This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json) Hash identifier: rcc9g11x6Ajyub9R/zkt2cr1jTaRQF0Bu23UEuO38n4= Subject key identifier: CC:C1:DB:22:AE:51:2D:4D:3D:B5:CC:98:66:EF:7F:71:ED:72:EE:41 Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5 Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5 Certificate serial: 019C43FE4086B74B0A499E8453C7B3B22DD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft Manifest number: 06DF Signing time: Mon 09 Feb 2026 20:01:01 +0000 Manifest this update: Mon 09 Feb 2026 20:01:01 +0000 Manifest next update: Tue 10 Feb 2026 20:01:01 +0000 Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: FSFYHt2SsjaIqHvHx/W/m5LL6CzR1ev5279P3/TcfRU=) 2: ajWUGAq6BMTKrTNOHft42ywINnc.roa (hash: Oc0Q5MG2sAXuAr4KfyQjmkzbXtqqCBE8bhQRqqONsEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:40:86:b7:4b:0a:49:9e:84:53:c7:b3:b2:2d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34883ab799f14028e5b537506e2af878449041c5 Validity Not Before: Feb 9 20:01:01 2026 GMT Not After : Feb 10 20:01:01 2026 GMT Subject: CN=ccc1db22ae512d4d3db5cc9866ef7f71ed72ee41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:a9:3a:74:37:fc:70:fc:04:b8:d9:28:60:2c: ac:84:54:39:82:29:91:0f:57:f6:9e:11:ac:e1:ea: 62:89:55:03:87:69:ba:c3:be:4b:f2:54:0d:9b:1b: 1e:31:ae:4a:52:cd:36:c4:da:9f:a7:85:9e:81:c1: b7:d2:72:e0:b5:e4:c3:2b:37:02:75:f6:6b:d5:3d: ef:8a:85:14:be:b7:78:f1:29:3f:14:50:d2:84:7c: 1b:11:ec:4e:8c:ab:b6:37:5f:ed:44:79:93:78:6e: 28:35:7c:85:74:ae:ae:c5:fd:3b:ed:2e:e2:87:e1: 26:fd:e7:93:c9:e0:2d:72:8d:65:b8:fd:78:6c:19: c8:31:18:91:33:73:d2:65:45:18:41:36:2d:90:ef: 4e:7f:1a:0c:60:f2:bb:97:09:fa:85:04:65:b7:23: 12:1a:df:4e:94:d8:d2:e0:5f:a3:82:38:17:40:59: 53:1d:d9:4f:a7:6f:8c:88:90:c7:56:cb:f7:a7:0a: 67:07:d4:e4:11:24:c8:60:26:c0:6a:c7:e4:d6:f9: 77:54:e7:0b:13:45:4a:56:71:06:da:eb:2a:fe:28: a0:db:86:8e:b8:45:b0:02:1b:b1:af:e0:d6:1b:21: 66:0f:52:b0:55:b3:52:2f:e8:46:14:55:31:cb:b8: 55:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C1:DB:22:AE:51:2D:4D:3D:B5:CC:98:66:EF:7F:71:ED:72:EE:41 X509v3 Authority Key Identifier: keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:9b:fb:5e:38:89:e6:17:02:3b:92:c7:44:75:e3:10:4e:6d: fd:37:20:3d:e2:9a:e0:6a:b3:d3:fc:4a:5e:e1:8e:b5:31:83: e3:69:b7:2c:1b:ae:11:8e:3f:71:c0:ae:0a:1a:6b:d0:11:9e: fa:19:cf:b7:5f:36:8e:9d:0f:c2:c9:69:a8:12:62:ba:c7:d6: 09:74:12:8b:e2:33:e2:e7:7a:03:8d:7c:5b:77:ee:a5:23:df: 8c:79:65:d7:e2:14:45:9b:68:05:16:66:2a:13:4a:b5:80:9a: dd:c5:c3:63:86:66:13:ff:dd:a6:1e:42:b4:b6:94:25:be:06: d2:28:ad:ac:86:ba:2d:c8:ba:6f:f6:5b:7c:06:e4:b4:33:64: b2:95:cf:f4:77:ff:f9:a6:a4:85:f6:92:4d:b6:e0:38:ff:af: 6d:53:e3:5a:a1:2c:d4:69:72:ed:dc:2f:c5:c1:c1:6c:07:fb: 62:10:94:55:19:be:d9:17:76:27:06:e9:e3:f4:ff:df:40:c3: 50:aa:49:4a:57:b9:7b:7a:70:a3:e1:a3:92:36:fd:e7:8e:16: 49:8e:62:4d:71:3d:9d:92:6a:e9:7c:28:63:f1:4d:52:5c:bc: 50:f4:64:d9:34:24:ce:52:1a:06:e3:c5:ee:04:04:a9:28:71: 58:fa:58:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/kCGt0sKSZ6EU8ezsi3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ODgzYWI3OTlmMTQwMjhlNWI1Mzc1MDZlMmFmODc4NDQ5 MDQxYzUwHhcNMjYwMjA5MjAwMTAxWhcNMjYwMjEwMjAwMTAxWjAzMTEwLwYDVQQD EyhjY2MxZGIyMmFlNTEyZDRkM2RiNWNjOTg2NmVmN2Y3MWVkNzJlZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6k6dDf8cPwEuNkoYCyshFQ5gimR D1f2nhGs4epiiVUDh2m6w75L8lQNmxseMa5KUs02xNqfp4WegcG30nLgteTDKzcC dfZr1T3vioUUvrd48Sk/FFDShHwbEexOjKu2N1/tRHmTeG4oNXyFdK6uxf077S7i h+Em/eeTyeAtco1luP14bBnIMRiRM3PSZUUYQTYtkO9OfxoMYPK7lwn6hQRltyMS Gt9OlNjS4F+jgjgXQFlTHdlPp2+MiJDHVsv3pwpnB9TkESTIYCbAasfk1vl3VOcL E0VKVnEG2usq/iig24aOuEWwAhuxr+DWGyFmD1KwVbNSL+hGFFUxy7hVgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzB2yKuUS1NPbXMmGbvf3Htcu5BMB8GA1UdIwQY MBaAFDSIOreZ8UAo5bU3UG4q+HhEkEHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mNGRlMTEtNTIzOS00ZWM1LTgxZTYt MjY0OGZlOWNjMDIwLzEvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mNGRlMTEtNTIzOS00ZWM1LTgxZTYtMjY0OGZlOWNjMDIw LzEvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5v7XjiJ 5hcCO5LHRHXjEE5t/TcgPeKa4Gqz0/xKXuGOtTGD42m3LBuuEY4/ccCuChpr0BGe +hnPt182jp0PwslpqBJiusfWCXQSi+Iz4ud6A418W3fupSPfjHll1+IURZtoBRZm KhNKtYCa3cXDY4ZmE//dph5CtLaUJb4G0iitrIa6Lci6b/ZbfAbktDNkspXP9Hf/ +aakhfaSTbbgOP+vbVPjWqEs1Gly7dwvxcHBbAf7YhCUVRm+2Rd2Jwbp4/T/30DD UKpJSle5e3pwo+Gjkjb9544WSY5iTXE9nZJq6XwoY/FNUly8UPRk2TQkzlIaBuPF 7gQEqShxWPpYKA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:55 2026 by rpki-client