This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json) Hash identifier: Bca5mGXFTVkBe+pCaQBKvM1eQ1tkn3HYi23WeiFVzwU= Subject key identifier: B8:7B:C1:7D:E0:AF:D4:46:14:B7:2A:94:DE:45:67:61:6E:2B:96:62 Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7 Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7 Certificate serial: 019C42EB044FB953CA2AE220EC5ADF1DB955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft Manifest number: 1274 Signing time: Mon 09 Feb 2026 15:00:24 +0000 Manifest this update: Mon 09 Feb 2026 15:00:24 +0000 Manifest next update: Tue 10 Feb 2026 15:00:24 +0000 Files and hashes: 1: LjrShwCoJZxaBMCU_xgtQ0ssv44.roa (hash: HEF1Y2WFhMnB9/CRA48ookYnYxu+ItuM7lAcrIlWSPE=) 2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: vI4whVf/syBlrEWpK5KON6yVkCSWswQAMxSC7RxErCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:04:4f:b9:53:ca:2a:e2:20:ec:5a:df:1d:b9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7 Validity Not Before: Feb 9 15:00:24 2026 GMT Not After : Feb 10 15:00:24 2026 GMT Subject: CN=b87bc17de0afd44614b72a94de4567616e2b9662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3e:fc:40:dc:58:ba:1b:70:25:fc:53:66:fe: 1a:e4:97:bb:a5:66:64:56:21:0c:60:97:58:23:45: 4d:70:16:0a:5c:97:f2:7b:a0:dd:3b:c9:fd:eb:cc: 44:dc:cf:dc:32:b5:c0:90:1d:f2:e1:75:cd:be:fb: 94:fd:d3:19:e5:6d:c3:66:a8:f4:ff:7c:02:af:c5: 27:61:aa:2d:6b:43:c8:d6:1e:2a:4a:6b:d4:dc:df: b2:02:58:c7:e4:90:2c:39:37:27:0a:05:8d:01:41: 4d:c5:43:5b:43:ba:37:47:6a:12:3a:78:35:a7:2d: 1f:6d:92:0f:5e:c9:8d:59:81:2c:cc:35:a8:c3:72: 43:76:df:da:4a:4c:a8:2c:86:39:50:42:0b:e9:72: a2:b7:13:2b:7f:d0:98:54:9d:ef:ed:7a:77:1e:06: 60:d1:c6:5c:46:8c:6b:f8:cf:d3:8a:17:df:99:2f: be:97:d3:57:fa:d5:47:5e:37:12:a3:7e:5f:ef:4f: 0f:ae:d0:59:28:a7:42:86:64:96:c1:91:71:3d:3e: 3d:1b:3e:ee:81:d7:ff:12:c2:27:bd:ce:11:d8:66: a8:d5:ec:d7:f9:93:77:03:c6:b5:6b:ec:97:91:27: 8b:bb:3d:73:6f:6c:2c:2c:26:10:57:c2:9c:f3:fb: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7B:C1:7D:E0:AF:D4:46:14:B7:2A:94:DE:45:67:61:6E:2B:96:62 X509v3 Authority Key Identifier: keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:43:36:8b:7e:34:1d:31:ef:e7:12:2c:98:5a:9f:d4:e4:6f: f6:ba:32:1b:11:a1:32:8e:df:e1:be:01:a8:e1:6a:d9:8d:36: e9:ba:5f:f7:cc:10:b4:44:67:c4:cf:4f:a1:9d:80:7f:a3:02: c2:4d:71:7c:91:4e:a6:86:0d:b5:1d:26:e0:46:94:2a:02:7d: 25:10:ba:8a:2e:d4:0a:47:cb:a8:30:87:33:c6:11:38:42:72: 2c:41:48:d3:6f:2d:4b:48:24:49:1f:8b:2f:5b:42:d5:ec:1f: 5b:8f:7d:80:c0:7d:56:13:c2:84:a8:07:41:27:67:1c:66:22: 1f:4a:e6:dc:76:9d:d6:93:2b:a9:2a:82:34:0a:32:42:b8:60: 06:cd:07:6b:09:9f:c0:df:20:6c:88:d1:a5:0d:4b:19:77:96: dc:58:e0:ce:93:bb:21:0c:28:24:3a:36:89:0d:26:81:06:32: e1:1e:98:ee:62:b3:7a:6f:32:44:74:96:4e:fd:d8:0d:56:68: 56:82:11:20:e5:38:26:fa:66:1c:77:8c:e4:a2:a5:d2:5c:26: e6:dc:b0:25:9a:fe:3c:d1:1e:de:0a:7b:a6:6a:a4:30:9e:da: bf:34:4b:45:59:5a:db:19:7f:70:c5:e1:2e:56:15:12:0b:80: a9:9b:7e:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wRPuVPKKuIg7FrfHblVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MjE2YTM2MDI3Nzg3NmUzZTkzYjI5YmQ0YmI5YzkyMzFm YWQyZjcwHhcNMjYwMjA5MTUwMDI0WhcNMjYwMjEwMTUwMDI0WjAzMTEwLwYDVQQD EyhiODdiYzE3ZGUwYWZkNDQ2MTRiNzJhOTRkZTQ1Njc2MTZlMmI5NjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz78QNxYuhtwJfxTZv4a5Je7pWZk ViEMYJdYI0VNcBYKXJfye6DdO8n968xE3M/cMrXAkB3y4XXNvvuU/dMZ5W3DZqj0 /3wCr8UnYaota0PI1h4qSmvU3N+yAljH5JAsOTcnCgWNAUFNxUNbQ7o3R2oSOng1 py0fbZIPXsmNWYEszDWow3JDdt/aSkyoLIY5UEIL6XKitxMrf9CYVJ3v7Xp3HgZg 0cZcRoxr+M/TihffmS++l9NX+tVHXjcSo35f708PrtBZKKdChmSWwZFxPT49Gz7u gdf/EsInvc4R2Gao1ezX+ZN3A8a1a+yXkSeLuz1zb2wsLCYQV8Kc8/uWdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLh7wX3gr9RGFLcqlN5FZ2FuK5ZiMB8GA1UdIwQY MBaAFDUhajYCd4duPpOym9S7nJIx+tL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWIt MjQ4YzQ3YjNjN2Q4LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWItMjQ4YzQ3YjNjN2Q4 LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUM2i340 HTHv5xIsmFqf1ORv9royGxGhMo7f4b4BqOFq2Y026bpf98wQtERnxM9PoZ2Af6MC wk1xfJFOpoYNtR0m4EaUKgJ9JRC6ii7UCkfLqDCHM8YROEJyLEFI028tS0gkSR+L L1tC1ewfW499gMB9VhPChKgHQSdnHGYiH0rm3Had1pMrqSqCNAoyQrhgBs0Hawmf wN8gbIjRpQ1LGXeW3FjgzpO7IQwoJDo2iQ0mgQYy4R6Y7mKzem8yRHSWTv3YDVZo VoIRIOU4JvpmHHeM5KKl0lwm5tywJZr+PNEe3gp7pmqkMJ7avzRLRVla2xl/cMXh LlYVEguAqZt+TQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:18 2026 by rpki-client