This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft File: NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json) Hash identifier: ANsrk4I/alPeJAdWxhwGpx3UsZSdrGYx/l1kSKjyt8w= Subject key identifier: BC:E1:82:3C:85:4A:4E:BA:F0:87:8D:55:D0:DE:08:0D:4F:AF:5F:91 Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25 Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25 Certificate serial: 019C420F268096A71A530A77C73E376AAE1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft Manifest number: 0F3C Signing time: Mon 09 Feb 2026 11:00:14 +0000 Manifest this update: Mon 09 Feb 2026 11:00:14 +0000 Manifest next update: Tue 10 Feb 2026 11:00:14 +0000 Files and hashes: 1: MyTkgN8HXkjrp-kxigqAegjklMQ.roa (hash: pFPPNvby+G9WZLBUBJIB4xiTS6SkjYoIs0G/Wb+5n8s=) 2: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: L+jD0AWJIX39eyHBnDaAlknLN8RTRKYy6EGxIctHmqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:26:80:96:a7:1a:53:0a:77:c7:3e:37:6a:ae:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25 Validity Not Before: Feb 9 11:00:14 2026 GMT Not After : Feb 10 11:00:14 2026 GMT Subject: CN=bce1823c854a4ebaf0878d55d0de080d4faf5f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:78:cf:88:f0:7a:5a:3c:d3:82:05:7d:a0: cf:28:37:7e:11:1e:80:75:a4:58:c7:cc:ef:1f:07: 68:31:e1:45:85:07:58:17:88:fc:5e:f6:6b:37:7f: 08:93:4d:b9:5f:2a:d0:1b:24:c6:bd:41:4c:03:88: 5b:24:90:4b:82:0c:e6:65:40:d9:60:c6:b7:79:6c: c9:a7:4e:8e:c4:2f:41:26:b3:d1:d3:4b:2b:36:c4: b4:c2:99:1c:22:23:86:c7:02:14:61:07:3d:40:db: 14:81:97:13:be:17:f4:f8:94:9f:1f:1e:31:bc:9d: fb:e5:0e:a7:e6:90:39:44:78:87:e6:ed:a1:fb:3e: 56:11:08:c2:eb:fc:74:fa:4f:e4:71:d3:0c:86:69: ff:b6:eb:94:73:a7:4d:12:d9:e4:88:a2:4d:84:02: c4:a6:08:dd:91:6c:a6:7c:ba:85:98:6e:d6:2e:fa: 28:dd:d4:a4:66:a0:4c:bf:07:9f:8d:bb:08:82:0a: 28:e7:b6:4e:9d:a0:89:d3:77:01:0e:18:4c:98:38: f4:ca:0c:d8:28:8d:4d:63:a6:a1:da:8c:ec:cd:4a: 54:28:19:a3:b7:54:2f:75:af:ca:89:ef:9e:b9:5a: fc:d9:0f:8d:23:2e:c7:b5:65:4f:4e:e3:1d:e7:cc: 7b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E1:82:3C:85:4A:4E:BA:F0:87:8D:55:D0:DE:08:0D:4F:AF:5F:91 X509v3 Authority Key Identifier: keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d4:74:83:e3:5c:ac:d2:f5:c9:aa:6b:0a:57:05:ee:9a:e8: 7f:1d:b0:06:85:cc:be:ed:95:4f:64:2e:2d:b1:19:00:a6:96: 6c:24:91:9c:b3:72:54:8b:93:1a:62:59:2e:74:89:07:e9:66: a5:d6:ad:84:29:27:df:ab:9c:17:00:1f:37:a8:e2:59:bf:23: 0e:a4:74:1d:e6:e5:e0:2d:37:95:6d:3d:72:1e:3b:e7:fa:cd: e2:c6:5b:6c:1d:27:a3:a4:e3:2d:db:df:63:49:dd:ad:c7:70: c0:6b:d4:b3:48:3e:c2:96:f5:16:85:2e:0f:c5:d4:11:4b:80: 93:1a:b4:4b:a0:69:80:b7:42:05:72:92:70:ea:cd:e3:f6:9f: d2:de:84:e1:ee:0d:f9:e6:2f:28:a7:3d:3f:3c:6e:fa:86:7e: fb:2d:53:d8:9c:e1:e4:aa:7a:fa:df:16:db:51:88:cc:18:45: 33:2d:71:0d:ba:5e:3d:7b:38:df:2d:c3:75:93:95:53:86:f1: 04:9a:da:4c:85:5a:42:8e:7d:0f:e9:41:c2:47:a9:10:eb:b6: f8:ca:81:12:60:4b:c3:cd:71:86:28:ec:ee:38:ec:78:ed:25: 0a:71:99:4e:3e:19:f9:43:87:69:a4:fa:be:36:26:6e:77:32: 53:b1:c9:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDyaAlqcaUwp3xz43aq4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYxZTNiODA1NTFlOThhMTZmYzJiYmNiN2RkODdjOWEw ZWZlMjUwHhcNMjYwMjA5MTEwMDE0WhcNMjYwMjEwMTEwMDE0WjAzMTEwLwYDVQQD EyhiY2UxODIzYzg1NGE0ZWJhZjA4NzhkNTVkMGRlMDgwZDRmYWY1ZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLl4z4jwelo804IFfaDPKDd+ER6A daRYx8zvHwdoMeFFhQdYF4j8XvZrN38Ik025XyrQGyTGvUFMA4hbJJBLggzmZUDZ YMa3eWzJp06OxC9BJrPR00srNsS0wpkcIiOGxwIUYQc9QNsUgZcTvhf0+JSfHx4x vJ375Q6n5pA5RHiH5u2h+z5WEQjC6/x0+k/kcdMMhmn/tuuUc6dNEtnkiKJNhALE pgjdkWymfLqFmG7WLvoo3dSkZqBMvwefjbsIggoo57ZOnaCJ03cBDhhMmDj0ygzY KI1NY6ah2ozszUpUKBmjt1Qvda/Kie+euVr82Q+NIy7HtWVPTuMd58x7PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzhgjyFSk668IeNVdDeCA1Pr1+RMB8GA1UdIwQY MBaAFDWfHjuAVR6YoW/Cu8t92HyaDv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEt M2YzYTAyNzQ4YzJhLzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEtM2YzYTAyNzQ4YzJh LzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftR0g+Nc rNL1yaprClcF7profx2wBoXMvu2VT2QuLbEZAKaWbCSRnLNyVIuTGmJZLnSJB+lm pdathCkn36ucFwAfN6jiWb8jDqR0Hebl4C03lW09ch475/rN4sZbbB0no6TjLdvf Y0ndrcdwwGvUs0g+wpb1FoUuD8XUEUuAkxq0S6BpgLdCBXKScOrN4/af0t6E4e4N +eYvKKc9Pzxu+oZ++y1T2Jzh5Kp6+t8W21GIzBhFMy1xDbpePXs43y3DdZOVU4bx BJraTIVaQo59D+lBwkepEOu2+MqBEmBLw81xhijs7jjseO0lCnGZTj4Z+UOHaaT6 vjYmbncyU7HJOg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:57 2026 by rpki-client