This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json) Hash identifier: AxmMuFetPsxfqxQm/1frEUSxSF0OYqh+x0zWz94DxDs= Subject key identifier: 9F:64:E4:90:0B:DF:33:71:43:F1:D5:D9:EE:D9:7F:D7:AF:CA:9D:F0 Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81 Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081 Certificate serial: 019C42EAECEF8D99689770711A706D12DD78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft Manifest number: 1815 Signing time: Mon 09 Feb 2026 15:00:18 +0000 Manifest this update: Mon 09 Feb 2026 15:00:18 +0000 Manifest next update: Tue 10 Feb 2026 15:00:18 +0000 Files and hashes: 1: 3UvocN8YemmoOwL53sgwSszmnzc.roa (hash: RJjvrheXtGevJ6D0OMvxOIdvCPxuFznkOJ4LPhI3QMA=) 2: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: 2hfizx3eOC2Qd4lBVjkk8ZnwMIF668EtFzfTS9+SMXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:ec:ef:8d:99:68:97:70:71:1a:70:6d:12:dd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081 Validity Not Before: Feb 9 15:00:18 2026 GMT Not After : Feb 10 15:00:18 2026 GMT Subject: CN=9f64e4900bdf337143f1d5d9eed97fd7afca9df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:b7:ec:34:97:67:62:a3:ef:70:17:e8:8e: 02:c9:04:f9:18:2d:74:88:81:e9:f9:00:e8:15:d4: 45:6f:96:59:38:05:fa:07:80:06:80:ee:58:8f:0b: bb:4c:38:58:a7:1d:06:1e:9a:b0:2d:76:9a:9f:66: 19:33:61:e9:45:0f:2a:0b:bf:86:51:5f:7c:4d:48: 75:ef:78:ca:99:8e:7b:4d:a1:87:44:e8:17:f6:ee: c0:13:80:7d:e6:0c:0c:be:92:09:66:48:2c:30:f6: 4e:30:dd:a7:a4:be:1f:de:f3:b0:e0:12:77:04:3a: 52:72:1e:18:c1:60:06:79:04:97:36:eb:95:24:75: ca:b4:d1:4e:36:2b:50:5e:03:8c:6a:c5:42:7c:16: 18:91:13:dc:b9:05:f4:1a:a7:24:6e:af:03:c0:d4: 86:fc:0d:8f:af:31:b8:5b:cf:1a:f2:48:8a:87:8f: 17:42:ca:7b:75:c3:4c:32:13:4b:2b:28:7e:99:f2: 8b:cc:2e:9a:93:23:45:9f:1d:3e:e4:00:44:4e:1b: 80:f9:dc:5f:c1:04:73:16:ae:f5:03:86:de:68:3c: d8:38:e8:17:3b:4d:86:76:59:2f:49:a6:cd:04:81: cb:41:93:fc:73:cb:df:ec:fb:82:0f:63:15:a6:e6: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:64:E4:90:0B:DF:33:71:43:F1:D5:D9:EE:D9:7F:D7:AF:CA:9D:F0 X509v3 Authority Key Identifier: keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:76:71:fc:cb:6a:0a:48:ff:fc:ea:0f:35:f7:9d:9f:f9:d8: b9:92:a0:0b:bc:29:ce:32:d1:92:02:0f:e6:5a:fb:54:e3:65: 0f:41:e1:f9:4a:cd:80:ac:ff:b8:c0:6c:df:9e:5d:39:bc:42: 8f:1e:b6:35:a1:e5:be:5e:ac:71:72:23:a8:ef:28:ea:d3:5c: d0:3c:c6:be:61:14:37:bf:6c:07:6e:3c:c0:c9:1a:21:c4:8d: 8b:f6:e4:3f:db:41:50:e1:90:b5:4b:fc:8b:c4:54:c3:2e:f4: f1:54:0b:8d:e5:0c:23:da:e6:b7:e2:2d:a6:1a:9c:c0:43:5f: b2:bb:a6:41:ac:f5:b4:08:1a:a2:fb:ba:cf:f4:95:ec:a9:c8: d9:ca:19:49:8c:51:5c:32:4e:77:0e:72:0b:aa:07:2f:82:46: a0:59:7c:aa:d6:d8:1a:11:4b:af:c4:3b:c6:2d:d7:17:b7:bb: f6:47:65:51:00:45:04:98:05:0c:34:d9:18:12:3d:8b:f9:25: 72:65:db:81:60:42:24:17:67:11:76:97:a4:d5:76:70:46:75: 8a:ae:d8:e3:74:ab:6a:21:0b:3f:8d:e4:a8:08:2a:3d:4b:cd: 03:a0:af:8f:08:13:1d:17:e1:35:1a:5b:e9:30:c8:bb:8e:a1: 47:68:b2:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6uzvjZlol3BxGnBtEt14MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMTdkOTM4OGU3NjMxYTZkMTlhZmIyYjI2NDI3OTVhMjRj ODQwODEwHhcNMjYwMjA5MTUwMDE4WhcNMjYwMjEwMTUwMDE4WjAzMTEwLwYDVQQD Eyg5ZjY0ZTQ5MDBiZGYzMzcxNDNmMWQ1ZDllZWQ5N2ZkN2FmY2E5ZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyK37DSXZ2Kj73AX6I4CyQT5GC10 iIHp+QDoFdRFb5ZZOAX6B4AGgO5Yjwu7TDhYpx0GHpqwLXaan2YZM2HpRQ8qC7+G UV98TUh173jKmY57TaGHROgX9u7AE4B95gwMvpIJZkgsMPZOMN2npL4f3vOw4BJ3 BDpSch4YwWAGeQSXNuuVJHXKtNFONitQXgOMasVCfBYYkRPcuQX0Gqckbq8DwNSG /A2PrzG4W88a8kiKh48XQsp7dcNMMhNLKyh+mfKLzC6akyNFnx0+5ABEThuA+dxf wQRzFq71A4beaDzYOOgXO02GdlkvSabNBIHLQZP8c8vf7PuCD2MVpuYQ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9k5JAL3zNxQ/HV2e7Zf9evyp3wMB8GA1UdIwQY MBaAFJ0X2TiOdjGm0Zr7KyZCeVokyECBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblJmWk9JNTJNYWJSbXZzckprSjVXaVRJUUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg0NDQtOGRhNS00NjZiLTg0MDAt N2JkOTZkOWM2Mjg2LzEvblJmWk9JNTJNYWJSbXZzckprSjVXaVRJUUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82ZTg0NDQtOGRhNS00NjZiLTg0MDAtN2JkOTZkOWM2Mjg2 LzEvblJmWk9JNTJNYWJSbXZzckprSjVXaVRJUUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXZx/Mtq Ckj//OoPNfedn/nYuZKgC7wpzjLRkgIP5lr7VONlD0Hh+UrNgKz/uMBs355dObxC jx62NaHlvl6scXIjqO8o6tNc0DzGvmEUN79sB248wMkaIcSNi/bkP9tBUOGQtUv8 i8RUwy708VQLjeUMI9rmt+ItphqcwENfsrumQaz1tAgaovu6z/SV7KnI2coZSYxR XDJOdw5yC6oHL4JGoFl8qtbYGhFLr8Q7xi3XF7e79kdlUQBFBJgFDDTZGBI9i/kl cmXbgWBCJBdnEXaXpNV2cEZ1iq7Y43SraiELP43kqAgqPUvNA6CvjwgTHRfhNRpb 6TDIu46hR2iyqQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:52 2026 by rpki-client