This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft File: Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft (raw, json) Hash identifier: DVZZ+SEcN7SxOi1L/A0TIIXOgWNnkauuiklRw352DdI= Subject key identifier: E9:46:7F:15:89:22:73:AD:07:87:03:A4:2B:D2:00:F8:02:4A:DB:36 Authority key identifier: 36:A9:B8:2B:D5:9A:CA:63:40:F6:DF:54:FE:8D:33:60:0B:7E:91:E4 Certificate issuer: /CN=36a9b82bd59aca6340f6df54fe8d33600b7e91e4 Certificate serial: 019C43C73278C898ADCE38EE9A3004258E1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft Manifest number: 0153 Signing time: Mon 09 Feb 2026 19:00:53 +0000 Manifest this update: Mon 09 Feb 2026 19:00:53 +0000 Manifest next update: Tue 10 Feb 2026 19:00:53 +0000 Files and hashes: 1: Nqm4K9WaymNA9t9U_o0zYAt-keQ.crl (hash: I/kOfTdgHsdIyCKVNj5Qi8uzAKP2m/gVxss4/mfixq8=) 2: kGs2CN6_e0xkRivoWWWOkB6ji5k.roa (hash: vKSRNSEdzjM8f691yctADnRRRhHUZVtmMQKdxtUVPWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:32:78:c8:98:ad:ce:38:ee:9a:30:04:25:8e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36a9b82bd59aca6340f6df54fe8d33600b7e91e4 Validity Not Before: Feb 9 19:00:53 2026 GMT Not After : Feb 10 19:00:53 2026 GMT Subject: CN=e9467f15892273ad078703a42bd200f8024adb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:07:55:ae:e4:6c:61:4d:bc:af:70:a4:7b: c2:04:ee:ce:94:fe:65:bb:61:a1:d5:ad:53:c1:5b: 5e:ea:42:62:08:fa:79:4e:98:c4:88:48:17:40:ec: 63:6f:e7:d5:f9:64:1f:fc:b2:e1:2e:4a:24:4b:e8: f9:56:f1:50:47:c2:05:83:fd:93:78:04:26:fe:e9: 03:36:2d:0f:9b:42:fb:5e:71:32:5b:91:1b:0b:1f: c2:ba:cd:80:e0:0a:42:d8:0d:22:6a:2f:27:26:8c: 4f:dc:2b:03:08:a1:9c:43:9b:04:11:0c:ba:a4:51: b0:27:2a:88:0a:98:0a:2c:64:81:1a:48:e8:d0:6d: ae:84:ef:52:f6:0b:cf:b7:a9:13:bb:b3:6d:3a:a7: f2:93:c0:f5:c3:0f:17:d0:34:a8:ae:a3:f8:60:1d: f7:4c:03:ca:54:0c:cd:f4:d1:dd:b5:cf:ca:59:78: 37:35:a9:0e:ed:88:b5:fb:1c:0e:21:07:28:31:95: d7:32:6c:8e:44:83:77:85:a4:03:56:d0:1f:71:21: 36:a1:df:11:7a:1a:0f:13:c5:0f:ff:a6:8f:89:d0: 36:2c:2e:96:90:e9:81:ec:89:34:0e:5a:fc:a0:f2: 1b:47:1b:87:cc:de:f8:66:81:c3:ef:b0:f5:d6:88: 80:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:46:7F:15:89:22:73:AD:07:87:03:A4:2B:D2:00:F8:02:4A:DB:36 X509v3 Authority Key Identifier: keyid:36:A9:B8:2B:D5:9A:CA:63:40:F6:DF:54:FE:8D:33:60:0B:7E:91:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:a2:ea:17:df:ca:55:9c:e1:b5:9b:f1:93:5d:26:c6:41:cb: 7d:1d:9d:bc:c0:23:80:f8:9a:be:9b:95:87:5f:4c:94:e9:39: 31:dd:4c:1d:e5:2f:05:8c:35:c8:3f:54:42:89:cf:0c:77:92: c6:a5:a2:9a:db:7c:f6:3d:46:3a:98:9c:8a:f9:3c:c4:88:d5: a3:e0:71:0e:ba:6d:a2:21:28:b9:d5:3a:60:d9:a3:14:8c:00: 6b:48:59:8f:92:25:f5:2f:6d:47:27:b3:40:ed:ff:9a:95:03: b2:e9:73:a5:1f:32:a5:99:03:a3:19:1f:cb:73:18:db:48:ea: 7b:b6:83:72:da:09:16:6e:e0:7b:40:e2:d3:e0:6f:ab:83:8a: ed:39:e9:5e:a8:e4:90:33:3d:2f:2a:82:38:b2:ae:d8:7a:78: d9:81:22:94:4b:65:f6:1a:c6:28:5b:5f:2b:10:ff:7d:c8:5e: 58:57:97:40:75:77:f8:9f:28:8f:4c:ad:70:1a:70:91:af:9f: e1:74:36:56:a8:90:d5:3c:3a:fd:d3:61:66:1c:c8:1c:07:04: cf:1a:c2:31:cd:da:aa:a8:4a:38:50:df:55:e6:a1:5a:18:1b: d9:ba:94:2c:90:09:dd:48:a3:90:bd:3b:25:37:f3:02:cf:90: 6e:61:8a:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxzJ4yJitzjjumjAEJY4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YTliODJiZDU5YWNhNjM0MGY2ZGY1NGZlOGQzMzYwMGI3 ZTkxZTQwHhcNMjYwMjA5MTkwMDUzWhcNMjYwMjEwMTkwMDUzWjAzMTEwLwYDVQQD EyhlOTQ2N2YxNTg5MjI3M2FkMDc4NzAzYTQyYmQyMDBmODAyNGFkYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgUHVa7kbGFNvK9wpHvCBO7OlP5l u2Gh1a1TwVte6kJiCPp5TpjEiEgXQOxjb+fV+WQf/LLhLkokS+j5VvFQR8IFg/2T eAQm/ukDNi0Pm0L7XnEyW5EbCx/Cus2A4ApC2A0iai8nJoxP3CsDCKGcQ5sEEQy6 pFGwJyqICpgKLGSBGkjo0G2uhO9S9gvPt6kTu7NtOqfyk8D1ww8X0DSorqP4YB33 TAPKVAzN9NHdtc/KWXg3NakO7Yi1+xwOIQcoMZXXMmyORIN3haQDVtAfcSE2od8R ehoPE8UP/6aPidA2LC6WkOmB7Ik0Dlr8oPIbRxuHzN74ZoHD77D11oiAJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlGfxWJInOtB4cDpCvSAPgCSts2MB8GA1UdIwQY MBaAFDapuCvVmspjQPbfVP6NM2ALfpHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFtNEs5V2F5bU5BOXQ5VV9vMHpZQXQta2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81NmI0YzEtODAxNS00MTg5LWEzZTUt NWFkMzAyNmQ4ZjI4LzEvTnFtNEs5V2F5bU5BOXQ5VV9vMHpZQXQta2VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81NmI0YzEtODAxNS00MTg5LWEzZTUtNWFkMzAyNmQ4ZjI4 LzEvTnFtNEs5V2F5bU5BOXQ5VV9vMHpZQXQta2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAraLqF9/K VZzhtZvxk10mxkHLfR2dvMAjgPiavpuVh19MlOk5Md1MHeUvBYw1yD9UQonPDHeS xqWimtt89j1GOpicivk8xIjVo+BxDrptoiEoudU6YNmjFIwAa0hZj5Il9S9tRyez QO3/mpUDsulzpR8ypZkDoxkfy3MY20jqe7aDctoJFm7ge0Di0+Bvq4OK7TnpXqjk kDM9LyqCOLKu2Hp42YEilEtl9hrGKFtfKxD/fcheWFeXQHV3+J8oj0ytcBpwka+f 4XQ2VqiQ1Tw6/dNhZhzIHAcEzxrCMc3aqqhKOFDfVeahWhgb2bqULJAJ3UijkL07 JTfzAs+QbmGKhw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:47:05 2026 by rpki-client