This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json) Hash identifier: A8vCujbT8jBaTRlYtqotzOuqVm4kA/OdbtgU6AMR9UI= Subject key identifier: 64:BA:09:4E:E2:E6:D5:33:16:13:2E:2F:97:E2:58:73:62:86:6F:65 Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0 Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0 Certificate serial: 019C1E02FE4840AEDD9F0E7F62419A24B240 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft Manifest number: 04DD Signing time: Mon 02 Feb 2026 11:00:38 +0000 Manifest this update: Mon 02 Feb 2026 11:00:38 +0000 Manifest next update: Tue 03 Feb 2026 11:00:38 +0000 Files and hashes: 1: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: ZpDadGj78vvNqG32j9YFDjEGOhyxlo1fMf7nciWWJYY=) 2: vLei4seWygsDh0oR9_VnFB1q0Xs.roa (hash: ND2KaYB7DGNAB4Oizn0Q8ZdJQ6VlQYlD9dkkKlwD5i0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:02:fe:48:40:ae:dd:9f:0e:7f:62:41:9a:24:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0 Validity Not Before: Feb 2 11:00:38 2026 GMT Not After : Feb 3 11:00:38 2026 GMT Subject: CN=64ba094ee2e6d53316132e2f97e2587362866f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3f:16:2a:2e:cf:39:04:50:c7:6e:44:8d:60: 42:06:ef:a9:59:81:d7:85:27:5a:9e:c8:e7:8f:0d: bc:9a:2b:6f:7c:cd:77:ff:6c:86:4d:98:9b:1b:58: b7:b4:ef:4b:78:f1:de:a8:34:d0:a4:e4:35:39:99: a5:a0:96:bb:a9:c5:ed:c3:d3:33:8f:7d:e9:1e:93: 84:0d:98:f7:e8:10:dd:72:39:ab:f7:14:57:3d:af: 89:c7:40:7c:ca:b8:12:a7:a1:e1:8e:2c:a6:ba:a7: 2b:6c:2a:af:5b:da:84:9e:cb:26:e6:75:5b:94:e5: bc:bd:32:be:9c:f0:84:dd:13:57:a3:53:24:39:91: bd:22:1b:85:90:11:24:9c:5f:51:7d:38:65:6e:ba: 43:ee:94:92:41:85:af:93:de:9b:63:06:5c:24:37: a6:5f:2d:9c:78:5f:a2:16:4d:c7:02:98:29:10:b8: c3:50:a9:1b:38:5b:19:ad:2e:bc:89:a9:e2:cf:e7: e3:f1:5a:32:41:17:05:8b:18:b7:9d:92:66:59:b0: 64:3f:4b:51:c3:45:53:85:9f:2e:80:8e:eb:c8:a5: 83:0f:2f:c3:3e:40:b6:1e:dc:a4:26:1d:e9:05:65: 7d:a6:db:e7:c4:2e:35:cb:87:52:3b:df:03:4e:ae: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BA:09:4E:E2:E6:D5:33:16:13:2E:2F:97:E2:58:73:62:86:6F:65 X509v3 Authority Key Identifier: keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:19:04:57:63:c8:b7:bb:36:be:e0:e8:94:24:09:61:c1:64: 50:8b:7f:94:d8:d3:65:4c:66:89:50:d3:7e:3a:71:bb:ca:49: 34:73:e6:a0:d0:a7:39:c5:a5:3b:96:56:da:02:b9:cd:f3:37: 32:fc:eb:a1:03:b9:35:1c:72:46:f9:9e:58:b5:7a:73:43:95: 48:c0:e6:cd:8d:79:08:6c:35:97:69:d3:b2:4d:a9:e3:68:05: 47:4b:03:23:4a:7a:03:75:05:e6:a4:44:69:20:5d:19:6f:f5: ee:9a:ee:c8:c9:73:3b:1f:cf:d8:a8:97:ce:1c:c3:7c:e9:dd: e1:e8:44:1a:4b:23:45:f0:18:2f:6f:df:ac:62:6e:56:7e:88: e6:a1:bf:9c:24:31:3b:49:8a:e0:fa:db:75:51:24:5e:e1:67: 01:c5:53:18:03:25:66:39:a2:84:cd:c3:ef:08:92:e0:6e:28: 64:d3:1d:a3:7b:f7:57:ea:1e:ce:fc:1f:2c:ba:e7:3c:cb:0f: 28:a8:4d:03:79:73:c7:12:a5:74:86:52:e6:98:c6:35:e4:d3: 6b:bc:d2:7a:27:47:b4:c5:9f:ff:b2:34:2b:76:b3:0f:ef:85: 6f:d4:67:6c:79:a0:34:3f:82:52:8b:b1:3a:2f:42:db:2b:c6: 2d:e1:12:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweAv5IQK7dnw5/YkGaJLJAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZGIxYmIyOWE0YWVhODVlMTljMjg5MmQwYzgzOWUyZmI5 NDVlZDAwHhcNMjYwMjAyMTEwMDM4WhcNMjYwMjAzMTEwMDM4WjAzMTEwLwYDVQQD Eyg2NGJhMDk0ZWUyZTZkNTMzMTYxMzJlMmY5N2UyNTg3MzYyODY2ZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9j8WKi7POQRQx25EjWBCBu+pWYHX hSdansjnjw28mitvfM13/2yGTZibG1i3tO9LePHeqDTQpOQ1OZmloJa7qcXtw9Mz j33pHpOEDZj36BDdcjmr9xRXPa+Jx0B8yrgSp6HhjiymuqcrbCqvW9qEnssm5nVb lOW8vTK+nPCE3RNXo1MkOZG9IhuFkBEknF9RfThlbrpD7pSSQYWvk96bYwZcJDem Xy2ceF+iFk3HApgpELjDUKkbOFsZrS68ianiz+fj8VoyQRcFixi3nZJmWbBkP0tR w0VThZ8ugI7ryKWDDy/DPkC2HtykJh3pBWV9ptvnxC41y4dSO98DTq7wGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGS6CU7i5tUzFhMuL5fiWHNihm9lMB8GA1UdIwQY MBaAFDTbG7KaSuqF4ZwoktDIOeL7lF7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84ZGI4ZDItNmIxMS00ZDE5LThlOGQt NTJhMTA0MjViMTM2LzEvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84ZGI4ZDItNmIxMS00ZDE5LThlOGQtNTJhMTA0MjViMTM2 LzEvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhkEV2PI t7s2vuDolCQJYcFkUIt/lNjTZUxmiVDTfjpxu8pJNHPmoNCnOcWlO5ZW2gK5zfM3 MvzroQO5NRxyRvmeWLV6c0OVSMDmzY15CGw1l2nTsk2p42gFR0sDI0p6A3UF5qRE aSBdGW/17pruyMlzOx/P2KiXzhzDfOnd4ehEGksjRfAYL2/frGJuVn6I5qG/nCQx O0mK4PrbdVEkXuFnAcVTGAMlZjmihM3D7wiS4G4oZNMdo3v3V+oezvwfLLrnPMsP KKhNA3lzxxKldIZS5pjGNeTTa7zSeidHtMWf/7I0K3azD++Fb9RnbHmgND+CUoux Oi9C2yvGLeESWA== -----END CERTIFICATE-----Generated at Mon Feb 2 20:45:22 2026 by rpki-client