This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json) Hash identifier: YixqBDuIVm2w7IFxYI4U4EUusa5KSS2yMzdp3X4NKLQ= Subject key identifier: 95:7D:10:7D:62:E5:99:EC:99:8B:60:4E:0C:98:C4:9D:37:6F:44:A4 Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45 Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45 Certificate serial: 019C4322A15B2D417A8B68D1A9322AEA3884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft Manifest number: 0284 Signing time: Mon 09 Feb 2026 16:01:08 +0000 Manifest this update: Mon 09 Feb 2026 16:01:08 +0000 Manifest next update: Tue 10 Feb 2026 16:01:08 +0000 Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: OQLgAeayqIachy/oSCmM5/t4rVwlc4f/HqNbLvGMCGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a1:5b:2d:41:7a:8b:68:d1:a9:32:2a:ea:38:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45 Validity Not Before: Feb 9 16:01:08 2026 GMT Not After : Feb 10 16:01:08 2026 GMT Subject: CN=957d107d62e599ec998b604e0c98c49d376f44a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a9:c5:83:78:dc:4f:6b:69:4c:f2:de:01:4c: 4e:d4:6e:79:29:01:b0:78:89:4b:3f:b7:9c:49:04: b5:ef:32:a7:b7:60:92:23:1a:8e:06:6f:75:59:01: ea:1e:8a:5f:b1:89:24:1f:03:b8:f8:d4:2f:0f:9c: 31:15:c2:83:ea:42:ab:2b:a8:d6:57:f2:6a:b1:1a: 7f:d8:29:6d:df:47:14:9f:d8:19:07:c6:8f:de:b5: 0a:da:e7:b7:65:80:57:08:03:69:5f:a3:7b:45:e4: 71:44:e8:05:d8:c8:e5:c1:7c:bc:3a:a2:ff:b2:7f: d3:43:b1:0d:89:2c:0f:f7:64:af:6d:88:41:78:de: 25:bc:83:6c:d0:ef:20:76:ee:d9:6c:2e:b5:eb:1a: 6f:ae:49:44:e7:a6:43:77:83:1c:dc:03:63:7f:a9: 08:1e:af:ae:8e:3b:1b:f6:fd:0a:2e:81:2d:ef:19: b1:42:e3:1a:41:35:da:12:bc:40:dc:24:9d:c8:64: 69:45:d4:a8:55:bb:9d:32:61:39:dd:6a:8c:8c:33: 43:74:f2:d1:37:01:b4:92:5a:b4:70:b1:a6:9e:7a: 88:e8:43:53:3a:07:4c:e3:fb:6b:13:4d:35:c3:f4: 36:28:c2:e0:2d:a1:52:d1:ee:a7:2b:91:58:f1:80: 6d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7D:10:7D:62:E5:99:EC:99:8B:60:4E:0C:98:C4:9D:37:6F:44:A4 X509v3 Authority Key Identifier: keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:13:2d:a5:89:ce:aa:21:93:b5:af:31:d1:64:39:96:63:e1: a7:d6:3c:35:b5:3d:de:4a:d8:94:5c:19:7e:0f:ae:84:cd:ce: 93:1b:6a:65:ae:4b:65:3d:60:7a:dd:11:da:05:c4:62:03:cb: 9f:0a:e2:37:b5:2d:f9:9e:9f:46:80:87:b2:50:d8:f8:16:69: de:36:3a:bf:00:09:01:f2:4b:58:31:3c:46:bc:3c:e4:b9:71: 3d:78:f6:8d:b4:27:b8:0e:2d:aa:1d:a4:96:80:60:64:0f:6e: b6:e9:a9:07:90:35:51:19:af:8b:b2:2c:17:90:18:59:6e:39: 9d:c5:c1:df:cd:4b:a8:c0:bc:f1:5e:37:e8:30:22:68:0b:aa: c3:d0:21:ec:a4:0c:c3:8b:fa:1e:39:3f:ed:7b:d8:05:f7:70: e3:a5:88:1e:d4:f5:e6:fd:6b:6c:cb:25:e6:95:ed:e1:2d:4e: 0f:24:de:10:f4:f8:5a:ce:49:52:34:7e:2b:b9:f6:91:74:67: c8:8e:b5:92:ad:2b:30:09:d5:e9:dd:74:37:c8:c7:4e:81:b6: c6:19:34:4e:e1:84:b6:ae:83:cb:0b:43:de:0d:00:76:46:dd: e6:ed:62:6a:19:70:18:b3:2b:6b:2d:72:9e:97:66:c1:14:71: e2:6f:e1:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqFbLUF6i2jRqTIq6jiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0Zjc1Mjk1YmI5NWI1NTQ1Mzg0NGYzMmQ2ZTM5NTA5ZDNi ZWNlNDUwHhcNMjYwMjA5MTYwMTA4WhcNMjYwMjEwMTYwMTA4WjAzMTEwLwYDVQQD Eyg5NTdkMTA3ZDYyZTU5OWVjOTk4YjYwNGUwYzk4YzQ5ZDM3NmY0NGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqnFg3jcT2tpTPLeAUxO1G55KQGw eIlLP7ecSQS17zKnt2CSIxqOBm91WQHqHopfsYkkHwO4+NQvD5wxFcKD6kKrK6jW V/JqsRp/2Clt30cUn9gZB8aP3rUK2ue3ZYBXCANpX6N7ReRxROgF2MjlwXy8OqL/ sn/TQ7ENiSwP92SvbYhBeN4lvINs0O8gdu7ZbC616xpvrklE56ZDd4Mc3ANjf6kI Hq+ujjsb9v0KLoEt7xmxQuMaQTXaErxA3CSdyGRpRdSoVbudMmE53WqMjDNDdPLR NwG0klq0cLGmnnqI6ENTOgdM4/trE001w/Q2KMLgLaFS0e6nK5FY8YBtyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJV9EH1i5ZnsmYtgTgyYxJ03b0SkMB8GA1UdIwQY MBaAFDT3UpW7lbVUU4RPMtbjlQnTvs5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUt ZDk1ZTVhNjNhNDhlLzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUtZDk1ZTVhNjNhNDhl LzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBMtpYnO qiGTta8x0WQ5lmPhp9Y8NbU93krYlFwZfg+uhM3OkxtqZa5LZT1get0R2gXEYgPL nwriN7Ut+Z6fRoCHslDY+BZp3jY6vwAJAfJLWDE8Rrw85LlxPXj2jbQnuA4tqh2k loBgZA9utumpB5A1URmvi7IsF5AYWW45ncXB381LqMC88V436DAiaAuqw9Ah7KQM w4v6Hjk/7XvYBfdw46WIHtT15v1rbMsl5pXt4S1ODyTeEPT4Ws5JUjR+K7n2kXRn yI61kq0rMAnV6d10N8jHToG2xhk0TuGEtq6DywtD3g0Adkbd5u1iahlwGLMray1y npdmwRRx4m/hpg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:28 2026 by rpki-client