This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json) Hash identifier: xgK93Oz95EabiPBH1dzRjrYvmQcTFYh3rG+aNavkWMg= Subject key identifier: 54:59:A9:D1:72:61:86:6F:6B:D5:64:12:22:A2:E5:09:4A:B2:ED:61 Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6 Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6 Certificate serial: 019C4358E414D051AD6C8081A915D7E7EAB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 17:00:24 +0000 Manifest this update: Mon 09 Feb 2026 17:00:24 +0000 Manifest next update: Tue 10 Feb 2026 17:00:24 +0000 Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: emGDHEIveebA1ummnjgNY+2LPG0iN29fMQPtQ2966V0=) 2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:e4:14:d0:51:ad:6c:80:81:a9:15:d7:e7:ea:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6 Validity Not Before: Feb 9 17:00:24 2026 GMT Not After : Feb 10 17:00:24 2026 GMT Subject: CN=5459a9d17261866f6bd5641222a2e5094ab2ed61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:56:d1:f4:82:2e:c5:30:8b:17:bb:46:8e:a6: 21:be:a8:1d:bc:f2:14:16:2b:aa:fc:8f:92:08:f6: ff:74:42:41:cf:5f:14:ee:8e:81:03:8a:d5:1a:a1: 23:dd:1d:2e:3c:c6:38:10:b6:a7:b4:7c:1e:f5:1e: f1:5e:e0:91:d1:30:f1:fa:f6:09:f5:f8:45:a9:e6: 17:f9:2b:d5:ca:27:66:1e:42:17:ec:e9:c5:68:45: 05:ef:cc:af:61:77:1f:2e:20:72:25:95:59:cf:04: 7d:67:93:77:ee:70:54:16:26:a2:f7:1f:78:f1:de: 2e:3f:81:c0:74:66:08:74:12:a7:eb:d7:7c:48:ec: 07:25:be:2d:14:70:93:55:c2:c4:55:9f:6f:1c:92: 91:7f:15:e0:e6:f5:27:db:71:df:7d:f5:9f:d7:2f: c2:63:91:00:22:c1:57:83:54:02:a3:bf:f5:ee:25: 74:05:81:c2:79:14:3b:90:6a:1f:73:fc:6e:cf:cf: c7:d5:84:0f:da:65:21:77:84:a6:97:be:6b:40:4e: d4:95:b9:61:01:48:90:6b:38:19:25:ea:42:ec:47: 5e:f3:92:bd:21:8c:d3:ef:d2:ca:de:ac:53:38:3a: 6f:78:ae:19:06:50:fd:7d:26:f5:f2:d6:02:e0:6e: 7a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:59:A9:D1:72:61:86:6F:6B:D5:64:12:22:A2:E5:09:4A:B2:ED:61 X509v3 Authority Key Identifier: keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:14:0e:d7:0b:28:2e:5b:60:38:0c:82:28:e1:89:aa:57:fc: b5:64:03:86:b1:e5:5f:ee:f5:51:f0:f3:61:bf:bf:8b:bb:c2: e1:57:68:e7:eb:ee:dc:83:6f:d0:4a:21:26:27:df:4d:14:f7: d5:56:74:08:df:03:c9:a1:ac:bd:31:14:45:11:48:f5:be:98: 6b:46:df:6b:97:c4:e5:7f:f0:b1:31:ef:20:9d:ff:8f:a8:dc: b4:ad:b5:e0:63:1a:a5:db:34:63:b5:21:08:17:e7:87:29:a8: f0:10:2d:27:42:0a:be:34:b2:36:3a:b8:97:c3:26:be:4c:8c: b4:57:71:94:8b:de:b3:0e:12:fe:d0:a8:d2:00:74:bc:e0:9b: d7:b9:7f:a2:43:80:6b:9e:b6:6b:f6:76:58:2e:fe:58:88:95: 8d:47:f9:a0:63:64:09:d3:93:fc:8b:30:20:85:5b:a0:bf:8c: 4d:7b:ca:cc:4b:7c:b9:ab:c0:c7:ce:b6:f5:9a:b8:f4:2b:ce: 79:67:2c:16:d0:78:be:56:42:05:4c:2d:3b:b5:96:ad:98:56: c1:b0:1c:d9:3f:09:03:da:d6:a8:50:11:43:ad:9d:0c:3b:0f: c8:29:89:f4:71:23:9e:ce:ae:76:14:cc:92:f9:a4:f3:07:ee: 3e:5c:a0:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWOQU0FGtbICBqRXX5+q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDE3OWNlNDllNTc3NmI5MmM4NmMyNmMyMGIwYjQzZmQw YTZjYjYwHhcNMjYwMjA5MTcwMDI0WhcNMjYwMjEwMTcwMDI0WjAzMTEwLwYDVQQD Eyg1NDU5YTlkMTcyNjE4NjZmNmJkNTY0MTIyMmEyZTUwOTRhYjJlZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1bR9IIuxTCLF7tGjqYhvqgdvPIU Fiuq/I+SCPb/dEJBz18U7o6BA4rVGqEj3R0uPMY4ELantHwe9R7xXuCR0TDx+vYJ 9fhFqeYX+SvVyidmHkIX7OnFaEUF78yvYXcfLiByJZVZzwR9Z5N37nBUFiai9x94 8d4uP4HAdGYIdBKn69d8SOwHJb4tFHCTVcLEVZ9vHJKRfxXg5vUn23HfffWf1y/C Y5EAIsFXg1QCo7/17iV0BYHCeRQ7kGofc/xuz8/H1YQP2mUhd4Sml75rQE7Ulblh AUiQazgZJepC7Ede85K9IYzT79LK3qxTODpveK4ZBlD9fSb18tYC4G56kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRZqdFyYYZva9VkEiKi5QlKsu1hMB8GA1UdIwQY MBaAFNTRec5J5XdrkshsJsILC0P9Cmy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUt NDAzMmUxOTBlZGMzLzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUtNDAzMmUxOTBlZGMz LzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBQO1wso LltgOAyCKOGJqlf8tWQDhrHlX+71UfDzYb+/i7vC4Vdo5+vu3INv0EohJiffTRT3 1VZ0CN8DyaGsvTEURRFI9b6Ya0bfa5fE5X/wsTHvIJ3/j6jctK214GMapds0Y7Uh CBfnhymo8BAtJ0IKvjSyNjq4l8MmvkyMtFdxlIvesw4S/tCo0gB0vOCb17l/okOA a562a/Z2WC7+WIiVjUf5oGNkCdOT/IswIIVboL+MTXvKzEt8uavAx8629Zq49CvO eWcsFtB4vlZCBUwtO7WWrZhWwbAc2T8JA9rWqFARQ62dDDsPyCmJ9HEjns6udhTM kvmk8wfuPlygRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:59 2026 by rpki-client