This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json) Hash identifier: C+40K0pCkQoSo84k33oPn4X7gi7rt7bh74+aoEbla0g= Subject key identifier: E1:17:38:2B:13:57:3D:53:D5:FF:FE:CE:77:4A:78:18:89:9E:63:27 Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8 Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8 Certificate serial: 019C4358B560E117FDB9A1D45605D6D966FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 17:00:12 +0000 Manifest this update: Mon 09 Feb 2026 17:00:12 +0000 Manifest next update: Tue 10 Feb 2026 17:00:12 +0000 Files and hashes: 1: D1Nv2f8o0HAr_nbVAGPtRiAi3cw.roa (hash: R0V6ZIQY2hcuRRo+byPK6DVVEuSr1ojs/WwAjiQIcr8=) 2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: RFR/wqn8dkWCjz6AjzJkwgns7KNal2OOOu/cTjLnp8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:b5:60:e1:17:fd:b9:a1:d4:56:05:d6:d9:66:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8 Validity Not Before: Feb 9 17:00:12 2026 GMT Not After : Feb 10 17:00:12 2026 GMT Subject: CN=e117382b13573d53d5fffece774a7818899e6327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:53:da:84:d3:98:44:fc:bb:66:57:14:a4: 4e:e6:3d:33:3f:63:b6:1e:b3:db:02:55:8c:49:26: e2:31:5e:48:e7:59:6e:9c:7e:5b:2c:e2:7d:0c:9f: 23:44:dc:ed:a2:9c:b0:48:bd:15:f1:3b:f2:5e:4b: 94:35:70:e8:21:49:7e:b0:68:a7:64:c1:f3:44:35: bf:0c:62:ae:4b:13:b2:ef:63:24:4b:62:a7:d5:ba: 08:d9:2d:3d:3b:4b:38:34:84:8a:cd:c6:1d:a8:f2: b4:33:d8:fe:c2:d1:0a:1e:d3:40:d7:d8:e0:64:bd: 1c:4c:49:28:1c:4a:83:28:b1:3d:3d:0f:8c:c8:a8: 8f:c5:2a:85:ab:35:0e:17:92:63:3c:fb:65:73:24: 3e:04:c9:f3:1b:92:70:13:45:e9:d9:b5:88:2d:d7: 5d:c5:69:75:fa:a1:cc:89:09:4c:e2:48:3f:14:55: 68:8c:88:a1:34:d9:1b:5e:1e:26:02:fd:3a:13:69: fb:12:59:53:2c:85:9c:2c:ca:dc:22:4e:14:f1:39: 38:49:02:05:32:1b:8e:71:08:c1:1f:1e:a0:f4:1c: ac:96:b2:e7:d2:a4:a9:83:5c:a5:c8:d7:2e:35:2c: 51:41:a6:4c:2f:84:08:f3:00:4a:84:1a:18:92:33: 3e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:17:38:2B:13:57:3D:53:D5:FF:FE:CE:77:4A:78:18:89:9E:63:27 X509v3 Authority Key Identifier: keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:39:54:5c:f7:4c:87:95:6d:28:08:30:88:d1:44:19:1d:1b: 71:9d:5d:33:1c:0e:cf:3c:64:c4:90:8b:65:03:dc:89:9d:a8: c4:26:8a:8c:4c:32:5a:cb:3a:76:e5:c4:0a:70:c2:25:33:b4: 6d:dd:85:d4:6b:6c:62:82:3b:03:a2:7a:24:84:40:c6:a8:f9: 6f:ca:79:b7:2b:f9:27:8d:fc:9a:06:af:dc:8d:b6:2b:00:74: 34:3d:6d:ec:b2:90:21:2e:d8:78:3d:93:c8:3a:44:ad:58:70: ce:8b:46:07:3c:f0:af:7d:c5:c3:01:bf:06:86:5f:c3:d0:be: 51:45:11:01:36:a1:0c:9c:08:62:8b:cf:48:17:b7:cf:47:ef: e1:23:c0:92:58:53:04:42:48:ef:49:9a:3e:c2:ff:3e:48:5a: c7:c5:c9:55:6a:78:3c:db:65:c0:ae:eb:98:2e:2b:d8:a2:c1: 2f:fd:7d:b8:83:bc:40:09:d5:a8:60:44:69:98:ff:d1:25:2c: a6:6e:c1:82:7b:3a:b3:b6:49:45:75:e2:3c:32:98:9e:0c:61: f3:89:fb:48:56:a2:0e:2d:cc:e1:d8:3a:fd:40:c9:c0:9b:40: ac:6e:f8:41:fe:54:cd:26:b9:b0:b6:89:0d:b8:c6:be:16:de: 97:2f:0a:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWLVg4Rf9uaHUVgXW2Wb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjNjMzMwZWJlODUzZTEyNWIwYzFhZDJiMTZkNzlkMjVl NGYzZjgwHhcNMjYwMjA5MTcwMDEyWhcNMjYwMjEwMTcwMDEyWjAzMTEwLwYDVQQD EyhlMTE3MzgyYjEzNTczZDUzZDVmZmZlY2U3NzRhNzgxODg5OWU2MzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd5T2oTTmET8u2ZXFKRO5j0zP2O2 HrPbAlWMSSbiMV5I51lunH5bLOJ9DJ8jRNztopywSL0V8TvyXkuUNXDoIUl+sGin ZMHzRDW/DGKuSxOy72MkS2Kn1boI2S09O0s4NISKzcYdqPK0M9j+wtEKHtNA19jg ZL0cTEkoHEqDKLE9PQ+MyKiPxSqFqzUOF5JjPPtlcyQ+BMnzG5JwE0Xp2bWILddd xWl1+qHMiQlM4kg/FFVojIihNNkbXh4mAv06E2n7EllTLIWcLMrcIk4U8Tk4SQIF MhuOcQjBHx6g9ByslrLn0qSpg1ylyNcuNSxRQaZML4QI8wBKhBoYkjM+6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEXOCsTVz1T1f/+zndKeBiJnmMnMB8GA1UdIwQY MBaAFJ0jwzDr6FPhJbDBrSsW150l5PP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTkt NDdhNDEyODE1ZmI0LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTktNDdhNDEyODE1ZmI0 LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTlUXPdM h5VtKAgwiNFEGR0bcZ1dMxwOzzxkxJCLZQPciZ2oxCaKjEwyWss6duXECnDCJTO0 bd2F1GtsYoI7A6J6JIRAxqj5b8p5tyv5J438mgav3I22KwB0ND1t7LKQIS7YeD2T yDpErVhwzotGBzzwr33FwwG/BoZfw9C+UUURATahDJwIYovPSBe3z0fv4SPAklhT BEJI70maPsL/Pkhax8XJVWp4PNtlwK7rmC4r2KLBL/19uIO8QAnVqGBEaZj/0SUs pm7Bgns6s7ZJRXXiPDKYngxh84n7SFaiDi3M4dg6/UDJwJtArG74Qf5UzSa5sLaJ DbjGvhbely8KLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:02 2026 by rpki-client