This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json) Hash identifier: ZqmeWNCmt7xQPD66qI0D3VtygXgZDxcVIGDUjQoAtWg= Subject key identifier: F3:F2:C1:B3:C4:1D:BB:E2:C1:BC:AB:D6:18:BF:11:12:2E:8E:5E:26 Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7 Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7 Certificate serial: 019C42B4761B24D3808A85B461B181B00B71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 14:00:48 +0000 Manifest this update: Mon 09 Feb 2026 14:00:48 +0000 Manifest next update: Tue 10 Feb 2026 14:00:48 +0000 Files and hashes: 1: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: TCLY0Yad7jcaIVoibyGdfcqDhBsRrygJLN+Ac0JugMU=) 2: ovNj-lKohoqrP_7eODYlxEZb7tI.roa (hash: UqfVF/Q23DbHAnK5YMvGOztKJOj8RSHzAgrS1X+sklw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:76:1b:24:d3:80:8a:85:b4:61:b1:81:b0:0b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7 Validity Not Before: Feb 9 14:00:48 2026 GMT Not After : Feb 10 14:00:48 2026 GMT Subject: CN=f3f2c1b3c41dbbe2c1bcabd618bf11122e8e5e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:16:44:66:df:b6:7c:ac:b8:45:f7:0d:e0: 15:23:cb:10:74:a0:e5:8f:57:da:74:1d:df:70:b6: 2d:54:aa:65:d1:af:b1:93:2e:eb:65:ce:fa:31:ff: 19:34:2d:ef:12:75:82:f8:f3:ec:5a:7f:8d:e0:11: 41:20:bc:80:38:b4:45:20:66:11:58:ec:73:e1:a3: 0d:e3:ac:32:7f:8a:47:01:bd:b3:53:a3:66:e9:17: bd:29:9e:61:23:41:3d:bd:3b:74:25:cb:01:3f:fc: 65:0f:13:14:b4:3b:94:63:8a:32:bc:22:c0:68:43: b7:03:4b:32:05:e3:8c:80:a2:bc:0c:f0:c5:7d:ee: f4:9e:7a:42:96:5d:95:9d:86:77:55:05:b5:a4:09: ad:82:bf:2d:46:56:2d:e0:51:4a:c4:87:01:b1:95: c5:75:ca:15:9b:64:01:cd:e8:ec:cb:d9:e6:8b:72: 24:dd:8a:57:15:58:c8:ea:8b:98:c0:c2:7c:78:41: ce:2b:66:83:86:34:62:7d:63:f1:5b:0f:e6:56:eb: df:72:24:4e:79:32:7a:04:ab:ba:90:66:f2:9a:09: 93:10:90:0e:ab:95:03:8c:c2:21:89:8a:b1:04:8f: df:f3:1f:4b:39:2d:75:c1:c8:0e:fb:5b:ec:11:6e: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:C1:B3:C4:1D:BB:E2:C1:BC:AB:D6:18:BF:11:12:2E:8E:5E:26 X509v3 Authority Key Identifier: keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:56:30:9a:97:f7:1d:da:95:6e:42:89:78:6e:67:af:18:cc: d4:47:8e:60:a8:10:bf:89:bb:f0:68:fa:4f:69:27:22:3f:7e: ed:3d:f4:8d:a2:79:6a:f9:e7:16:5d:59:27:b9:da:44:31:da: cc:4d:a1:cf:60:4a:29:ab:80:c4:e5:8b:0b:27:7c:e4:c9:c2: 8b:55:51:cc:06:21:e1:a7:02:db:2a:70:39:aa:8b:e0:89:78: 5d:b5:bb:78:fc:5a:a1:7b:3e:33:fd:e2:13:ad:53:28:d9:2e: 99:fb:e2:69:4f:f4:93:4f:af:9d:c5:3d:1e:22:b8:1a:80:86: 2d:26:96:d1:68:60:35:d2:0f:8e:ce:e5:53:8c:96:83:73:30: bf:b0:db:db:c6:a5:e1:a0:4b:c5:83:70:6f:58:fe:b4:5a:4b: f9:a4:48:73:73:41:4b:37:6a:ef:38:8e:ec:0c:01:52:9d:78: 6d:7f:4c:4a:78:d6:56:7d:d5:cf:53:e7:9c:eb:08:41:35:b2: 49:59:3f:cc:1c:90:12:f8:4b:01:8e:64:86:fa:89:19:af:02: 4d:f5:ef:ee:e0:c4:7f:86:ad:9a:b6:c0:4b:ad:fc:f4:3f:9d: b1:c1:b0:b7:d0:f5:43:e8:de:e9:47:41:8e:c3:31:40:3b:63: 99:ff:95:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtHYbJNOAioW0YbGBsAtxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDFjZGFiYTMxNTU5ZGUxMmFiMTlkNzlmMWFlMmQyMThj Mzc5ZjcwHhcNMjYwMjA5MTQwMDQ4WhcNMjYwMjEwMTQwMDQ4WjAzMTEwLwYDVQQD EyhmM2YyYzFiM2M0MWRiYmUyYzFiY2FiZDYxOGJmMTExMjJlOGU1ZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEIWRGbftnysuEX3DeAVI8sQdKDl j1fadB3fcLYtVKpl0a+xky7rZc76Mf8ZNC3vEnWC+PPsWn+N4BFBILyAOLRFIGYR WOxz4aMN46wyf4pHAb2zU6Nm6Re9KZ5hI0E9vTt0JcsBP/xlDxMUtDuUY4oyvCLA aEO3A0syBeOMgKK8DPDFfe70nnpCll2VnYZ3VQW1pAmtgr8tRlYt4FFKxIcBsZXF dcoVm2QBzejsy9nmi3Ik3YpXFVjI6ouYwMJ8eEHOK2aDhjRifWPxWw/mVuvfciRO eTJ6BKu6kGbymgmTEJAOq5UDjMIhiYqxBI/f8x9LOS11wcgO+1vsEW7JeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPywbPEHbviwbyr1hi/ERIujl4mMB8GA1UdIwQY MBaAFDXRzaujFVneEqsZ158a4tIYw3n3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMWVkYzAtNjNjMS00MmI0LWEwNDAt M2ZmOTI2MDg1NTI3LzEvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMWVkYzAtNjNjMS00MmI0LWEwNDAtM2ZmOTI2MDg1NTI3 LzEvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1Ywmpf3 HdqVbkKJeG5nrxjM1EeOYKgQv4m78Gj6T2knIj9+7T30jaJ5avnnFl1ZJ7naRDHa zE2hz2BKKauAxOWLCyd85MnCi1VRzAYh4acC2ypwOaqL4Il4XbW7ePxaoXs+M/3i E61TKNkumfviaU/0k0+vncU9HiK4GoCGLSaW0WhgNdIPjs7lU4yWg3Mwv7Db28al 4aBLxYNwb1j+tFpL+aRIc3NBSzdq7ziO7AwBUp14bX9MSnjWVn3Vz1PnnOsIQTWy SVk/zByQEvhLAY5khvqJGa8CTfXv7uDEf4atmrbAS6389D+dscGwt9D1Q+je6UdB jsMxQDtjmf+VsA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:09 2026 by rpki-client