This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json) Hash identifier: S/9K7uvsjhifH1qBNw4AQFRo53VD20Dh/6TT6r+vefM= Subject key identifier: 24:42:B1:49:36:04:0C:FF:C9:F1:70:3E:F0:CD:E2:37:87:AA:48:B7 Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3 Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3 Certificate serial: 019C435961E775629D43E17BCA2D9BBDF59F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft Manifest number: 0589 Signing time: Mon 09 Feb 2026 17:00:56 +0000 Manifest this update: Mon 09 Feb 2026 17:00:56 +0000 Manifest next update: Tue 10 Feb 2026 17:00:56 +0000 Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: 0uQFy9OHysH7Im9NYhUXyCTQik1cojw5yZW0NUwSZMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:61:e7:75:62:9d:43:e1:7b:ca:2d:9b:bd:f5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3 Validity Not Before: Feb 9 17:00:56 2026 GMT Not After : Feb 10 17:00:56 2026 GMT Subject: CN=2442b14936040cffc9f1703ef0cde23787aa48b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:43:ec:a6:4e:72:f3:f3:8d:ba:ac:99:b1: cd:04:fd:1c:5f:5b:e3:ba:80:a3:d1:d2:c6:f9:06: 28:6c:61:91:e7:f6:59:a1:22:af:32:a4:a7:e9:e7: de:a1:7a:04:45:ee:97:e1:0b:d1:f0:9e:60:c8:68: 2c:9b:b5:89:5d:7d:f8:c2:83:61:65:31:74:16:0b: fc:8a:01:7c:ee:f7:ba:92:ad:f2:07:57:af:a6:8d: 6c:bc:db:49:25:8f:89:7e:e7:36:82:ec:d9:33:a2: da:97:61:30:2b:ec:37:70:11:59:fa:d5:fe:89:ba: 8c:18:5c:a7:d9:97:be:1a:f7:fb:b9:61:f9:8a:d5: 50:de:28:97:b8:fc:dc:a1:3f:cf:4c:26:2e:6b:82: 45:02:99:9c:59:f9:43:f7:93:81:26:78:ba:88:d8: f9:c2:97:42:7b:38:45:7b:30:7f:02:7c:be:e2:6c: 66:44:38:f1:ae:4a:4f:13:00:0a:ed:32:2c:a4:b8: 4e:13:fc:dc:5d:30:4f:0e:ca:98:70:b9:93:be:7d: 01:7b:fb:3a:61:fb:0a:0e:97:94:b2:6d:f7:ff:a5: 44:93:7c:f6:ad:23:b2:54:97:56:b6:d1:06:0d:ec: 53:fd:ff:ac:0c:f2:01:f1:0a:00:0e:87:30:f3:31: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:42:B1:49:36:04:0C:FF:C9:F1:70:3E:F0:CD:E2:37:87:AA:48:B7 X509v3 Authority Key Identifier: keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7f:e7:a7:cd:bd:1f:24:b4:db:30:11:7e:54:25:d0:b5:06: 7a:47:c3:0a:16:0b:46:83:54:79:f1:3f:6b:e6:46:17:cc:5f: 6d:eb:0c:0c:82:a2:55:2b:5c:23:09:ca:b0:9b:a9:d7:f2:cf: 7b:79:f7:41:94:b1:e5:7b:be:1f:cc:c8:f9:35:6c:89:83:25: 6f:78:f9:f4:ea:b0:7c:bb:c6:26:61:bd:48:be:0d:89:68:6c: 95:69:6f:2a:a8:5d:4e:17:c5:0e:4d:eb:c1:b2:0b:26:47:59: 91:15:26:bf:4d:47:ef:f7:5e:8e:dd:e9:be:c6:c8:25:0e:45: 2f:30:f8:88:44:32:04:d4:19:18:13:53:83:6e:db:95:dc:b3: f5:cd:35:ec:9c:e7:65:fb:f8:7f:1c:c5:25:17:79:6e:48:38: d6:8d:68:9c:8f:5e:ae:c1:41:5f:e1:35:61:78:19:10:87:84: 99:c6:70:ab:68:59:90:de:00:8c:1c:02:ca:ac:43:f0:30:19: 42:f8:ea:4c:90:cb:ad:3e:ae:58:13:47:58:78:8e:2c:d7:38: c7:89:5b:f7:b4:5f:da:d2:9a:53:c8:d2:98:7c:42:9c:a3:a1: b6:b8:ef:6f:85:d8:8e:ba:79:cd:89:00:f9:fa:7d:7e:86:65: 9c:9d:78:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWWHndWKdQ+F7yi2bvfWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllY2NjN2RkYWUxMWY4OGUxMGJkMjA4NjZlMWJkNmU2NTc1 Njk3ZTMwHhcNMjYwMjA5MTcwMDU2WhcNMjYwMjEwMTcwMDU2WjAzMTEwLwYDVQQD EygyNDQyYjE0OTM2MDQwY2ZmYzlmMTcwM2VmMGNkZTIzNzg3YWE0OGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+VD7KZOcvPzjbqsmbHNBP0cX1vj uoCj0dLG+QYobGGR5/ZZoSKvMqSn6efeoXoERe6X4QvR8J5gyGgsm7WJXX34woNh ZTF0Fgv8igF87ve6kq3yB1evpo1svNtJJY+Jfuc2guzZM6Lal2EwK+w3cBFZ+tX+ ibqMGFyn2Ze+Gvf7uWH5itVQ3iiXuPzcoT/PTCYua4JFApmcWflD95OBJni6iNj5 wpdCezhFezB/Any+4mxmRDjxrkpPEwAK7TIspLhOE/zcXTBPDsqYcLmTvn0Be/s6 YfsKDpeUsm33/6VEk3z2rSOyVJdWttEGDexT/f+sDPIB8QoADocw8zFBqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRCsUk2BAz/yfFwPvDN4jeHqki3MB8GA1UdIwQY MBaAFJ7Mx92uEfiOEL0ghm4b1uZXVpfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYjRkZmUtMDM4NC00ODMxLWIzYWQt ZTY3MmIzMTkwNjg3LzEvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lYjRkZmUtMDM4NC00ODMxLWIzYWQtZTY3MmIzMTkwNjg3 LzEvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEX/np829 HyS02zARflQl0LUGekfDChYLRoNUefE/a+ZGF8xfbesMDIKiVStcIwnKsJup1/LP e3n3QZSx5Xu+H8zI+TVsiYMlb3j59OqwfLvGJmG9SL4NiWhslWlvKqhdThfFDk3r wbILJkdZkRUmv01H7/dejt3pvsbIJQ5FLzD4iEQyBNQZGBNTg27bldyz9c017Jzn Zfv4fxzFJRd5bkg41o1onI9ersFBX+E1YXgZEIeEmcZwq2hZkN4AjBwCyqxD8DAZ QvjqTJDLrT6uWBNHWHiOLNc4x4lb97Rf2tKaU8jSmHxCnKOhtrjvb4XYjrp5zYkA +fp9foZlnJ14zQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:33 2026 by rpki-client