This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json) Hash identifier: DoZkkJihL7oOqpZPh1tM7gch7SzHA+SVKrszXjqX618= Subject key identifier: B5:DB:F4:31:BF:F6:DF:BB:0A:BC:EB:99:90:C5:DC:EE:BD:6C:A9:49 Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce Certificate serial: 019C42462A9AA3612607BD021779BC23D867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft Manifest number: 0F87 Signing time: Mon 09 Feb 2026 12:00:20 +0000 Manifest this update: Mon 09 Feb 2026 12:00:20 +0000 Manifest next update: Tue 10 Feb 2026 12:00:20 +0000 Files and hashes: 1: 0iXNb0qgTsbED9wLh6tNLm4QiSc.roa (hash: jPsn3OTLHwRfrJ0BbFjL8MkH0Kkclj3eem8yJT/9xno=) 2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: w3of9N7NF88kpVXGqV5sFnS43stxErr3kwWuqLFIbWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:2a:9a:a3:61:26:07:bd:02:17:79:bc:23:d8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce Validity Not Before: Feb 9 12:00:20 2026 GMT Not After : Feb 10 12:00:20 2026 GMT Subject: CN=b5dbf431bff6dfbb0abceb9990c5dceebd6ca949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ec:69:23:47:6b:09:cf:74:8d:9a:74:5c:b2: 8e:fc:6b:fd:0f:1f:5c:cd:7d:c0:38:34:c3:b2:d1: 56:8a:ff:94:18:f9:3b:d9:27:32:bc:94:7f:a7:fb: b7:f2:82:dd:5a:ff:6d:bf:81:a6:69:b4:4b:5c:39: 88:c3:4d:8a:2f:f7:ff:86:9f:79:de:63:4e:c7:b0: 42:26:95:ce:23:f6:95:74:f2:5b:2c:a6:03:1e:11: 9f:ab:c9:c1:fd:58:d0:ff:69:7b:61:17:e2:5f:76: 91:3b:9b:58:90:9d:f7:c8:bb:24:40:44:a4:d4:f9: c7:d7:0e:cf:5d:34:90:85:ff:8b:8a:27:f2:70:2f: 19:b9:1f:fb:d3:f8:f3:ee:43:3d:ab:4b:b1:c6:48: 05:ee:98:c4:63:12:c4:4f:6c:1a:db:0c:4e:79:66: 9a:e8:46:c9:3d:1b:92:ff:68:d6:59:a2:3a:cc:9a: 8b:06:ee:9a:00:67:71:5e:10:1c:93:87:b4:fe:fa: 6a:db:ba:6e:d7:70:db:6d:69:fc:8b:55:74:99:90: 6e:16:e4:dd:98:13:5c:04:6b:64:aa:a6:55:a5:2c: 8d:3a:9e:52:49:36:c9:7e:13:7a:8d:dc:18:55:2d: 17:c7:a8:f3:09:a1:00:05:8c:6e:c2:32:0d:df:91: 86:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DB:F4:31:BF:F6:DF:BB:0A:BC:EB:99:90:C5:DC:EE:BD:6C:A9:49 X509v3 Authority Key Identifier: keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:45:78:39:c8:42:83:27:3b:3b:b0:b4:17:c1:ba:97:4d:a8: 36:49:75:18:b3:53:41:ac:95:02:d0:df:a7:ab:5d:09:d3:f4: 5b:34:85:f9:52:1c:e2:0d:83:6b:b0:89:e6:b9:d1:99:8c:97: 18:ca:7e:62:13:80:00:b4:78:bd:73:7e:9f:1d:87:e6:dc:02: 98:a8:15:4d:bb:a7:67:14:93:16:6f:87:3a:a7:80:25:9f:8a: 4f:8c:db:fb:56:32:37:6a:24:c7:78:f1:96:71:05:18:83:a6: 54:2f:36:9d:95:98:01:6e:15:6a:a6:e5:cc:3a:3b:2b:45:e8: 5d:fb:1a:66:e8:6f:23:1d:d6:74:52:bc:a9:0a:8d:c7:0d:a0: 46:49:6c:3a:e5:0f:24:d2:7f:3f:ab:82:80:80:18:88:44:0b: 36:6f:86:c2:3d:2a:94:7f:15:3b:51:be:ec:bc:e3:0e:2b:03: 94:4b:f4:73:5a:48:7b:74:68:bc:31:2d:61:61:b5:d7:67:61: 5b:6c:5a:13:17:43:7f:a4:44:cf:75:17:70:f4:7e:6b:12:87: e8:4f:b9:4c:2b:dd:a6:82:25:0c:30:b8:b5:71:2c:8b:3b:c6: 1f:ad:e3:66:6c:2d:ce:b0:a7:9e:76:1d:1c:fa:40:06:0c:a5: c2:10:6c:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRiqao2EmB70CF3m8I9hnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYWM0ZjYxZjQ2OGI3MjAwMmFiMjVmMTEyZTUyMDExZWQ3 ODJjY2UwHhcNMjYwMjA5MTIwMDIwWhcNMjYwMjEwMTIwMDIwWjAzMTEwLwYDVQQD EyhiNWRiZjQzMWJmZjZkZmJiMGFiY2ViOTk5MGM1ZGNlZWJkNmNhOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OxpI0drCc90jZp0XLKO/Gv9Dx9c zX3AODTDstFWiv+UGPk72ScyvJR/p/u38oLdWv9tv4GmabRLXDmIw02KL/f/hp95 3mNOx7BCJpXOI/aVdPJbLKYDHhGfq8nB/VjQ/2l7YRfiX3aRO5tYkJ33yLskQESk 1PnH1w7PXTSQhf+LiifycC8ZuR/70/jz7kM9q0uxxkgF7pjEYxLET2wa2wxOeWaa 6EbJPRuS/2jWWaI6zJqLBu6aAGdxXhAck4e0/vpq27pu13DbbWn8i1V0mZBuFuTd mBNcBGtkqqZVpSyNOp5SSTbJfhN6jdwYVS0Xx6jzCaEABYxuwjIN35GG2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXb9DG/9t+7CrzrmZDF3O69bKlJMB8GA1UdIwQY MBaAFJysT2H0aLcgAqsl8RLlIBHteCzOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQt MzcxZmM1YzgwOTUwLzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQtMzcxZmM1YzgwOTUw LzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0V4OchC gyc7O7C0F8G6l02oNkl1GLNTQayVAtDfp6tdCdP0WzSF+VIc4g2Da7CJ5rnRmYyX GMp+YhOAALR4vXN+nx2H5twCmKgVTbunZxSTFm+HOqeAJZ+KT4zb+1YyN2okx3jx lnEFGIOmVC82nZWYAW4VaqblzDo7K0XoXfsaZuhvIx3WdFK8qQqNxw2gRklsOuUP JNJ/P6uCgIAYiEQLNm+Gwj0qlH8VO1G+7LzjDisDlEv0c1pIe3RovDEtYWG112dh W2xaExdDf6REz3UXcPR+axKH6E+5TCvdpoIlDDC4tXEsizvGH63jZmwtzrCnnnYd HPpABgylwhBsXA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:29 2026 by rpki-client