This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft File: n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json) Hash identifier: vH3dcvYKaa2DTXomolUhxBGFMmrMrvMTBO24KxVxSnA= Subject key identifier: AB:58:12:08:54:AF:93:06:1D:54:B5:45:F4:1D:5B:DF:B1:65:C0:F5 Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2 Certificate issuer: /CN=9f67e0c85a2deb5466eabdc90846158a987784a2 Certificate serial: 019C427D654F3EDA33B7516EEBD5EA4EFEFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft Manifest number: 15D3 Signing time: Mon 09 Feb 2026 13:00:39 +0000 Manifest this update: Mon 09 Feb 2026 13:00:39 +0000 Manifest next update: Tue 10 Feb 2026 13:00:39 +0000 Files and hashes: 1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: tYqbFRxnj/pDRWEueH6Qg48fzFuXV0qLkM6oMW/l7wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:65:4f:3e:da:33:b7:51:6e:eb:d5:ea:4e:fe:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2 Validity Not Before: Feb 9 13:00:39 2026 GMT Not After : Feb 10 13:00:39 2026 GMT Subject: CN=ab58120854af93061d54b545f41d5bdfb165c0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:c2:21:b6:74:47:67:9c:ee:22:b4:24:2b: 5c:80:2d:13:1b:6e:ec:c4:b3:5a:08:15:6c:45:38: 5c:74:e8:4b:ca:9c:7a:21:ed:0e:25:76:b4:76:e4: 6a:ec:2f:aa:da:af:a6:e8:6b:80:1a:2c:d3:7c:66: 95:82:91:fc:b0:a0:69:b8:9b:f5:26:ff:f4:a8:d2: c9:e9:e7:fa:aa:cf:b4:15:67:f9:78:b8:10:a1:c5: 7f:40:46:e7:58:f5:fe:18:b2:a3:9c:68:f6:93:2b: a9:bf:f2:5e:8f:30:29:35:ae:5a:8f:57:73:9f:28: 9b:80:dd:87:a2:e9:78:ee:d1:c0:4a:27:48:d9:26: c3:de:2f:98:25:42:7e:74:aa:5f:51:13:f7:d1:08: ad:cc:26:17:3b:0d:9d:67:1a:f6:60:47:75:bc:18: ae:45:46:3b:df:26:98:29:93:ea:10:65:99:f0:2a: 4b:51:42:a0:8b:c4:13:fe:ee:82:53:a1:39:7b:02: 29:6f:51:79:ce:e1:4b:83:fd:de:bd:5d:16:b0:58: 61:b9:1b:3d:2a:0e:27:e7:ae:90:78:42:37:41:05: 72:88:5b:5b:de:03:6a:f3:40:11:ae:0c:db:3f:78: fe:7e:07:cc:37:d1:b7:e3:2e:41:11:62:95:83:0b: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:58:12:08:54:AF:93:06:1D:54:B5:45:F4:1D:5B:DF:B1:65:C0:F5 X509v3 Authority Key Identifier: keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e2:c3:a7:e2:e3:2f:5c:d3:18:35:06:0a:e6:9a:cb:d3:74: 94:5e:7d:16:34:38:17:f3:99:77:c3:ac:00:c4:be:b3:c8:07: bd:3f:0e:02:cc:4b:7f:ee:96:65:61:fe:b9:ae:19:fc:69:b4: 21:4c:b6:56:18:42:a2:5b:12:8b:da:85:e8:c4:ba:d7:7c:a1: 9f:44:3e:0b:42:df:f4:69:c0:08:38:2e:26:80:87:72:4a:a9: c6:f6:6e:c1:60:4c:84:c0:42:6b:71:9a:bf:ea:3a:65:73:1c: 07:24:02:c4:4b:14:79:b1:43:cc:bd:55:be:21:71:54:76:ca: a8:f0:98:5a:ef:3f:bb:c2:6c:7e:1d:86:be:ce:52:4c:59:46: f6:a2:a8:3f:9f:36:f1:2d:96:3e:8e:0c:2c:f2:52:00:0e:cc: 91:7b:e6:97:93:03:a5:fa:fc:78:31:84:1b:46:bb:6d:52:ee: 1f:e8:08:0a:86:be:81:4e:d6:3e:39:85:b6:d1:65:b2:67:48: 92:6c:b0:d7:61:fa:a8:bc:2a:96:a1:26:06:5f:2f:11:17:eb: 6f:64:fd:6c:ed:e1:38:79:ab:a3:90:7f:1e:42:6f:62:6d:5b: a8:e2:68:9d:7a:6b:4c:85:63:1c:31:0d:41:0a:14:27:99:a1: 08:b9:90:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfWVPPtozt1Fu69XqTv78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNjdlMGM4NWEyZGViNTQ2NmVhYmRjOTA4NDYxNThhOTg3 Nzg0YTIwHhcNMjYwMjA5MTMwMDM5WhcNMjYwMjEwMTMwMDM5WjAzMTEwLwYDVQQD EyhhYjU4MTIwODU0YWY5MzA2MWQ1NGI1NDVmNDFkNWJkZmIxNjVjMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG/CIbZ0R2ec7iK0JCtcgC0TG27s xLNaCBVsRThcdOhLypx6Ie0OJXa0duRq7C+q2q+m6GuAGizTfGaVgpH8sKBpuJv1 Jv/0qNLJ6ef6qs+0FWf5eLgQocV/QEbnWPX+GLKjnGj2kyupv/JejzApNa5aj1dz nyibgN2Houl47tHASidI2SbD3i+YJUJ+dKpfURP30QitzCYXOw2dZxr2YEd1vBiu RUY73yaYKZPqEGWZ8CpLUUKgi8QT/u6CU6E5ewIpb1F5zuFLg/3evV0WsFhhuRs9 Kg4n566QeEI3QQVyiFtb3gNq80ARrgzbP3j+fgfMN9G34y5BEWKVgwvxiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtYEghUr5MGHVS1RfQdW9+xZcD1MB8GA1UdIwQY MBaAFJ9n4MhaLetUZuq9yQhGFYqYd4SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJmZ3lGb3Q2MVJtNnIzSkNFWVZpcGgzaEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mYjRjMmItZWJkMi00NmIyLWJjZDAt ODRkYjM5NDAzNzY4LzEvbjJmZ3lGb3Q2MVJtNnIzSkNFWVZpcGgzaEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mYjRjMmItZWJkMi00NmIyLWJjZDAtODRkYjM5NDAzNzY4 LzEvbjJmZ3lGb3Q2MVJtNnIzSkNFWVZpcGgzaEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+LDp+Lj L1zTGDUGCuaay9N0lF59FjQ4F/OZd8OsAMS+s8gHvT8OAsxLf+6WZWH+ua4Z/Gm0 IUy2VhhColsSi9qF6MS613yhn0Q+C0Lf9GnACDguJoCHckqpxvZuwWBMhMBCa3Ga v+o6ZXMcByQCxEsUebFDzL1VviFxVHbKqPCYWu8/u8Jsfh2Gvs5STFlG9qKoP582 8S2WPo4MLPJSAA7MkXvml5MDpfr8eDGEG0a7bVLuH+gICoa+gU7WPjmFttFlsmdI kmyw12H6qLwqlqEmBl8vERfrb2T9bO3hOHmro5B/HkJvYm1bqOJonXprTIVjHDEN QQoUJ5mhCLmQEQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:43 2026 by rpki-client