This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft File: NrzwGgmAWLhROxb9nksbI4_Nb1g.mft (raw, json) Hash identifier: to9w/iwXziiagov891QLprRkm5rBGhgQB2bx8rbQBwo= Subject key identifier: 9F:10:22:BE:E0:E5:91:EE:BF:4F:4C:52:EC:88:A8:FB:96:C1:0B:1D Authority key identifier: 36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58 Certificate issuer: /CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58 Certificate serial: 019C4434B5F41BAA3F18205A628C0CFCBD01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft Manifest number: 03BE Signing time: Mon 09 Feb 2026 21:00:30 +0000 Manifest this update: Mon 09 Feb 2026 21:00:30 +0000 Manifest next update: Tue 10 Feb 2026 21:00:30 +0000 Files and hashes: 1: NrzwGgmAWLhROxb9nksbI4_Nb1g.crl (hash: 5jg09gOjoMclVI3eHRvMwsXJ3nJ0d9bmY717oqu3H88=) 2: _8F0lsXlsoNmIGarfGop87h2ymI.roa (hash: vKpahHvP7psgUsaXQeYhHsIR4SzsOJrDnRksmg7tAyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:b5:f4:1b:aa:3f:18:20:5a:62:8c:0c:fc:bd:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58 Validity Not Before: Feb 9 21:00:30 2026 GMT Not After : Feb 10 21:00:30 2026 GMT Subject: CN=9f1022bee0e591eebf4f4c52ec88a8fb96c10b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:c9:fe:f6:77:68:e3:b2:ff:c5:58:a3:68: d6:4b:54:38:f5:47:de:9a:91:f2:b6:07:1c:4c:b1: a8:62:3f:e0:be:41:b0:fe:88:d6:92:fc:6f:e0:73: b3:6c:cc:58:c5:e9:15:c2:1d:c5:91:33:1e:b2:8a: 9c:6f:81:5d:b0:79:0f:62:b1:9a:fd:55:dd:d9:71: 49:9e:3b:34:57:7e:0e:c8:22:33:c8:00:a9:b8:50: a3:90:4e:91:73:58:dc:d5:d4:96:de:e2:00:7a:79: 1e:2d:04:ce:76:ae:6e:18:e8:90:71:28:28:f3:69: 6c:96:4d:01:77:df:f4:39:17:10:cb:7f:8c:28:88: fd:1c:36:3f:1a:2f:1f:59:57:d6:98:e3:31:13:f2: a8:ea:f4:d7:cd:21:fb:80:48:21:53:75:b1:f2:76: a0:0c:86:35:5b:2b:13:b3:f5:11:99:e1:68:6a:c8: cf:c8:6f:a9:31:4f:6f:27:54:02:ad:85:ec:8e:4b: 61:de:f6:38:5e:73:55:9b:c5:64:d1:45:bc:df:d9: f9:7c:c6:84:c3:7a:8b:49:3b:e7:5f:c3:f1:56:72: 54:ce:93:17:e1:7e:75:9e:43:77:7f:ef:fd:41:3f: 66:a3:c2:80:63:44:60:9f:33:55:77:fe:df:6f:fa: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:10:22:BE:E0:E5:91:EE:BF:4F:4C:52:EC:88:A8:FB:96:C1:0B:1D X509v3 Authority Key Identifier: keyid:36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:99:9f:86:db:3d:7a:b8:d1:c1:ad:c3:39:9e:ea:dd:7f:fd: 41:28:2d:9f:b4:d1:14:b5:01:37:e5:c0:37:3b:5f:53:08:6c: d6:14:8c:f6:63:9f:ef:14:10:66:62:96:06:ea:c7:c9:83:67: 8d:6f:0b:82:ee:b4:46:5c:f0:19:cd:56:41:18:e6:af:e7:c7: 18:8b:b5:e6:3f:c3:50:45:75:41:d4:22:2a:d9:ca:4a:65:38: 9e:39:b2:31:ca:4d:ec:12:0e:38:91:11:51:00:f3:f1:e7:53: 3e:cf:4b:b1:6f:64:0e:e8:fe:9b:76:99:1a:02:56:11:e7:11: f3:88:04:d8:74:e2:88:63:9a:8d:65:27:a1:d3:0e:f6:e0:fb: e0:76:96:ea:79:e7:32:7d:72:70:a6:89:68:c2:8f:33:8e:55: 7f:9c:24:1c:cf:3b:58:b0:2a:dd:28:06:11:d5:f8:b0:fc:18: b7:33:f7:5a:ff:78:8b:1a:4a:e7:d8:f3:ff:77:41:c2:e7:4e: a9:52:20:dc:0a:92:91:36:d0:55:2f:1a:3d:97:7c:6e:55:24: 28:e0:de:e9:3a:4b:6d:6e:ea:db:97:16:81:15:a6:77:74:30: c4:e2:34:9c:06:d4:25:4d:99:6d:e9:db:df:cd:6a:d8:f7:e1: 24:0f:52:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENLX0G6o/GCBaYowM/L0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmNmMDFhMDk4MDU4Yjg1MTNiMTZmZDllNGIxYjIzOGZj ZDZmNTgwHhcNMjYwMjA5MjEwMDMwWhcNMjYwMjEwMjEwMDMwWjAzMTEwLwYDVQQD Eyg5ZjEwMjJiZWUwZTU5MWVlYmY0ZjRjNTJlYzg4YThmYjk2YzEwYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLXJ/vZ3aOOy/8VYo2jWS1Q49Ufe mpHytgccTLGoYj/gvkGw/ojWkvxv4HOzbMxYxekVwh3FkTMesoqcb4FdsHkPYrGa /VXd2XFJnjs0V34OyCIzyACpuFCjkE6Rc1jc1dSW3uIAenkeLQTOdq5uGOiQcSgo 82lslk0Bd9/0ORcQy3+MKIj9HDY/Gi8fWVfWmOMxE/Ko6vTXzSH7gEghU3Wx8nag DIY1WysTs/URmeFoasjPyG+pMU9vJ1QCrYXsjkth3vY4XnNVm8Vk0UW839n5fMaE w3qLSTvnX8PxVnJUzpMX4X51nkN3f+/9QT9mo8KAY0RgnzNVd/7fb/ozqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8QIr7g5ZHuv09MUuyIqPuWwQsdMB8GA1UdIwQY MBaAFDa88BoJgFi4UTsW/Z5LGyOPzW9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJ6d0dnbUFXTGhST3hiOW5rc2JJNF9OYjFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wYzhkYjYtNzFmZC00MzIwLWEwZGMt MTg2MDgwZWQ5MDAyLzEvTnJ6d0dnbUFXTGhST3hiOW5rc2JJNF9OYjFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wYzhkYjYtNzFmZC00MzIwLWEwZGMtMTg2MDgwZWQ5MDAy LzEvTnJ6d0dnbUFXTGhST3hiOW5rc2JJNF9OYjFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwZmfhts9 erjRwa3DOZ7q3X/9QSgtn7TRFLUBN+XANztfUwhs1hSM9mOf7xQQZmKWBurHyYNn jW8Lgu60RlzwGc1WQRjmr+fHGIu15j/DUEV1QdQiKtnKSmU4njmyMcpN7BIOOJER UQDz8edTPs9LsW9kDuj+m3aZGgJWEecR84gE2HTiiGOajWUnodMO9uD74HaW6nnn Mn1ycKaJaMKPM45Vf5wkHM87WLAq3SgGEdX4sPwYtzP3Wv94ixpK59jz/3dBwudO qVIg3AqSkTbQVS8aPZd8blUkKODe6TpLbW7q25cWgRWmd3QwxOI0nAbUJU2Zbenb 381q2PfhJA9SYA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:47 2026 by rpki-client