This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft File: npNqlnzlH9NBCUdGmWvO8WrL764.mft (raw, json) Hash identifier: xEflQ6x8+Y12POvBmIELdQ3xw1XrjZSHHzwgBF3abO0= Subject key identifier: 66:0F:47:AD:C1:B9:B3:4E:60:7D:5F:03:11:D6:17:FC:54:05:A4:A8 Authority key identifier: 9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE Certificate issuer: /CN=9e936a967ce51fd341094746996bcef16acbefae Certificate serial: 019C4321EA9D79ACE6306476B0E43E62550C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft Manifest number: 0ED6 Signing time: Mon 09 Feb 2026 16:00:22 +0000 Manifest this update: Mon 09 Feb 2026 16:00:22 +0000 Manifest next update: Tue 10 Feb 2026 16:00:22 +0000 Files and hashes: 1: npNqlnzlH9NBCUdGmWvO8WrL764.crl (hash: Yhjys8QjRHJUR8O6ec4GEAlG2XzpxOT/3d6BHGgaa1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:ea:9d:79:ac:e6:30:64:76:b0:e4:3e:62:55:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e936a967ce51fd341094746996bcef16acbefae Validity Not Before: Feb 9 16:00:22 2026 GMT Not After : Feb 10 16:00:22 2026 GMT Subject: CN=660f47adc1b9b34e607d5f0311d617fc5405a4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:c9:5d:46:00:84:b3:00:fb:f3:02:c9:4d: ac:4d:65:09:3f:50:47:49:93:cb:54:b3:17:e1:59: d7:56:01:b5:20:94:cb:2a:2b:e5:85:03:0c:79:84: 61:62:75:50:68:2a:0b:3b:d6:0e:99:19:79:0d:f2: 6f:61:2d:85:37:a3:c6:67:10:c6:bb:61:40:f3:80: be:2c:a3:a1:9a:e5:85:91:b0:d0:69:9c:b4:a7:7a: e6:33:e5:d5:80:93:75:ff:be:c8:4d:3b:af:5a:a5: d2:b3:21:04:a1:ce:45:5b:63:a1:30:f5:70:5d:5a: b5:18:2d:93:28:92:89:f8:7a:12:1b:49:98:24:44: 50:00:c6:82:7d:0a:44:3c:b3:e3:73:fb:b5:02:9f: b8:86:1c:2c:b9:ae:fb:88:7f:18:b1:da:78:71:b0: c0:ba:08:db:35:41:ad:89:2f:f8:3a:d4:87:db:1a: 9f:2a:8f:28:11:8e:e7:79:42:ee:7f:30:6e:e8:6e: 35:6e:c3:e2:79:d9:03:c7:f6:12:fc:50:29:f9:de: 6b:9a:47:bb:13:30:be:44:9e:b1:8d:6a:9d:c5:3a: 33:76:44:b4:fb:40:da:6e:47:97:ae:0b:57:5e:0e: 40:1d:14:6a:c4:5f:8d:9f:3b:a2:66:2e:5d:81:a7: 0b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0F:47:AD:C1:B9:B3:4E:60:7D:5F:03:11:D6:17:FC:54:05:A4:A8 X509v3 Authority Key Identifier: keyid:9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:11:b0:b7:79:91:be:6f:7e:e7:59:a8:69:67:3b:c9:13:34: bb:ec:9c:55:ad:0a:19:b2:f1:2b:dd:60:cc:42:33:21:02:5b: 56:d2:69:09:99:25:6f:86:17:db:a6:97:75:3c:98:0c:70:04: 6a:a8:d6:ed:b8:f2:a5:f2:33:1d:35:16:d3:48:a8:c9:24:3e: 50:38:16:55:0f:b6:6f:2a:bc:ee:6c:67:f5:a4:a7:d4:0f:c4: 0b:0b:2f:fb:c0:79:04:64:df:f7:4f:4c:fe:bf:da:52:eb:12: 0b:74:73:9f:b8:26:f5:99:4e:f1:a3:a7:6d:13:10:fb:57:45: c4:e5:47:09:d5:77:dc:fa:18:28:52:e6:3d:db:6c:3a:85:61: 8b:72:c8:da:09:de:58:c8:34:a9:27:11:6a:3f:cc:e8:e4:ce: db:3d:98:d3:92:ed:7e:25:f1:4a:7f:8a:34:12:7d:40:c6:63: 1d:69:ee:89:02:57:d3:6d:27:42:92:70:a1:07:3a:bf:fc:3c: 76:70:63:7d:c3:9c:c3:16:5f:42:f5:f7:ad:71:4d:75:b5:97: de:04:35:b4:66:e2:50:15:a5:54:5b:59:ba:14:04:bf:bf:89: 7c:22:e0:7b:ba:98:c0:8a:89:74:06:5d:7c:50:20:e9:5b:c1: 8c:05:75:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIeqdeazmMGR2sOQ+YlUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTM2YTk2N2NlNTFmZDM0MTA5NDc0Njk5NmJjZWYxNmFj YmVmYWUwHhcNMjYwMjA5MTYwMDIyWhcNMjYwMjEwMTYwMDIyWjAzMTEwLwYDVQQD Eyg2NjBmNDdhZGMxYjliMzRlNjA3ZDVmMDMxMWQ2MTdmYzU0MDVhNGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkXJXUYAhLMA+/MCyU2sTWUJP1BH SZPLVLMX4VnXVgG1IJTLKivlhQMMeYRhYnVQaCoLO9YOmRl5DfJvYS2FN6PGZxDG u2FA84C+LKOhmuWFkbDQaZy0p3rmM+XVgJN1/77ITTuvWqXSsyEEoc5FW2OhMPVw XVq1GC2TKJKJ+HoSG0mYJERQAMaCfQpEPLPjc/u1Ap+4hhwsua77iH8Ysdp4cbDA ugjbNUGtiS/4OtSH2xqfKo8oEY7neULufzBu6G41bsPiedkDx/YS/FAp+d5rmke7 EzC+RJ6xjWqdxTozdkS0+0DabkeXrgtXXg5AHRRqxF+NnzuiZi5dgacLOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYPR63BubNOYH1fAxHWF/xUBaSoMB8GA1UdIwQY MBaAFJ6TapZ85R/TQQlHRplrzvFqy++uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kMjVlZDAtZmRkYy00YjI4LWI0N2Mt MzM2MGNkZWRiMzVmLzEvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kMjVlZDAtZmRkYy00YjI4LWI0N2MtMzM2MGNkZWRiMzVm LzEvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhGwt3mR vm9+51moaWc7yRM0u+ycVa0KGbLxK91gzEIzIQJbVtJpCZklb4YX26aXdTyYDHAE aqjW7bjypfIzHTUW00ioySQ+UDgWVQ+2byq87mxn9aSn1A/ECwsv+8B5BGTf909M /r/aUusSC3Rzn7gm9ZlO8aOnbRMQ+1dFxOVHCdV33PoYKFLmPdtsOoVhi3LI2gne WMg0qScRaj/M6OTO2z2Y05LtfiXxSn+KNBJ9QMZjHWnuiQJX020nQpJwoQc6v/w8 dnBjfcOcwxZfQvX3rXFNdbWX3gQ1tGbiUBWlVFtZuhQEv7+JfCLge7qYwIqJdAZd fFAg6VvBjAV1tQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:59:25 2026 by rpki-client