This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft File: NgqWAeAvgSjvZG9VlTNuCleRfK8.mft (raw, json) Hash identifier: l6uq/+rGDEjc/GWXJOxtD8Lduzf3zhjmZBl3ISPeAXU= Subject key identifier: 01:01:35:70:69:F2:44:F6:4F:EE:75:12:23:B3:EB:17:E1:B9:E6:EE Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF Certificate issuer: /CN=360a9601e02f8128ef646f5595336e0a57917caf Certificate serial: 019C438FCAC9B42102EE6B7F8B2D5B4A3795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft Manifest number: 02CA Signing time: Mon 09 Feb 2026 18:00:22 +0000 Manifest this update: Mon 09 Feb 2026 18:00:22 +0000 Manifest next update: Tue 10 Feb 2026 18:00:22 +0000 Files and hashes: 1: NgqWAeAvgSjvZG9VlTNuCleRfK8.crl (hash: 46GEE62yiPG9goexXs22xFKphIevdc4A90ONZjxFS70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:ca:c9:b4:21:02:ee:6b:7f:8b:2d:5b:4a:37:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf Validity Not Before: Feb 9 18:00:22 2026 GMT Not After : Feb 10 18:00:22 2026 GMT Subject: CN=0101357069f244f64fee751223b3eb17e1b9e6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:25:b4:3d:68:47:f1:b3:75:48:ac:e2:a5: 0e:8a:2b:67:9b:c0:eb:59:0b:86:65:57:f3:80:89: 85:8f:6f:7c:b9:03:ea:25:7a:20:06:8e:16:fe:17: 11:59:45:5a:38:0d:f2:6c:3d:9d:1b:0d:9a:37:f7: eb:5a:dc:a3:88:f7:f0:d8:0e:f9:44:52:d9:4e:cf: 68:d7:ef:0e:c3:d4:95:75:fe:1d:65:51:bb:94:07: 9b:27:df:57:69:39:bd:a9:10:dd:2e:d6:23:6e:fb: 17:94:e4:df:22:b3:93:bb:28:21:9f:0b:e2:6b:99: ac:63:e4:a8:44:19:f1:0c:ee:0d:25:f5:e1:57:87: 54:31:5c:56:bd:98:27:1c:cb:4f:59:b2:4c:d7:bf: 36:01:5b:4b:ba:09:d5:4b:6c:c9:64:70:bc:ff:87: 34:89:93:03:5b:23:e1:94:dc:bb:f0:dd:4b:c5:0e: e5:34:73:11:d8:46:5d:cb:26:93:3c:8a:30:79:a8: d2:57:1e:9e:77:9d:9d:32:d2:58:d8:d8:0d:26:32: 7c:41:6d:3e:8a:55:09:b1:86:28:07:42:0c:f9:67: df:87:e6:1b:e9:b8:b5:07:08:e7:99:7d:33:e5:f2: e1:77:2a:31:31:15:91:ec:12:34:c7:cb:7e:22:be: a1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:01:35:70:69:F2:44:F6:4F:EE:75:12:23:B3:EB:17:E1:B9:E6:EE X509v3 Authority Key Identifier: keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:47:cd:7e:b6:cb:3e:6b:d4:1c:69:a1:d9:ec:aa:12:b9:c5: 30:84:01:04:2d:d5:b2:5b:78:c6:bb:66:c0:04:49:5e:a2:eb: 14:fa:ba:9a:b5:4f:3e:8d:61:81:ee:4d:e8:a8:3e:26:20:95: 8e:2f:11:ed:0f:c2:d8:51:be:5a:2b:b2:91:01:fa:aa:25:fd: d0:93:04:ee:0d:29:f3:d3:06:e1:b0:cb:55:20:4e:2f:22:bb: 25:ed:2b:cd:d3:02:df:a3:cd:17:df:7c:fb:5c:32:14:61:a3: e1:be:cc:fd:59:67:ef:45:00:9c:91:9a:d5:a7:c0:c6:90:0d: 23:e9:d5:d2:6d:c1:57:f7:3c:3c:ab:2f:28:59:ae:42:8e:bf: a8:74:17:cd:e8:46:0d:c5:00:93:36:39:f0:ba:3e:5f:93:2b: c9:7e:aa:52:81:49:37:da:2d:ad:d2:c2:01:16:16:40:d4:0c: 02:46:c4:f0:05:19:b8:01:50:e2:c3:07:a7:f9:b7:9e:be:0e: 04:a6:94:39:5c:7a:06:15:a5:81:5b:c8:74:b8:ca:98:81:e7: 25:e3:56:11:57:55:7e:83:cc:b5:71:02:dd:1b:a0:0f:43:d0: a2:13:eb:b4:ae:6e:7a:d6:d7:5e:0d:98:f6:b3:bc:f8:56:53: 4b:5b:5b:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj8rJtCEC7mt/iy1bSjeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MGE5NjAxZTAyZjgxMjhlZjY0NmY1NTk1MzM2ZTBhNTc5 MTdjYWYwHhcNMjYwMjA5MTgwMDIyWhcNMjYwMjEwMTgwMDIyWjAzMTEwLwYDVQQD EygwMTAxMzU3MDY5ZjI0NGY2NGZlZTc1MTIyM2IzZWIxN2UxYjllNmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1MltD1oR/GzdUis4qUOiitnm8Dr WQuGZVfzgImFj298uQPqJXogBo4W/hcRWUVaOA3ybD2dGw2aN/frWtyjiPfw2A75 RFLZTs9o1+8Ow9SVdf4dZVG7lAebJ99XaTm9qRDdLtYjbvsXlOTfIrOTuyghnwvi a5msY+SoRBnxDO4NJfXhV4dUMVxWvZgnHMtPWbJM1782AVtLugnVS2zJZHC8/4c0 iZMDWyPhlNy78N1LxQ7lNHMR2EZdyyaTPIoweajSVx6ed52dMtJY2NgNJjJ8QW0+ ilUJsYYoB0IM+Wffh+Yb6bi1BwjnmX0z5fLhdyoxMRWR7BI0x8t+Ir6hUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEBNXBp8kT2T+51EiOz6xfhuebuMB8GA1UdIwQY MBaAFDYKlgHgL4Eo72RvVZUzbgpXkXyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jM2NhODYtM2U3Ni00OGM0LTk4YWMt YzJkMDAzNDIyMzVjLzEvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9jM2NhODYtM2U3Ni00OGM0LTk4YWMtYzJkMDAzNDIyMzVj LzEvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEfNfrbL PmvUHGmh2eyqErnFMIQBBC3Vslt4xrtmwARJXqLrFPq6mrVPPo1hge5N6Kg+JiCV ji8R7Q/C2FG+WiuykQH6qiX90JME7g0p89MG4bDLVSBOLyK7Je0rzdMC36PNF998 +1wyFGGj4b7M/Vln70UAnJGa1afAxpANI+nV0m3BV/c8PKsvKFmuQo6/qHQXzehG DcUAkzY58Lo+X5MryX6qUoFJN9otrdLCARYWQNQMAkbE8AUZuAFQ4sMHp/m3nr4O BKaUOVx6BhWlgVvIdLjKmIHnJeNWEVdVfoPMtXEC3RugD0PQohPrtK5uetbXXg2Y 9rO8+FZTS1tbww== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:53 2026 by rpki-client