This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json) Hash identifier: NrDFw9ncrxuJZHvykm8lPvWF9f5rGt9zbq6E6gERbI0= Subject key identifier: C3:FD:0B:F5:28:B0:B9:8E:00:3A:60:5F:D0:53:E6:D8:8A:F0:AD:BA Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0 Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0 Certificate serial: 019C446BABDF08A2127E84D2F67AF7F661B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft Manifest number: 10D1 Signing time: Mon 09 Feb 2026 22:00:32 +0000 Manifest this update: Mon 09 Feb 2026 22:00:32 +0000 Manifest next update: Tue 10 Feb 2026 22:00:32 +0000 Files and hashes: 1: EegrrbfeC9SgkR2CZfyo0Bs1_34.roa (hash: F2/jpGD8TRNF02/czQ88JphqmKluFCTY4tvjgN66Ezs=) 2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: Qk4XXyvqBR+6/PcB0iRyOJ0NflZwoTnxUT2aHRi6aZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:ab:df:08:a2:12:7e:84:d2:f6:7a:f7:f6:61:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0 Validity Not Before: Feb 9 22:00:32 2026 GMT Not After : Feb 10 22:00:32 2026 GMT Subject: CN=c3fd0bf528b0b98e003a605fd053e6d88af0adba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5d:a3:15:a5:fa:ea:b1:77:86:9e:56:ac:dd: 71:e8:fe:05:eb:9f:37:46:a3:21:84:cd:e0:56:aa: 66:35:f4:bb:37:81:8b:f4:69:72:e3:4e:14:f3:b7: 1b:88:b3:d0:f2:80:cd:58:b6:cb:4b:a8:4e:5c:f4: 37:39:78:87:fa:9e:47:11:23:65:23:f3:ec:03:4e: 21:37:9a:00:8e:b0:4e:95:81:f5:77:60:5d:b1:8f: 21:e9:b9:6b:21:56:7f:00:b5:42:d5:bb:fc:bb:76: 1d:59:63:95:d8:58:d7:34:41:33:92:53:d1:44:b9: 51:4c:3e:9d:2d:52:d3:df:bd:8a:88:eb:19:45:9a: f2:be:aa:c2:ab:2b:d0:d1:ca:90:36:eb:eb:03:51: 37:6e:16:e6:92:30:7f:25:cb:2f:7a:9d:d2:e6:fe: e0:f8:75:6b:6e:6c:f7:19:ce:00:e0:2b:7b:de:ba: ae:65:23:79:e2:1e:d3:71:7b:23:46:64:ff:21:d4: d4:3b:1c:85:21:26:84:c2:38:e5:c2:bf:47:82:99: 42:49:a6:a0:19:59:2d:f6:e3:88:9f:0b:49:6e:86: 7b:0d:2a:28:e4:a0:50:30:ab:5b:c4:ed:7f:57:f2: 2b:ac:72:b9:01:1d:ee:cb:3c:de:44:ed:60:73:fa: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FD:0B:F5:28:B0:B9:8E:00:3A:60:5F:D0:53:E6:D8:8A:F0:AD:BA X509v3 Authority Key Identifier: keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:cb:16:b9:67:d2:40:7f:72:1a:8b:0f:d3:1c:32:3b:f5:1b: a1:4a:70:34:21:9b:bc:2b:8f:65:d4:8e:b9:b2:54:b5:c3:18: 44:c6:66:77:92:ba:15:90:b5:7f:cf:f4:a3:69:2e:a8:c6:51: 62:20:57:68:87:f3:fe:39:79:f6:84:d1:e2:2d:af:ec:ea:ad: c1:b1:bd:85:66:bc:1a:f0:53:ae:62:25:d8:98:f1:f0:3c:d7: 42:9e:17:73:6c:5e:ef:83:a3:1e:6b:23:c4:7d:06:2f:d3:fb: 3e:27:ab:ac:f9:41:0e:47:ec:4e:09:70:74:94:98:95:d6:b0: 6c:fb:af:92:06:1d:42:96:f9:f2:b2:e7:1e:17:6c:5a:05:b1: 06:5c:ba:e5:72:82:91:d8:b4:82:d4:2a:64:d9:ae:93:50:c7: ca:25:31:53:f4:32:66:aa:07:6d:5e:76:be:cf:db:4f:6d:18: b9:bf:03:a2:fb:38:53:54:07:a8:f0:47:7c:ef:80:23:0f:a2: 27:fb:b5:0a:aa:e3:89:a8:0c:18:6f:2b:1b:3e:8b:98:ee:47: 8d:c2:24:12:5b:f3:18:34:28:7c:1d:b8:06:0b:ab:af:94:e2: a2:94:df:7a:df:9b:9a:13:74:50:d4:3e:6d:e2:d2:7b:89:2c: 18:12:6f:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa6vfCKISfoTS9nr39mG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNjliNmIyYTBhNzI4MThkMWZhOWE0NmVmMmFkNzgxMmI5 NWJjYzAwHhcNMjYwMjA5MjIwMDMyWhcNMjYwMjEwMjIwMDMyWjAzMTEwLwYDVQQD EyhjM2ZkMGJmNTI4YjBiOThlMDAzYTYwNWZkMDUzZTZkODhhZjBhZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l2jFaX66rF3hp5WrN1x6P4F6583 RqMhhM3gVqpmNfS7N4GL9Gly404U87cbiLPQ8oDNWLbLS6hOXPQ3OXiH+p5HESNl I/PsA04hN5oAjrBOlYH1d2BdsY8h6blrIVZ/ALVC1bv8u3YdWWOV2FjXNEEzklPR RLlRTD6dLVLT372KiOsZRZryvqrCqyvQ0cqQNuvrA1E3bhbmkjB/Jcsvep3S5v7g +HVrbmz3Gc4A4Ct73rquZSN54h7TcXsjRmT/IdTUOxyFISaEwjjlwr9HgplCSaag GVkt9uOInwtJboZ7DSoo5KBQMKtbxO1/V/IrrHK5AR3uyzzeRO1gc/pFewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMP9C/UosLmOADpgX9BT5tiK8K26MB8GA1UdIwQY MBaAFJ1ptrKgpygY0fqaRu8q14ErlbzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzkt Mzk2MDc4MjFhMDlhLzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzktMzk2MDc4MjFhMDlh LzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8sWuWfS QH9yGosP0xwyO/UboUpwNCGbvCuPZdSOubJUtcMYRMZmd5K6FZC1f8/0o2kuqMZR YiBXaIfz/jl59oTR4i2v7OqtwbG9hWa8GvBTrmIl2Jjx8DzXQp4Xc2xe74OjHmsj xH0GL9P7PierrPlBDkfsTglwdJSYldawbPuvkgYdQpb58rLnHhdsWgWxBly65XKC kdi0gtQqZNmuk1DHyiUxU/QyZqoHbV52vs/bT20Yub8Dovs4U1QHqPBHfO+AIw+i J/u1CqrjiagMGG8rGz6LmO5HjcIkElvzGDQofB24Bgurr5TiopTfet+bmhN0UNQ+ beLSe4ksGBJvXQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:55 2026 by rpki-client