This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft File: NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json) Hash identifier: nd6yLkoGENgk/OHeNtRHjI7du6fRkV7HO8ByJtsPt5o= Subject key identifier: 6B:51:A6:5C:F2:3F:0B:42:ED:09:57:B1:77:01:35:C6:83:82:21:D7 Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F Certificate issuer: /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f Certificate serial: 019C4321F38E5275CA143ADED3E27CC31021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 16:00:24 +0000 Manifest this update: Mon 09 Feb 2026 16:00:24 +0000 Manifest next update: Tue 10 Feb 2026 16:00:24 +0000 Files and hashes: 1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: QDyPE2/t7/Snw4pRP2n0RGtIt/UbLgj8bzYoep1/SpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f3:8e:52:75:ca:14:3a:de:d3:e2:7c:c3:10:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f Validity Not Before: Feb 9 16:00:24 2026 GMT Not After : Feb 10 16:00:24 2026 GMT Subject: CN=6b51a65cf23f0b42ed0957b1770135c6838221d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:bf:d5:d6:57:ef:5a:df:ad:d8:25:07:a7: 47:c6:0a:99:79:d8:bc:15:b4:fa:c9:94:7f:0d:0d: b7:bf:d2:3f:9f:f1:e9:8a:2f:97:1e:aa:4c:d1:1f: 29:3d:40:bd:c9:37:e4:2f:fc:c4:11:fe:94:28:56: 24:ac:88:21:0d:3a:50:b5:30:1e:b4:27:c7:7e:6f: a9:da:7a:0e:e1:8e:44:9a:a0:72:d2:8c:93:75:1d: 5f:b4:44:48:72:49:70:29:bd:5d:c5:16:71:de:69: aa:3b:a2:08:6f:c9:c3:30:5d:fb:ce:3f:e0:02:18: fa:28:28:6a:e2:b2:f4:d7:44:cc:e8:97:31:84:d0: 00:6a:a0:dd:99:89:a0:dd:d6:00:67:70:b8:5a:23: c7:f8:18:02:3f:36:80:51:12:91:13:8d:c2:7c:0f: c0:cf:1f:41:76:25:c5:00:3b:32:2e:45:8c:e8:9e: bd:5e:ca:58:95:07:29:69:56:7f:ad:33:b4:cc:c8: ef:f5:13:b4:75:df:86:25:b5:2b:2b:2b:a7:5d:a1: cb:17:7e:48:e2:01:a3:dd:bd:09:55:e9:6d:f5:e2: 45:a4:13:79:e8:3f:b3:90:b8:c7:24:9c:30:1a:be: 58:7f:41:e5:7c:c3:24:7a:7d:ae:8c:96:aa:1c:28: 2b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:51:A6:5C:F2:3F:0B:42:ED:09:57:B1:77:01:35:C6:83:82:21:D7 X509v3 Authority Key Identifier: keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:2b:9e:ef:0f:2b:5c:7c:5d:ac:e9:4f:6c:54:02:20:0a:f6: a1:a3:c2:94:4c:0b:01:16:40:fe:85:9e:9e:1d:69:8f:1f:97: 36:ec:e5:ac:63:05:7e:09:ef:f1:64:9e:2e:2a:c6:9e:51:62: 4a:0e:c1:c1:22:f3:a4:4f:ed:95:99:3a:a1:3e:c5:64:d9:9d: 6d:06:e1:04:e2:3c:7d:74:f2:a3:ab:00:b2:d7:a9:a6:e4:67: 7c:38:0a:45:a6:0f:fd:f6:36:13:4b:b0:14:1b:23:61:ad:cc: a6:a2:bc:81:f4:4d:9d:91:a4:f2:d6:79:eb:2f:eb:7c:16:20: 75:68:1e:5e:85:6b:4b:0d:1e:a2:b0:33:9b:2e:7a:c1:27:d7: c0:13:4b:cb:60:1a:f9:b0:5a:57:f2:d6:1b:16:d1:b8:f7:48: ad:b8:1e:7c:b4:ec:b0:3a:8b:1b:69:87:07:43:17:7e:1d:9c: af:5e:dd:07:1c:eb:36:7d:8d:65:67:2f:c4:b1:7a:09:94:3c: 85:38:d5:5c:18:44:e5:42:03:19:3d:31:ef:33:2f:c6:b5:e1: ad:4b:6a:30:57:a4:06:7b:5b:de:d1:9c:cf:fe:60:fd:4c:b4: 20:d1:88:83:7d:f3:95:cc:6d:89:bb:c8:7c:27:85:0b:70:60: b1:35:da:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfOOUnXKFDre0+J8wxAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzhiZDU2YTAxZWIyYWUzMDc2ZjY5NmQwMWQ0ZmZjZDE0 MDFhOWYwHhcNMjYwMjA5MTYwMDI0WhcNMjYwMjEwMTYwMDI0WjAzMTEwLwYDVQQD Eyg2YjUxYTY1Y2YyM2YwYjQyZWQwOTU3YjE3NzAxMzVjNjgzODIyMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNC/1dZX71rfrdglB6dHxgqZedi8 FbT6yZR/DQ23v9I/n/Hpii+XHqpM0R8pPUC9yTfkL/zEEf6UKFYkrIghDTpQtTAe tCfHfm+p2noO4Y5EmqBy0oyTdR1ftERIcklwKb1dxRZx3mmqO6IIb8nDMF37zj/g Ahj6KChq4rL010TM6JcxhNAAaqDdmYmg3dYAZ3C4WiPH+BgCPzaAURKRE43CfA/A zx9BdiXFADsyLkWM6J69XspYlQcpaVZ/rTO0zMjv9RO0dd+GJbUrKyunXaHLF35I 4gGj3b0JVelt9eJFpBN56D+zkLjHJJwwGr5Yf0HlfMMken2ujJaqHCgr9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtRplzyPwtC7QlXsXcBNcaDgiHXMB8GA1UdIwQY MBaAFDR4vVagHrKuMHb2ltAdT/zRQBqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAt ODM5NmY4YzYyNTVhLzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAtODM5NmY4YzYyNTVh LzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiue7w8r XHxdrOlPbFQCIAr2oaPClEwLARZA/oWenh1pjx+XNuzlrGMFfgnv8WSeLirGnlFi Sg7BwSLzpE/tlZk6oT7FZNmdbQbhBOI8fXTyo6sAsteppuRnfDgKRaYP/fY2E0uw FBsjYa3MpqK8gfRNnZGk8tZ56y/rfBYgdWgeXoVrSw0eorAzmy56wSfXwBNLy2Aa +bBaV/LWGxbRuPdIrbgefLTssDqLG2mHB0MXfh2cr17dBxzrNn2NZWcvxLF6CZQ8 hTjVXBhE5UIDGT0x7zMvxrXhrUtqMFekBntb3tGcz/5g/Uy0INGIg33zlcxtibvI fCeFC3BgsTXaaQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:51 2026 by rpki-client