This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json) Hash identifier: BS+sbb1sua5dTWKBkeO/0L387oQbeIdhNxJaj+b6Lpk= Subject key identifier: 00:96:41:DC:55:4A:BF:C7:22:4D:4C:F0:92:5B:FC:70:8B:71:79:E0 Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Certificate serial: 019C427DD5F70AC0336CD752883460ABE205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft Manifest number: 14B0 Signing time: Mon 09 Feb 2026 13:01:08 +0000 Manifest this update: Mon 09 Feb 2026 13:01:08 +0000 Manifest next update: Tue 10 Feb 2026 13:01:08 +0000 Files and hashes: 1: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: +XxYMHZxHe/fHujuUvAnccasqH2VcBlEpHe3Y2WLfNo=) 2: tEmNq7LovUuc8Au30SanbkNv0So.roa (hash: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:d5:f7:0a:c0:33:6c:d7:52:88:34:60:ab:e2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Validity Not Before: Feb 9 13:01:08 2026 GMT Not After : Feb 10 13:01:08 2026 GMT Subject: CN=009641dc554abfc7224d4cf0925bfc708b7179e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9a:df:2e:c4:5e:c6:f0:83:17:cd:78:c1:90: 91:b0:8d:34:20:13:9e:b7:c5:b8:ca:33:11:95:dc: 69:ba:a8:e4:4f:0b:66:84:02:e6:44:eb:23:10:fd: d2:17:97:e1:4f:ed:14:96:0e:41:11:6a:32:d8:be: 26:5d:d7:c2:f4:f8:ee:5e:8b:41:ed:68:a7:f8:90: 30:d5:5f:f6:f3:7a:bf:22:21:96:b3:aa:59:3c:b8: 80:3e:da:dd:54:52:8b:f7:90:2c:6c:da:86:64:bc: 18:2a:9e:2a:bc:0e:6f:26:8a:2c:22:da:cc:4f:9d: 0e:c5:b7:59:fd:6e:3e:4f:81:12:ea:3f:3d:4e:c9: 53:79:8e:1c:30:1e:a5:0d:42:28:27:d1:e0:9f:75: 3c:4d:db:de:eb:5c:42:3f:e0:ca:6b:c7:22:c3:e0: 3b:a1:54:07:4a:58:b7:ca:f6:6b:fe:f5:27:b6:78: de:f0:2f:60:8d:77:da:60:63:b6:f0:26:1a:15:2e: 31:16:8a:70:77:ae:e8:8c:66:24:1c:73:38:47:77: 91:07:33:7f:6f:69:83:2f:0b:e9:3f:28:a2:a2:ed: 68:95:e2:d8:b5:d8:e7:0d:13:5e:c8:a8:50:09:9d: 95:b0:c9:1e:2c:a6:22:50:2c:74:cc:64:f8:7d:2c: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:96:41:DC:55:4A:BF:C7:22:4D:4C:F0:92:5B:FC:70:8B:71:79:E0 X509v3 Authority Key Identifier: keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:7c:50:ba:3d:d8:a2:cc:b2:9f:fb:81:09:e6:a0:f2:19:55: 2b:50:0c:0b:6e:cd:aa:e6:57:7c:d8:31:77:fd:69:c9:f5:a5: 4c:42:c4:9b:f8:cc:11:f6:30:05:13:a2:d6:b4:42:36:1e:c9: 69:76:31:ce:13:8a:04:ed:53:54:65:ac:18:62:2b:07:63:b7: 14:e9:44:55:40:19:c2:6d:82:a8:9e:2b:37:82:ea:09:03:04: 09:10:ec:63:05:f4:99:90:0f:e8:ff:44:db:4c:97:f1:05:8f: 0f:1b:28:7f:83:f5:7a:ef:84:92:80:07:82:06:b5:e5:d9:6b: 8f:49:b0:ca:69:67:93:54:d8:11:ea:54:4b:f6:ba:32:24:97: ee:ec:1b:24:48:28:16:ff:2d:e7:fa:26:58:cc:86:83:7c:07: 63:bc:51:46:a7:ad:72:eb:65:79:90:35:ab:d8:f8:70:3c:5a: a2:6f:6f:fb:c6:5b:90:d7:5e:d3:50:a2:1d:27:a5:72:22:c3: d3:3c:1e:b9:4e:85:35:54:b5:ac:c6:25:17:cb:8a:e4:27:2e: ed:5b:6f:39:70:f2:bd:78:31:5e:57:51:ef:44:3a:97:f1:00: 0a:19:4c:e9:98:56:2f:69:21:2d:c6:96:31:1d:20:93:08:15: 10:b6:49:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdX3CsAzbNdSiDRgq+IFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDJlMDY0Yzk4YjMyMzFjM2YyMTQ4YTFjM2Q5YzM4N2Q0 ODllZTkwHhcNMjYwMjA5MTMwMTA4WhcNMjYwMjEwMTMwMTA4WjAzMTEwLwYDVQQD EygwMDk2NDFkYzU1NGFiZmM3MjI0ZDRjZjA5MjViZmM3MDhiNzE3OWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJrfLsRexvCDF814wZCRsI00IBOe t8W4yjMRldxpuqjkTwtmhALmROsjEP3SF5fhT+0Ulg5BEWoy2L4mXdfC9PjuXotB 7Win+JAw1V/283q/IiGWs6pZPLiAPtrdVFKL95AsbNqGZLwYKp4qvA5vJoosItrM T50OxbdZ/W4+T4ES6j89TslTeY4cMB6lDUIoJ9Hgn3U8Tdve61xCP+DKa8ciw+A7 oVQHSli3yvZr/vUntnje8C9gjXfaYGO28CYaFS4xFopwd67ojGYkHHM4R3eRBzN/ b2mDLwvpPyiiou1oleLYtdjnDRNeyKhQCZ2VsMkeLKYiUCx0zGT4fSwW8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACWQdxVSr/HIk1M8JJb/HCLcXngMB8GA1UdIwQY MBaAFJ4C4GTJizIxw/IUihw9nDh9SJ7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYt NzUyNTE2ODkwZDNkLzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYtNzUyNTE2ODkwZDNk LzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHxQuj3Y osyyn/uBCeag8hlVK1AMC27NquZXfNgxd/1pyfWlTELEm/jMEfYwBROi1rRCNh7J aXYxzhOKBO1TVGWsGGIrB2O3FOlEVUAZwm2CqJ4rN4LqCQMECRDsYwX0mZAP6P9E 20yX8QWPDxsof4P1eu+EkoAHgga15dlrj0mwymlnk1TYEepUS/a6MiSX7uwbJEgo Fv8t5/omWMyGg3wHY7xRRqetcutleZA1q9j4cDxaom9v+8ZbkNde01CiHSelciLD 0zweuU6FNVS1rMYlF8uK5Ccu7VtvOXDyvXgxXldR70Q6l/EAChlM6ZhWL2khLcaW MR0gkwgVELZJOA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:32 2026 by rpki-client