This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json) Hash identifier: 6SY/yXK1mY+iLZGc/U6UHcRbOPulEnjF1TRG21rgAik= Subject key identifier: F8:F3:E7:1D:E4:95:77:8F:DA:C5:AE:64:29:0D:BF:41:7E:CB:F2:92 Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b Certificate serial: 019C427D8137D0EA06BE3F3828D531F767AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 13:00:47 +0000 Manifest this update: Mon 09 Feb 2026 13:00:47 +0000 Manifest next update: Tue 10 Feb 2026 13:00:47 +0000 Files and hashes: 1: NwZcawZ1oZBEXy6-sJcGtKyEswU.roa (hash: x1R0gYS1QjDk3Ur01AxDc0zqZ0ZOyidsMEhtEgHTQM0=) 2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: CI5m9qM5N6tewTo/sU9gzVYjnHnM+C/wEbP1dQSUOXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:81:37:d0:ea:06:be:3f:38:28:d5:31:f7:67:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b Validity Not Before: Feb 9 13:00:47 2026 GMT Not After : Feb 10 13:00:47 2026 GMT Subject: CN=f8f3e71de495778fdac5ae64290dbf417ecbf292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:a2:62:a9:05:93:0a:c4:16:2b:47:f4:5c: 52:32:6e:bd:21:db:aa:d2:b6:89:f8:56:87:a6:d7: 77:60:a9:bc:f2:6b:e0:97:45:2c:13:ad:ea:93:2e: 03:ce:8c:dc:b6:1e:7d:77:27:8c:4a:de:45:a9:d5: c8:17:23:13:34:cc:db:04:5c:04:7c:41:c8:cf:d0: 26:31:aa:26:a7:f9:19:c3:9d:8c:bb:4e:e3:d6:f8: a9:5f:f7:07:0d:c6:cc:86:35:f7:bf:84:9c:b8:46: af:a0:dd:51:73:2e:39:c5:db:7e:a8:ec:ca:33:3d: 9a:d2:b0:a4:7e:a7:ae:f1:30:c2:68:e6:60:63:0c: 71:33:5e:58:b3:e0:4e:62:14:62:ac:3e:78:19:30: ad:5d:b2:cc:63:49:8e:5c:27:03:e8:7d:84:a5:73: 47:c3:f7:85:a8:ec:ba:83:ee:13:d1:c4:1f:ce:4c: 82:56:5c:0d:2d:6b:5c:36:05:e0:55:29:59:b1:11: ef:76:54:8e:49:ec:1b:37:1a:ca:69:e8:81:19:90: 38:15:b2:33:aa:3e:5f:8a:75:9b:ed:c8:4a:b5:64: 3b:a7:fe:2b:b7:f0:1c:22:93:46:36:9b:4d:01:46: e6:52:c6:5f:0b:ff:68:b3:b6:41:a2:5e:d5:b9:fc: 29:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F3:E7:1D:E4:95:77:8F:DA:C5:AE:64:29:0D:BF:41:7E:CB:F2:92 X509v3 Authority Key Identifier: keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:10:85:c3:f8:30:a9:2c:bd:32:0f:06:db:3e:90:d0:f6:c3: bf:73:77:e6:d4:f1:f4:e3:87:0a:28:c0:df:cf:06:7e:93:53: eb:f0:91:20:fd:d2:73:7c:98:6a:16:ab:e6:a0:12:bf:56:ab: f9:f5:b4:31:11:08:c3:3c:ab:d6:b0:09:11:24:ba:69:f0:5e: fe:8d:f7:9e:c7:d5:37:06:60:d9:5a:73:b8:3c:86:2a:3f:1f: 3d:c0:1d:5b:cb:3d:d6:a9:d5:73:8f:d1:66:18:f1:f8:3f:05: af:eb:34:52:7a:27:f3:8a:27:29:01:08:58:a9:a8:46:de:84: e6:3d:65:d9:0a:1c:fa:d5:8e:0a:3c:3c:6e:17:88:71:ac:65: dd:fa:7b:d7:7b:19:d6:f9:65:56:f0:43:73:6b:3c:e1:2f:be: 8c:52:70:ea:35:9c:69:8f:ee:53:d9:55:53:07:d3:aa:07:58: cc:3e:a2:5a:35:84:a8:da:ae:6e:47:2f:19:c3:f0:ad:fa:2d: 6e:01:70:e6:b2:02:86:67:c9:f6:08:bf:25:8c:5e:46:a2:ad: 0a:df:a3:45:7d:71:c1:77:b2:5e:66:03:43:3a:1e:fc:c4:cb: 6f:e1:b6:ce:f5:76:57:c6:62:38:42:36:df:12:5f:1e:a5:a2: 82:5c:34:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYE30OoGvj84KNUx92eqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzJhZWYwMDY3YzRmMGJhMjBlZTY2NjM0NDAwMDViMWIz Yjg4N2IwHhcNMjYwMjA5MTMwMDQ3WhcNMjYwMjEwMTMwMDQ3WjAzMTEwLwYDVQQD EyhmOGYzZTcxZGU0OTU3NzhmZGFjNWFlNjQyOTBkYmY0MTdlY2JmMjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDeiYqkFkwrEFitH9FxSMm69Iduq 0raJ+FaHptd3YKm88mvgl0UsE63qky4Dzozcth59dyeMSt5FqdXIFyMTNMzbBFwE fEHIz9AmMaomp/kZw52Mu07j1vipX/cHDcbMhjX3v4ScuEavoN1Rcy45xdt+qOzK Mz2a0rCkfqeu8TDCaOZgYwxxM15Ys+BOYhRirD54GTCtXbLMY0mOXCcD6H2EpXNH w/eFqOy6g+4T0cQfzkyCVlwNLWtcNgXgVSlZsRHvdlSOSewbNxrKaeiBGZA4FbIz qj5finWb7chKtWQ7p/4rt/AcIpNGNptNAUbmUsZfC/9os7ZBol7VufwpWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjz5x3klXeP2sWuZCkNv0F+y/KSMB8GA1UdIwQY MBaAFJ4yrvAGfE8Log7mZjRAAFsbO4h7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84YzI4NzQtZWJiYS00Yzc3LTk2YzYt YzMxYzZkODY5MWQwLzEvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy84YzI4NzQtZWJiYS00Yzc3LTk2YzYtYzMxYzZkODY5MWQw LzEvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxCFw/gw qSy9Mg8G2z6Q0PbDv3N35tTx9OOHCijA388GfpNT6/CRIP3Sc3yYahar5qASv1ar +fW0MREIwzyr1rAJESS6afBe/o33nsfVNwZg2VpzuDyGKj8fPcAdW8s91qnVc4/R Zhjx+D8Fr+s0Unon84onKQEIWKmoRt6E5j1l2Qoc+tWOCjw8bheIcaxl3fp713sZ 1vllVvBDc2s84S++jFJw6jWcaY/uU9lVUwfTqgdYzD6iWjWEqNqubkcvGcPwrfot bgFw5rIChmfJ9gi/JYxeRqKtCt+jRX1xwXeyXmYDQzoe/MTLb+G2zvV2V8ZiOEI2 3xJfHqWiglw0Zw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:21 2026 by rpki-client