This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json) Hash identifier: VrdqcWfdgV07ZO8HdMuRjP2YrF+BQbP8JPU4AQR4tVo= Subject key identifier: AE:0A:B6:C4:48:03:78:BC:97:4D:22:35:07:D3:90:7E:E9:40:E8:CB Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7 Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7 Certificate serial: 019C1D95894192E4E40F159295174A098DEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft Manifest number: 1801 Signing time: Mon 02 Feb 2026 09:01:05 +0000 Manifest this update: Mon 02 Feb 2026 09:01:05 +0000 Manifest next update: Tue 03 Feb 2026 09:01:05 +0000 Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: FxQt9zNJeADNpIWgiGvg7QbFK0z1YE7YzF/ng4WDFbc=) 2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:95:89:41:92:e4:e4:0f:15:92:95:17:4a:09:8d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7 Validity Not Before: Feb 2 09:01:05 2026 GMT Not After : Feb 3 09:01:05 2026 GMT Subject: CN=ae0ab6c4480378bc974d223507d3907ee940e8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:c7:fb:27:d4:51:89:83:cb:c0:b8:e6:af: 9e:97:e0:03:ba:78:1f:64:e9:3f:bf:fb:e7:07:01: fd:c7:c4:9d:6c:8e:21:61:fe:4a:94:64:62:e1:62: 0b:32:2d:4b:71:e2:b0:9e:2d:1e:ce:73:e1:00:76: 36:66:03:6f:b0:74:03:4d:f7:aa:52:d1:4a:02:e3: 5e:d2:a3:07:99:fc:6c:c6:49:2b:19:a5:b8:2f:2a: c1:1b:c1:28:a7:65:b2:82:e2:69:c1:05:c4:1b:48: 75:4a:d9:20:ae:6b:65:49:b5:aa:03:73:2a:96:6f: ac:1c:8c:07:67:1b:2f:14:ce:a9:6f:02:a8:c8:35: 79:3f:7a:70:62:26:bd:7a:52:b8:49:67:6a:73:73: bb:33:f3:0a:a9:e8:8e:54:49:3c:be:0a:e4:d7:7d: 15:a7:23:1e:a9:eb:64:97:7f:a0:8c:df:74:28:a6: bc:03:69:9f:0c:64:22:93:fb:0f:14:fe:8d:e7:e9: 11:06:1b:9a:9a:ee:5f:bd:c6:c3:2b:ab:3b:63:ae: ff:75:86:86:43:8f:f9:12:9f:22:58:b6:76:a4:24: 3c:a1:1b:16:59:41:27:b8:f6:7d:2c:be:57:36:43: d4:bf:6b:d5:dd:fe:ad:ab:a4:2d:ff:9f:7b:14:f5: 3f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0A:B6:C4:48:03:78:BC:97:4D:22:35:07:D3:90:7E:E9:40:E8:CB X509v3 Authority Key Identifier: keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ca:78:69:0e:78:c8:8c:e3:b3:e6:9a:ef:5b:b0:51:48:1b: bd:bd:25:4f:3b:5b:a9:f6:4c:b5:8d:2f:1a:22:94:8f:b0:5d: 68:06:a1:69:4c:1a:c8:ea:bb:20:04:67:0b:2a:ec:a8:32:e6: dd:7e:32:4b:76:bd:e1:b7:3c:8d:4d:f7:3d:34:0f:f6:05:61: 55:20:de:4f:fd:43:81:5c:74:53:7a:8c:4d:ce:cd:d5:c0:4b: 30:51:ec:c8:09:4c:af:34:ff:8e:ae:df:29:18:09:89:c0:7f: 0b:f0:b2:83:ac:43:0a:45:db:93:70:7a:9c:7f:8b:8c:c5:b0: 26:81:28:72:99:40:54:37:94:15:1a:e1:2a:6a:3a:c5:a5:fb: 10:99:a6:98:77:06:07:92:50:66:74:b2:86:5b:2b:5e:36:42: c5:42:5d:03:e2:95:c4:9f:cb:81:24:99:9e:43:eb:df:ee:70: e1:14:3e:0e:91:4c:7e:15:de:3c:48:2f:0e:b4:65:11:d0:1b: c1:c5:00:7f:7e:97:12:e0:18:75:bd:b7:82:a9:ab:ba:ba:b7: 32:e7:86:60:14:25:18:a3:95:a4:45:80:7d:c0:e7:9b:33:f7: 22:d0:6a:2c:db:12:7c:2f:30:6f:a1:a5:90:47:ab:a6:67:d1: 0b:a2:0c:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdlYlBkuTkDxWSlRdKCY3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTJhOGE2ZGY5OTc4ZGU3MjI3MDAzYjFmZDNmMGUyYjll NTljYzcwHhcNMjYwMjAyMDkwMTA1WhcNMjYwMjAzMDkwMTA1WjAzMTEwLwYDVQQD EyhhZTBhYjZjNDQ4MDM3OGJjOTc0ZDIyMzUwN2QzOTA3ZWU5NDBlOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLzH+yfUUYmDy8C45q+el+ADungf ZOk/v/vnBwH9x8SdbI4hYf5KlGRi4WILMi1LceKwni0eznPhAHY2ZgNvsHQDTfeq UtFKAuNe0qMHmfxsxkkrGaW4LyrBG8Eop2WyguJpwQXEG0h1StkgrmtlSbWqA3Mq lm+sHIwHZxsvFM6pbwKoyDV5P3pwYia9elK4SWdqc3O7M/MKqeiOVEk8vgrk130V pyMeqetkl3+gjN90KKa8A2mfDGQik/sPFP6N5+kRBhuamu5fvcbDK6s7Y67/dYaG Q4/5Ep8iWLZ2pCQ8oRsWWUEnuPZ9LL5XNkPUv2vV3f6tq6Qt/597FPU/PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4KtsRIA3i8l00iNQfTkH7pQOjLMB8GA1UdIwQY MBaAFDUSqKbfmXjecicAOx/T8OK55ZzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWIt NzQ3ZTc1ZTU1NDYxLzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWItNzQ3ZTc1ZTU1NDYx LzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8p4aQ54 yIzjs+aa71uwUUgbvb0lTztbqfZMtY0vGiKUj7BdaAahaUwayOq7IARnCyrsqDLm 3X4yS3a94bc8jU33PTQP9gVhVSDeT/1DgVx0U3qMTc7N1cBLMFHsyAlMrzT/jq7f KRgJicB/C/Cyg6xDCkXbk3B6nH+LjMWwJoEocplAVDeUFRrhKmo6xaX7EJmmmHcG B5JQZnSyhlsrXjZCxUJdA+KVxJ/LgSSZnkPr3+5w4RQ+DpFMfhXePEgvDrRlEdAb wcUAf36XEuAYdb23gqmrurq3MueGYBQlGKOVpEWAfcDnmzP3ItBqLNsSfC8wb6Gl kEerpmfRC6IMGA== -----END CERTIFICATE-----Generated at Mon Feb 2 15:48:36 2026 by rpki-client