This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json) Hash identifier: kk6mXi/R4VB3SjyLHw13Ih0Js1cLbmjG6B418hVjP4k= Subject key identifier: 9B:70:2A:2B:E1:CA:A0:42:F3:4B:87:C7:5B:2D:54:95:AE:88:FA:57 Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36 Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436 Certificate serial: 019C435945C1F0DB42053ADD550B72C220B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft Manifest number: 120B Signing time: Mon 09 Feb 2026 17:00:49 +0000 Manifest this update: Mon 09 Feb 2026 17:00:49 +0000 Manifest next update: Tue 10 Feb 2026 17:00:49 +0000 Files and hashes: 1: a_g1TDCKs0djGqyHBT2iLxMGygA.roa (hash: 3E0lz2si/4Jtpa0xKFZpZcmoUUdUfMhPP/gPs109DNA=) 2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: D9wid6uRIjreIM5u/wMpQ49a2j9BWN32pb2X0mMj7Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:45:c1:f0:db:42:05:3a:dd:55:0b:72:c2:20:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436 Validity Not Before: Feb 9 17:00:49 2026 GMT Not After : Feb 10 17:00:49 2026 GMT Subject: CN=9b702a2be1caa042f34b87c75b2d5495ae88fa57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:31:53:77:eb:73:d1:b7:91:23:fa:a7:48: b7:4f:73:c8:3b:4f:ed:47:14:3a:80:83:f3:96:32: 74:a8:55:c3:9a:2e:9a:24:aa:53:96:91:3e:50:bd: bf:a0:98:f0:c2:35:6e:ff:4c:b8:87:cb:df:62:9f: b4:58:f7:56:8c:a3:61:ca:4c:9a:b2:66:4e:69:47: 48:2c:58:cc:f8:1c:41:25:f8:a7:84:22:0b:40:20: 08:d4:0e:35:fd:fc:2a:a9:57:00:b9:b5:8d:71:d7: b3:4b:8c:90:99:1d:1f:11:af:24:66:89:df:8e:49: f5:af:bc:50:f1:41:ab:84:c9:64:9f:a2:aa:f7:c9: 13:47:15:d2:c7:8f:cc:6a:d4:04:1a:b8:18:55:90: aa:a5:79:bb:6a:3c:e6:ca:e1:f7:f6:39:61:d0:57: 1e:d6:e8:25:21:58:2f:a1:45:81:b9:25:8f:79:2d: 71:9a:ab:91:ac:6d:32:97:b5:dc:a0:eb:3f:da:eb: f3:60:e1:5c:79:7a:ec:c8:18:37:e8:32:3d:ff:9b: 50:25:b2:f0:db:0a:49:d5:15:c5:02:dd:97:45:a5: 22:7b:20:a1:ac:a9:17:5f:8f:5f:35:e4:cf:1a:71: df:5f:74:05:f7:46:ef:9b:9c:13:ef:9d:d8:36:15: 08:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:70:2A:2B:E1:CA:A0:42:F3:4B:87:C7:5B:2D:54:95:AE:88:FA:57 X509v3 Authority Key Identifier: keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e9:b6:dd:38:a3:34:b8:73:d4:9d:e1:78:2d:ba:0d:45:14: 5a:4d:e6:35:53:47:59:24:54:e5:0a:87:f5:11:c3:7d:2d:ef: b8:77:27:6d:60:22:eb:2a:9e:28:1b:7c:68:d2:c4:7c:e4:10: c3:28:e7:c9:3d:f1:65:78:8b:2e:7f:d7:ed:42:b6:45:34:cf: b3:3e:1e:31:3a:2b:76:be:9d:69:50:e6:45:79:30:86:c7:fe: 60:d7:84:e0:90:fa:f3:d7:14:20:da:21:24:4f:26:bb:b6:3f: e2:08:c4:b2:87:2b:21:5c:1d:25:8f:95:32:27:42:5a:e8:3c: ab:da:9d:84:5a:b0:a1:92:39:27:60:83:fa:1f:97:f7:36:9a: b5:90:00:02:e2:a0:d9:a9:bb:98:94:f1:d6:10:35:cc:45:5b: ee:72:98:fa:c4:21:a5:f5:72:87:d2:91:dd:7e:52:a8:10:a9: 34:db:d3:d1:3d:b5:04:e8:47:33:60:9a:1d:f9:63:49:79:bc: c9:4f:53:4b:e1:11:06:24:11:4f:e9:d8:93:7f:5d:0d:02:0e: 20:4e:00:80:46:14:51:c1:ba:d4:85:84:df:37:db:e1:0a:9a: 79:9d:1b:aa:da:ac:2b:d2:01:74:ec:0b:66:6d:fb:58:ef:98: 85:7e:23:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUXB8NtCBTrdVQtywiC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZmM2MmVjZGM5MWQxMTk3OWNjMWQyMWE0N2M2ZWMzNzhk ZmE0MzYwHhcNMjYwMjA5MTcwMDQ5WhcNMjYwMjEwMTcwMDQ5WjAzMTEwLwYDVQQD Eyg5YjcwMmEyYmUxY2FhMDQyZjM0Yjg3Yzc1YjJkNTQ5NWFlODhmYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcoxU3frc9G3kSP6p0i3T3PIO0/t RxQ6gIPzljJ0qFXDmi6aJKpTlpE+UL2/oJjwwjVu/0y4h8vfYp+0WPdWjKNhykya smZOaUdILFjM+BxBJfinhCILQCAI1A41/fwqqVcAubWNcdezS4yQmR0fEa8kZonf jkn1r7xQ8UGrhMlkn6Kq98kTRxXSx4/MatQEGrgYVZCqpXm7ajzmyuH39jlh0Fce 1uglIVgvoUWBuSWPeS1xmquRrG0yl7XcoOs/2uvzYOFceXrsyBg36DI9/5tQJbLw 2wpJ1RXFAt2XRaUieyChrKkXX49fNeTPGnHfX3QF90bvm5wT753YNhUIqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtwKivhyqBC80uHx1stVJWuiPpXMB8GA1UdIwQY MBaAFJz8YuzckdEZecwdIaR8bsN436Q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hMzNiMjktYmVmMy00NjFkLTg4Nzgt MjE1NTEyNmIxNjQzLzEvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9hMzNiMjktYmVmMy00NjFkLTg4NzgtMjE1NTEyNmIxNjQz LzEvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOm23Tij NLhz1J3heC26DUUUWk3mNVNHWSRU5QqH9RHDfS3vuHcnbWAi6yqeKBt8aNLEfOQQ wyjnyT3xZXiLLn/X7UK2RTTPsz4eMTordr6daVDmRXkwhsf+YNeE4JD689cUINoh JE8mu7Y/4gjEsocrIVwdJY+VMidCWug8q9qdhFqwoZI5J2CD+h+X9zaatZAAAuKg 2am7mJTx1hA1zEVb7nKY+sQhpfVyh9KR3X5SqBCpNNvT0T21BOhHM2CaHfljSXm8 yU9TS+ERBiQRT+nYk39dDQIOIE4AgEYUUcG61IWE3zfb4QqaeZ0bqtqsK9IBdOwL Zm37WO+YhX4jEA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:21 2026 by rpki-client