This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft File: nskNT33GWqxj5T0h4bYLFHcHjcM.mft (raw, json) Hash identifier: DNimrSR7FhJz3yB1fBnuPTCL6/pMU/g0/riiwuaXxug= Subject key identifier: C3:31:7F:B8:C4:ED:D1:6C:F0:CA:0E:5A:F7:8B:61:77:C3:38:59:50 Authority key identifier: 9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3 Certificate issuer: /CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3 Certificate serial: 019C4289CCC332F85BE4946D34D16639601F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft Manifest number: 08 Signing time: Mon 09 Feb 2026 13:14:12 +0000 Manifest this update: Mon 09 Feb 2026 13:14:12 +0000 Manifest next update: Tue 10 Feb 2026 13:14:12 +0000 Files and hashes: 1: f35nVT2UBskdAnHb1V1qpocTRSw.asa (hash: M12I0GnyVy1LhMGI7fglgOw9JEa1nOJpBPoyuQKlCpA=) 2: nskNT33GWqxj5T0h4bYLFHcHjcM.crl (hash: eqPYJ40jQ2ML6Ueu3/4Wqs56ux2xSTxMpNHfbnY2xh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:89:cc:c3:32:f8:5b:e4:94:6d:34:d1:66:39:60:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3 Validity Not Before: Feb 9 13:14:12 2026 GMT Not After : Feb 10 13:14:12 2026 GMT Subject: CN=c3317fb8c4edd16cf0ca0e5af78b6177c3385950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:c6:ff:9b:c8:22:08:a4:f8:be:19:31:7c: 59:70:c0:1d:1d:aa:7b:e2:0e:78:7c:0d:28:23:85: be:6b:02:e6:b8:a4:56:11:3e:29:69:84:c0:78:4b: 2b:b4:80:8c:58:57:d5:36:b6:45:8c:6c:3f:da:2b: a1:d0:b0:4b:4e:ed:1b:40:06:73:16:ec:fe:bb:cb: 1c:3b:3d:7a:94:3f:62:d4:f8:7b:e3:e2:26:f3:8f: 6d:d0:4a:32:97:ef:ae:71:48:52:ab:3d:0a:a6:52: b6:fe:8c:9c:97:ca:04:a5:f9:96:5c:7c:f7:ed:7a: 8a:7f:8a:c7:27:e3:2e:46:64:50:96:7f:b4:e0:75: e7:35:bb:49:b1:4d:f0:c4:80:b8:f2:40:a3:f5:4a: 0a:ba:b7:55:96:db:5e:38:fe:7f:e7:c6:1f:2f:65: c5:10:a9:24:9f:bc:94:58:98:bc:0c:36:b9:f7:28: b4:17:c9:c0:55:56:33:83:37:e6:0d:70:9b:b7:be: 85:1f:6e:a5:6b:45:72:d5:a1:82:ca:d1:1e:9b:6b: 2d:df:ef:32:8b:50:80:f5:da:2d:b1:73:7b:6b:fc: 80:cd:9a:94:41:4d:f2:7a:d0:a4:77:ee:8a:57:a8: 58:cc:0d:8a:d9:17:5f:9c:71:dc:70:1b:32:64:f1: 9a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:31:7F:B8:C4:ED:D1:6C:F0:CA:0E:5A:F7:8B:61:77:C3:38:59:50 X509v3 Authority Key Identifier: keyid:9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b6:79:96:65:34:b1:15:ef:14:44:3e:63:33:75:cc:20:6b: 78:c5:02:4e:c2:e8:c8:6f:cc:48:00:88:22:ac:c3:40:2f:7b: ac:a8:f8:37:fd:a0:06:98:2e:04:58:29:4e:78:3d:01:93:c8: 7a:b6:9d:10:79:c9:90:0e:f3:9e:c7:e4:03:16:ab:cf:9e:f3: 89:5c:48:e5:72:49:bc:85:52:44:bf:ac:69:61:cb:ee:bb:63: a4:8f:58:a7:f4:2d:53:bd:32:fb:69:18:58:57:b7:cc:37:e1: 75:d8:75:cd:f4:64:f6:25:ad:34:83:17:0a:39:a1:92:7b:24: 51:a2:54:36:63:09:11:1b:94:db:d2:30:39:f6:f5:62:89:d9: 4b:c4:02:50:30:5c:e3:6d:9f:96:79:44:2d:c0:a7:56:fc:91: dc:cd:f5:11:a5:e2:21:0e:f2:9a:00:6d:3b:5c:0a:4d:0b:b5: 41:9c:cc:ff:a3:fe:3b:c9:f1:80:e6:e2:60:7d:09:cc:f2:c8: 02:6f:85:3e:78:d2:c9:c8:90:5f:64:75:16:b5:ee:2b:f5:79: 2a:d8:d4:c2:cd:b4:9e:7f:64:39:d2:67:24:a9:03:2c:31:8b: 8d:5f:23:3e:19:ce:00:01:e8:c7:e8:20:55:2b:0e:a6:a0:37: 66:f9:f5:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCiczDMvhb5JRtNNFmOWAfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYzkwZDRmN2RjNjVhYWM2M2U1M2QyMWUxYjYwYjE0Nzcw NzhkYzMwHhcNMjYwMjA5MTMxNDEyWhcNMjYwMjEwMTMxNDEyWjAzMTEwLwYDVQQD EyhjMzMxN2ZiOGM0ZWRkMTZjZjBjYTBlNWFmNzhiNjE3N2MzMzg1OTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGbG/5vIIgik+L4ZMXxZcMAdHap7 4g54fA0oI4W+awLmuKRWET4paYTAeEsrtICMWFfVNrZFjGw/2iuh0LBLTu0bQAZz Fuz+u8scOz16lD9i1Ph74+Im849t0Eoyl++ucUhSqz0KplK2/oycl8oEpfmWXHz3 7XqKf4rHJ+MuRmRQln+04HXnNbtJsU3wxIC48kCj9UoKurdVltteOP5/58YfL2XF EKkkn7yUWJi8DDa59yi0F8nAVVYzgzfmDXCbt76FH26la0Vy1aGCytEem2st3+8y i1CA9dotsXN7a/yAzZqUQU3yetCkd+6KV6hYzA2K2RdfnHHccBsyZPGaGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMxf7jE7dFs8MoOWveLYXfDOFlQMB8GA1UdIwQY MBaAFJ7JDU99xlqsY+U9IeG2CxR3B43DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnNrTlQzM0dXcXhqNVQwaDRiWUxGSGNIamNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yOWZmNTctM2NhNi00Y2Q0LTg3NGUt YzM3NDFlNGQzZTc0LzEvbnNrTlQzM0dXcXhqNVQwaDRiWUxGSGNIamNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yOWZmNTctM2NhNi00Y2Q0LTg3NGUtYzM3NDFlNGQzZTc0 LzEvbnNrTlQzM0dXcXhqNVQwaDRiWUxGSGNIamNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrZ5lmU0 sRXvFEQ+YzN1zCBreMUCTsLoyG/MSACIIqzDQC97rKj4N/2gBpguBFgpTng9AZPI eradEHnJkA7znsfkAxarz57ziVxI5XJJvIVSRL+saWHL7rtjpI9Yp/QtU70y+2kY WFe3zDfhddh1zfRk9iWtNIMXCjmhknskUaJUNmMJERuU29IwOfb1YonZS8QCUDBc 422flnlELcCnVvyR3M31EaXiIQ7ymgBtO1wKTQu1QZzM/6P+O8nxgObiYH0JzPLI Am+FPnjSyciQX2R1FrXuK/V5KtjUws20nn9kOdJnJKkDLDGLjV8jPhnOAAHox+gg VSsOpqA3Zvn1UA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:59 2026 by rpki-client