This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json) Hash identifier: CgxL1oejFFCi6c21dOTXIzsPPHk02kB4ZEHogfTE6Yw= Subject key identifier: 79:C6:2C:95:16:AB:C2:24:CB:2B:81:D3:9A:B0:A3:96:57:CF:41:6A Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c Certificate serial: 019C42464B095D57FA2EC97FCF6859741366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 12:00:28 +0000 Manifest this update: Mon 09 Feb 2026 12:00:28 +0000 Manifest next update: Tue 10 Feb 2026 12:00:28 +0000 Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: XiYtqI40sHqENambhGRF736Le9SW+XVcDe2bsIyqw88=) 2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:4b:09:5d:57:fa:2e:c9:7f:cf:68:59:74:13:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c Validity Not Before: Feb 9 12:00:28 2026 GMT Not After : Feb 10 12:00:28 2026 GMT Subject: CN=79c62c9516abc224cb2b81d39ab0a39657cf416a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5e:63:4a:33:3d:47:28:d6:78:0b:e3:bb:f8: 48:b0:6b:3c:65:98:ee:41:dd:33:d2:f6:7b:ee:9a: 08:df:e6:7d:3e:97:61:6e:08:5a:6e:67:d1:d1:b1: 16:13:9b:c8:6f:d6:54:be:04:47:7d:e1:ed:78:81: 2c:bf:06:63:d2:e1:ab:5c:88:c1:97:ba:cd:23:8d: 73:7e:00:2d:74:98:f0:29:84:7e:d5:52:46:19:5b: 3f:57:a5:9d:2c:6c:53:b4:94:b4:42:9e:13:18:aa: 77:a6:b7:48:92:28:2e:80:c9:64:2e:36:4c:f8:ce: 4f:c8:e9:80:13:b2:89:eb:7f:82:9e:b0:48:27:8d: 87:3e:41:2b:a0:bb:76:3d:73:52:42:39:ad:48:c5: 74:40:5b:38:93:0e:6e:77:3b:f7:98:e3:ab:c1:5c: f9:16:b2:fd:91:34:ba:4e:17:33:80:08:c5:f1:84: 35:5a:41:40:af:94:fe:c3:95:de:a0:2f:28:f6:16: 0c:66:5f:3e:77:ee:5b:7f:74:d6:f9:d0:22:f4:41: d8:62:ec:29:d4:50:17:4f:2c:27:a7:89:3d:f4:78: 98:d4:6b:a5:33:3f:56:57:b3:d1:d1:eb:c1:83:1f: 40:2c:11:1b:87:90:51:62:79:a6:2e:62:55:68:6f: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C6:2C:95:16:AB:C2:24:CB:2B:81:D3:9A:B0:A3:96:57:CF:41:6A X509v3 Authority Key Identifier: keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:35:d4:c7:d7:5a:3a:4c:a4:26:80:96:59:f6:8e:86:b9:5e: 7a:63:e3:82:97:f0:c0:5b:4a:9e:91:28:21:c2:af:83:a9:7c: 9c:05:cb:ca:f1:09:3f:b8:13:e1:78:be:8a:41:45:05:66:f1: ca:cd:fe:55:8f:35:75:df:23:7b:48:a5:30:d4:5b:36:dd:6f: 30:d7:78:e1:d5:1e:09:b9:5b:f0:79:1a:4e:c1:f9:89:ae:ec: 72:b2:ad:3f:0f:1e:5d:bd:ad:6e:12:53:d4:0a:25:fc:29:07: 4a:dc:bc:49:56:76:9e:96:a9:3f:e0:fe:b0:97:59:60:01:88: be:e0:89:ed:33:3a:3b:b3:74:d4:39:de:ab:a5:0e:a4:6e:9c: 18:31:b8:de:90:48:42:34:2a:b0:c0:d7:5c:df:9b:57:de:11: 2d:77:9e:38:3b:09:a6:85:77:a6:74:55:d7:74:5c:cd:ca:f5: 37:06:ad:d0:d2:a9:9f:a0:f3:43:b5:f3:1b:97:7f:96:91:f4: a0:b7:b6:83:1b:2b:a7:65:3a:ff:70:41:1f:29:8f:3f:49:2e: 02:5a:f2:fe:c6:94:da:bb:b2:0d:4f:6a:90:f6:f2:ae:fa:c9: 39:d3:98:0a:b7:69:15:c0:14:f2:84:b7:71:97:24:da:9e:58: 91:c8:0a:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRksJXVf6Lsl/z2hZdBNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDQ1ZjJhYzViY2UxNTY5ZGY2YjJhZDgwZDE2ZjFiOTJm YmQ4NWMwHhcNMjYwMjA5MTIwMDI4WhcNMjYwMjEwMTIwMDI4WjAzMTEwLwYDVQQD Eyg3OWM2MmM5NTE2YWJjMjI0Y2IyYjgxZDM5YWIwYTM5NjU3Y2Y0MTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml5jSjM9RyjWeAvju/hIsGs8ZZju Qd0z0vZ77poI3+Z9PpdhbghabmfR0bEWE5vIb9ZUvgRHfeHteIEsvwZj0uGrXIjB l7rNI41zfgAtdJjwKYR+1VJGGVs/V6WdLGxTtJS0Qp4TGKp3prdIkigugMlkLjZM +M5PyOmAE7KJ63+CnrBIJ42HPkEroLt2PXNSQjmtSMV0QFs4kw5udzv3mOOrwVz5 FrL9kTS6ThczgAjF8YQ1WkFAr5T+w5XeoC8o9hYMZl8+d+5bf3TW+dAi9EHYYuwp 1FAXTywnp4k99HiY1GulMz9WV7PR0evBgx9ALBEbh5BRYnmmLmJVaG8x/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnGLJUWq8IkyyuB05qwo5ZXz0FqMB8GA1UdIwQY MBaAFDXUXyrFvOFWnfayrYDRbxuS+9hcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUt NmI3ZDdlNGVkNzAxLzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUtNmI3ZDdlNGVkNzAx LzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijXUx9da OkykJoCWWfaOhrleemPjgpfwwFtKnpEoIcKvg6l8nAXLyvEJP7gT4Xi+ikFFBWbx ys3+VY81dd8je0ilMNRbNt1vMNd44dUeCblb8HkaTsH5ia7scrKtPw8eXb2tbhJT 1Aol/CkHSty8SVZ2npapP+D+sJdZYAGIvuCJ7TM6O7N01Dneq6UOpG6cGDG43pBI QjQqsMDXXN+bV94RLXeeODsJpoV3pnRV13Rczcr1Nwat0NKpn6DzQ7XzG5d/lpH0 oLe2gxsrp2U6/3BBHymPP0kuAlry/saU2ruyDU9qkPbyrvrJOdOYCrdpFcAU8oS3 cZck2p5YkcgKyA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:05 2026 by rpki-client