This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft File: NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json) Hash identifier: Ktg/on0u15AU8Cq+qsxB9kIH9E8Fm9RyIU0JgT5DzP0= Subject key identifier: 01:55:3F:60:D0:81:C3:2D:32:C9:D2:63:24:6E:6E:E2:F4:5D:5A:0F Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3 Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3 Certificate serial: 019C41A279C407886F94F768BE9759D336BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft Manifest number: 1551 Signing time: Mon 09 Feb 2026 09:01:32 +0000 Manifest this update: Mon 09 Feb 2026 09:01:32 +0000 Manifest next update: Tue 10 Feb 2026 09:01:32 +0000 Files and hashes: 1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: TiobAcmjc5wYWXNnxT7HaPP9kuQFyJBEsLSRoeNGJHY=) 2: nLdNc3uBYqXuQWe74YmK5T849LY.roa (hash: zK1HUD0p8PZSAAAocDxVA//Y+SMHbXms/tkLOsNaqAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:79:c4:07:88:6f:94:f7:68:be:97:59:d3:36:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3 Validity Not Before: Feb 9 09:01:32 2026 GMT Not After : Feb 10 09:01:32 2026 GMT Subject: CN=01553f60d081c32d32c9d263246e6ee2f45d5a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c1:5f:9b:a9:3a:35:38:a0:64:02:14:1c:e6: b7:67:c9:9a:72:e2:21:b2:b5:cc:4b:67:5d:05:b1: 48:47:b1:d3:a7:54:87:00:46:aa:35:cf:24:ee:24: ba:22:74:87:83:80:9d:32:3a:93:cb:83:bf:fa:61: 99:79:29:28:22:9d:e6:d4:10:a0:ce:99:5e:b0:23: c8:bc:37:2e:9b:b0:9e:71:1c:08:77:12:8c:40:0a: a6:90:c9:5d:c1:81:3d:7b:2e:9e:92:a6:2c:cd:10: 04:f6:dc:bb:1c:9f:fd:6e:64:42:17:2a:dd:fc:ef: 25:0d:c3:a7:ab:2c:03:cb:ee:36:c4:06:0f:6e:fa: a4:77:aa:6c:ba:95:f0:4c:51:c4:04:ab:7e:9c:71: 70:3d:40:ee:3c:11:87:72:ae:f3:9a:7c:0c:53:4c: f8:6d:5b:2d:d1:52:bb:cd:3b:12:32:2a:bd:70:11: a7:26:32:b8:77:77:c3:db:10:d5:62:bf:59:06:c9: d2:4a:c3:cd:96:3b:c5:84:fa:b2:aa:c8:07:6f:6d: 40:ef:d8:ee:c5:22:e3:9f:5b:6d:3c:cc:ee:39:de: 5a:ed:95:4d:cb:d9:d4:68:1b:3c:4a:e4:ae:82:94: 2d:2f:13:23:6d:40:41:95:95:02:b8:79:27:34:f5: 40:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:55:3F:60:D0:81:C3:2D:32:C9:D2:63:24:6E:6E:E2:F4:5D:5A:0F X509v3 Authority Key Identifier: keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:de:48:a1:a3:3f:9e:91:5c:e0:69:87:d7:a4:f3:95:15:db: a5:63:92:2e:b7:35:7f:01:d6:60:d1:6f:30:eb:f0:39:78:c3: 1b:0f:a4:6a:30:66:33:c3:32:46:bf:b1:0c:a4:c3:2f:d9:fe: b9:1d:60:aa:05:ba:c7:6b:f2:8e:9c:bd:dd:7f:a3:02:72:2c: 42:a6:ed:4c:43:2e:f2:ec:5b:83:a2:4c:cd:66:43:ca:22:ce: b5:4d:fa:96:ae:8d:ea:07:40:b0:dd:f4:74:f8:bf:7d:4a:d9: e4:3b:37:67:85:98:04:ca:45:cf:d6:e5:01:c1:b7:07:82:9d: 1b:cd:93:ae:c8:5a:62:5b:50:86:7a:89:a2:31:2c:d9:6a:5f: 61:9b:1d:33:c4:dc:46:94:43:7c:a2:ee:da:4c:9b:e7:c3:a8: 58:f3:22:06:ba:61:72:43:d4:3e:53:56:3a:c0:29:f7:6c:0b: 5d:c1:9b:79:6c:4d:f8:2c:c3:3a:7e:e9:0a:bf:23:e1:c1:40: 27:bf:4d:4f:ab:aa:0b:e3:aa:f9:43:da:96:f4:75:16:37:7a: 1d:e8:50:b2:07:bd:7a:f2:0e:7b:08:83:3a:d1:8d:36:8b:cc: f5:cf:58:0a:71:ce:25:ac:ef:b8:c4:9d:d2:3a:7f:ea:a3:de: ba:67:74:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBonnEB4hvlPdovpdZ0za/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWMwMmIzMGFkYmYxMGY3MWY5YmUwZjQ2NDQ0MjQ0OTgy NjNkZjMwHhcNMjYwMjA5MDkwMTMyWhcNMjYwMjEwMDkwMTMyWjAzMTEwLwYDVQQD EygwMTU1M2Y2MGQwODFjMzJkMzJjOWQyNjMyNDZlNmVlMmY0NWQ1YTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MFfm6k6NTigZAIUHOa3Z8macuIh srXMS2ddBbFIR7HTp1SHAEaqNc8k7iS6InSHg4CdMjqTy4O/+mGZeSkoIp3m1BCg zplesCPIvDcum7CecRwIdxKMQAqmkMldwYE9ey6ekqYszRAE9ty7HJ/9bmRCFyrd /O8lDcOnqywDy+42xAYPbvqkd6psupXwTFHEBKt+nHFwPUDuPBGHcq7zmnwMU0z4 bVst0VK7zTsSMiq9cBGnJjK4d3fD2xDVYr9ZBsnSSsPNljvFhPqyqsgHb21A79ju xSLjn1ttPMzuOd5a7ZVNy9nUaBs8SuSugpQtLxMjbUBBlZUCuHknNPVAaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFVP2DQgcMtMsnSYyRubuL0XVoPMB8GA1UdIwQY MBaAFDScArMK2/EPcfm+D0ZEQkSYJj3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp3Q3N3cmI4UTl4LWI0UFJrUkNSSmdtUGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84MTM4MjEtMjRmNC00ODVmLTljNGIt NDMzNDAzZDMwYTgzLzEvTkp3Q3N3cmI4UTl4LWI0UFJrUkNSSmdtUGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi84MTM4MjEtMjRmNC00ODVmLTljNGItNDMzNDAzZDMwYTgz LzEvTkp3Q3N3cmI4UTl4LWI0UFJrUkNSSmdtUGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADd5IoaM/ npFc4GmH16TzlRXbpWOSLrc1fwHWYNFvMOvwOXjDGw+kajBmM8MyRr+xDKTDL9n+ uR1gqgW6x2vyjpy93X+jAnIsQqbtTEMu8uxbg6JMzWZDyiLOtU36lq6N6gdAsN30 dPi/fUrZ5Ds3Z4WYBMpFz9blAcG3B4KdG82TrshaYltQhnqJojEs2WpfYZsdM8Tc RpRDfKLu2kyb58OoWPMiBrphckPUPlNWOsAp92wLXcGbeWxN+CzDOn7pCr8j4cFA J79NT6uqC+Oq+UPalvR1Fjd6HehQsge9evIOewiDOtGNNovM9c9YCnHOJazvuMSd 0jp/6qPeumd01A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:29 2026 by rpki-client