This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json) Hash identifier: xZHBis9G5MBBzoUzlXw4bSjvSVCN6Lo+7KNwl/dsD5k= Subject key identifier: EE:87:7D:F6:E0:96:19:FC:92:BD:91:62:E0:9C:80:8F:5B:C5:5F:FA Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92 Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592 Certificate serial: 019C42B3FD80F1BA30D3727E12CDDBE8895F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft Manifest number: 075F Signing time: Mon 09 Feb 2026 14:00:17 +0000 Manifest this update: Mon 09 Feb 2026 14:00:17 +0000 Manifest next update: Tue 10 Feb 2026 14:00:17 +0000 Files and hashes: 1: mNCgVhtdcHk_wU97-Gy3cw-WdNw.roa (hash: mTADEdCwBT4z8h+n4TsVWFX5hSFlb40/mneHRKe61U0=) 2: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: yBkCdgGNPgL7xNITYqf5C9VHQ5C4nPI3KevxCmKse9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:fd:80:f1:ba:30:d3:72:7e:12:cd:db:e8:89:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592 Validity Not Before: Feb 9 14:00:17 2026 GMT Not After : Feb 10 14:00:17 2026 GMT Subject: CN=ee877df6e09619fc92bd9162e09c808f5bc55ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:40:37:b7:03:bd:5c:3a:61:fa:f6:9a:ca:40: 4b:fc:28:64:8d:cd:11:e1:44:f4:4b:fa:94:53:26: 20:da:e6:30:a8:c5:11:f7:76:cf:4b:15:d7:fa:be: 78:66:84:4d:6c:10:53:4f:dd:4f:d9:49:7f:9a:9d: 39:5c:af:ce:43:2f:17:a7:a0:c9:49:50:ae:17:5a: c9:c2:1a:aa:54:9b:6f:46:c1:3e:2a:c7:d8:d8:3f: 35:00:bd:e2:f2:70:3d:b1:bc:f4:42:e1:5b:12:ce: f8:44:4c:46:c0:0a:ae:af:02:cc:49:62:8c:23:5d: 3b:1e:a1:9f:3d:43:ba:99:02:77:05:b3:33:f9:67: 53:07:0a:91:cc:c1:c4:72:73:4d:21:04:d7:3c:ef: f8:b9:6a:a0:6e:d4:bc:78:29:ba:82:74:87:ca:40: fa:c0:20:8c:cd:7e:38:f1:e4:67:24:a5:73:0a:d2: b0:5f:ca:5c:c4:1e:57:81:af:79:e7:9c:3c:a0:58: 0d:fc:ec:db:a0:92:44:38:be:a2:31:25:91:32:49: 1e:0f:02:9b:d7:7a:ab:db:ee:57:8e:f6:63:84:f6: 5a:16:ae:a5:65:54:d0:a0:75:ce:53:f9:51:4d:29: e6:25:62:c6:f9:a0:3a:41:db:58:b8:94:08:46:34: 98:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:87:7D:F6:E0:96:19:FC:92:BD:91:62:E0:9C:80:8F:5B:C5:5F:FA X509v3 Authority Key Identifier: keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:66:c2:b2:e5:c6:6c:a9:c0:3f:e0:fb:91:33:fb:fb:c2:75: 98:9d:56:1c:c7:4b:85:53:3d:56:98:85:d7:ee:2d:34:12:fc: fb:62:16:fd:5a:a9:40:df:6b:6a:15:45:91:60:dc:f2:04:8b: 61:97:76:bd:86:93:0b:7e:60:5b:29:ba:7b:b6:28:26:c9:07: 1d:4f:dc:be:98:b4:8b:52:1c:00:fc:1d:a1:01:07:e1:a4:9c: 51:35:e2:20:8b:6d:ee:70:a2:49:7a:38:0f:cf:66:67:4c:8e: 35:d1:59:40:b8:38:3c:8c:62:5b:38:b5:8d:a8:ed:41:fe:ac: f4:06:54:e6:87:56:32:34:12:ec:3a:cf:33:b0:ab:51:97:8a: 6f:12:4f:37:d7:ba:de:3e:54:26:c1:7f:cb:f6:27:29:3a:fb: 4b:4a:1a:a5:3b:ff:03:4c:ef:f7:99:30:31:a1:19:3a:2f:48: 6a:25:e9:89:51:46:94:b4:d1:44:8f:85:57:df:02:95:ea:3f: 69:95:f0:0b:3e:d0:89:36:a6:6f:f7:ea:4a:d6:1f:12:2b:31: 2a:7f:3a:31:14:63:6d:0d:ca:ce:a8:bd:eb:97:b9:4c:82:26: b7:49:29:f5:2d:9f:f9:7a:50:32:fc:6d:70:36:32:cf:dd:70: 6f:b2:eb:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/2A8bow03J+Es3b6IlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMDg3MzVhMzU3ZDMxZmE4YWRhMzFlMjlmMTk1ODZhNmZm ZDk1OTIwHhcNMjYwMjA5MTQwMDE3WhcNMjYwMjEwMTQwMDE3WjAzMTEwLwYDVQQD EyhlZTg3N2RmNmUwOTYxOWZjOTJiZDkxNjJlMDljODA4ZjViYzU1ZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EA3twO9XDph+vaaykBL/Chkjc0R 4UT0S/qUUyYg2uYwqMUR93bPSxXX+r54ZoRNbBBTT91P2Ul/mp05XK/OQy8Xp6DJ SVCuF1rJwhqqVJtvRsE+KsfY2D81AL3i8nA9sbz0QuFbEs74RExGwAqurwLMSWKM I107HqGfPUO6mQJ3BbMz+WdTBwqRzMHEcnNNIQTXPO/4uWqgbtS8eCm6gnSHykD6 wCCMzX448eRnJKVzCtKwX8pcxB5Xga9555w8oFgN/OzboJJEOL6iMSWRMkkeDwKb 13qr2+5XjvZjhPZaFq6lZVTQoHXOU/lRTSnmJWLG+aA6QdtYuJQIRjSYtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6Hffbglhn8kr2RYuCcgI9bxV/6MB8GA1UdIwQY MBaAFJ0Ic1o1fTH6itox4p8ZWGpv/ZWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jZjRkOWUtNTljOS00ZjlmLThmMzIt YTM0ODgyMWNhMWUwLzEvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jZjRkOWUtNTljOS00ZjlmLThmMzItYTM0ODgyMWNhMWUw LzEvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGbCsuXG bKnAP+D7kTP7+8J1mJ1WHMdLhVM9VpiF1+4tNBL8+2IW/VqpQN9rahVFkWDc8gSL YZd2vYaTC35gWym6e7YoJskHHU/cvpi0i1IcAPwdoQEH4aScUTXiIItt7nCiSXo4 D89mZ0yONdFZQLg4PIxiWzi1jajtQf6s9AZU5odWMjQS7DrPM7CrUZeKbxJPN9e6 3j5UJsF/y/YnKTr7S0oapTv/A0zv95kwMaEZOi9IaiXpiVFGlLTRRI+FV98Cleo/ aZXwCz7QiTamb/fqStYfEisxKn86MRRjbQ3Kzqi965e5TIImt0kp9S2f+XpQMvxt cDYyz91wb7Lryw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:57 2026 by rpki-client