This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json) Hash identifier: 8xNxXqxwVPn7PY/3aBZOX1UlMfVeUSurVfJGXEg+EwA= Subject key identifier: 9B:88:F3:F7:6A:A0:76:6A:EC:93:17:B3:9A:B5:C5:44:07:07:6E:98 Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52 Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452 Certificate serial: 019C427DB80E720F374017DB22E0153ADF1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 13:01:01 +0000 Manifest this update: Mon 09 Feb 2026 13:01:01 +0000 Manifest next update: Tue 10 Feb 2026 13:01:01 +0000 Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: pkLGWIYe4LuxwlAtTZGy0SC2UIGW1d7D4guuY7v7vSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:b8:0e:72:0f:37:40:17:db:22:e0:15:3a:df:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452 Validity Not Before: Feb 9 13:01:01 2026 GMT Not After : Feb 10 13:01:01 2026 GMT Subject: CN=9b88f3f76aa0766aec9317b39ab5c54407076e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:96:c5:9c:e8:38:99:da:69:11:84:19:ff: ca:ac:50:9e:a5:d2:f3:35:43:66:f0:a1:88:99:d0: a6:a0:58:16:27:4a:11:13:1b:16:a4:c7:ba:ad:1b: 93:9a:3c:2c:c2:fc:69:09:e7:cd:45:7a:cd:03:f5: 27:5d:ac:96:cf:18:c7:99:8c:76:17:16:9d:5a:0d: 6c:50:91:91:dc:30:20:b0:3c:98:1a:75:49:f5:06: 8e:2d:24:e9:55:03:ad:c6:ba:d7:ab:70:c5:c9:f2: cb:5e:59:30:be:2f:43:69:be:2e:32:1d:2f:6e:e0: b0:9f:d0:eb:80:c2:0a:59:a2:13:e2:f4:2e:f1:ab: 05:c2:f9:82:04:7c:57:fa:53:e6:a5:c1:a5:66:15: 2b:f5:ef:04:f3:12:f8:43:92:f3:13:f2:40:77:c1: 19:c0:a9:6f:c1:c8:60:17:8d:b6:e9:97:d2:b7:03: c9:86:fd:03:bb:7e:f0:03:80:a1:99:72:c3:bf:50: 93:6b:9b:0e:c9:69:03:77:b6:84:14:09:c3:21:b2: ae:80:b8:d5:3f:34:4a:dd:e2:8d:5e:c8:ce:57:7d: 6b:5a:70:50:3e:a1:43:59:05:14:4d:b3:a5:5c:2b: 4b:89:26:56:34:f7:1a:2c:26:96:20:26:b9:f0:c2: d4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:88:F3:F7:6A:A0:76:6A:EC:93:17:B3:9A:B5:C5:44:07:07:6E:98 X509v3 Authority Key Identifier: keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:3e:71:2c:e7:fe:07:9d:2b:f8:18:9d:e9:95:53:1a:b0:46: da:64:90:78:8c:d1:95:63:69:d6:94:87:52:22:1a:23:0d:ab: 3d:ae:aa:c6:9f:c7:21:55:6d:9b:9f:60:94:59:40:d9:5d:e3: c2:6d:b4:cc:d4:de:bf:68:d8:95:66:3f:62:a4:e4:3d:6d:c6: 70:09:29:3e:c2:18:65:b6:ea:81:47:3a:44:d7:47:18:5a:4a: 6e:1f:1c:8a:97:3d:47:89:78:5f:c3:d2:8c:02:bd:d3:73:05: d0:4c:ca:15:99:95:56:92:ca:19:48:21:79:45:d7:07:b7:52: 0c:c0:ee:47:f0:06:4a:27:da:1b:cd:28:3a:9c:4e:2d:ad:9a: 67:48:c7:2a:83:97:f2:c7:73:33:7d:c1:ab:41:6c:73:0f:84: 1a:8d:56:d2:66:56:12:2a:d9:d3:f9:cc:fd:c4:54:bd:a4:4e: 6d:29:ec:72:dd:35:e4:48:b0:8c:ba:db:ec:a0:0f:67:4c:2f: 72:9a:19:e4:8b:35:c6:50:55:5f:88:f4:e1:6a:1b:81:b2:c9: b2:be:e8:fb:4c:87:ea:8b:16:04:a6:8a:1b:89:3f:7c:bb:d3: 86:f6:c9:57:de:eb:02:bb:3b:0a:9a:7d:dd:3c:ed:31:31:fc: 93:0c:2d:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbgOcg83QBfbIuAVOt8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjIxMWQ3ZjhmYTFhYWRkZWE0NDBjNTAxMjY5YmRhZjFj YWI0NTIwHhcNMjYwMjA5MTMwMTAxWhcNMjYwMjEwMTMwMTAxWjAzMTEwLwYDVQQD Eyg5Yjg4ZjNmNzZhYTA3NjZhZWM5MzE3YjM5YWI1YzU0NDA3MDc2ZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9yWxZzoOJnaaRGEGf/KrFCepdLz NUNm8KGImdCmoFgWJ0oRExsWpMe6rRuTmjwswvxpCefNRXrNA/UnXayWzxjHmYx2 FxadWg1sUJGR3DAgsDyYGnVJ9QaOLSTpVQOtxrrXq3DFyfLLXlkwvi9Dab4uMh0v buCwn9DrgMIKWaIT4vQu8asFwvmCBHxX+lPmpcGlZhUr9e8E8xL4Q5LzE/JAd8EZ wKlvwchgF4226ZfStwPJhv0Du37wA4ChmXLDv1CTa5sOyWkDd7aEFAnDIbKugLjV PzRK3eKNXsjOV31rWnBQPqFDWQUUTbOlXCtLiSZWNPcaLCaWICa58MLUewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuI8/dqoHZq7JMXs5q1xUQHB26YMB8GA1UdIwQY MBaAFJyyEdf4+hqt3qRAxQEmm9rxyrRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTkt MmFkZmVjODM3MTExLzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTktMmFkZmVjODM3MTEx LzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwD5xLOf+ B50r+Bid6ZVTGrBG2mSQeIzRlWNp1pSHUiIaIw2rPa6qxp/HIVVtm59glFlA2V3j wm20zNTev2jYlWY/YqTkPW3GcAkpPsIYZbbqgUc6RNdHGFpKbh8cipc9R4l4X8PS jAK903MF0EzKFZmVVpLKGUgheUXXB7dSDMDuR/AGSifaG80oOpxOLa2aZ0jHKoOX 8sdzM33Bq0Fscw+EGo1W0mZWEirZ0/nM/cRUvaRObSnsct015EiwjLrb7KAPZ0wv cpoZ5Is1xlBVX4j04WobgbLJsr7o+0yH6osWBKaKG4k/fLvThvbJV97rArs7Cpp9 3TztMTH8kwwt/g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:50 2026 by rpki-client