This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft File: njXiGCQ9GwYp16OD6v3CBROKGUs.mft (raw, json) Hash identifier: Y++3oDrbuBNOh+Rfne8m80231WPNZGRyJhUjF4Ll9jM= Subject key identifier: 2A:15:23:D4:6C:A6:B1:38:54:83:10:D3:1C:29:F5:D4:9F:B2:E0:54 Authority key identifier: 9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B Certificate issuer: /CN=9e35e218243d1b0629d7a383eafdc205138a194b Certificate serial: 019C1EDF51DA41DD728133ACF93AFC918238 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft Manifest number: 0B48 Signing time: Mon 02 Feb 2026 15:01:17 +0000 Manifest this update: Mon 02 Feb 2026 15:01:17 +0000 Manifest next update: Tue 03 Feb 2026 15:01:17 +0000 Files and hashes: 1: njXiGCQ9GwYp16OD6v3CBROKGUs.crl (hash: Vo3MnfMncMFk2agpmYhUc68FQBgxhcpdmWYEvWZxmG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:df:51:da:41:dd:72:81:33:ac:f9:3a:fc:91:82:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e35e218243d1b0629d7a383eafdc205138a194b Validity Not Before: Feb 2 15:01:17 2026 GMT Not After : Feb 3 15:01:17 2026 GMT Subject: CN=2a1523d46ca6b138548310d31c29f5d49fb2e054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:c3:32:0b:8f:29:f1:e7:da:d6:16:9b:2a: e1:1b:ab:52:84:aa:93:32:29:2b:df:aa:5b:8d:95: be:e1:6c:6d:b3:13:cb:e0:62:fe:92:97:1a:18:86: cf:05:ca:8f:18:01:7b:53:2a:55:32:2d:b7:34:8b: 14:6e:63:4f:9c:9a:0d:f2:84:f0:74:19:79:f6:c6: 06:1f:d6:95:d9:8e:90:c1:3d:30:c7:9c:bb:be:3c: 63:14:26:e3:b4:cf:e8:c2:c4:e8:bb:1e:58:ce:b5: 1d:88:7e:b5:fa:09:c0:30:01:53:2c:36:0d:87:39: 43:01:cd:16:fc:d4:1c:e1:ad:dd:f8:6e:f8:7f:2c: c7:4d:c2:de:d5:a7:a1:5c:09:b8:95:53:7a:d9:3a: 32:c8:e4:ba:cb:63:26:57:fd:b4:7e:1a:af:72:2e: bb:fa:c6:14:1a:5e:f6:40:af:2e:9f:90:06:89:43: c7:f1:48:ee:5e:f6:37:3f:da:4a:67:28:22:82:ae: fa:a8:35:36:fc:37:4d:b4:16:bd:f3:a2:22:ad:2c: 38:f0:0e:9c:fd:83:ed:59:42:cb:7a:df:26:5f:d8: 92:e0:00:73:7a:75:5b:bd:26:ba:4e:81:6d:66:c1: dc:1f:a4:00:db:77:2b:d3:ba:14:d4:dc:a0:cc:bf: 3f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:15:23:D4:6C:A6:B1:38:54:83:10:D3:1C:29:F5:D4:9F:B2:E0:54 X509v3 Authority Key Identifier: keyid:9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:42:f9:02:47:4e:4c:63:58:df:e4:60:7b:22:b1:39:a3:8a: 5b:8b:64:c1:85:aa:fa:8f:ac:1f:c3:94:1b:0b:ed:4a:3b:03: 0d:25:c1:63:82:3b:58:f6:3f:91:18:b0:4d:0d:99:ca:25:5a: d7:2f:15:63:6e:46:ab:a7:59:a2:aa:f8:52:5b:23:2c:2b:95: f3:18:7c:37:02:5e:6a:14:89:33:fd:82:8d:30:c1:90:ba:78: b2:3c:02:0d:f6:d7:f2:8f:a4:e3:d1:c4:26:d2:49:f6:be:16: 02:7d:40:8f:75:13:4f:e0:6f:41:be:22:e9:04:7f:4e:8a:30: 7f:bb:63:e1:57:4b:96:04:b4:9f:21:a8:f5:ce:6f:24:58:b9: 93:42:23:c1:7d:2e:4b:3d:87:e3:b6:ce:3a:76:ea:20:9b:98: ee:20:8e:69:b8:d1:7f:32:4e:e3:c3:0f:aa:01:ce:3f:f2:c6: 07:32:9a:53:1c:c4:1c:71:79:d8:09:4c:8a:3d:24:25:3a:60: d0:b3:aa:8d:2f:e2:29:e6:5b:9e:e0:5e:99:19:5c:ce:8a:7f: 9e:e1:dd:b3:40:a5:1c:f3:ee:36:39:81:a9:77:a2:e5:2d:84: ba:c6:93:0b:ae:84:d6:b9:a0:2b:6b:bd:c3:52:7d:c2:1f:5b: e3:e0:24:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwe31HaQd1ygTOs+Tr8kYI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzVlMjE4MjQzZDFiMDYyOWQ3YTM4M2VhZmRjMjA1MTM4 YTE5NGIwHhcNMjYwMjAyMTUwMTE3WhcNMjYwMjAzMTUwMTE3WjAzMTEwLwYDVQQD EygyYTE1MjNkNDZjYTZiMTM4NTQ4MzEwZDMxYzI5ZjVkNDlmYjJlMDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGfDMguPKfHn2tYWmyrhG6tShKqT Mikr36pbjZW+4WxtsxPL4GL+kpcaGIbPBcqPGAF7UypVMi23NIsUbmNPnJoN8oTw dBl59sYGH9aV2Y6QwT0wx5y7vjxjFCbjtM/owsToux5YzrUdiH61+gnAMAFTLDYN hzlDAc0W/NQc4a3d+G74fyzHTcLe1aehXAm4lVN62ToyyOS6y2MmV/20fhqvci67 +sYUGl72QK8un5AGiUPH8UjuXvY3P9pKZygigq76qDU2/DdNtBa986IirSw48A6c /YPtWULLet8mX9iS4ABzenVbvSa6ToFtZsHcH6QA23cr07oU1NygzL8/5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoVI9RsprE4VIMQ0xwp9dSfsuBUMB8GA1UdIwQY MBaAFJ414hgkPRsGKdejg+r9wgUTihlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81MzgzMDQtMGI4ZS00MjNmLWFlMWMt NTUwZTU2NDdiYmJmLzEvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81MzgzMDQtMGI4ZS00MjNmLWFlMWMtNTUwZTU2NDdiYmJm LzEvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEL5AkdO TGNY3+RgeyKxOaOKW4tkwYWq+o+sH8OUGwvtSjsDDSXBY4I7WPY/kRiwTQ2ZyiVa 1y8VY25Gq6dZoqr4UlsjLCuV8xh8NwJeahSJM/2CjTDBkLp4sjwCDfbX8o+k49HE JtJJ9r4WAn1Aj3UTT+BvQb4i6QR/Toowf7tj4VdLlgS0nyGo9c5vJFi5k0IjwX0u Sz2H47bOOnbqIJuY7iCOabjRfzJO48MPqgHOP/LGBzKaUxzEHHF52AlMij0kJTpg 0LOqjS/iKeZbnuBemRlczop/nuHds0ClHPPuNjmBqXei5S2EusaTC66E1rmgK2u9 w1J9wh9b4+AkLQ== -----END CERTIFICATE-----Generated at Mon Feb 2 20:44:47 2026 by rpki-client