This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft File: nSBC44DWR2UTrMCPtU-8xzYm7D0.mft (raw, json) Hash identifier: Sp2j899k/J8KaQyJrpP2oWayPOsC52GMNMA0gHgvoJA= Subject key identifier: DD:A1:FB:A9:53:3D:86:A2:2F:92:3D:2D:9A:37:04:80:86:C4:2E:06 Authority key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D Certificate issuer: /CN=9d2042e380d6476513acc08fb54fbcc73626ec3d Certificate serial: 019C427DD22FE5344343E835B126197C0F9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft Manifest number: 033E Signing time: Mon 09 Feb 2026 13:01:07 +0000 Manifest this update: Mon 09 Feb 2026 13:01:07 +0000 Manifest next update: Tue 10 Feb 2026 13:01:07 +0000 Files and hashes: 1: nSBC44DWR2UTrMCPtU-8xzYm7D0.crl (hash: 4AsX4ozqxexsyHeLGXwN47tuXtZWacqxdnBwzuQNx8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:d2:2f:e5:34:43:43:e8:35:b1:26:19:7c:0f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d Validity Not Before: Feb 9 13:01:07 2026 GMT Not After : Feb 10 13:01:07 2026 GMT Subject: CN=dda1fba9533d86a22f923d2d9a37048086c42e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:94:2e:d4:b2:b6:55:bd:ac:66:d1:f2:75:e2: 24:6b:4f:61:e2:53:bc:36:6c:37:2a:97:a9:11:6b: b3:19:57:c1:cb:0c:77:8c:ef:7e:15:66:b5:e1:da: 72:a3:7f:a0:d8:82:a4:0f:94:fe:5e:2f:26:1a:fd: 61:28:d6:c4:06:ff:c1:01:63:60:70:52:c2:2a:c4: 26:c4:de:02:d8:50:b9:33:b0:7d:2a:e8:46:ec:be: 68:0e:14:00:a8:75:46:96:81:17:2d:8e:e7:e9:92: 7f:cb:b4:61:08:4e:60:5a:7e:1b:a5:1b:c6:3a:db: 26:92:1e:06:e2:49:3f:45:40:58:9c:13:85:ed:2a: b4:3b:5a:09:a9:cb:03:24:99:cc:fb:b6:3e:a7:98: 0a:3a:c2:ee:65:a8:2f:b6:31:4c:96:ab:97:fa:c6: d8:f8:6a:0b:f3:69:04:fb:ad:d7:79:10:cf:99:85: 1e:19:11:3f:64:b2:3a:77:95:2e:75:07:f2:04:40: 80:aa:cb:de:04:0e:55:12:3c:f0:d8:21:58:15:bb: 7a:c4:b9:0c:c4:d4:74:85:8a:13:64:30:9c:25:32: 16:6a:45:00:86:4d:98:d7:ed:7e:51:00:53:62:aa: b5:c1:d0:4c:dd:8d:eb:dd:1e:95:09:4d:a1:0a:0f: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A1:FB:A9:53:3D:86:A2:2F:92:3D:2D:9A:37:04:80:86:C4:2E:06 X509v3 Authority Key Identifier: keyid:9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:22:06:33:27:be:df:24:48:78:23:5e:41:cc:b4:bf:d5:22: 2b:3e:0f:97:22:aa:e7:88:88:74:d2:0b:02:d6:f4:c1:a7:fd: 9f:0b:4d:ef:07:83:61:f9:ef:3f:40:c6:61:c3:9d:90:1b:5a: 21:67:cd:d6:80:9e:7b:a0:7e:15:3a:3d:74:2a:b9:8e:ca:f7: 7e:4b:1e:59:ed:59:b8:8b:62:06:9d:4a:75:0a:04:99:82:e2: cf:97:a9:35:7b:36:39:c9:6f:ab:cf:a9:cc:c0:f1:1d:81:ba: b6:d2:c4:5a:68:ff:fe:b3:fd:95:a5:8c:f7:50:8f:68:27:da: 37:4f:e2:a1:c7:df:ff:6a:09:92:db:8b:ac:38:4b:e4:aa:bb: 0c:c1:b5:ba:c0:f6:35:2e:c4:f8:46:38:ae:48:b9:f9:32:d2: 1b:4c:e1:ed:d5:a0:86:aa:fd:38:f0:b9:f4:70:80:bc:09:b8: 7e:e8:5b:b4:89:5f:e1:cb:56:70:7f:bc:20:84:9f:ef:06:46: a5:c4:ff:01:90:53:18:f1:b6:5d:0a:52:b4:7d:8f:6a:db:e4: 7f:26:6f:9e:01:d9:28:8e:27:18:f4:61:26:ab:ff:81:0a:89: 43:cc:5c:9a:ee:bb:9c:b6:f1:85:66:56:90:71:64:b9:d4:7c: 70:96:67:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdIv5TRDQ+g1sSYZfA+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjA0MmUzODBkNjQ3NjUxM2FjYzA4ZmI1NGZiY2M3MzYy NmVjM2QwHhcNMjYwMjA5MTMwMTA3WhcNMjYwMjEwMTMwMTA3WjAzMTEwLwYDVQQD EyhkZGExZmJhOTUzM2Q4NmEyMmY5MjNkMmQ5YTM3MDQ4MDg2YzQyZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Qu1LK2Vb2sZtHydeIka09h4lO8 Nmw3KpepEWuzGVfBywx3jO9+FWa14dpyo3+g2IKkD5T+Xi8mGv1hKNbEBv/BAWNg cFLCKsQmxN4C2FC5M7B9KuhG7L5oDhQAqHVGloEXLY7n6ZJ/y7RhCE5gWn4bpRvG Otsmkh4G4kk/RUBYnBOF7Sq0O1oJqcsDJJnM+7Y+p5gKOsLuZagvtjFMlquX+sbY +GoL82kE+63XeRDPmYUeGRE/ZLI6d5UudQfyBECAqsveBA5VEjzw2CFYFbt6xLkM xNR0hYoTZDCcJTIWakUAhk2Y1+1+UQBTYqq1wdBM3Y3r3R6VCU2hCg/PFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2h+6lTPYaiL5I9LZo3BICGxC4GMB8GA1UdIwQY MBaAFJ0gQuOA1kdlE6zAj7VPvMc2Juw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMDI3MTYtYTI1Ny00NTY4LWJmMDct ZGVkMzg2MmI3NjMxLzEvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8wMDI3MTYtYTI1Ny00NTY4LWJmMDctZGVkMzg2MmI3NjMx LzEvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCIGMye+ 3yRIeCNeQcy0v9UiKz4PlyKq54iIdNILAtb0waf9nwtN7weDYfnvP0DGYcOdkBta IWfN1oCee6B+FTo9dCq5jsr3fkseWe1ZuItiBp1KdQoEmYLiz5epNXs2Oclvq8+p zMDxHYG6ttLEWmj//rP9laWM91CPaCfaN0/iocff/2oJktuLrDhL5Kq7DMG1usD2 NS7E+EY4rki5+TLSG0zh7dWghqr9OPC59HCAvAm4fuhbtIlf4ctWcH+8IISf7wZG pcT/AZBTGPG2XQpStH2PatvkfyZvngHZKI4nGPRhJqv/gQqJQ8xcmu67nLbxhWZW kHFkudR8cJZneQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:26 2026 by rpki-client