This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft File: NsxJTEqTS7s89Gulgk1mZsiUei8.mft (raw, json) Hash identifier: LW+uqXE5m/fiTVxvEQIv6ov10K79+erqS+zdWq5oQhk= Subject key identifier: DB:23:33:C2:23:5D:22:06:FE:B2:3D:AF:92:C5:4B:F4:78:88:8F:2B Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F Certificate issuer: /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f Certificate serial: 019C427D2F40D34A1B6DCD7DB8D49C5C3B21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft Manifest number: 07CE Signing time: Mon 09 Feb 2026 13:00:26 +0000 Manifest this update: Mon 09 Feb 2026 13:00:26 +0000 Manifest next update: Tue 10 Feb 2026 13:00:26 +0000 Files and hashes: 1: 7Nw66k4HGDgniHjPpIYuFlo7wts.roa (hash: xkBwde/whvV3zzujO/2yU/8uxz1ZIVTTivP0Kf+ua7o=) 2: NsxJTEqTS7s89Gulgk1mZsiUei8.crl (hash: GUe0dV3gg6xMyJcsKjkODrhKS57kSECVtaBCNSbh+cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:2f:40:d3:4a:1b:6d:cd:7d:b8:d4:9c:5c:3b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f Validity Not Before: Feb 9 13:00:26 2026 GMT Not After : Feb 10 13:00:26 2026 GMT Subject: CN=db2333c2235d2206feb23daf92c54bf478888f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:66:e1:ac:c4:40:f9:43:a4:46:8d:a1:19:63: 15:de:89:0c:37:eb:5e:7a:7a:e7:61:ed:18:20:33: 59:47:36:ae:d5:bb:1d:c4:52:4d:77:81:31:af:90: b1:d7:d7:07:a9:30:6b:fb:20:f5:8c:e2:a8:04:1b: da:b2:a7:29:11:3b:d8:bc:e7:2a:5d:4e:27:03:15: 79:a6:c2:59:49:b6:41:cc:7a:f8:16:d4:81:61:5c: 77:4d:96:a5:22:b5:3d:3a:0a:24:ea:d2:02:67:e9: af:b6:84:e9:de:94:c0:29:94:fa:9d:e0:c1:dd:4a: 8c:47:bb:a7:67:e1:5c:f9:cc:58:0e:db:ef:86:67: a1:6f:78:16:28:b7:00:43:f4:de:90:28:66:3b:98: af:2d:da:74:b7:59:97:0f:9d:b0:80:da:89:d6:7c: fe:3f:3c:b0:ef:f9:a6:df:0f:d5:dc:15:72:ae:1c: 81:d7:7a:e8:d2:b5:b6:10:38:76:5c:c6:ab:64:cd: 83:bf:98:e1:1e:95:b6:85:82:f8:e2:db:61:88:09: 77:83:d1:24:83:c8:7c:9c:73:5b:cd:3e:b8:8e:9b: 81:77:38:35:ed:18:07:9b:bb:0b:82:f4:b4:99:51: 1e:ce:13:d8:78:10:3c:54:28:07:c5:4e:c0:b7:f9: 32:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:23:33:C2:23:5D:22:06:FE:B2:3D:AF:92:C5:4B:F4:78:88:8F:2B X509v3 Authority Key Identifier: keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c3:93:6e:70:8c:79:b4:59:ca:8a:c4:f6:3f:bc:0d:60:9f: e5:d3:ca:a8:a6:df:c6:37:82:f1:f3:0c:73:8b:20:d7:29:f3: 97:b3:ea:1a:56:a6:1b:a4:6b:9a:3c:00:3e:e1:7f:2e:99:e1: e7:4d:de:d2:7f:92:0b:a0:8a:96:6a:57:64:91:45:9b:ae:fb: d1:62:10:cd:c3:fc:21:d7:00:2b:27:cd:67:5d:cb:cc:db:f8: 1e:49:f8:e4:22:b9:cf:50:87:a6:48:5e:10:ab:40:60:f4:a0: 8c:d6:d2:9d:d5:37:72:53:6c:fb:0b:c2:6a:c0:39:d4:42:51: e1:29:2e:ff:1f:8c:01:73:df:ab:08:e9:0a:7b:0c:cd:ee:b5: 6d:c0:d3:92:34:9e:c7:e4:6c:d8:01:98:d1:f8:91:44:41:2e: 43:ff:7a:07:ad:68:ec:61:75:2b:b0:65:75:27:78:cf:af:8c: 52:47:8f:cc:1a:01:f8:03:87:16:f9:98:0e:09:87:26:f1:93: 4f:48:ff:2e:71:63:18:76:c1:d1:35:c6:e5:69:b1:38:55:ea: c7:9c:30:4c:ca:01:6a:2b:6b:6f:2f:d1:bb:b9:cd:1a:34:d7: 5a:06:d6:35:10:c7:ac:13:90:a1:55:8d:86:7c:3c:b2:11:31: bf:6a:51:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfS9A00obbc19uNScXDshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Y2M0OTRjNGE5MzRiYmIzY2Y0NmJhNTgyNGQ2NjY2Yzg5 NDdhMmYwHhcNMjYwMjA5MTMwMDI2WhcNMjYwMjEwMTMwMDI2WjAzMTEwLwYDVQQD EyhkYjIzMzNjMjIzNWQyMjA2ZmViMjNkYWY5MmM1NGJmNDc4ODg4ZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GbhrMRA+UOkRo2hGWMV3okMN+te enrnYe0YIDNZRzau1bsdxFJNd4Exr5Cx19cHqTBr+yD1jOKoBBvasqcpETvYvOcq XU4nAxV5psJZSbZBzHr4FtSBYVx3TZalIrU9Ogok6tICZ+mvtoTp3pTAKZT6neDB 3UqMR7unZ+Fc+cxYDtvvhmehb3gWKLcAQ/TekChmO5ivLdp0t1mXD52wgNqJ1nz+ Pzyw7/mm3w/V3BVyrhyB13ro0rW2EDh2XMarZM2Dv5jhHpW2hYL44tthiAl3g9Ek g8h8nHNbzT64jpuBdzg17RgHm7sLgvS0mVEezhPYeBA8VCgHxU7At/kyhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsjM8IjXSIG/rI9r5LFS/R4iI8rMB8GA1UdIwQY MBaAFDbMSUxKk0u7PPRrpYJNZmbIlHovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5Mjgt YjljODE2OTY1YTA0LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5MjgtYjljODE2OTY1YTA0 LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcOTbnCM ebRZyorE9j+8DWCf5dPKqKbfxjeC8fMMc4sg1ynzl7PqGlamG6RrmjwAPuF/Lpnh 503e0n+SC6CKlmpXZJFFm6770WIQzcP8IdcAKyfNZ13LzNv4Hkn45CK5z1CHpkhe EKtAYPSgjNbSndU3clNs+wvCasA51EJR4Sku/x+MAXPfqwjpCnsMze61bcDTkjSe x+Rs2AGY0fiRREEuQ/96B61o7GF1K7BldSd4z6+MUkePzBoB+AOHFvmYDgmHJvGT T0j/LnFjGHbB0TXG5WmxOFXqx5wwTMoBaitrby/Ru7nNGjTXWgbWNRDHrBOQoVWN hnw8shExv2pR+A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:51 2026 by rpki-client