This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json) Hash identifier: DU5wVTpmsUU2TY93Ik5R5d4aHGgqnjFAAKQIY1nBwxI= Subject key identifier: C8:5E:63:C3:F0:3E:E1:B2:4E:0D:E5:6A:08:05:C2:FF:24:1A:32:04 Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf Certificate serial: 019C413454FEE40EC00645CDBBC6C455C1C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft Manifest number: 0D84 Signing time: Mon 09 Feb 2026 07:01:14 +0000 Manifest this update: Mon 09 Feb 2026 07:01:14 +0000 Manifest next update: Tue 10 Feb 2026 07:01:14 +0000 Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: Q1+x+q3bLHR5m+3qQar9i6GSl8SwJ7zVttMmiqvQ/y8=) 2: JB134IM9J5u4LXkvJ4iGFs0HNJ0.roa (hash: LO/2rEaU8NJadCqLNPLOuZLeub0erw3UpacAaLPm6Fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:54:fe:e4:0e:c0:06:45:cd:bb:c6:c4:55:c1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf Validity Not Before: Feb 9 07:01:14 2026 GMT Not After : Feb 10 07:01:14 2026 GMT Subject: CN=c85e63c3f03ee1b24e0de56a0805c2ff241a3204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:b5:f0:34:83:24:0b:2f:d5:68:37:26:6f: 86:6f:cb:cf:06:c2:f1:9b:61:a3:7a:0f:d7:58:99: 91:e7:33:3d:c8:2e:59:10:4a:bc:2a:d4:76:e0:ee: 2b:c5:96:a4:e4:3b:90:dd:ad:f0:45:6a:f4:3a:ee: 0d:b2:98:7f:94:11:c6:40:2e:c0:06:99:92:de:7f: 26:04:59:ce:e3:87:9a:d5:1a:ff:eb:98:60:58:5d: d3:f8:3d:23:a1:97:43:7b:27:9e:6a:88:f6:f3:6d: 29:0e:aa:d5:65:7f:2e:ac:59:a1:d6:3e:78:1c:4d: 6e:01:c4:29:f0:f3:d4:7d:80:97:bb:8c:26:e0:3c: 55:d5:bf:3d:50:ce:69:41:a9:1f:db:43:29:50:13: 50:d9:33:f3:d7:42:31:f9:bd:8e:90:75:0d:d1:c2: 00:df:06:8a:7b:e3:30:eb:0e:c6:88:17:67:f7:2e: 72:3a:e1:4a:29:28:b3:8e:29:3a:e9:56:7e:48:aa: 0f:dc:f2:e8:89:15:24:66:18:6d:ee:e3:32:15:ed: b4:26:a1:43:c7:2a:dd:1e:f1:ab:8c:a7:8c:da:1a: 19:82:8a:10:d4:8f:e3:76:3e:90:9b:5d:c0:11:f6: 71:bf:33:fc:43:4f:a4:f3:aa:dd:66:bd:52:f6:b7: af:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5E:63:C3:F0:3E:E1:B2:4E:0D:E5:6A:08:05:C2:FF:24:1A:32:04 X509v3 Authority Key Identifier: keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6d:b3:d0:0c:bd:14:f9:fd:07:2c:99:12:18:91:b5:b5:96: e9:19:c0:ab:91:9d:9d:b3:de:97:b7:00:93:4d:30:f0:1c:5e: 93:72:69:4d:98:4e:1f:99:ff:7c:98:40:e0:89:ca:27:50:eb: 82:f2:98:0b:68:26:48:1b:b0:b3:4d:dd:b0:42:a4:25:16:97: 57:b9:53:01:66:61:2a:45:7b:14:74:4b:62:61:e6:97:6e:a0: 1e:5f:e1:31:dc:aa:04:d0:a9:a7:11:fa:ff:f3:91:ed:bf:3f: 88:7b:18:8a:80:34:09:4f:0c:31:83:13:bb:95:b5:7f:ea:0b: e2:46:4e:79:08:84:a1:f2:2f:08:9d:5c:4d:77:14:7b:68:b4: c0:2d:d9:bf:69:bf:fe:38:9a:de:54:de:24:e9:c1:50:c6:33: ca:5e:7c:38:65:70:1d:32:20:1e:4a:33:0e:db:10:ba:26:56: d9:5d:b0:ea:09:76:7b:3c:3b:5d:52:da:d6:5c:eb:76:5d:df: e2:97:e8:4c:13:0b:14:31:2d:38:b2:b7:c5:86:e3:24:91:24: 6d:63:ad:28:2a:1e:73:b2:31:81:e6:6a:37:6e:e9:23:50:6e: 76:85:57:2b:8f:d6:3c:67:1e:4f:bc:12:a2:ef:59:37:9f:01: d7:61:52:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNFT+5A7ABkXNu8bEVcHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZDZlNjU1MDViNGY0ZTRmNGYzMWQ5MGI4YjIxYTNhN2Nm YjBlYmYwHhcNMjYwMjA5MDcwMTE0WhcNMjYwMjEwMDcwMTE0WjAzMTEwLwYDVQQD EyhjODVlNjNjM2YwM2VlMWIyNGUwZGU1NmEwODA1YzJmZjI0MWEzMjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQO18DSDJAsv1Wg3Jm+Gb8vPBsLx m2Gjeg/XWJmR5zM9yC5ZEEq8KtR24O4rxZak5DuQ3a3wRWr0Ou4Nsph/lBHGQC7A BpmS3n8mBFnO44ea1Rr/65hgWF3T+D0joZdDeyeeaoj2820pDqrVZX8urFmh1j54 HE1uAcQp8PPUfYCXu4wm4DxV1b89UM5pQakf20MpUBNQ2TPz10Ix+b2OkHUN0cIA 3waKe+Mw6w7GiBdn9y5yOuFKKSizjik66VZ+SKoP3PLoiRUkZhht7uMyFe20JqFD xyrdHvGrjKeM2hoZgooQ1I/jdj6Qm13AEfZxvzP8Q0+k86rdZr1S9revdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMheY8PwPuGyTg3laggFwv8kGjIEMB8GA1UdIwQY MBaAFNDW5lUFtPTk9PMdkLiyGjp8+w6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME5ibVZRVzA5T1QwOHgyUXVMSWFPbno3RHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80NjU1NTYtNzBkMS00MTUyLWE2NWEt NmM2M2UxNTIyNDJkLzEvME5ibVZRVzA5T1QwOHgyUXVMSWFPbno3RHI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80NjU1NTYtNzBkMS00MTUyLWE2NWEtNmM2M2UxNTIyNDJk LzEvME5ibVZRVzA5T1QwOHgyUXVMSWFPbno3RHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnm2z0Ay9 FPn9ByyZEhiRtbWW6RnAq5GdnbPel7cAk00w8Bxek3JpTZhOH5n/fJhA4InKJ1Dr gvKYC2gmSBuws03dsEKkJRaXV7lTAWZhKkV7FHRLYmHml26gHl/hMdyqBNCppxH6 //OR7b8/iHsYioA0CU8MMYMTu5W1f+oL4kZOeQiEofIvCJ1cTXcUe2i0wC3Zv2m/ /jia3lTeJOnBUMYzyl58OGVwHTIgHkozDtsQuiZW2V2w6gl2ezw7XVLa1lzrdl3f 4pfoTBMLFDEtOLK3xYbjJJEkbWOtKCoec7IxgeZqN27pI1BudoVXK4/WPGceT7wS ou9ZN58B12FSnw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:16 2026 by rpki-client