This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json) Hash identifier: B9AJkK1iCdE2JwVZ8ZWZAubdJlP+8sIf+wb0keOcQaI= Subject key identifier: BA:66:B0:CB:10:1A:39:73:66:8E:85:BA:98:11:55:06:21:D2:1A:86 Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8 Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8 Certificate serial: 019C44A2743D2C49379FF4D8536DBBEF0957 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft Manifest number: 130D Signing time: Mon 09 Feb 2026 23:00:23 +0000 Manifest this update: Mon 09 Feb 2026 23:00:23 +0000 Manifest next update: Tue 10 Feb 2026 23:00:23 +0000 Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: vK6fivQA/GegSqrEybIHrvCCdpk9R75wM8I2IoAZ+Jo=) 2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:74:3d:2c:49:37:9f:f4:d8:53:6d:bb:ef:09:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8 Validity Not Before: Feb 9 23:00:23 2026 GMT Not After : Feb 10 23:00:23 2026 GMT Subject: CN=ba66b0cb101a3973668e85ba9811550621d21a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:76:29:26:96:40:4e:e9:a2:14:94:dc:74: 28:5c:03:85:1c:06:80:df:26:45:9d:f4:f2:58:ec: 3a:c5:8b:34:e4:44:be:ec:ec:16:ea:d5:8e:99:e4: 1a:7d:3a:26:bf:81:be:29:b2:20:ba:71:4b:d1:84: bb:8e:f5:16:27:ff:c3:8f:25:90:19:ad:28:69:f4: b9:e5:db:d5:0e:47:1a:30:64:23:49:e8:e0:ed:51: 00:4e:03:85:b1:a3:81:75:73:aa:9c:38:6f:97:51: 98:0d:31:e3:5d:5c:24:e3:fb:ca:64:6c:27:65:44: 96:7c:3d:f9:d8:5b:9c:01:5d:b6:06:65:84:8f:e4: ce:f2:27:74:fa:1c:a5:40:e1:fe:04:8d:b7:05:78: d4:ac:9c:d7:b8:b5:cc:99:d0:1a:24:8d:45:8b:c4: fa:e4:ee:e8:9e:2a:4a:94:fc:d8:3a:2a:cf:1b:da: 9e:8a:6e:42:23:7b:a0:aa:00:48:23:34:f0:9c:31: d9:d5:26:ff:7d:57:1c:ed:08:23:b7:75:4b:e1:e0: f9:6d:39:6a:fb:dd:82:8f:91:fa:fc:44:f1:b1:bb: 17:91:83:9c:94:ae:ba:04:0e:46:3c:1f:8a:24:92: 12:1a:16:72:da:94:6d:33:f7:81:37:86:19:b0:6a: 95:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:66:B0:CB:10:1A:39:73:66:8E:85:BA:98:11:55:06:21:D2:1A:86 X509v3 Authority Key Identifier: keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:9a:d1:5c:a5:6a:88:1a:d1:3d:5d:3a:fb:b6:b3:35:7d:78: 6b:7a:70:7b:b7:cb:85:b2:a8:54:97:e9:03:45:00:4e:f1:01: ba:74:34:bb:38:00:75:2d:d8:3b:e6:a2:cd:9e:c9:1d:8d:73: 52:9b:87:39:65:88:32:0d:87:60:76:de:bf:80:e0:36:50:3b: 65:39:56:0c:25:7d:99:5c:cb:bc:af:c2:9f:c9:9a:5c:8c:a0: 69:1d:58:df:fb:15:df:60:f1:bb:47:6a:7d:e0:d5:18:bd:00: d2:d4:eb:b0:83:0d:1b:35:f0:70:28:87:83:7a:13:38:c1:77: 3a:0d:4a:93:b4:3e:1a:d3:9e:c0:65:78:40:d4:a6:d7:b6:73: ab:47:37:25:1c:05:89:10:24:fa:2a:e3:98:6a:a5:26:6a:66: 16:14:62:67:8a:a4:b4:64:66:a0:b1:64:1d:69:af:04:8e:64: 8a:1a:a9:aa:9c:ee:33:91:64:c6:e8:82:40:41:4f:a7:11:75: 9f:bd:19:84:13:7d:98:c6:32:8c:8d:4b:b6:30:ba:5a:b2:e7: 60:46:29:bf:3e:ff:30:ca:2f:a8:9d:15:80:00:85:f8:8f:6e: 4b:9d:52:f2:3b:5f:05:8a:01:2f:e7:e2:d1:6c:bb:05:13:b1: 3c:5e:c9:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEonQ9LEk3n/TYU2277wlXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDJiYmM4M2UyOGMxMDNjMTdkNWEyMDFlZGVmNTY3MjYz NGRiZTgwHhcNMjYwMjA5MjMwMDIzWhcNMjYwMjEwMjMwMDIzWjAzMTEwLwYDVQQD EyhiYTY2YjBjYjEwMWEzOTczNjY4ZTg1YmE5ODExNTUwNjIxZDIxYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz92KSaWQE7pohSU3HQoXAOFHAaA 3yZFnfTyWOw6xYs05ES+7OwW6tWOmeQafTomv4G+KbIgunFL0YS7jvUWJ//DjyWQ Ga0oafS55dvVDkcaMGQjSejg7VEATgOFsaOBdXOqnDhvl1GYDTHjXVwk4/vKZGwn ZUSWfD352FucAV22BmWEj+TO8id0+hylQOH+BI23BXjUrJzXuLXMmdAaJI1Fi8T6 5O7onipKlPzYOirPG9qeim5CI3ugqgBIIzTwnDHZ1Sb/fVcc7Qgjt3VL4eD5bTlq +92Cj5H6/ETxsbsXkYOclK66BA5GPB+KJJISGhZy2pRtM/eBN4YZsGqV+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpmsMsQGjlzZo6FupgRVQYh0hqGMB8GA1UdIwQY MBaAFDZCu8g+KMEDwX1aIB7e9WcmNNvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYt NmNiMmUwMmNhZWYyLzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYtNmNiMmUwMmNhZWYy LzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJrRXKVq iBrRPV06+7azNX14a3pwe7fLhbKoVJfpA0UATvEBunQ0uzgAdS3YO+aizZ7JHY1z UpuHOWWIMg2HYHbev4DgNlA7ZTlWDCV9mVzLvK/Cn8maXIygaR1Y3/sV32Dxu0dq feDVGL0A0tTrsIMNGzXwcCiHg3oTOMF3Og1Kk7Q+GtOewGV4QNSm17Zzq0c3JRwF iRAk+irjmGqlJmpmFhRiZ4qktGRmoLFkHWmvBI5kihqpqpzuM5FkxuiCQEFPpxF1 n70ZhBN9mMYyjI1LtjC6WrLnYEYpvz7/MMovqJ0VgACF+I9uS51S8jtfBYoBL+fi 0Wy7BROxPF7J5g== -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:24 2026 by rpki-client