This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft File: ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft (raw, json) Hash identifier: IJ6yFpVxc5kx4tO4pyaEYW9xQO/I0OBgxcGLt/aOysw= Subject key identifier: 7F:94:99:A6:9A:76:05:A3:0C:B0:F6:17:D8:7F:48:11:D2:D2:68:0F Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3 Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3 Certificate serial: 019C4133F1AA5D26738957B67EC9D6607AA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft Manifest number: 02F5 Signing time: Mon 09 Feb 2026 07:00:49 +0000 Manifest this update: Mon 09 Feb 2026 07:00:49 +0000 Manifest next update: Tue 10 Feb 2026 07:00:49 +0000 Files and hashes: 1: ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl (hash: ir5M8x5UAFQZMP1ct2E4aRKQ259DQ4NfVA5Jq734M1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:f1:aa:5d:26:73:89:57:b6:7e:c9:d6:60:7a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3 Validity Not Before: Feb 9 07:00:49 2026 GMT Not After : Feb 10 07:00:49 2026 GMT Subject: CN=7f9499a69a7605a30cb0f617d87f4811d2d2680f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:36:ec:09:30:61:24:00:46:2b:a2:6b:f4: e3:5f:a7:a6:06:f5:53:10:7e:bf:0b:4d:d2:9d:13: d1:19:22:de:ad:72:55:76:2a:5f:21:d6:c4:54:3b: 9a:88:5e:30:8f:ac:17:95:0e:d0:8c:45:d7:74:0a: d4:dc:1f:74:6b:9e:82:ff:76:d2:c2:6b:23:6a:6c: 46:b0:3c:ae:62:fb:96:cb:fc:29:be:07:49:96:fd: 09:7e:86:65:06:7b:2c:6c:41:31:5d:5c:03:a6:6d: bd:4e:86:d1:5a:4a:13:55:fa:a8:bd:fb:e5:a1:18: 83:cd:4f:16:0b:0d:c2:a3:76:64:9b:fd:d4:cd:1a: 84:b3:78:6a:8e:97:7b:f6:9f:c9:ce:1b:18:92:0d: 2b:be:6b:ce:d5:6e:16:ee:4b:3b:c4:fe:26:f9:93: c8:ce:44:a4:54:ff:7f:8d:c5:84:43:b9:2c:00:a0: a7:1e:8b:1e:7b:02:df:e3:f9:cd:52:5f:9b:5a:c9: 1f:e3:b3:c0:77:69:7f:9d:e0:78:ce:67:ad:ed:43: 7e:c5:f0:30:d0:dd:61:2a:61:67:26:46:db:eb:92: c9:1b:bf:98:61:af:7c:f8:ee:02:8b:e7:16:20:6b: 14:7c:9f:4e:ef:2d:25:f0:07:8d:dc:64:af:50:b7: 29:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:94:99:A6:9A:76:05:A3:0C:B0:F6:17:D8:7F:48:11:D2:D2:68:0F X509v3 Authority Key Identifier: keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:cb:d0:46:55:45:b8:26:d1:35:7a:e0:c2:f2:00:cf:21:34: 95:06:2c:76:b2:97:ca:6e:f1:d6:12:30:78:bb:fd:f0:69:c9: 30:e5:72:23:59:db:ea:87:07:62:5f:d6:6c:79:84:be:81:72: 12:77:1c:a9:ae:df:ed:a8:a8:30:1b:d5:fd:8b:ef:22:6b:64: 17:a2:75:36:b1:5c:a9:50:be:38:57:8f:98:9d:46:5a:0a:01: b4:fb:aa:50:f1:40:f5:12:ce:15:24:85:17:b2:a9:96:6b:c0: 1b:9d:dd:b5:53:a7:f7:20:2b:db:df:ab:b0:43:85:be:a2:8a: 6a:e6:70:34:5d:81:ca:b3:c0:07:c4:ab:70:7c:cc:60:09:01: 27:45:37:83:3c:2b:bf:44:b1:55:bf:3d:68:0c:0d:f8:eb:b1: 6d:bc:fd:20:41:0d:fb:9a:c8:7a:5f:ee:7f:55:21:c5:94:df: e9:6a:0a:f3:7f:ff:1e:42:af:41:fb:13:25:a8:d0:e8:ab:20: b8:9d:2c:12:83:4e:e6:33:19:1f:7d:83:01:a6:0d:30:ef:fb: c3:73:3d:94:31:d1:3b:f0:2b:46:24:62:93:2a:8e:cd:70:69: 39:c7:b9:0d:3a:69:4c:1b:32:4b:b5:0a:64:bc:f4:3c:38:62: 3a:1a:d6:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM/GqXSZziVe2fsnWYHqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDdlN2MzNzJhOWRiMDkzMzJjNDc5YzcyOTFiODYyOTcy MWFmZTMwHhcNMjYwMjA5MDcwMDQ5WhcNMjYwMjEwMDcwMDQ5WjAzMTEwLwYDVQQD Eyg3Zjk0OTlhNjlhNzYwNWEzMGNiMGY2MTdkODdmNDgxMWQyZDI2ODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYI27AkwYSQARiuia/TjX6emBvVT EH6/C03SnRPRGSLerXJVdipfIdbEVDuaiF4wj6wXlQ7QjEXXdArU3B90a56C/3bS wmsjamxGsDyuYvuWy/wpvgdJlv0JfoZlBnssbEExXVwDpm29TobRWkoTVfqovfvl oRiDzU8WCw3Co3Zkm/3UzRqEs3hqjpd79p/JzhsYkg0rvmvO1W4W7ks7xP4m+ZPI zkSkVP9/jcWEQ7ksAKCnHoseewLf4/nNUl+bWskf47PAd2l/neB4zmet7UN+xfAw 0N1hKmFnJkbb65LJG7+YYa98+O4Ci+cWIGsUfJ9O7y0l8AeN3GSvULcp7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+UmaaadgWjDLD2F9h/SBHS0mgPMB8GA1UdIwQY MBaAFJ4H58NyqdsJMyxHnHKRuGKXIa/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hMTU2ZTYtMWU0MS00MDRhLTk2ODgt NTdiNDBmY2VkODI5LzEvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9hMTU2ZTYtMWU0MS00MDRhLTk2ODgtNTdiNDBmY2VkODI5 LzEvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMvQRlVF uCbRNXrgwvIAzyE0lQYsdrKXym7x1hIweLv98GnJMOVyI1nb6ocHYl/WbHmEvoFy Enccqa7f7aioMBvV/YvvImtkF6J1NrFcqVC+OFePmJ1GWgoBtPuqUPFA9RLOFSSF F7KplmvAG53dtVOn9yAr29+rsEOFvqKKauZwNF2ByrPAB8SrcHzMYAkBJ0U3gzwr v0SxVb89aAwN+Ouxbbz9IEEN+5rIel/uf1UhxZTf6WoK83//HkKvQfsTJajQ6Ksg uJ0sEoNO5jMZH32DAaYNMO/7w3M9lDHRO/ArRiRikyqOzXBpOce5DTppTBsyS7UK ZLz0PDhiOhrW4w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:19 2026 by rpki-client