This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json) Hash identifier: FiN2UPM4MOMFkLeIiS7qwQ/y7OeaSdZA2XA4+62u8ak= Subject key identifier: 4C:EC:15:B8:88:73:22:D6:89:B2:2B:70:27:40:51:48:49:11:56:0C Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8 Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8 Certificate serial: 019C42B42E4FABCC243D7420B6825FA7F638 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 14:00:30 +0000 Manifest this update: Mon 09 Feb 2026 14:00:30 +0000 Manifest next update: Tue 10 Feb 2026 14:00:30 +0000 Files and hashes: 1: Uelu6l4NquwAbyVxi9MJYjggwy0.roa (hash: ssdwawQd6a83Zwysw9XF2aqNC9cl5v3DkKLPdZdT8pQ=) 2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: vieAv4ROiHDDHL2XdpT+xkNOG0wxecBkliBMzPYeB68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2e:4f:ab:cc:24:3d:74:20:b6:82:5f:a7:f6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8 Validity Not Before: Feb 9 14:00:30 2026 GMT Not After : Feb 10 14:00:30 2026 GMT Subject: CN=4cec15b8887322d689b22b70274051484911560c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:f7:39:05:7b:64:1c:63:96:28:75:b7:23: 84:9a:cb:ff:05:45:bb:6c:9a:1c:24:d7:6e:fb:e9: 28:60:65:ae:1b:10:8b:54:02:5e:1f:18:07:60:a4: 82:dc:f3:51:17:02:85:9a:b0:4f:fa:47:35:6b:39: 52:1e:4d:2c:38:d9:05:de:55:c6:8e:53:e4:93:1d: cf:4f:f3:e5:05:2e:72:c7:23:af:ef:e5:60:c3:59: 77:c3:a1:fd:32:99:e3:a9:f8:e1:4d:88:5d:09:a3: 64:c3:f1:fc:b4:60:ed:b1:43:dd:63:e6:e6:0e:55: aa:6f:73:1c:ce:ff:3c:6c:a7:82:2a:41:f7:4a:85: 09:9a:99:ea:d2:47:15:72:c8:a6:e6:a9:8c:e5:44: 01:50:25:2e:68:9b:5f:d7:55:71:62:61:13:21:fe: 59:2e:05:ea:89:b7:1e:8d:31:76:52:e7:09:30:d6: c4:89:e8:fb:e0:ab:6f:a7:69:5c:4a:01:69:a1:5c: 1e:7a:13:b5:9c:53:60:d5:22:ae:ac:0d:4f:fa:cc: 93:ec:1d:da:92:09:f5:1e:f8:a7:6a:20:2e:d9:ac: ff:d7:82:f9:60:bd:4f:a5:a7:95:e2:a7:58:ee:04: 10:6f:e4:7c:4f:7c:0d:c8:d2:8f:fe:e5:31:13:b7: 44:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EC:15:B8:88:73:22:D6:89:B2:2B:70:27:40:51:48:49:11:56:0C X509v3 Authority Key Identifier: keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0b:60:82:79:32:39:67:81:9d:fc:ec:cb:f9:3e:7e:68:4c: e8:fd:0a:cd:ac:ee:d0:43:3c:92:78:69:0e:44:6d:e1:46:bf: 51:35:d6:88:31:ab:97:8d:6e:f9:12:52:a0:0d:d4:35:b6:8c: b1:cb:63:20:46:cb:44:03:d5:10:b9:aa:3b:4b:ac:2e:2f:74: c3:15:c4:0f:42:f4:70:a0:c1:3a:b8:eb:3b:91:56:5c:71:59: ee:97:c5:40:78:f5:88:b0:23:24:87:ba:d9:03:43:dc:de:b3: 44:cd:24:6d:d9:04:44:9d:64:f5:6a:c5:d1:bf:1b:26:31:ab: 33:8f:24:29:fa:40:85:b0:21:32:0e:ad:dc:ea:58:0a:94:b8: 6c:ca:93:fa:6e:1b:50:ae:84:e7:65:e2:d5:29:4f:cc:89:f5: 41:3f:e3:0f:fa:53:34:e3:2d:dc:59:b4:8c:ca:95:7e:1e:de: b2:69:b8:40:01:3d:b0:b7:29:35:36:fa:9b:25:a9:58:f2:82: 40:15:c9:39:e2:ae:2c:46:5f:e1:d9:cf:f6:a1:07:30:ae:80: c0:5d:46:c6:a6:e1:7f:df:2b:46:cd:14:55:52:9b:04:65:09: 03:ac:39:ed:cf:14:c3:ee:f8:12:69:4e:5c:f9:d1:59:bd:71: ca:ad:e7:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtC5Pq8wkPXQgtoJfp/Y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYTMxOWVhNTFjODAwM2FhZDk0YThlMjdjZTY5NDkyYWEy ZTMzYTgwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD Eyg0Y2VjMTViODg4NzMyMmQ2ODliMjJiNzAyNzQwNTE0ODQ5MTE1NjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE33OQV7ZBxjlih1tyOEmsv/BUW7 bJocJNdu++koYGWuGxCLVAJeHxgHYKSC3PNRFwKFmrBP+kc1azlSHk0sONkF3lXG jlPkkx3PT/PlBS5yxyOv7+Vgw1l3w6H9MpnjqfjhTYhdCaNkw/H8tGDtsUPdY+bm DlWqb3Mczv88bKeCKkH3SoUJmpnq0kcVcsim5qmM5UQBUCUuaJtf11VxYmETIf5Z LgXqibcejTF2UucJMNbEiej74Ktvp2lcSgFpoVweehO1nFNg1SKurA1P+syT7B3a kgn1HvinaiAu2az/14L5YL1PpaeV4qdY7gQQb+R8T3wNyNKP/uUxE7dE7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzsFbiIcyLWibIrcCdAUUhJEVYMMB8GA1UdIwQY MBaAFJyjGepRyAA6rZSo4nzmlJKqLjOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjct MGFkM2M3OTYyYzA5LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjctMGFkM2M3OTYyYzA5 LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegtggnky OWeBnfzsy/k+fmhM6P0Kzazu0EM8knhpDkRt4Ua/UTXWiDGrl41u+RJSoA3UNbaM sctjIEbLRAPVELmqO0usLi90wxXED0L0cKDBOrjrO5FWXHFZ7pfFQHj1iLAjJIe6 2QND3N6zRM0kbdkERJ1k9WrF0b8bJjGrM48kKfpAhbAhMg6t3OpYCpS4bMqT+m4b UK6E52Xi1SlPzIn1QT/jD/pTNOMt3Fm0jMqVfh7esmm4QAE9sLcpNTb6myWpWPKC QBXJOeKuLEZf4dnP9qEHMK6AwF1Gxqbhf98rRs0UVVKbBGUJA6w57c8Uw+74EmlO XPnRWb1xyq3nSw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:25 2026 by rpki-client