This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json) Hash identifier: ka7kay9f1Gk3UkqImwPhdr9ynbWnwy42igjN4uSfNmE= Subject key identifier: 0A:C8:B2:23:21:4D:AC:D9:4E:F9:AB:9A:AA:82:0C:55:38:37:32:50 Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24 Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24 Certificate serial: 019C4246B904ACA0F5A999D86B83E74591EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft Manifest number: 07BA Signing time: Mon 09 Feb 2026 12:00:56 +0000 Manifest this update: Mon 09 Feb 2026 12:00:56 +0000 Manifest next update: Tue 10 Feb 2026 12:00:56 +0000 Files and hashes: 1: 2lJfQEwlH-6kTxU9uw2QDAzX8pc.roa (hash: 4TrMtWPwHQYSgCG5YX55g5CmUXIDn1rAauN71eaqxdk=) 2: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: Dwj5gAZnpi02BrynuWPAp0MEAUFWnhDgybQuobASRj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b9:04:ac:a0:f5:a9:99:d8:6b:83:e7:45:91:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24 Validity Not Before: Feb 9 12:00:56 2026 GMT Not After : Feb 10 12:00:56 2026 GMT Subject: CN=0ac8b223214dacd94ef9ab9aaa820c5538373250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:be:d3:a5:1b:08:c3:13:2c:2c:e2:b9:d4:1a: f8:78:42:cf:40:d7:1a:f9:14:9e:0b:8c:ab:5d:2b: a8:6a:82:5a:e5:c6:e3:58:40:8c:8e:e9:8a:4a:e4: c2:17:84:fb:35:30:f6:2b:ff:35:21:8b:89:7d:71: 63:0e:29:43:a7:ea:03:cc:12:cb:3d:f7:05:51:7a: 5f:36:19:e0:f4:20:4b:e8:73:e1:8d:01:6f:17:dd: 15:34:65:6f:71:35:17:44:aa:a2:16:75:ae:66:ff: 4f:1f:72:26:cc:d1:1d:09:13:9b:98:36:7b:e0:84: 4e:b2:ec:00:60:5e:f0:02:2e:ef:e7:bd:f1:79:db: b2:f1:be:20:7b:03:e3:c9:bb:60:2c:7e:a6:8a:c7: bd:09:08:c1:8b:13:b3:bc:70:b1:47:55:95:7c:3c: d5:24:6a:d5:6b:9e:6c:00:d5:0f:d4:9a:e6:e5:c3: e8:52:ba:5e:41:ab:c6:a4:e2:10:19:fd:03:ce:b1: da:c6:3e:17:6f:f7:eb:80:05:78:fd:55:f2:8b:1b: 06:e2:2e:93:6d:6c:fe:6b:1a:2e:12:cf:14:d7:49: 1d:3f:0e:18:e0:85:70:de:cf:18:22:75:fa:77:6f: 0d:42:59:71:5a:de:62:7d:ba:3f:49:6c:88:cd:5f: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C8:B2:23:21:4D:AC:D9:4E:F9:AB:9A:AA:82:0C:55:38:37:32:50 X509v3 Authority Key Identifier: keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9d:0d:e7:94:ed:e3:d8:a8:ba:2a:a2:76:69:db:3d:9d:c5: 83:18:e1:05:f4:ee:fe:30:0a:df:78:fc:de:f8:e8:65:bf:92: de:c8:44:d5:24:a7:c4:0d:55:53:2d:5c:a9:a1:79:45:51:9b: c6:ed:ee:4f:55:e2:d6:5b:82:01:41:aa:ac:49:ab:03:e8:fc: 66:04:58:23:aa:17:3e:8d:ed:f7:93:9b:5a:ed:d1:6f:09:7c: c8:2e:bd:8b:85:76:19:27:66:43:3e:e7:da:85:58:f1:68:4b: e7:5c:c9:9c:27:34:1b:0e:23:43:5c:02:ea:94:02:a6:13:61: 2b:70:fb:6a:77:2d:2d:c1:c6:43:87:7c:b0:c4:b8:85:e8:e8: a6:79:86:93:41:c3:08:c7:97:ab:16:4d:78:9b:71:0e:c2:76: 96:31:94:b7:e2:75:26:5a:74:6e:01:ba:41:c9:82:2f:58:b5: 48:fa:4d:c3:7f:54:70:1f:bb:df:5f:9f:af:d0:86:86:6d:4b: cf:31:82:2b:bd:e6:6d:c3:c1:1a:04:bb:d5:d1:95:f1:1c:95: 9d:84:31:16:7d:00:8c:7e:43:5f:13:ea:16:4b:96:39:b2:fd: ae:ff:ff:45:fc:68:ef:e9:26:ad:6a:66:80:9b:34:c9:41:5f: cb:ae:b8:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrkErKD1qZnYa4PnRZHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YTRjZTUwZDBjZGU0MTU0NzMzMTNiMTFiODU3MTk0MDhm YWJhMjQwHhcNMjYwMjA5MTIwMDU2WhcNMjYwMjEwMTIwMDU2WjAzMTEwLwYDVQQD EygwYWM4YjIyMzIxNGRhY2Q5NGVmOWFiOWFhYTgyMGM1NTM4MzczMjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr7TpRsIwxMsLOK51Br4eELPQNca +RSeC4yrXSuoaoJa5cbjWECMjumKSuTCF4T7NTD2K/81IYuJfXFjDilDp+oDzBLL PfcFUXpfNhng9CBL6HPhjQFvF90VNGVvcTUXRKqiFnWuZv9PH3ImzNEdCRObmDZ7 4IROsuwAYF7wAi7v573xeduy8b4gewPjybtgLH6mise9CQjBixOzvHCxR1WVfDzV JGrVa55sANUP1Jrm5cPoUrpeQavGpOIQGf0DzrHaxj4Xb/frgAV4/VXyixsG4i6T bWz+axouEs8U10kdPw4Y4IVw3s8YInX6d28NQllxWt5ifbo/SWyIzV9wmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArIsiMhTazZTvmrmqqCDFU4NzJQMB8GA1UdIwQY MBaAFDWkzlDQzeQVRzMTsRuFcZQI+rokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2It MDNiNjRjMTkxZDRhLzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2ItMDNiNjRjMTkxZDRh LzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJ0N55Tt 49iouiqidmnbPZ3FgxjhBfTu/jAK33j83vjoZb+S3shE1SSnxA1VUy1cqaF5RVGb xu3uT1Xi1luCAUGqrEmrA+j8ZgRYI6oXPo3t95ObWu3Rbwl8yC69i4V2GSdmQz7n 2oVY8WhL51zJnCc0Gw4jQ1wC6pQCphNhK3D7anctLcHGQ4d8sMS4hejopnmGk0HD CMeXqxZNeJtxDsJ2ljGUt+J1Jlp0bgG6QcmCL1i1SPpNw39UcB+731+fr9CGhm1L zzGCK73mbcPBGgS71dGV8RyVnYQxFn0AjH5DXxPqFkuWObL9rv//Rfxo7+kmrWpm gJs0yUFfy664Ow== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:32 2026 by rpki-client