This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json) Hash identifier: 2PsVP2fH+/9ia245nqeBaFSH8o3t9lAvKTZC1xqxqyg= Subject key identifier: 46:D6:EC:EB:20:3A:D2:CE:05:71:B2:59:9C:D1:02:3F:1E:A8:3B:EC Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04 Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904 Certificate serial: 019C41A1F05EA0AD50090D76E9B0D9AC3DB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft Manifest number: 180A Signing time: Mon 09 Feb 2026 09:00:57 +0000 Manifest this update: Mon 09 Feb 2026 09:00:57 +0000 Manifest next update: Tue 10 Feb 2026 09:00:57 +0000 Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: x4CRCErrLUFiMfXl2LwFumnA0BSpYf1reF+7jDZPWKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:f0:5e:a0:ad:50:09:0d:76:e9:b0:d9:ac:3d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904 Validity Not Before: Feb 9 09:00:57 2026 GMT Not After : Feb 10 09:00:57 2026 GMT Subject: CN=46d6eceb203ad2ce0571b2599cd1023f1ea83bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a3:70:76:75:98:71:6d:20:16:19:01:e2:38: e0:a3:1b:3c:8f:95:34:35:c9:2a:b6:71:18:20:dc: 82:ea:6b:11:50:4b:a1:fe:d9:9f:3e:85:8c:02:ba: 9d:72:d5:b6:bd:2b:f7:1a:a4:c0:15:ba:11:7a:af: 03:4c:2d:36:f8:ed:4b:a2:90:95:0d:cd:3c:b5:ff: 0f:a7:af:16:28:57:c8:2f:0d:95:8b:d9:b8:47:cb: 4f:27:be:af:a8:f0:e5:99:0d:26:67:48:b1:1e:a5: a7:c0:93:fb:f1:8f:40:70:55:6a:f2:90:b8:cc:b6: ac:2c:09:ba:ee:11:38:23:f5:9a:21:30:94:53:5c: ff:a9:6f:cd:12:19:82:42:b7:47:b3:7a:43:ec:ea: e4:17:ec:7b:ab:f5:9f:26:30:16:79:17:c7:29:74: 46:f6:58:ff:85:16:8b:3d:ea:a4:d8:e5:de:a5:a2: ec:2c:da:27:bd:57:bd:e3:8d:a4:b8:2d:32:68:56: db:b1:bc:4b:d1:bb:0a:ab:6c:83:a7:89:9b:f5:e4: 9c:d1:b1:0e:a4:bb:17:34:3e:22:c0:8a:84:a9:e9: f8:a2:ad:d6:22:5d:79:ca:f0:2e:3d:da:19:85:75: d1:99:07:0f:64:43:65:69:e9:4e:af:16:75:70:a0: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D6:EC:EB:20:3A:D2:CE:05:71:B2:59:9C:D1:02:3F:1E:A8:3B:EC X509v3 Authority Key Identifier: keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:0e:d7:b0:0a:94:dc:d8:4e:1b:a5:b7:f2:b2:e3:54:c9:a2: dc:c2:28:ee:c9:cf:63:5a:74:4a:76:98:d3:39:94:55:15:9d: 43:15:03:ad:b1:93:d5:f5:6b:35:be:11:28:00:9e:6b:63:89: 27:2f:d3:6d:7b:64:ea:57:2e:43:e0:8f:f8:3b:9b:3e:8e:35: 9a:7a:6e:1e:4d:39:bc:ab:c2:2f:58:7b:41:e6:29:04:c5:aa: e2:75:58:7c:88:4f:c8:d5:65:fd:00:de:04:cd:e2:f9:b1:2e: 51:eb:da:7f:7a:48:1b:c2:43:ff:8c:bf:1a:f9:f8:52:c6:be: c7:43:2e:3d:b2:c9:b9:e1:69:48:e2:1c:d6:3a:4a:52:69:63: 06:5c:6b:b3:ea:71:17:7c:a4:99:23:70:de:13:a3:6d:a4:22: 6c:fd:1e:ce:c3:40:90:3e:4f:75:c3:23:0a:4e:e5:2f:e6:10: c2:83:d8:13:61:12:76:76:2c:83:1f:ad:7a:43:db:e5:14:14: 3a:16:e1:fb:cd:8a:25:7b:f1:fb:cb:c5:5c:ff:f0:0f:75:c5: 0e:14:52:de:6d:1b:5d:c5:bb:cb:f2:73:b4:6a:1e:5b:3d:08: b5:e2:c2:82:37:fc:d7:61:c8:cc:09:8e:92:11:88:a4:a0:98: 54:7f:3f:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBofBeoK1QCQ126bDZrD2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMmM1M2FiNjEyZGQ4M2NkMTE2YmIxM2M3NTBkN2UyYjBk Njg5MDQwHhcNMjYwMjA5MDkwMDU3WhcNMjYwMjEwMDkwMDU3WjAzMTEwLwYDVQQD Eyg0NmQ2ZWNlYjIwM2FkMmNlMDU3MWIyNTk5Y2QxMDIzZjFlYTgzYmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqNwdnWYcW0gFhkB4jjgoxs8j5U0 NckqtnEYINyC6msRUEuh/tmfPoWMArqdctW2vSv3GqTAFboReq8DTC02+O1LopCV Dc08tf8Pp68WKFfILw2Vi9m4R8tPJ76vqPDlmQ0mZ0ixHqWnwJP78Y9AcFVq8pC4 zLasLAm67hE4I/WaITCUU1z/qW/NEhmCQrdHs3pD7OrkF+x7q/WfJjAWeRfHKXRG 9lj/hRaLPeqk2OXepaLsLNonvVe9442kuC0yaFbbsbxL0bsKq2yDp4mb9eSc0bEO pLsXND4iwIqEqen4oq3WIl15yvAuPdoZhXXRmQcPZENlaelOrxZ1cKA1PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbW7OsgOtLOBXGyWZzRAj8eqDvsMB8GA1UdIwQY MBaAFJ4sU6thLdg80Ra7E8dQ1+Kw1okEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbml4VHEyRXQyRHpSRnJzVHgxRFg0ckRXaVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81ZTVmNDctZjYxNy00NTkzLTk3Y2Yt OWE4MDI5NTlhMjQ4LzEvbml4VHEyRXQyRHpSRnJzVHgxRFg0ckRXaVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81ZTVmNDctZjYxNy00NTkzLTk3Y2YtOWE4MDI5NTlhMjQ4 LzEvbml4VHEyRXQyRHpSRnJzVHgxRFg0ckRXaVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAog7XsAqU 3NhOG6W38rLjVMmi3MIo7snPY1p0SnaY0zmUVRWdQxUDrbGT1fVrNb4RKACea2OJ Jy/TbXtk6lcuQ+CP+DubPo41mnpuHk05vKvCL1h7QeYpBMWq4nVYfIhPyNVl/QDe BM3i+bEuUevaf3pIG8JD/4y/Gvn4Usa+x0MuPbLJueFpSOIc1jpKUmljBlxrs+px F3ykmSNw3hOjbaQibP0ezsNAkD5PdcMjCk7lL+YQwoPYE2ESdnYsgx+tekPb5RQU Ohbh+82KJXvx+8vFXP/wD3XFDhRS3m0bXcW7y/JztGoeWz0IteLCgjf812HIzAmO khGIpKCYVH8/7w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:13 2026 by rpki-client