This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json) Hash identifier: Yukf9sicAq0NkuqFBXSJLBB6WE8Zdu7P2xeabfhj3I8= Subject key identifier: 7F:1A:48:7B:33:12:BA:DC:CE:8C:C5:10:87:AD:CF:58:2D:80:EA:6B Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b Certificate serial: 019C41D8E0EDDDCE0C7D2B12026089AEDB51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft Manifest number: 1171 Signing time: Mon 09 Feb 2026 10:00:58 +0000 Manifest this update: Mon 09 Feb 2026 10:00:58 +0000 Manifest next update: Tue 10 Feb 2026 10:00:58 +0000 Files and hashes: 1: KvPSPYiMofHoVvDkuy76IpD7FIg.roa (hash: Mlo4RDiRvwndc4Eb1qzhPPj36O1+QMrpHmy4zsicFwU=) 2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: 9PjIlego0k/yGUQe1cputSzHeX97TazjfL+bMvk/ZLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e0:ed:dd:ce:0c:7d:2b:12:02:60:89:ae:db:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b Validity Not Before: Feb 9 10:00:58 2026 GMT Not After : Feb 10 10:00:58 2026 GMT Subject: CN=7f1a487b3312badcce8cc51087adcf582d80ea6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:68:0b:94:78:65:aa:bf:07:0d:6c:43:75:01: fa:51:2a:c0:fc:3e:1f:9d:d6:73:b0:cb:69:2a:d6: 3f:18:43:1a:1a:7b:a7:eb:0d:fc:6c:58:6c:b7:14: 5d:95:44:e6:bb:43:51:92:10:ca:fb:53:ee:8f:1f: fd:17:c7:c4:21:7f:ec:5d:39:a0:24:d2:6f:87:95: a1:d4:fd:29:f1:5d:bc:57:1e:ca:ec:43:c0:4c:c4: df:67:05:7d:76:25:39:0c:6c:ec:20:50:9d:0f:0e: 38:7b:78:3d:60:c9:bb:e9:a4:d9:8a:c5:09:f9:1e: 0b:a0:b7:83:52:7c:45:6e:e5:48:ca:71:d3:4f:6f: 91:87:93:68:e9:8f:a4:3d:d4:dd:59:de:11:2a:14: e2:79:07:0a:00:14:c6:bb:25:14:df:0b:0a:d9:97: ef:2d:6d:00:fb:c9:c3:b6:fd:12:9f:78:c7:11:02: 2d:a4:ce:28:23:3e:f8:6c:07:33:bd:38:33:23:e6: a4:72:f9:66:fb:05:9e:55:92:56:c3:04:e3:43:da: 00:01:6d:08:45:4f:31:1f:5f:dc:a1:d7:c4:1f:d6: 13:2d:2d:b9:ce:3f:8a:92:1f:47:49:a3:7d:c8:8d: a1:79:f2:67:94:63:71:7f:4a:82:70:f3:0a:38:51: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1A:48:7B:33:12:BA:DC:CE:8C:C5:10:87:AD:CF:58:2D:80:EA:6B X509v3 Authority Key Identifier: keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6a:7d:15:6c:fe:34:1d:b6:8d:ef:94:90:2c:b6:b1:64:f6: 6b:4e:33:fd:97:55:96:02:35:60:63:5c:89:ab:f3:04:48:c1: b4:cb:cb:48:d9:da:d3:f3:2e:ee:4f:71:f3:49:24:39:92:c8: 27:a0:60:d2:57:e9:e2:79:f1:4e:8d:73:50:32:ba:0f:2b:82: a9:09:74:e9:7e:68:48:55:6b:13:e2:b6:69:41:a8:4e:da:3b: da:06:3d:8e:d5:84:15:47:26:90:db:10:b8:39:c0:6e:55:40: 25:cc:8c:bc:50:4a:5b:97:c0:8d:31:3f:65:91:b8:2d:fa:ce: 22:f3:6b:4c:a6:a3:2b:cc:b2:9d:ed:6f:6c:8f:bd:de:ba:ec: 11:7e:17:69:17:c9:e0:92:04:75:b4:7a:08:bb:04:82:25:f0: 04:b6:09:c1:f5:1d:70:44:fc:6c:2e:4c:2a:c2:bd:8e:92:63: 62:b5:2f:08:ce:e7:fe:f8:42:35:2c:c3:03:07:55:c7:e8:e5: f0:86:65:8c:fe:97:63:c2:74:6e:63:25:8e:96:06:7f:47:f3: a3:f0:24:cf:c1:5f:50:61:d7:fa:7c:fa:e6:90:e4:0f:94:65: 09:d4:2a:09:f5:d6:46:4b:dc:8b:03:81:ed:2d:41:51:84:e4: 58:9a:36:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2ODt3c4MfSsSAmCJrttRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZjE5ODcxYjE3NTlmMzIzNzAxMmU0YjZkYmI2YzJmZDJi ZThiNGIwHhcNMjYwMjA5MTAwMDU4WhcNMjYwMjEwMTAwMDU4WjAzMTEwLwYDVQQD Eyg3ZjFhNDg3YjMzMTJiYWRjY2U4Y2M1MTA4N2FkY2Y1ODJkODBlYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WgLlHhlqr8HDWxDdQH6USrA/D4f ndZzsMtpKtY/GEMaGnun6w38bFhstxRdlUTmu0NRkhDK+1Pujx/9F8fEIX/sXTmg JNJvh5Wh1P0p8V28Vx7K7EPATMTfZwV9diU5DGzsIFCdDw44e3g9YMm76aTZisUJ +R4LoLeDUnxFbuVIynHTT2+Rh5No6Y+kPdTdWd4RKhTieQcKABTGuyUU3wsK2Zfv LW0A+8nDtv0Sn3jHEQItpM4oIz74bAczvTgzI+akcvlm+wWeVZJWwwTjQ9oAAW0I RU8xH1/codfEH9YTLS25zj+Kkh9HSaN9yI2hefJnlGNxf0qCcPMKOFGVRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8aSHszErrczozFEIetz1gtgOprMB8GA1UdIwQY MBaAFJ7xmHGxdZ8yNwEuS227bC/SvotLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQt NGEwY2IyNTVkNzNhLzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQtNGEwY2IyNTVkNzNh LzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGp9FWz+ NB22je+UkCy2sWT2a04z/ZdVlgI1YGNciavzBEjBtMvLSNna0/Mu7k9x80kkOZLI J6Bg0lfp4nnxTo1zUDK6DyuCqQl06X5oSFVrE+K2aUGoTto72gY9jtWEFUcmkNsQ uDnAblVAJcyMvFBKW5fAjTE/ZZG4LfrOIvNrTKajK8yyne1vbI+93rrsEX4XaRfJ 4JIEdbR6CLsEgiXwBLYJwfUdcET8bC5MKsK9jpJjYrUvCM7n/vhCNSzDAwdVx+jl 8IZljP6XY8J0bmMljpYGf0fzo/Akz8FfUGHX+nz65pDkD5RlCdQqCfXWRkvciwOB 7S1BUYTkWJo2XQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:37 2026 by rpki-client