This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json) Hash identifier: S7sas7OnFpajtt47cATMGT0VRCW2kDirXDfLN9qw3gk= Subject key identifier: EA:F1:70:98:CE:85:D0:09:2C:2C:D2:83:7B:DF:1E:F5:31:4B:43:2F Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5 Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5 Certificate serial: 019C40FD7C9EDFD2F1F5DF093B7EF5DCE09A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft Manifest number: 0D85 Signing time: Mon 09 Feb 2026 06:01:20 +0000 Manifest this update: Mon 09 Feb 2026 06:01:20 +0000 Manifest next update: Tue 10 Feb 2026 06:01:20 +0000 Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: K9tC+g3+bIkGZXexaiQZgDLSxQf4fn3dqteXlhYXyh4=) 2: d0hB3sr_J40CjN3DPScI5WDQSFY.roa (hash: ZEZewkOpSdtKFHUVQXPwxArZxLY7Jpp1t6GgLUjAr+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:7c:9e:df:d2:f1:f5:df:09:3b:7e:f5:dc:e0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5 Validity Not Before: Feb 9 06:01:20 2026 GMT Not After : Feb 10 06:01:20 2026 GMT Subject: CN=eaf17098ce85d0092c2cd2837bdf1ef5314b432f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:ac:c9:41:c8:d6:21:58:cc:17:74:f8:9a: fc:d3:0e:18:14:22:f6:cc:6b:83:b6:a0:2c:5e:56: 2c:22:41:8c:5c:7d:fd:f5:22:4c:ca:58:e6:53:a1: cc:35:91:fe:ec:44:ae:0f:b2:03:15:88:b5:3f:46: 57:01:c4:d4:b8:1b:2f:42:8c:e7:99:0a:3b:fa:90: 52:66:02:8c:63:ba:5d:b2:1a:6a:01:68:73:e9:5f: 16:4a:36:a1:c1:54:8d:fc:a5:d7:4e:0b:6b:8f:92: af:55:3c:60:ce:55:6f:ca:84:cb:5f:9c:32:2a:99: 00:28:fa:34:d0:e8:77:ac:7d:dd:7e:54:1b:20:0f: 3f:84:fd:48:08:1d:e6:cb:7a:75:6d:ed:63:c5:b8: f5:66:80:c3:37:97:a7:80:0e:e8:35:5e:27:81:6e: 20:54:5c:e9:a9:85:d3:3b:05:14:5d:67:c0:d0:05: 8b:7b:18:de:e7:46:c7:e7:51:fe:ea:4d:3a:2d:9d: a5:bb:6e:ac:21:1e:90:91:ca:92:4c:2b:0e:46:d5: 20:77:31:24:9d:33:08:44:64:98:10:fe:69:53:34: da:d6:78:85:f2:23:23:a2:7b:32:0c:2a:7f:49:de: ef:aa:15:7f:70:ed:7c:f9:4f:e9:9a:fd:19:82:dc: 1a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F1:70:98:CE:85:D0:09:2C:2C:D2:83:7B:DF:1E:F5:31:4B:43:2F X509v3 Authority Key Identifier: keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cf:39:6e:5d:fe:b5:cf:ad:31:52:d6:5d:82:19:73:4d:7d: b5:58:42:03:7d:59:63:1c:84:bc:03:30:c6:21:70:98:bb:8c: 8d:1e:72:59:a6:47:e1:58:cf:f4:85:47:92:51:11:76:93:c6: 2f:ed:7b:85:98:85:eb:c4:81:b8:88:b2:af:59:55:02:12:70: 5e:35:f4:8e:91:32:0d:0f:8d:64:6d:fc:78:5a:5a:65:16:44: 0b:08:ad:95:a9:24:2b:5b:9a:1b:ac:07:93:fe:f0:83:cf:a0: 3a:4f:ee:66:65:75:19:75:f3:f4:67:33:b2:81:20:79:94:97: 13:c5:2c:f0:5c:4c:8d:03:55:1e:b8:fe:e8:41:97:36:59:3c: f6:d7:fb:28:a0:87:7a:37:4b:76:3e:82:a9:28:45:90:b5:1a: 48:6e:45:2f:72:40:e6:78:2c:a2:82:23:70:ed:34:87:04:16: 42:f1:05:c2:32:f3:19:b6:8b:39:d7:61:91:f4:78:32:1b:a5: 24:ad:b2:76:a1:7b:9f:64:a4:e3:da:a7:55:be:52:e4:3f:1d: 89:f8:75:76:be:ce:a5:08:ae:6e:4e:db:d5:8d:ba:a6:49:07: 0d:35:ef:66:c7:02:8d:56:02:8e:0c:b5:4a:4b:da:0f:68:fe: 75:b2:53:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/Xye39Lx9d8JO3713OCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWU2ZTFkNjZmYzA0N2UwZTg5ZmYwNDVjMmQwOGNhMTdk NTVlYTUwHhcNMjYwMjA5MDYwMTIwWhcNMjYwMjEwMDYwMTIwWjAzMTEwLwYDVQQD EyhlYWYxNzA5OGNlODVkMDA5MmMyY2QyODM3YmRmMWVmNTMxNGI0MzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf6syUHI1iFYzBd0+Jr80w4YFCL2 zGuDtqAsXlYsIkGMXH399SJMyljmU6HMNZH+7ESuD7IDFYi1P0ZXAcTUuBsvQozn mQo7+pBSZgKMY7pdshpqAWhz6V8WSjahwVSN/KXXTgtrj5KvVTxgzlVvyoTLX5wy KpkAKPo00Oh3rH3dflQbIA8/hP1ICB3my3p1be1jxbj1ZoDDN5engA7oNV4ngW4g VFzpqYXTOwUUXWfA0AWLexje50bH51H+6k06LZ2lu26sIR6QkcqSTCsORtUgdzEk nTMIRGSYEP5pUzTa1niF8iMjonsyDCp/Sd7vqhV/cO18+U/pmv0ZgtwaiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrxcJjOhdAJLCzSg3vfHvUxS0MvMB8GA1UdIwQY MBaAFDRebh1m/AR+Don/BFwtCMoX1V6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGIxOGMtYzI1Ni00OWY1LWJjMTct ZGRkNzNkNTA5ZTEyLzEvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGIxOGMtYzI1Ni00OWY1LWJjMTctZGRkNzNkNTA5ZTEy LzEvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATs85bl3+ tc+tMVLWXYIZc019tVhCA31ZYxyEvAMwxiFwmLuMjR5yWaZH4VjP9IVHklERdpPG L+17hZiF68SBuIiyr1lVAhJwXjX0jpEyDQ+NZG38eFpaZRZECwitlakkK1uaG6wH k/7wg8+gOk/uZmV1GXXz9GczsoEgeZSXE8Us8FxMjQNVHrj+6EGXNlk89tf7KKCH ejdLdj6CqShFkLUaSG5FL3JA5ngsooIjcO00hwQWQvEFwjLzGbaLOddhkfR4Mhul JK2ydqF7n2Sk49qnVb5S5D8difh1dr7OpQiubk7b1Y26pkkHDTXvZscCjVYCjgy1 SkvaD2j+dbJTJg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:54 2026 by rpki-client