This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json) Hash identifier: CEHQDY2f7712MPyXt4U05xhTfJWgi/0REzxQB6Uy2NE= Subject key identifier: E7:EF:28:24:07:48:9B:98:AC:EA:35:69:2C:DB:37:8A:49:9A:BE:A8 Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43 Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43 Certificate serial: 019C43C6D5748DFB96BAA1C92CEFE04C9939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft Manifest number: 0421 Signing time: Mon 09 Feb 2026 19:00:30 +0000 Manifest this update: Mon 09 Feb 2026 19:00:30 +0000 Manifest next update: Tue 10 Feb 2026 19:00:30 +0000 Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: rOmsa8WDOGXhRmwljd+aESYMAiekTObyafIubsQzlbI=) 2: m4zjp-MwBLgtIcU6CL_nM9jmHXA.roa (hash: JyQkpr8DHxnP4GkQcPbRn8ESMBpHk6iJejQz7SBKaYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:d5:74:8d:fb:96:ba:a1:c9:2c:ef:e0:4c:99:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43 Validity Not Before: Feb 9 19:00:30 2026 GMT Not After : Feb 10 19:00:30 2026 GMT Subject: CN=e7ef282407489b98acea35692cdb378a499abea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:90:42:fb:12:5a:de:dc:06:79:44:e6:79: 17:54:9a:d0:08:e1:d6:0f:94:44:b9:75:03:d3:3f: ba:37:25:b0:7c:6b:14:cd:c4:8e:b7:7a:9b:e3:1d: fa:89:2b:c7:12:b6:8a:49:d1:cc:95:23:b0:67:78: cf:99:c5:7c:a3:8f:72:3f:41:84:f1:79:f6:a7:76: cd:03:8f:3d:6e:9c:15:c9:0c:85:a2:b7:03:6a:43: e8:a9:49:e7:a0:6c:dc:dc:96:4b:b0:84:b1:b6:63: 32:c1:80:33:eb:54:e8:42:a2:1e:aa:53:d8:4b:8e: 9b:da:c7:e2:93:47:2e:ad:f1:0c:67:98:94:3d:10: af:f9:7b:fd:42:a8:67:7a:1d:67:9c:b9:63:3a:e7: 7e:d2:01:90:22:e3:2b:da:48:fb:78:70:10:57:f6: 53:fa:ab:fe:b8:e9:68:c8:de:df:e0:b3:2e:6a:87: 67:e1:46:35:57:ea:f0:67:e4:b7:8b:d5:89:87:df: ac:8c:2d:7f:ee:61:8f:47:18:66:15:3d:27:39:07: 2b:15:38:f0:01:f2:76:f7:fc:53:88:3a:9d:72:e6: 6f:c6:1e:e7:d1:24:10:8d:23:03:1e:0e:be:36:f9: 66:50:ba:5c:8f:d9:f2:d6:9d:01:4d:5d:f3:03:ea: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EF:28:24:07:48:9B:98:AC:EA:35:69:2C:DB:37:8A:49:9A:BE:A8 X509v3 Authority Key Identifier: keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7b:f7:fa:6c:6f:3d:9b:91:c4:0b:80:c8:62:e6:ac:25:70: d1:50:84:c0:01:18:48:9f:02:02:8f:1f:a6:71:14:94:cc:c9: a7:2a:ec:7a:4f:dd:13:d7:e5:08:f5:0b:8b:df:b6:87:a5:c0: 03:8e:f0:4e:6d:b6:3d:45:ed:66:0f:49:35:22:7a:38:61:95: 97:3d:39:71:c4:0d:71:c5:cf:be:db:d0:28:f0:8c:0a:d0:9c: 14:18:d7:bc:a7:03:5d:27:bf:26:80:d1:e4:e3:89:a0:36:e0: ac:ee:d3:73:fc:69:ec:73:b3:58:ce:7e:7a:4b:f5:c9:58:af: 02:93:44:03:77:d4:6a:07:91:8d:c6:30:83:e7:e0:7d:b8:d2: 16:9b:0c:1f:d1:26:4b:db:6b:be:e3:37:10:1a:df:06:e1:ea: b1:8d:14:47:a6:2d:b9:af:06:16:94:8d:fc:ab:40:3e:5d:fc: 88:2e:83:b9:ca:3e:9a:39:dc:2d:04:15:87:e3:99:f0:12:4c: b3:e7:53:0e:91:09:44:65:ab:7d:d7:ec:0b:46:d6:4c:7d:b7: a6:d5:59:72:d5:51:26:f8:0e:f7:7a:55:51:48:08:28:83:1f: 1f:72:59:77:8b:77:c8:28:e3:6f:d7:3c:a2:d8:15:9e:94:fb: 3b:84:76:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxtV0jfuWuqHJLO/gTJk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YmUyYWE5YjRmYmY5MDcxNWViY2M5MDUzNGY5ZDJkNTRm N2RhNDMwHhcNMjYwMjA5MTkwMDMwWhcNMjYwMjEwMTkwMDMwWjAzMTEwLwYDVQQD EyhlN2VmMjgyNDA3NDg5Yjk4YWNlYTM1NjkyY2RiMzc4YTQ5OWFiZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbyQQvsSWt7cBnlE5nkXVJrQCOHW D5REuXUD0z+6NyWwfGsUzcSOt3qb4x36iSvHEraKSdHMlSOwZ3jPmcV8o49yP0GE 8Xn2p3bNA489bpwVyQyForcDakPoqUnnoGzc3JZLsISxtmMywYAz61ToQqIeqlPY S46b2sfik0curfEMZ5iUPRCv+Xv9Qqhneh1nnLljOud+0gGQIuMr2kj7eHAQV/ZT +qv+uOloyN7f4LMuaodn4UY1V+rwZ+S3i9WJh9+sjC1/7mGPRxhmFT0nOQcrFTjw AfJ29/xTiDqdcuZvxh7n0SQQjSMDHg6+NvlmULpcj9ny1p0BTV3zA+pG3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfvKCQHSJuYrOo1aSzbN4pJmr6oMB8GA1UdIwQY MBaAFDW+Kqm0+/kHFevMkFNPnS1U99pDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85YTk5NTgtMDlkMC00YTI4LWFlODgt Y2I5ZjA0YzFlMTU0LzEvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni85YTk5NTgtMDlkMC00YTI4LWFlODgtY2I5ZjA0YzFlMTU0 LzEvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXv3+mxv PZuRxAuAyGLmrCVw0VCEwAEYSJ8CAo8fpnEUlMzJpyrsek/dE9flCPULi9+2h6XA A47wTm22PUXtZg9JNSJ6OGGVlz05ccQNccXPvtvQKPCMCtCcFBjXvKcDXSe/JoDR 5OOJoDbgrO7Tc/xp7HOzWM5+ekv1yVivApNEA3fUageRjcYwg+fgfbjSFpsMH9Em S9trvuM3EBrfBuHqsY0UR6Ytua8GFpSN/KtAPl38iC6Duco+mjncLQQVh+OZ8BJM s+dTDpEJRGWrfdfsC0bWTH23ptVZctVRJvgO93pVUUgIKIMfH3JZd4t3yCjjb9c8 otgVnpT7O4R22A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:20 2026 by rpki-client