This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json) Hash identifier: /l//TxPKyCATzs+r5mQ0Nr+Su11wxeWc+CPLsAiCiPY= Subject key identifier: 01:D9:8A:92:3E:DF:DE:BC:46:0E:56:FA:9A:C3:B9:F3:7D:ED:B0:8B Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef Certificate serial: 019C435963E3179BE324F5AEE0809F339D7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 17:00:57 +0000 Manifest this update: Mon 09 Feb 2026 17:00:57 +0000 Manifest next update: Tue 10 Feb 2026 17:00:57 +0000 Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: jUAoM9KQn1bXzpB1b3NqxksdYbDkBokaFqjG4rzIfVU=) 2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:63:e3:17:9b:e3:24:f5:ae:e0:80:9f:33:9d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef Validity Not Before: Feb 9 17:00:57 2026 GMT Not After : Feb 10 17:00:57 2026 GMT Subject: CN=01d98a923edfdebc460e56fa9ac3b9f37dedb08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:ac:6c:27:e1:f5:e1:73:1b:fb:77:a4:00: 78:68:70:32:ad:aa:f1:95:ab:50:72:66:bf:82:c2: a2:6a:3d:75:0d:71:fc:12:6e:35:57:73:c0:32:ca: 96:7b:91:80:bb:51:44:8a:cf:53:e1:e7:d9:8f:4e: 3b:85:45:93:df:54:1a:b1:0d:ac:fc:6c:a0:05:51: 72:89:41:66:63:8b:69:f3:a1:86:e1:95:19:30:36: d5:39:51:12:ba:df:53:c2:2d:2a:d4:6b:11:5d:01: cb:d9:7a:98:5e:fa:bf:c2:79:92:04:8c:9b:6e:58: 40:ee:19:11:1a:c2:f3:ce:de:ad:f4:6b:63:0e:60: 83:06:40:f8:25:4e:ea:a7:1d:08:36:b8:4f:49:42: 80:61:09:b3:7a:1b:6b:f5:6b:f3:62:dd:22:2a:8b: 98:fc:e6:93:8a:54:ba:cc:2d:e1:8f:76:92:a5:6c: fa:3d:dd:60:57:c2:10:03:ed:76:be:69:d2:71:f6: f0:98:cc:aa:0c:a5:c4:f2:86:ac:87:b4:29:83:17: e5:e3:98:28:26:a0:92:3d:c8:58:72:01:4c:18:54: 39:69:6f:8a:33:dd:d0:c4:2e:7c:79:a6:b1:70:cc: 66:4b:4a:19:25:b6:57:68:c6:f2:ab:b2:a4:1a:a6: f2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D9:8A:92:3E:DF:DE:BC:46:0E:56:FA:9A:C3:B9:F3:7D:ED:B0:8B X509v3 Authority Key Identifier: keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cd:89:37:51:af:ff:77:ff:28:7f:f9:31:46:37:b7:8f:1c: ff:60:d3:49:c9:ca:04:dd:e5:3f:5a:f1:c0:68:52:a2:25:ba: 65:95:db:9c:d4:20:44:52:8b:29:47:dc:b1:1a:91:86:0b:73: 50:e6:5d:bd:82:05:7f:11:cd:b4:3b:78:34:07:ec:cd:19:00: fc:77:5a:08:35:49:a4:64:6e:8e:cf:6e:31:33:33:6e:a3:e9: c2:46:ed:e0:5e:99:14:50:3e:d9:1a:6d:55:95:6e:b0:85:46: 0b:40:55:a6:f1:83:82:4b:c4:30:cf:b1:b8:7a:69:1b:65:1b: 9a:1d:82:4b:fd:6e:cf:ab:c4:52:f9:24:7a:86:cb:c3:ea:12: 63:fc:48:ee:d1:76:12:99:54:d2:55:20:42:a5:b0:7f:c9:f5: 06:53:1d:bb:d7:ed:ab:0c:4a:b9:73:de:28:80:90:dc:12:16: 55:68:7a:82:07:f4:17:77:0d:23:c7:5b:3d:c7:46:f5:01:4d: 04:41:a9:7d:ea:b1:4d:95:97:d9:ee:47:27:2d:18:79:29:ca: 38:b1:74:e6:95:a1:64:df:94:79:68:5c:9f:d6:7f:fe:ad:67: 5d:bd:62:ad:8f:1a:82:0f:95:1f:98:a2:70:9e:cf:c9:1f:6e: 65:77:6f:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWWPjF5vjJPWu4ICfM519MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NDcxOGQxMzVhMDliYjUyNDcwNmI0MjU5Y2FiY2M2MjZl NTE0ZWYwHhcNMjYwMjA5MTcwMDU3WhcNMjYwMjEwMTcwMDU3WjAzMTEwLwYDVQQD EygwMWQ5OGE5MjNlZGZkZWJjNDYwZTU2ZmE5YWMzYjlmMzdkZWRiMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTesbCfh9eFzG/t3pAB4aHAyrarx latQcma/gsKiaj11DXH8Em41V3PAMsqWe5GAu1FEis9T4efZj047hUWT31QasQ2s /GygBVFyiUFmY4tp86GG4ZUZMDbVOVESut9Twi0q1GsRXQHL2XqYXvq/wnmSBIyb blhA7hkRGsLzzt6t9GtjDmCDBkD4JU7qpx0INrhPSUKAYQmzehtr9WvzYt0iKouY /OaTilS6zC3hj3aSpWz6Pd1gV8IQA+12vmnScfbwmMyqDKXE8oash7Qpgxfl45go JqCSPchYcgFMGFQ5aW+KM93QxC58eaaxcMxmS0oZJbZXaMbyq7KkGqby9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHZipI+3968Rg5W+prDufN97bCLMB8GA1UdIwQY MBaAFDRHGNE1oJu1JHBrQlnKvMYm5RTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEt NWQzM2UxOGE2OWEwLzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEtNWQzM2UxOGE2OWEw LzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfM2JN1Gv /3f/KH/5MUY3t48c/2DTScnKBN3lP1rxwGhSoiW6ZZXbnNQgRFKLKUfcsRqRhgtz UOZdvYIFfxHNtDt4NAfszRkA/HdaCDVJpGRujs9uMTMzbqPpwkbt4F6ZFFA+2Rpt VZVusIVGC0BVpvGDgkvEMM+xuHppG2Ubmh2CS/1uz6vEUvkkeobLw+oSY/xI7tF2 EplU0lUgQqWwf8n1BlMdu9ftqwxKuXPeKICQ3BIWVWh6ggf0F3cNI8dbPcdG9QFN BEGpfeqxTZWX2e5HJy0YeSnKOLF05pWhZN+UeWhcn9Z//q1nXb1irY8agg+VH5ii cJ7PyR9uZXdvfA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:37 2026 by rpki-client