10:ee:0a:e4:e0:32: 7b:72:ab:1d:7f:02:af:57:fd:76:bf:13:b8:4f:6a: 01:49:c5:25:92:71:83:17:f5:e5:30:ba:83:a6:46: 0c:b9:b4:d3:81:9c:1d:d1:3d:8e:f6:15:cc:7a:62: f7:b6:d9:29:95:96:d0:82:d5:67:a9:40:c2:d4:c5: 2a:34:e7:26:8f:c4:b0:98:e1:cf:a2:c5:48:6f:f4: 7f:59:ea:42:e1:4c:40:e7:59:57:f8:49:59:12:38: 5a:2f:27:7b:14:48:23:8b:06:90:2f:0e:3e:d6:00: 2a:45:f5:18:8a:f2:27:34:fe:eb:5a:0e:53:16:07: 3c:98:f0:0f:42:2f:4d:21:a1:78:cd:ac:5a:99:cd: 29:5d:b5:12:c8:bc:b2:2d:fd:bd:09:39:d4:ec:9f: cc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:99:3D:CE:C6:63:00:D2:5B:B8:A9:5B:88:9B:37:CD:D6:32:1E:05 X509v3 Authority Key Identifier: keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:55:ef:d5:fe:a4:8c:b9:67:a8:8b:4a:88:ed:9d:b6:0f:a2: bc:23:d6:d2:a9:f6:59:49:02:02:73:5f:3f:94:73:52:65:ee: 6c:68:65:df:1e:ed:02:6b:ca:d3:af:79:1a:83:53:a0:48:2d: 1c:91:8e:13:42:76:89:bb:fc:f3:7c:51:3d:88:76:a0:62:a8: 5d:36:01:11:23:60:b2:0b:6c:68:9d:46:f7:04:3d:77:f8:5c: 77:fd:f3:fa:74:45:96:29:a4:49:76:b0:5f:2b:c6:e0:b2:c2: 9a:fc:c7:fc:a4:b3:e1:b0:6d:18:36:a7:26:c6:af:39:2d:c9: bb:31:1f:ff:88:c9:3c:90:c5:97:f9:de:fa:e1:33:36:71:7f: b5:e7:2e:74:1b:47:b7:ca:91:dd:6f:8c:ae:b9:8f:06:d6:94: 3a:cd:01:a0:6b:fc:aa:ad:c5:24:e8:04:af:42:45:8f:7e:fc: ef:16:1c:59:b4:32:0c:12:60:43:4b:c0:43:8d:87:c2:52:73: 97:05:8f:57:8f:36:3d:6b:72:77:b0:40:69:a6:4d:50:b0:e1: 73:43:97:dc:e1:ac:b0:b8:0a:29:17:b2:5a:76:a5:f4:fc:74: ce:93:98:dd:69:c0:01:54:80:e6:8d:d1:41:e7:db:2e:fa:f7: 98:84:41:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWL003uOGktePhdjOdrgGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YzQ5NTZmODU2NzExMjU4ODJjNTc0Y2QyZTJkMjAzYWFi ZGVkMDUwHhcNMjYwMjA5MTcwMDE0WhcNMjYwMjEwMTcwMDE0WjAzMTEwLwYDVQQD EyhlZTk5M2RjZWM2NjMwMGQyNWJiOGE5NWI4ODliMzdjZGQ2MzIxZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEVXqJGLAVfUY4hr9xxGM9QCF4u3 n7htzw1UgUrbRvr5M5EmBnYXzVPBQKiI4svKa2QSVyQQ/VrbdwBH6NtoVRrEu+QL WdVMFJvES41fLVtmPVZkttE0z6pdwM/zjaDrHHQQ7grk4DJ7cqsdfwKvV/12vxO4 T2oBScUlknGDF/XlMLqDpkYMubTTgZwd0T2O9hXMemL3ttkplZbQgtVnqUDC1MUq NOcmj8SwmOHPosVIb/R/WepC4UxA51lX+ElZEjhaLyd7FEgjiwaQLw4+1gAqRfUY ivInNP7rWg5TFgc8mPAPQi9NIaF4zaxamc0pXbUSyLyyLf29CTnU7J/MqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6ZPc7GYwDSW7ipW4ibN83WMh4FMB8GA1UdIwQY MBaAFDTElW+FZxEliCxXTNLi0gOqve0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjct MmQ5MGM3ZmQwZDYwLzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjctMmQ5MGM3ZmQwZDYw LzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlXv1f6k jLlnqItKiO2dtg+ivCPW0qn2WUkCAnNfP5RzUmXubGhl3x7tAmvK0695GoNToEgt HJGOE0J2ibv883xRPYh2oGKoXTYBESNgsgtsaJ1G9wQ9d/hcd/3z+nRFlimkSXaw XyvG4LLCmvzH/KSz4bBtGDanJsavOS3JuzEf/4jJPJDFl/ne+uEzNnF/tecudBtH t8qR3W+MrrmPBtaUOs0BoGv8qq3FJOgEr0JFj3787xYcWbQyDBJgQ0vAQ42HwlJz lwWPV482PWtyd7BAaaZNULDhc0OX3OGssLgKKReyWnal9Px0zpOY3WnAAVSA5o3R QefbLvr3mIRBAg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:43 2026 by rpki-client