This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json) Hash identifier: 3vwq2u0z4+ZD/BiCdZaF/5Oa7SnQRpDU+Hlh6NFjJ+8= Subject key identifier: 3A:69:CE:18:C8:7F:EE:33:1C:B8:55:34:D9:5A:06:DB:D3:6B:14:D4 Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df Certificate serial: 019C4322B84F45760C985E4AABC4000C455D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:01:14 +0000 Manifest this update: Mon 09 Feb 2026 16:01:14 +0000 Manifest next update: Tue 10 Feb 2026 16:01:14 +0000 Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: nDFVrUHVhO/mceFwKQkaMorhDDyUt6esJlLg2Mw3ipo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b8:4f:45:76:0c:98:5e:4a:ab:c4:00:0c:45:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df Validity Not Before: Feb 9 16:01:14 2026 GMT Not After : Feb 10 16:01:14 2026 GMT Subject: CN=3a69ce18c87fee331cb85534d95a06dbd36b14d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d2:f1:fe:61:72:15:aa:4d:ab:4f:8b:53:c3: 61:1f:b9:fd:4a:6c:b0:0d:b7:67:93:53:19:c1:7b: ca:f4:1d:b3:86:34:f4:51:65:fa:0b:79:12:7f:bd: af:66:15:18:52:59:e8:ca:33:c7:e8:85:41:1c:4b: b1:64:4c:b4:93:d4:34:ee:73:fb:6d:dc:38:b3:f3: bc:98:b6:24:a1:16:d6:33:0d:cc:e5:9d:83:d8:a7: d7:90:20:b1:da:79:dc:5a:5d:bc:ef:26:e5:5e:37: 5b:8e:4b:2e:d5:0b:54:f4:4f:64:bf:89:a6:3b:85: 8b:4a:d6:c8:37:0b:1e:c1:e4:8b:6d:a5:ff:56:41: d7:37:5d:be:82:2e:b8:89:a3:06:0a:82:39:af:b7: 62:6a:c4:b3:12:fd:f7:68:87:bd:3a:05:8b:9f:de: a2:99:1f:02:39:46:3e:cb:d6:62:7a:91:8f:73:70: 1c:1f:89:90:2b:03:de:4e:34:8d:1e:9d:8f:c9:01: 30:4c:15:93:38:3c:2b:b5:1c:0a:dd:c0:02:4d:00: 82:ba:89:b6:5e:11:5a:25:c5:8f:2b:d0:b5:29:24: 80:a0:56:7d:be:a2:46:be:a2:76:b0:4d:e5:aa:46: cc:45:8c:37:36:1f:f0:dd:d4:94:e2:c4:30:5e:9e: c7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:69:CE:18:C8:7F:EE:33:1C:B8:55:34:D9:5A:06:DB:D3:6B:14:D4 X509v3 Authority Key Identifier: keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3d:fc:f2:c9:b9:e8:4a:20:3f:08:6e:c2:e7:03:e1:79:c5: 42:7d:b5:a3:90:d8:70:14:2e:13:9c:d5:4f:69:04:26:90:49: 68:e1:6e:87:6a:d0:5c:6c:92:c8:d6:23:75:96:e4:bb:ce:cd: 0f:c6:2f:72:37:02:dc:8c:35:95:d5:a8:fb:27:b2:0f:38:79: dc:6b:9a:ef:40:87:a6:fc:9c:46:1f:c0:32:e8:c1:0e:e6:39: 6f:f6:a4:cb:53:1f:58:d1:bf:d4:d0:59:75:87:54:e7:29:99: 40:0b:c7:0c:98:ab:5a:be:dc:a0:a5:1e:0b:49:4a:e4:36:62: 3a:e7:30:89:1f:a5:e0:b8:ac:07:cc:0c:11:f5:6c:cb:91:1d: 77:d7:f4:41:91:5f:34:12:39:23:65:e8:be:e6:ed:de:e7:57: 15:22:e2:62:b9:91:08:08:56:42:bb:ed:c5:6a:4b:36:32:8d: f4:0b:98:fa:9d:58:1b:09:41:ba:27:b8:27:30:42:23:c0:0b: 14:38:3f:b9:ff:15:b3:6f:49:3a:01:8f:a9:db:f4:ed:d3:86: 62:00:0c:ba:1e:d5:aa:d6:80:81:bd:00:12:f0:94:c9:6d:b7: 64:66:2f:9b:2d:46:57:8f:39:0a:1e:a3:0a:81:53:4d:20:12: 88:a1:95:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrhPRXYMmF5Kq8QADEVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWU0NTc5NGYwMTkyOWZkYWMyNzJjMjYyNmIzZTgyZWJj OWM1ZGYwHhcNMjYwMjA5MTYwMTE0WhcNMjYwMjEwMTYwMTE0WjAzMTEwLwYDVQQD EygzYTY5Y2UxOGM4N2ZlZTMzMWNiODU1MzRkOTVhMDZkYmQzNmIxNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydLx/mFyFapNq0+LU8NhH7n9Smyw Dbdnk1MZwXvK9B2zhjT0UWX6C3kSf72vZhUYUlnoyjPH6IVBHEuxZEy0k9Q07nP7 bdw4s/O8mLYkoRbWMw3M5Z2D2KfXkCCx2nncWl287yblXjdbjksu1QtU9E9kv4mm O4WLStbINwseweSLbaX/VkHXN12+gi64iaMGCoI5r7diasSzEv33aIe9OgWLn96i mR8COUY+y9ZiepGPc3AcH4mQKwPeTjSNHp2PyQEwTBWTODwrtRwK3cACTQCCuom2 XhFaJcWPK9C1KSSAoFZ9vqJGvqJ2sE3lqkbMRYw3Nh/w3dSU4sQwXp7HOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDppzhjIf+4zHLhVNNlaBtvTaxTUMB8GA1UdIwQY MBaAFDWeRXlPAZKf2sJywmJrPoLrycXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAt Yjg0NGNlMWM2MjM4LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAtYjg0NGNlMWM2MjM4 LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACD388sm5 6EogPwhuwucD4XnFQn21o5DYcBQuE5zVT2kEJpBJaOFuh2rQXGySyNYjdZbku87N D8YvcjcC3Iw1ldWo+yeyDzh53Gua70CHpvycRh/AMujBDuY5b/aky1MfWNG/1NBZ dYdU5ymZQAvHDJirWr7coKUeC0lK5DZiOucwiR+l4LisB8wMEfVsy5Edd9f0QZFf NBI5I2Xovubt3udXFSLiYrmRCAhWQrvtxWpLNjKN9AuY+p1YGwlBuie4JzBCI8AL FDg/uf8Vs29JOgGPqdv07dOGYgAMuh7VqtaAgb0AEvCUyW23ZGYvmy1GV485Ch6j CoFTTSASiKGVIA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:01 2026 by rpki-client