This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json) Hash identifier: IBZqONroHC0IOiDTfhlf3+U0qW+HtyrMtqII3XwD67s= Subject key identifier: D7:E1:4F:B7:73:37:D2:CC:BB:B0:5C:E0:CD:C2:02:16:CD:F9:06:95 Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46 Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046 Certificate serial: 019C41A154A77A516CBF4365315F2E672751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 09:00:17 +0000 Manifest this update: Mon 09 Feb 2026 09:00:17 +0000 Manifest next update: Tue 10 Feb 2026 09:00:17 +0000 Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: oT8xmRThtWr3/aRQWwYsGChgcIJN/mO54V4ulPN4xaM=) 2: t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa (hash: a0O/Q/ykMMVF0x4s18Lt51/lK7kz7CmF4jPcpVsCuhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:54:a7:7a:51:6c:bf:43:65:31:5f:2e:67:27:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046 Validity Not Before: Feb 9 09:00:17 2026 GMT Not After : Feb 10 09:00:17 2026 GMT Subject: CN=d7e14fb77337d2ccbbb05ce0cdc20216cdf90695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:9c:67:dd:74:03:a1:ee:ef:24:de:51:ed: 8d:41:55:8b:41:78:a9:a0:ee:73:34:3b:08:a2:7d: 41:d0:28:7c:2d:e8:a7:f7:35:94:63:60:52:1a:bd: 27:ac:67:ed:99:29:ff:c8:22:44:8c:78:ce:14:64: 74:fd:4e:70:02:65:d2:8e:76:03:f8:f2:da:8d:6a: 43:1a:46:12:83:b4:cc:c1:23:bf:af:76:0f:9a:95: 5e:2f:14:14:f6:df:f7:4c:c6:95:55:86:25:de:b3: d9:66:9d:ba:a1:8e:ec:dc:3b:e6:a5:85:57:5e:79: a4:8c:9d:72:5d:7f:4d:57:86:60:88:ec:c7:1a:e6: 14:fe:07:8a:40:e9:fb:d4:2d:e3:cb:6c:8f:9f:71: 1d:f6:92:b4:3d:4c:2b:7a:91:25:22:18:10:f9:b1: 71:4e:64:6b:0f:80:d1:52:a1:e4:b7:55:83:cf:36: 2b:7c:ea:9c:d6:2a:cb:e0:b7:68:84:69:8c:8c:ca: 28:6a:06:68:27:0e:c8:86:c0:e2:b4:13:fa:77:c9: d5:97:6a:35:1d:4e:34:f7:fc:be:e2:d8:2e:79:0d: b8:7e:46:74:7e:d3:9f:5d:3b:35:c8:ee:89:e7:b9: 28:ac:10:07:04:c2:ba:90:ab:78:93:a4:24:cb:c6: ff:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E1:4F:B7:73:37:D2:CC:BB:B0:5C:E0:CD:C2:02:16:CD:F9:06:95 X509v3 Authority Key Identifier: keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c3:a5:b7:f0:a7:ad:ef:58:b1:fc:1b:86:b0:dc:9e:42:55: ca:68:0e:14:87:38:15:45:9a:84:da:1c:dc:e6:7c:3e:aa:cc: df:a4:12:ab:0b:13:0c:9d:c2:e1:1a:09:63:3a:a0:68:02:6a: 69:ed:d7:ac:23:0f:57:82:c6:56:b5:7a:07:84:9d:63:5b:45: f5:f3:1a:97:5c:69:4c:71:d2:4d:13:37:56:89:6e:93:d2:9a: 0a:9d:09:5a:74:3c:26:68:ed:36:72:64:7d:af:8d:5b:f8:e1: c4:45:4b:e2:48:45:68:87:31:22:dc:59:51:b2:c4:dd:8e:71: 04:02:4e:c7:77:ec:33:21:3f:7c:9b:ee:cf:d5:cd:db:a5:67: a9:4e:2e:a8:3d:42:34:64:6a:d6:63:6d:7a:16:62:eb:5e:81: 03:a1:37:c2:07:f4:9f:69:a7:a9:c9:3c:55:52:c7:f6:e4:a4: f2:ba:e3:f8:b5:76:48:56:0a:05:8c:69:d2:76:ce:8d:6e:b4: 3e:91:a6:ce:a1:a8:f2:4e:2e:59:d6:06:a1:f7:91:24:d2:0f: ec:15:3b:3f:7e:b2:2e:1c:7b:e2:a6:6d:f1:45:72:df:68:6c: ad:ae:ec:74:03:e5:dd:cc:ed:f4:65:ba:cf:d8:69:39:86:1c: 7e:e7:45:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoVSnelFsv0NlMV8uZydRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzJiYTFjNmQwYjAyYmVmZTY4Y2M5NGFlOWQyZGUzMTA3 YTYwNDYwHhcNMjYwMjA5MDkwMDE3WhcNMjYwMjEwMDkwMDE3WjAzMTEwLwYDVQQD EyhkN2UxNGZiNzczMzdkMmNjYmJiMDVjZTBjZGMyMDIxNmNkZjkwNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaWcZ910A6Hu7yTeUe2NQVWLQXip oO5zNDsIon1B0Ch8Lein9zWUY2BSGr0nrGftmSn/yCJEjHjOFGR0/U5wAmXSjnYD +PLajWpDGkYSg7TMwSO/r3YPmpVeLxQU9t/3TMaVVYYl3rPZZp26oY7s3DvmpYVX XnmkjJ1yXX9NV4ZgiOzHGuYU/geKQOn71C3jy2yPn3Ed9pK0PUwrepElIhgQ+bFx TmRrD4DRUqHkt1WDzzYrfOqc1irL4LdohGmMjMooagZoJw7IhsDitBP6d8nVl2o1 HU409/y+4tgueQ24fkZ0ftOfXTs1yO6J57korBAHBMK6kKt4k6Qky8b/2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfhT7dzN9LMu7Bc4M3CAhbN+QaVMB8GA1UdIwQY MBaAFDQyuhxtCwK+/mjMlK6dLeMQemBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgt MjdiODdiZmJlZTdiLzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgtMjdiODdiZmJlZTdi LzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcOlt/Cn re9YsfwbhrDcnkJVymgOFIc4FUWahNoc3OZ8PqrM36QSqwsTDJ3C4RoJYzqgaAJq ae3XrCMPV4LGVrV6B4SdY1tF9fMal1xpTHHSTRM3Voluk9KaCp0JWnQ8JmjtNnJk fa+NW/jhxEVL4khFaIcxItxZUbLE3Y5xBAJOx3fsMyE/fJvuz9XN26VnqU4uqD1C NGRq1mNtehZi616BA6E3wgf0n2mnqck8VVLH9uSk8rrj+LV2SFYKBYxp0nbOjW60 PpGmzqGo8k4uWdYGofeRJNIP7BU7P36yLhx74qZt8UVy32hsra7sdAPl3czt9GW6 z9hpOYYcfudFkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:40 2026 by rpki-client