This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft File: NhIf0uc0bus8H451uTyE-VhB9EY.mft (raw, json) Hash identifier: CBx4d1UY4UzK7Kh0ir0lWPcqrfuqUhFx30hIpK0JLJs= Subject key identifier: F9:1C:98:B9:4B:CD:0B:22:AD:7D:9D:88:4A:00:F1:4C:C1:6D:12:2E Authority key identifier: 36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46 Certificate issuer: /CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446 Certificate serial: 019C42466835312EEAD2015A4D4D4C9338AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft Manifest number: 0526 Signing time: Mon 09 Feb 2026 12:00:36 +0000 Manifest this update: Mon 09 Feb 2026 12:00:36 +0000 Manifest next update: Tue 10 Feb 2026 12:00:36 +0000 Files and hashes: 1: NhIf0uc0bus8H451uTyE-VhB9EY.crl (hash: vNmedzs29U52MZCUOxvhTiLkO6oY29R6JoPiQTu3x6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:68:35:31:2e:ea:d2:01:5a:4d:4d:4c:93:38:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446 Validity Not Before: Feb 9 12:00:36 2026 GMT Not After : Feb 10 12:00:36 2026 GMT Subject: CN=f91c98b94bcd0b22ad7d9d884a00f14cc16d122e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:48:91:fe:47:fe:5d:b4:22:9f:9d:3e:84: 2c:1f:0f:5f:2b:d2:9b:b6:f9:f3:42:bd:f4:7e:5b: f9:c2:59:23:92:78:ed:6f:60:a5:cb:32:ba:1f:f1: 9c:04:d1:81:75:71:4a:4a:5d:f0:a1:ed:2e:7d:7c: 87:fe:07:ae:56:7d:27:02:7e:9b:08:57:3c:c3:ab: b4:92:03:9d:ce:13:39:0f:45:77:53:5f:37:31:ff: 3e:96:eb:e0:17:7d:df:bd:3b:16:42:86:fc:78:e1: a7:9a:34:70:2d:2e:97:c0:80:94:68:60:b0:77:ba: 33:d6:30:98:46:ca:ee:2b:19:f4:39:14:e1:8d:97: 3f:3d:c3:71:ff:b8:11:88:5b:59:40:2e:5c:e2:75: 44:cc:46:d0:5b:01:66:67:f3:41:d6:e2:4f:6b:0d: 19:8d:46:05:62:ef:3c:6a:fa:92:69:8f:10:4d:76: 00:17:6c:6f:77:36:74:4b:98:f8:03:c5:11:1b:c5: d3:74:99:15:4a:20:4a:47:34:e0:61:b1:fb:69:81: ff:e7:5e:14:32:32:70:af:25:f7:db:d9:05:f7:85: a6:f8:36:4c:0b:e6:0e:2d:a6:05:fc:fc:d2:f9:3d: c5:ae:ab:23:03:d8:22:64:e7:11:2c:b9:32:9f:e0: b9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1C:98:B9:4B:CD:0B:22:AD:7D:9D:88:4A:00:F1:4C:C1:6D:12:2E X509v3 Authority Key Identifier: keyid:36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b0:04:d5:7c:ab:d8:c5:6b:4a:ba:0d:61:3b:73:b4:74:6d: be:61:5b:3f:74:0b:82:b5:c5:0c:13:08:b1:9b:5a:b8:2e:93: 76:89:df:48:1a:fe:0c:e5:2d:08:45:b1:75:94:ea:c0:21:63: 90:29:05:25:2f:47:ce:19:d5:8a:c4:22:55:d9:eb:48:61:3a: 38:58:cf:c5:0d:22:be:d1:6e:44:c2:c9:66:68:36:eb:06:d4: 0d:be:6f:fd:ed:a7:d2:4a:4f:f1:4d:dc:20:c3:c6:aa:b9:b6: a5:d7:ab:3a:b5:41:1f:9c:3c:92:38:34:dd:35:82:a6:76:6a: 23:42:66:55:e7:ce:c6:5e:86:d5:c2:52:ef:80:b4:6b:c0:9e: be:2d:7a:2b:96:4d:69:99:b6:c7:49:de:4d:96:0e:37:6d:aa: 36:1f:5f:85:86:6e:dd:63:6b:6f:e3:ee:74:d5:5f:00:9f:c4: 57:c7:2b:17:87:39:90:c2:11:b3:3b:48:68:36:2d:8b:c9:23: bb:d7:69:1c:5a:f8:b3:1f:07:27:1c:2a:7e:33:43:06:1a:3f: 19:cb:a8:ca:e9:30:7d:fa:af:5d:c9:83:e5:e1:e9:a5:ec:d0: 64:ba:af:da:20:2d:ac:60:9f:8d:61:fe:0c:25:9a:45:b6:88: 56:37:21:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmg1MS7q0gFaTU1MkziuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MTIxZmQyZTczNDZlZWIzYzFmOGU3NWI5M2M4NGY5NTg0 MWY0NDYwHhcNMjYwMjA5MTIwMDM2WhcNMjYwMjEwMTIwMDM2WjAzMTEwLwYDVQQD EyhmOTFjOThiOTRiY2QwYjIyYWQ3ZDlkODg0YTAwZjE0Y2MxNmQxMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAhIkf5H/l20Ip+dPoQsHw9fK9Kb tvnzQr30flv5wlkjknjtb2ClyzK6H/GcBNGBdXFKSl3woe0ufXyH/geuVn0nAn6b CFc8w6u0kgOdzhM5D0V3U183Mf8+luvgF33fvTsWQob8eOGnmjRwLS6XwICUaGCw d7oz1jCYRsruKxn0ORThjZc/PcNx/7gRiFtZQC5c4nVEzEbQWwFmZ/NB1uJPaw0Z jUYFYu88avqSaY8QTXYAF2xvdzZ0S5j4A8URG8XTdJkVSiBKRzTgYbH7aYH/514U MjJwryX329kF94Wm+DZMC+YOLaYF/PzS+T3FrqsjA9giZOcRLLkyn+C55QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkcmLlLzQsirX2diEoA8UzBbRIuMB8GA1UdIwQY MBaAFDYSH9LnNG7rPB+Odbk8hPlYQfRGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yMWQ1NjAtY2IxNS00NmMzLWFmMzQt YTg5ZTkzN2UyOWQxLzEvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yMWQ1NjAtY2IxNS00NmMzLWFmMzQtYTg5ZTkzN2UyOWQx LzEvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLAE1Xyr 2MVrSroNYTtztHRtvmFbP3QLgrXFDBMIsZtauC6TdonfSBr+DOUtCEWxdZTqwCFj kCkFJS9HzhnVisQiVdnrSGE6OFjPxQ0ivtFuRMLJZmg26wbUDb5v/e2n0kpP8U3c IMPGqrm2pderOrVBH5w8kjg03TWCpnZqI0JmVefOxl6G1cJS74C0a8Cevi16K5ZN aZm2x0neTZYON22qNh9fhYZu3WNrb+PudNVfAJ/EV8crF4c5kMIRsztIaDYti8kj u9dpHFr4sx8HJxwqfjNDBho/GcuoyukwffqvXcmD5eHppezQZLqv2iAtrGCfjWH+ DCWaRbaIVjchtw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:59 2026 by rpki-client