This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json) Hash identifier: F0UsrgOZy8Rzn3MUMWdeE5j2x4wqoIZSGBarwdyokUI= Subject key identifier: 0B:F3:33:13:9E:69:D7:E6:EF:87:78:CA:87:A2:45:8E:72:62:B4:A6 Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f Certificate serial: 019C4246BF937CA0D0BAF1FAC68FF7AF446A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 12:00:58 +0000 Manifest this update: Mon 09 Feb 2026 12:00:58 +0000 Manifest next update: Tue 10 Feb 2026 12:00:58 +0000 Files and hashes: 1: 1QEtaADIkxg0J4jUBwcM-NwBxwE.roa (hash: ZLWa2BfquBdnPKlK4MjamELUpCL/T5o3OhU6GIUiAbA=) 2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: U/ehFu3hWesvBNdxwi3IuKq7MCAhf0XB/O9IQw0LPOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:bf:93:7c:a0:d0:ba:f1:fa:c6:8f:f7:af:44:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f Validity Not Before: Feb 9 12:00:58 2026 GMT Not After : Feb 10 12:00:58 2026 GMT Subject: CN=0bf333139e69d7e6ef8778ca87a2458e7262b4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:81:dd:fb:87:52:24:c6:d8:5a:7b:36:68: 1f:26:95:cc:2c:75:d7:f8:35:a8:15:0e:86:a8:19: 38:0f:ba:0e:ea:ae:32:a5:ea:bf:70:ff:b2:f9:f8: 94:70:7c:80:89:09:b5:7d:e8:f3:fa:83:d3:9a:53: f0:57:30:f9:f0:9b:1f:16:b1:18:b0:53:83:2c:11: ca:52:e3:dd:1c:9b:f6:7f:ff:6b:a3:cc:82:6d:e4: fd:97:c2:90:e3:dc:b4:2b:82:9f:e8:50:ed:8e:2b: 35:f4:85:fd:0e:1b:9a:4e:45:22:4c:95:b1:a8:e0: 4f:ed:59:84:20:80:ae:b8:47:2c:00:46:19:a2:c8: a5:60:dc:09:5e:25:0b:9a:08:30:3b:49:1c:3d:e9: 6c:0f:78:bc:de:52:b7:e8:26:b9:6c:6e:74:17:b4: 2c:0e:12:16:7e:64:ff:d1:ed:1c:c9:66:52:09:51: b0:08:1a:bd:fc:3d:98:73:2f:9c:2b:c5:80:53:81: b0:3f:2c:e6:d1:34:0a:5f:6c:e9:07:6e:1e:84:2c: 56:6d:b7:82:f0:ba:8e:54:ac:f9:16:18:25:6f:82: 9d:82:b9:4f:68:60:8e:2e:69:a4:db:cb:27:aa:15: 32:a2:89:31:a8:79:75:03:77:48:67:2f:4e:90:2c: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F3:33:13:9E:69:D7:E6:EF:87:78:CA:87:A2:45:8E:72:62:B4:A6 X509v3 Authority Key Identifier: keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:52:8b:fe:ba:d7:0c:94:51:2f:84:fc:48:35:12:6d:cf:c8: f4:0c:a8:09:d0:37:95:14:12:b5:c1:eb:9e:77:66:db:cf:c7: 2e:b6:74:59:41:74:d9:18:64:40:ca:f1:cd:b2:b0:43:f3:69: 6e:ff:9c:45:32:0a:7d:72:b3:73:0e:a2:28:c5:aa:e5:a8:23: e3:05:55:91:1e:d0:4f:73:30:22:df:5d:9a:c6:70:c7:e9:8d: b5:e7:5a:4c:1d:2d:7a:43:a0:98:1d:2a:a2:a4:85:23:ca:53: 51:b5:19:19:06:14:d3:8d:95:32:d2:80:3e:08:91:62:70:0a: b4:09:6a:6f:a6:a3:56:44:30:2d:5c:e6:27:54:69:9f:c8:ec: cc:c9:c9:2b:b2:ae:f4:63:a8:8c:48:f5:6d:96:ce:1f:fa:4d: 72:b1:96:74:a8:e7:96:6f:97:ca:6a:b2:3a:23:8f:c4:1c:7e: a8:49:fd:4f:aa:d8:9c:72:e5:18:c0:e9:01:ab:b3:1c:34:e4: 88:01:33:db:76:38:6a:bb:14:f9:8f:a3:f4:1c:64:47:9a:53: 72:f0:ae:e5:fd:c8:f0:73:3e:d9:c1:f7:c8:db:0b:9d:fe:41: f5:76:08:2c:48:b4:21:b9:43:c8:58:98:f8:9b:4c:f8:64:67: b2:7f:77:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRr+TfKDQuvH6xo/3r0RqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NzMwYmI4YjI2MjNlN2Y2NWE2MTYzNjA0ZDFjODVmOTEw NjI4OGYwHhcNMjYwMjA5MTIwMDU4WhcNMjYwMjEwMTIwMDU4WjAzMTEwLwYDVQQD EygwYmYzMzMxMzllNjlkN2U2ZWY4Nzc4Y2E4N2EyNDU4ZTcyNjJiNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAaB3fuHUiTG2Fp7NmgfJpXMLHXX +DWoFQ6GqBk4D7oO6q4ypeq/cP+y+fiUcHyAiQm1fejz+oPTmlPwVzD58JsfFrEY sFODLBHKUuPdHJv2f/9ro8yCbeT9l8KQ49y0K4Kf6FDtjis19IX9DhuaTkUiTJWx qOBP7VmEIICuuEcsAEYZosilYNwJXiULmggwO0kcPelsD3i83lK36Ca5bG50F7Qs DhIWfmT/0e0cyWZSCVGwCBq9/D2Ycy+cK8WAU4GwPyzm0TQKX2zpB24ehCxWbbeC 8LqOVKz5Fhglb4KdgrlPaGCOLmmk28snqhUyookxqHl1A3dIZy9OkCxSowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvzMxOeadfm74d4yoeiRY5yYrSmMB8GA1UdIwQY MBaAFDVzC7iyYj5/ZaYWNgTRyF+RBiiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2Mt M2E0ZGZmOGU4ZGVkLzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2MtM2E0ZGZmOGU4ZGVk LzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlKL/rrX DJRRL4T8SDUSbc/I9AyoCdA3lRQStcHrnndm28/HLrZ0WUF02RhkQMrxzbKwQ/Np bv+cRTIKfXKzcw6iKMWq5agj4wVVkR7QT3MwIt9dmsZwx+mNtedaTB0tekOgmB0q oqSFI8pTUbUZGQYU042VMtKAPgiRYnAKtAlqb6ajVkQwLVzmJ1Rpn8jszMnJK7Ku 9GOojEj1bZbOH/pNcrGWdKjnlm+XymqyOiOPxBx+qEn9T6rYnHLlGMDpAauzHDTk iAEz23Y4arsU+Y+j9BxkR5pTcvCu5f3I8HM+2cH3yNsLnf5B9XYILEi0IblDyFiY +JtM+GRnsn93mw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:37 2026 by rpki-client