This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json) Hash identifier: zzRyFMvOa2GELnaN9yh6AF9amQdrdNyv0IrqaZPWYIU= Subject key identifier: FB:0B:33:71:AE:75:9B:C0:CE:08:B9:B4:1B:F3:EA:A7:0D:1E:D5:03 Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff Certificate serial: 019C1D5EE67D2EC6B3D30FB08D4D5CFF844C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft Manifest number: 0218 Signing time: Mon 02 Feb 2026 08:01:24 +0000 Manifest this update: Mon 02 Feb 2026 08:01:24 +0000 Manifest next update: Tue 03 Feb 2026 08:01:24 +0000 Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: gj5uZ6jTcKu+fnhQKsOifdxXMrcPPOl8OClPTY4OiM4=) 2: _ypyg9Q0sLjMtZaOy7pLrLoXqrs.asa (hash: cs6IIPhJcAGLMc1/88+5xffxucA9bdvOQN2oaDdE+H8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:5e:e6:7d:2e:c6:b3:d3:0f:b0:8d:4d:5c:ff:84:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff Validity Not Before: Feb 2 08:01:24 2026 GMT Not After : Feb 3 08:01:24 2026 GMT Subject: CN=fb0b3371ae759bc0ce08b9b41bf3eaa70d1ed503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:96:76:af:23:9d:b1:8a:9f:b1:38:75:18: 76:fa:b2:bf:15:0f:4a:75:a4:23:6d:28:42:ca:67: c7:4e:03:72:0d:3f:f3:c0:f5:97:87:58:26:14:43: 2a:04:a8:6a:b3:0c:1d:ad:de:7a:31:03:61:dd:3d: f4:69:78:89:fa:11:29:98:21:c2:f4:80:6d:ca:06: ab:ea:78:8d:b0:af:61:8e:7f:ef:b3:35:2b:f0:25: d9:cf:05:01:74:25:2e:7c:34:e1:36:35:43:1a:a3: d0:45:a4:b0:98:d1:fc:d8:c8:3c:43:d3:99:f3:22: 68:20:98:5f:0d:57:15:de:0a:bf:b1:0c:81:90:c8: 8a:40:22:cd:5f:41:1a:84:78:6a:c8:18:ba:29:6b: 88:14:b7:4f:32:29:48:39:9e:0b:d9:80:a7:d8:58: 99:d1:d0:d2:c8:f7:0b:4a:99:4e:f8:59:21:06:4c: ac:cd:24:92:94:b6:34:3d:ca:82:f4:c5:b6:27:85: 8a:b9:43:24:66:67:87:e3:8a:2d:ec:65:0a:c2:48: 97:13:44:d6:3e:1a:14:c0:ee:95:62:62:8b:04:48: 24:25:b9:22:a1:d9:00:22:bd:7f:c1:c9:45:b4:65: 72:e2:87:93:29:78:42:83:71:19:ee:16:72:76:7b: b0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0B:33:71:AE:75:9B:C0:CE:08:B9:B4:1B:F3:EA:A7:0D:1E:D5:03 X509v3 Authority Key Identifier: keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:94:19:fb:f0:97:ef:f5:41:8c:39:f9:46:ec:84:aa:f1:34: b9:dc:a2:22:32:6e:da:36:f3:56:dc:d7:fc:c8:35:35:1f:45: b5:7d:0f:76:3c:aa:7e:37:77:98:2b:bc:f1:df:12:5f:e8:56: 77:c1:e2:1f:15:50:7e:3a:04:d6:98:fa:3e:19:9e:19:a8:13: ba:9a:e4:09:19:b4:5b:d2:86:e9:4e:37:28:99:20:f6:56:07: 65:b6:90:07:2c:13:5c:2c:cc:bb:27:de:3f:f7:62:96:07:c0: cb:6d:40:b5:b3:ce:45:f0:11:33:51:c1:28:0d:58:e5:11:b3: 59:35:12:c1:9f:b1:cb:c5:a0:9a:e4:6a:1f:3a:a1:d3:b1:11: f8:2b:9b:1d:2f:36:f6:05:12:7a:4e:70:cf:e9:ca:e7:2a:bb: e0:3c:1e:9a:c8:b4:02:bb:80:41:47:15:88:6c:0a:23:d1:8c: 2d:20:1e:13:29:11:e2:db:72:74:d8:5d:aa:21:04:40:63:08: 34:0b:dc:76:3a:87:3e:fc:a9:8e:0f:09:90:73:b0:68:b7:1a: ff:1a:50:67:17:94:9a:21:d9:f8:47:d7:2f:e0:f1:17:3b:10: b5:4f:7a:cd:aa:53:f4:58:3c:d3:4e:6a:11:f2:f1:91:93:5e: b9:1c:17:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdXuZ9Lsaz0w+wjU1c/4RMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDEwYzk3NjMzNjVmMzNkNGRlMTEwOTdlZDVlMTlhYzli N2E4ZmYwHhcNMjYwMjAyMDgwMTI0WhcNMjYwMjAzMDgwMTI0WjAzMTEwLwYDVQQD EyhmYjBiMzM3MWFlNzU5YmMwY2UwOGI5YjQxYmYzZWFhNzBkMWVkNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVCWdq8jnbGKn7E4dRh2+rK/FQ9K daQjbShCymfHTgNyDT/zwPWXh1gmFEMqBKhqswwdrd56MQNh3T30aXiJ+hEpmCHC 9IBtygar6niNsK9hjn/vszUr8CXZzwUBdCUufDThNjVDGqPQRaSwmNH82Mg8Q9OZ 8yJoIJhfDVcV3gq/sQyBkMiKQCLNX0EahHhqyBi6KWuIFLdPMilIOZ4L2YCn2FiZ 0dDSyPcLSplO+FkhBkyszSSSlLY0PcqC9MW2J4WKuUMkZmeH44ot7GUKwkiXE0TW PhoUwO6VYmKLBEgkJbkiodkAIr1/wclFtGVy4oeTKXhCg3EZ7hZydnuwRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsLM3GudZvAzgi5tBvz6qcNHtUDMB8GA1UdIwQY MBaAFDTRDJdjNl8z1N4RCX7V4ZrJt6j/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5FTWwyTTJYelBVM2hFSmZ0WGhtc20zcVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81N2JjZmYtMTViZS00ZmQ4LWI0OTEt N2Y4Nzg0ZTIxOWU5LzEvTk5FTWwyTTJYelBVM2hFSmZ0WGhtc20zcVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC81N2JjZmYtMTViZS00ZmQ4LWI0OTEtN2Y4Nzg0ZTIxOWU5 LzEvTk5FTWwyTTJYelBVM2hFSmZ0WGhtc20zcVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJQZ+/CX 7/VBjDn5RuyEqvE0udyiIjJu2jbzVtzX/Mg1NR9FtX0Pdjyqfjd3mCu88d8SX+hW d8HiHxVQfjoE1pj6PhmeGagTuprkCRm0W9KG6U43KJkg9lYHZbaQBywTXCzMuyfe P/dilgfAy21AtbPORfARM1HBKA1Y5RGzWTUSwZ+xy8WgmuRqHzqh07ER+CubHS82 9gUSek5wz+nK5yq74Dwemsi0AruAQUcViGwKI9GMLSAeEykR4ttydNhdqiEEQGMI NAvcdjqHPvypjg8JkHOwaLca/xpQZxeUmiHZ+EfXL+DxFzsQtU96zapT9Fg8005q EfLxkZNeuRwXKg== -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:38 2026 by rpki-client