This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json) Hash identifier: K5Kw2tIiCPVKgbIELPmRrLQcCcAe0uudrr0zZg7Pk7U= Subject key identifier: B7:9F:F5:C0:06:02:67:4C:5E:42:9E:DA:B3:83:4B:D6:F4:3A:A5:9D Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62 Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62 Certificate serial: 019C4358CD1F16EA7F15C08D3B8A7FADAFF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft Manifest number: 1430 Signing time: Mon 09 Feb 2026 17:00:18 +0000 Manifest this update: Mon 09 Feb 2026 17:00:18 +0000 Manifest next update: Tue 10 Feb 2026 17:00:18 +0000 Files and hashes: 1: 2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa (hash: XdSVxHJfUXdEh13NSWMZmFTpZfOjmyPDnSsH+zDSqy0=) 2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: asQnzkMvdyor1ywcr6M4yGWJFrOEue9B6JYBN9q05FA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:cd:1f:16:ea:7f:15:c0:8d:3b:8a:7f:ad:af:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62 Validity Not Before: Feb 9 17:00:18 2026 GMT Not After : Feb 10 17:00:18 2026 GMT Subject: CN=b79ff5c00602674c5e429edab3834bd6f43aa59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:a0:f4:53:e5:65:6a:59:32:6e:20:56:a3: 9d:bb:16:68:0b:d5:b9:a5:9f:9b:8a:ec:dd:c6:9a: cf:b7:9a:d1:04:b2:0d:85:73:c0:f1:a6:b1:42:91: 14:e4:4e:19:da:c7:d8:87:9f:72:92:8e:07:e7:b1: b3:86:ff:83:2c:b5:fb:a0:d8:28:da:18:59:fc:a0: 9b:95:47:11:0b:47:4b:a9:4c:e6:48:de:50:e6:41: bd:5d:5a:c9:2d:c8:10:c7:02:80:04:e1:f9:f3:d5: 5d:55:11:4a:4b:d0:32:2b:42:a4:c7:e5:8a:b2:d0: d3:87:21:4f:ee:72:8a:72:a7:f0:66:42:b4:63:25: ce:3e:d2:f0:8e:fe:f3:50:86:8b:84:18:cc:ba:82: 69:a6:0d:c9:6b:90:1f:74:69:22:bb:40:f2:42:1b: a3:99:89:53:b8:e9:a5:a3:eb:da:cc:5d:c6:77:15: b3:53:94:e6:b7:1c:f3:4b:41:f9:16:c2:0d:bb:39: 3f:f6:0c:b1:6d:0a:32:4c:39:3a:69:15:48:ba:7c: 3d:b3:47:1a:37:c6:a2:ba:d8:2e:46:09:41:d5:0c: d3:70:6f:47:81:6c:cc:4d:c5:6b:58:5f:c1:f6:b3: a2:4c:fb:bd:2c:85:35:bb:a0:d0:41:7e:3e:e1:b9: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9F:F5:C0:06:02:67:4C:5E:42:9E:DA:B3:83:4B:D6:F4:3A:A5:9D X509v3 Authority Key Identifier: keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c0:64:77:67:31:4a:82:f8:99:e0:d6:2b:9a:fc:e3:d0:37: 31:08:04:4d:9e:89:0b:d1:8f:ae:e8:52:e5:01:ed:6c:8d:ed: 2f:02:15:2f:bb:a6:83:95:78:97:75:fd:cb:1c:68:d8:6f:61: 3a:3d:82:57:d1:0b:19:fa:0d:45:12:11:1b:df:7e:d3:32:d8: 96:0e:93:2f:e2:2d:17:0e:cb:bb:1b:7b:19:ff:d5:7e:f6:0c: f9:45:e5:2e:35:86:f5:c5:fa:89:51:00:e5:08:4c:06:88:7e: 6a:39:e8:fd:a5:d5:ad:0f:03:4a:cd:8f:7a:45:aa:a4:e7:41: 82:61:0d:6c:84:b5:5e:23:e3:0a:c3:5e:2e:53:d9:a8:c0:0c: 28:7f:b4:a9:6c:c6:b7:01:97:1c:01:7d:a4:e2:70:64:af:18: 4d:66:b1:15:dc:39:4a:14:88:d3:1c:de:e0:f7:9e:40:61:42: ed:5c:bb:90:5b:61:f9:7c:b1:3f:6f:31:28:99:3b:7c:cb:fa: da:e8:50:a2:c1:54:a6:d5:82:bc:20:f1:44:2b:f6:c2:a0:d1: ff:f8:af:32:d6:85:fb:98:86:32:6c:d7:d4:a3:42:db:62:10: 1f:71:ce:77:50:7f:0d:61:37:43:dd:d6:83:81:f9:cf:c4:49: 6f:2b:4f:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWM0fFup/FcCNO4p/ra/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzAyOTRiN2U0NjQ1YWFlZGI1NDY3MmQ0ODA2NWIxYjFj ZWJjNjIwHhcNMjYwMjA5MTcwMDE4WhcNMjYwMjEwMTcwMDE4WjAzMTEwLwYDVQQD EyhiNzlmZjVjMDA2MDI2NzRjNWU0MjllZGFiMzgzNGJkNmY0M2FhNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvag9FPlZWpZMm4gVqOduxZoC9W5 pZ+biuzdxprPt5rRBLINhXPA8aaxQpEU5E4Z2sfYh59yko4H57Gzhv+DLLX7oNgo 2hhZ/KCblUcRC0dLqUzmSN5Q5kG9XVrJLcgQxwKABOH589VdVRFKS9AyK0Kkx+WK stDThyFP7nKKcqfwZkK0YyXOPtLwjv7zUIaLhBjMuoJppg3Ja5AfdGkiu0DyQhuj mYlTuOmlo+vazF3GdxWzU5TmtxzzS0H5FsINuzk/9gyxbQoyTDk6aRVIunw9s0ca N8aiutguRglB1QzTcG9HgWzMTcVrWF/B9rOiTPu9LIU1u6DQQX4+4bmF+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLef9cAGAmdMXkKe2rODS9b0OqWdMB8GA1UdIwQY MBaAFJ4wKUt+RkWq7bVGctSAZbGxzrxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjct NjkxMzM4N2I4MDgzLzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjctNjkxMzM4N2I4MDgz LzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8Bkd2cx SoL4meDWK5r849A3MQgETZ6JC9GPruhS5QHtbI3tLwIVL7umg5V4l3X9yxxo2G9h Oj2CV9ELGfoNRRIRG99+0zLYlg6TL+ItFw7Luxt7Gf/VfvYM+UXlLjWG9cX6iVEA 5QhMBoh+ajno/aXVrQ8DSs2PekWqpOdBgmENbIS1XiPjCsNeLlPZqMAMKH+0qWzG twGXHAF9pOJwZK8YTWaxFdw5ShSI0xze4PeeQGFC7Vy7kFth+XyxP28xKJk7fMv6 2uhQosFUptWCvCDxRCv2wqDR//ivMtaF+5iGMmzX1KNC22IQH3HOd1B/DWE3Q93W g4H5z8RJbytPbg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:08 2026 by rpki-client