This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json) Hash identifier: ig6DBBzgPWd5zGe4DKDyTP/kFLqJs7KXevCkEqEWDUE= Subject key identifier: B3:D6:24:FA:6B:A2:9E:31:EE:33:8D:EF:A6:2A:69:6E:96:BD:39:C9 Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6 Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6 Certificate serial: 019C41A19BECC9A10E7AF72E14D0D50B8276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft Manifest number: 0C3E Signing time: Mon 09 Feb 2026 09:00:35 +0000 Manifest this update: Mon 09 Feb 2026 09:00:35 +0000 Manifest next update: Tue 10 Feb 2026 09:00:35 +0000 Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: Y4Nek9OEkZkSeMWzckaFJOiJRhJPL+Pp/QukpBe7he8=) 2: X2dDxuQy5C2iRkWsBYanoWzzFBA.roa (hash: BH0EGwq9/zGZL3BbgmxWs2ULLI0cGkQKECrJ00Vi4nI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:9b:ec:c9:a1:0e:7a:f7:2e:14:d0:d5:0b:82:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6 Validity Not Before: Feb 9 09:00:35 2026 GMT Not After : Feb 10 09:00:35 2026 GMT Subject: CN=b3d624fa6ba29e31ee338defa62a696e96bd39c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:79:51:6c:e2:f3:6c:c2:e5:f2:84:9d:54: c5:39:44:57:fa:25:ed:3b:a4:11:3f:d5:4d:5f:de: b8:03:8b:5c:5b:2c:4f:e7:63:99:7c:38:e2:db:cb: 8b:4d:38:b5:29:46:7f:96:02:5e:38:13:ea:7c:88: 70:8f:93:bc:22:f8:bf:eb:17:15:e1:5c:a4:92:1f: 89:64:c1:cf:b6:4a:41:5a:40:38:6b:af:ee:6f:d0: 52:c2:72:82:c6:46:bf:ce:c2:62:3c:fc:ef:ad:2e: f9:98:2c:00:1b:d0:2c:13:ae:6c:d4:05:50:65:d9: 32:9b:da:13:0f:8e:c7:22:de:07:e3:10:8f:93:eb: ab:7e:20:68:64:24:db:e7:cd:43:7a:de:ae:15:c5: a7:9b:8b:00:aa:a4:b1:26:a4:28:ca:b4:2d:49:0b: 76:7d:af:76:24:dd:80:06:c3:98:11:eb:fd:3b:fa: 91:52:3c:a9:bb:fc:6e:d4:54:78:fd:ea:b9:c3:4f: 14:73:6a:22:2a:2e:69:eb:a2:1f:83:93:ef:0e:b7: bd:3f:b4:06:c1:7d:0d:99:7e:f9:ba:e5:b7:b0:82: c6:a5:1f:2f:83:2a:e0:45:cc:1a:12:26:e3:87:81: b6:79:c3:57:e4:0a:98:ac:8d:08:8e:5b:22:eb:6b: 29:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D6:24:FA:6B:A2:9E:31:EE:33:8D:EF:A6:2A:69:6E:96:BD:39:C9 X509v3 Authority Key Identifier: keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:57:d9:2d:e6:94:9b:2b:7e:d2:17:86:8b:75:9e:8d:74:77: ee:b5:fa:ba:4e:b1:95:bd:f4:23:35:61:9b:e9:fd:84:ea:79: 37:30:06:42:54:b8:62:5e:c1:7f:5c:fe:34:f6:74:fa:cb:f8: a4:44:bb:3e:b5:4f:46:b2:08:61:91:1d:d6:da:51:e8:92:43: de:c1:40:cb:1a:b8:50:45:8a:d2:8f:c3:50:06:fa:91:cc:68: b5:a4:ab:63:8d:2f:6f:4b:77:a3:e9:d7:41:64:30:11:4b:9c: 2e:d2:b7:4b:15:3c:ec:0a:55:f3:53:61:05:4f:3d:ab:07:88: 41:1b:68:cc:fd:3a:bb:9f:da:23:d3:1c:fb:9f:08:f2:a4:83: 9d:8a:f4:1e:14:75:79:e2:2d:94:cb:08:43:93:aa:77:f2:26: a2:43:a6:f4:30:c2:41:81:11:b6:30:77:7c:bb:19:56:d7:02: d8:d8:b0:d8:18:fd:d4:46:74:75:2a:84:c9:a3:93:65:3f:47: 40:48:13:65:b9:49:60:92:e1:01:b0:15:06:40:45:48:81:e9: 92:5c:8f:24:d7:08:46:c5:32:c1:fd:56:0f:24:1c:4d:e3:ba: 31:91:5a:2a:7c:b5:b0:32:22:2d:1c:69:d8:71:7c:36:7f:fd: 85:b1:ff:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoZvsyaEOevcuFNDVC4J2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MDhlMDRmZDdiZjgxYjY3NWRjYmU3YjI5YWEyNjNjOTEy MDc4YjYwHhcNMjYwMjA5MDkwMDM1WhcNMjYwMjEwMDkwMDM1WjAzMTEwLwYDVQQD EyhiM2Q2MjRmYTZiYTI5ZTMxZWUzMzhkZWZhNjJhNjk2ZTk2YmQzOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVR5UWzi82zC5fKEnVTFOURX+iXt O6QRP9VNX964A4tcWyxP52OZfDji28uLTTi1KUZ/lgJeOBPqfIhwj5O8Ivi/6xcV 4Vykkh+JZMHPtkpBWkA4a6/ub9BSwnKCxka/zsJiPPzvrS75mCwAG9AsE65s1AVQ Zdkym9oTD47HIt4H4xCPk+urfiBoZCTb581Det6uFcWnm4sAqqSxJqQoyrQtSQt2 fa92JN2ABsOYEev9O/qRUjypu/xu1FR4/eq5w08Uc2oiKi5p66Ifg5PvDre9P7QG wX0NmX75uuW3sILGpR8vgyrgRcwaEibjh4G2ecNX5AqYrI0Ijlsi62spbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPWJPprop4x7jON76YqaW6WvTnJMB8GA1UdIwQY MBaAFDcI4E/Xv4G2ddy+eymqJjyRIHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMmZjZmEtN2RjMS00MjAwLTg5OWUt YmM0OTNkNWNiYjVjLzEvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMmZjZmEtN2RjMS00MjAwLTg5OWUtYmM0OTNkNWNiYjVj LzEvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVfZLeaU myt+0heGi3WejXR37rX6uk6xlb30IzVhm+n9hOp5NzAGQlS4Yl7Bf1z+NPZ0+sv4 pES7PrVPRrIIYZEd1tpR6JJD3sFAyxq4UEWK0o/DUAb6kcxotaSrY40vb0t3o+nX QWQwEUucLtK3SxU87ApV81NhBU89qweIQRtozP06u5/aI9Mc+58I8qSDnYr0HhR1 eeItlMsIQ5Oqd/ImokOm9DDCQYERtjB3fLsZVtcC2Niw2Bj91EZ0dSqEyaOTZT9H QEgTZblJYJLhAbAVBkBFSIHpklyPJNcIRsUywf1WDyQcTeO6MZFaKny1sDIiLRxp 2HF8Nn/9hbH/lg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:08 2026 by rpki-client