This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json) Hash identifier: 1POxUh2TuElSjUQZ/PMUmLhBWZWFcocQ1Ov2ZPyMAOk= Subject key identifier: 41:77:B4:39:51:73:4C:56:F1:E1:84:77:EE:E3:EC:38:FD:E1:AE:0B Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d Certificate serial: 019C41D8B0C93B89A2DEF1D0338104C5F6F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft Manifest number: 1094 Signing time: Mon 09 Feb 2026 10:00:45 +0000 Manifest this update: Mon 09 Feb 2026 10:00:45 +0000 Manifest next update: Tue 10 Feb 2026 10:00:45 +0000 Files and hashes: 1: LjhJq6z0EutkdYUDvjPf54YMQCY.roa (hash: UJ/E0MSAhlopMBAQ1Fn4sYzS7IPnJ8HsG+SPAcDqln8=) 2: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: KqjcJPnDFZmemKzC09ApMAXGjjqu5SNzN9bpKUtbizM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:b0:c9:3b:89:a2:de:f1:d0:33:81:04:c5:f6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d Validity Not Before: Feb 9 10:00:45 2026 GMT Not After : Feb 10 10:00:45 2026 GMT Subject: CN=4177b43951734c56f1e18477eee3ec38fde1ae0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:72:98:32:33:91:fd:e7:d7:f6:f5:6c:17: 8a:56:32:64:9b:5d:f3:06:bb:49:03:9c:ad:fa:19: 60:7f:da:3f:8a:cf:9e:e8:a1:98:73:2b:78:4c:96: c5:7c:6a:3c:0d:42:8a:a0:3d:b8:05:0a:50:05:c3: b3:ba:39:97:a4:c3:1f:7e:f9:b4:1e:e0:79:a4:47: c0:d3:ac:97:7a:ab:21:b6:c7:f3:e5:b4:4e:04:11: 8a:28:26:75:a2:e9:a6:66:27:a9:bc:c9:2b:f1:6a: 7a:4b:0e:c9:b0:e8:76:69:13:d2:56:e0:d5:21:6c: 9a:82:9a:a5:83:33:94:51:8a:12:23:4e:95:02:9d: 32:a5:e2:f1:af:f5:c1:6d:a2:5e:21:da:97:9c:9d: 15:07:ef:d7:af:cc:c0:5f:3b:c7:54:a3:53:1b:07: 15:a0:66:2d:42:14:28:27:75:da:01:1b:6f:c4:97: cb:c6:23:a7:a9:6f:48:1f:1c:0a:2f:76:af:b8:d6: 63:e4:b6:ad:84:a1:9a:63:4f:0e:27:1f:13:98:30: c8:d7:f1:78:87:c8:7a:da:50:7d:9b:f9:c4:8e:e2: 1e:96:e2:b3:19:8a:16:a4:71:16:37:a1:ac:22:f9: 04:f3:e8:64:c7:ea:88:e9:86:1d:f1:c2:f4:77:d2: ee:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:77:B4:39:51:73:4C:56:F1:E1:84:77:EE:E3:EC:38:FD:E1:AE:0B X509v3 Authority Key Identifier: keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:56:07:2a:f8:68:4c:0e:2c:fd:f3:c2:06:b3:7a:4d:c4:94: 3a:48:2c:89:d2:64:03:87:68:b6:ab:48:55:3f:98:45:36:e3: 17:75:05:c6:2f:cc:2c:c9:9a:6d:e2:9b:83:4a:3f:c5:27:a2: 2a:8f:e8:80:74:f6:c1:72:36:e7:30:54:41:f4:56:2b:e7:22: 88:1b:d2:31:a5:34:a2:20:e8:6b:20:5e:7d:ef:f5:9c:ba:d8: 4e:68:e5:6b:dd:a0:d4:a8:f1:34:54:63:d9:68:9d:f1:18:ad: fc:c3:25:73:de:74:4e:b5:49:fc:0a:3d:54:4b:c7:60:8f:d2: 4e:d2:11:cf:ed:01:8a:47:49:c5:d6:49:59:8f:0d:a8:51:50: db:5f:f4:97:2d:c9:d1:a8:c7:45:04:d6:d2:1c:c7:92:61:ec: ee:0c:b9:17:1c:f5:60:d0:5e:5c:0f:bc:5b:ee:71:6b:76:75: cc:1c:74:ef:6f:1f:43:a8:91:fd:b5:ae:fa:f9:95:ab:1d:54: 9c:ea:e6:cc:ff:c6:eb:7f:ad:3f:81:a2:62:f9:65:3e:73:26: 04:b5:0f:51:25:36:8f:33:35:93:26:39:b1:3f:c5:fe:d8:d3: ea:e6:54:86:54:a3:6c:83:0e:1c:dc:57:ca:87:cb:2c:a1:ad: 01:0f:58:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2LDJO4mi3vHQM4EExfb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MTdjMDY1OTY2Njk4NWUxODVkODQxMjFlOGMyMGEzNjQ0 ZWE5OGQwHhcNMjYwMjA5MTAwMDQ1WhcNMjYwMjEwMTAwMDQ1WjAzMTEwLwYDVQQD Eyg0MTc3YjQzOTUxNzM0YzU2ZjFlMTg0NzdlZWUzZWMzOGZkZTFhZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWFymDIzkf3n1/b1bBeKVjJkm13z BrtJA5yt+hlgf9o/is+e6KGYcyt4TJbFfGo8DUKKoD24BQpQBcOzujmXpMMffvm0 HuB5pEfA06yXeqshtsfz5bROBBGKKCZ1oummZiepvMkr8Wp6Sw7JsOh2aRPSVuDV IWyagpqlgzOUUYoSI06VAp0ypeLxr/XBbaJeIdqXnJ0VB+/Xr8zAXzvHVKNTGwcV oGYtQhQoJ3XaARtvxJfLxiOnqW9IHxwKL3avuNZj5LathKGaY08OJx8TmDDI1/F4 h8h62lB9m/nEjuIeluKzGYoWpHEWN6GsIvkE8+hkx+qI6YYd8cL0d9LutQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEF3tDlRc0xW8eGEd+7j7Dj94a4LMB8GA1UdIwQY MBaAFDYXwGWWZpheGF2EEh6MIKNkTqmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMTc5MWQtMWM5NC00MmU2LTllM2Mt NjdhY2QyYzg4MDUxLzEvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kMTc5MWQtMWM5NC00MmU2LTllM2MtNjdhY2QyYzg4MDUx LzEvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFYHKvho TA4s/fPCBrN6TcSUOkgsidJkA4dotqtIVT+YRTbjF3UFxi/MLMmabeKbg0o/xSei Ko/ogHT2wXI25zBUQfRWK+ciiBvSMaU0oiDoayBefe/1nLrYTmjla92g1KjxNFRj 2Wid8Rit/MMlc950TrVJ/Ao9VEvHYI/STtIRz+0BikdJxdZJWY8NqFFQ21/0ly3J 0ajHRQTW0hzHkmHs7gy5Fxz1YNBeXA+8W+5xa3Z1zBx0728fQ6iR/bWu+vmVqx1U nOrmzP/G63+tP4GiYvllPnMmBLUPUSU2jzM1kyY5sT/F/tjT6uZUhlSjbIMOHNxX yofLLKGtAQ9Y/w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:22 2026 by rpki-client