This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json) Hash identifier: mlNmwRBbvZOLPhnihyVHGMn+oGsDAdDYWGWv0CQ8COc= Subject key identifier: CF:E8:81:E5:28:AC:A8:1B:F9:E5:87:16:A7:39:95:B6:92:DD:BC:E1 Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7 Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7 Certificate serial: 019C427D5DB8A1872677BC60076BDEBA758C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft Manifest number: 11D1 Signing time: Mon 09 Feb 2026 13:00:37 +0000 Manifest this update: Mon 09 Feb 2026 13:00:37 +0000 Manifest next update: Tue 10 Feb 2026 13:00:37 +0000 Files and hashes: 1: 8cEfC1N1e8UVOvxoeOQe4DTgdIo.roa (hash: LRaPlos+9PMu+yFLBbBjOJX5cPq1n8kJxvNzrnZnp+M=) 2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: +4WskHJiGxZl3ubYkIbWXA+z6Xno3mKMpNrHq+QeX5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:5d:b8:a1:87:26:77:bc:60:07:6b:de:ba:75:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7 Validity Not Before: Feb 9 13:00:37 2026 GMT Not After : Feb 10 13:00:37 2026 GMT Subject: CN=cfe881e528aca81bf9e58716a73995b692ddbce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:77:7a:9e:20:21:fa:77:8c:89:d1:d7:56: fd:5f:b4:da:2b:4c:a4:d1:89:d5:f0:4f:1f:54:43: 95:67:6e:24:3d:cb:d8:91:94:c6:95:c2:4f:65:e1: 28:86:36:b9:88:b1:56:55:68:2b:2e:19:17:fd:c6: 4c:4e:6f:5f:90:17:ee:5e:c0:25:09:42:b4:bc:7d: 66:12:10:d0:42:b1:b3:b9:da:1c:36:4c:ef:85:b9: d0:61:89:60:e0:9f:2b:9b:fb:da:6d:66:34:b4:89: 63:f0:05:98:ca:03:6e:36:1c:86:bd:22:f3:34:eb: 7a:52:54:c2:88:88:05:c2:21:b4:9e:79:5a:14:85: 55:39:7d:42:b3:76:e5:e1:71:3f:8a:46:5b:83:1f: ea:18:cd:19:7e:2c:88:bb:8e:4b:d2:1b:42:27:8f: 08:35:98:bb:96:81:5a:ba:51:fb:75:99:02:68:93: 05:20:52:74:a5:e2:90:58:42:f6:dc:1f:a9:a2:d5: 70:05:03:51:98:f7:30:ae:32:ef:1c:21:e0:e1:0a: e0:dc:ee:1f:7a:08:32:dd:18:d1:f8:5a:99:28:f0: 88:c6:2b:d3:5f:64:33:7c:31:29:2a:0b:5e:b5:88: 8c:76:e2:81:39:6a:a8:75:7e:46:fd:6a:86:4b:70: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E8:81:E5:28:AC:A8:1B:F9:E5:87:16:A7:39:95:B6:92:DD:BC:E1 X509v3 Authority Key Identifier: keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f2:5e:9c:b1:7d:8c:04:a1:ea:c6:33:1e:5e:23:57:31:1b: 45:c3:81:d3:95:61:b8:95:e5:8f:e2:3f:a1:b4:1e:af:4d:9a: 7f:53:42:f3:1c:78:92:6f:2d:e3:6a:84:bf:e2:ab:52:4e:33: e1:16:ff:c2:d8:42:9f:80:cc:c3:38:0f:b5:0c:54:a3:4c:2b: 45:e4:0a:86:15:50:f0:62:fa:20:e0:04:55:11:71:1e:e9:9b: d7:c8:6d:8a:71:97:f2:db:4d:6c:1a:75:0b:07:50:c2:0f:12: ea:06:93:4e:3a:0f:e6:1c:8b:d8:cc:6a:ca:ea:39:99:eb:dd: f9:99:cc:ec:2d:65:71:63:c4:5e:fe:a6:f4:c4:c6:e6:1d:77: cb:ff:06:fb:bc:fa:96:bf:7a:30:88:18:00:b0:5d:32:65:a8: 5d:2d:e0:ea:58:9b:1a:aa:c8:b8:3c:df:a0:da:d4:35:97:85: ea:ef:f0:4b:c1:1d:0a:b6:b3:66:94:4f:24:d3:1d:1d:1d:e6: 46:1b:0d:b8:6e:85:0a:48:ee:6f:6b:65:d8:06:7b:75:1c:bc: 56:32:10:80:82:24:98:7f:93:0d:cd:ce:7b:ab:19:c2:b1:bc: a1:f3:0c:a8:b0:75:83:a9:cc:fc:3f:b3:24:55:ac:28:54:54: 9e:ca:cf:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfV24oYcmd7xgB2veunWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDgyZjJlZmVmYjkyN2EzY2FmZmVhMWQ5MWYyNDE3ZjNk MmU3ZDcwHhcNMjYwMjA5MTMwMDM3WhcNMjYwMjEwMTMwMDM3WjAzMTEwLwYDVQQD EyhjZmU4ODFlNTI4YWNhODFiZjllNTg3MTZhNzM5OTViNjkyZGRiY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC53ep4gIfp3jInR11b9X7TaK0yk 0YnV8E8fVEOVZ24kPcvYkZTGlcJPZeEohja5iLFWVWgrLhkX/cZMTm9fkBfuXsAl CUK0vH1mEhDQQrGzudocNkzvhbnQYYlg4J8rm/vabWY0tIlj8AWYygNuNhyGvSLz NOt6UlTCiIgFwiG0nnlaFIVVOX1Cs3bl4XE/ikZbgx/qGM0ZfiyIu45L0htCJ48I NZi7loFaulH7dZkCaJMFIFJ0peKQWEL23B+potVwBQNRmPcwrjLvHCHg4Qrg3O4f eggy3RjR+FqZKPCIxivTX2QzfDEpKgtetYiMduKBOWqodX5G/WqGS3CogQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/ogeUorKgb+eWHFqc5lbaS3bzhMB8GA1UdIwQY MBaAFDZILy7++5J6PK/+odkfJBfz0ufXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgt NzY4ODczMWJlZDlkLzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgtNzY4ODczMWJlZDlk LzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/JenLF9 jASh6sYzHl4jVzEbRcOB05VhuJXlj+I/obQer02af1NC8xx4km8t42qEv+KrUk4z 4Rb/wthCn4DMwzgPtQxUo0wrReQKhhVQ8GL6IOAEVRFxHumb18htinGX8ttNbBp1 CwdQwg8S6gaTTjoP5hyL2Mxqyuo5mevd+ZnM7C1lcWPEXv6m9MTG5h13y/8G+7z6 lr96MIgYALBdMmWoXS3g6libGqrIuDzfoNrUNZeF6u/wS8EdCrazZpRPJNMdHR3m RhsNuG6FCkjub2tl2AZ7dRy8VjIQgIIkmH+TDc3Oe6sZwrG8ofMMqLB1g6nM/D+z JFWsKFRUnsrPag== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:34 2026 by rpki-client