This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json) Hash identifier: uXbKVdXvKIkRRiRrRZurDhTpLHZuwb5py424lHBXy+g= Subject key identifier: 49:F1:1C:82:73:0E:22:14:A0:0B:75:06:79:B0:82:A5:27:A5:6F:D8 Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf Certificate serial: 019C43904DC6C968899EE3BAD023A365BC21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 18:00:56 +0000 Manifest this update: Mon 09 Feb 2026 18:00:56 +0000 Manifest next update: Tue 10 Feb 2026 18:00:56 +0000 Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: sEPpqaKkWU9tFKda3PghdT6YlFRFaJp7tqr1oNExm1g=) 2: h0Ifd57oi9lfBeUdeRd9nSCgSg8.roa (hash: kiI/t9Fma+sRPCboiwT26YcfI7j4ilrF6LxmsduO9hU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:4d:c6:c9:68:89:9e:e3:ba:d0:23:a3:65:bc:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf Validity Not Before: Feb 9 18:00:56 2026 GMT Not After : Feb 10 18:00:56 2026 GMT Subject: CN=49f11c82730e2214a00b750679b082a527a56fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6b:d1:be:45:a0:0c:7e:e9:0c:8b:56:fd:8c: 39:80:c4:b3:d8:f6:95:0d:b9:40:d4:62:bd:12:7b: d6:84:ee:94:2c:91:70:22:50:83:b0:61:a2:f0:6f: 44:ca:6f:b5:87:36:98:bd:7e:cc:c4:b9:cf:26:54: 7d:d2:0a:bb:35:b4:02:fe:c9:66:61:42:8f:50:3e: 33:cd:51:a4:1f:14:62:6f:10:82:8a:b0:14:36:02: 33:53:d7:ce:72:d3:4c:a0:1d:7e:ef:b0:10:af:f9: 4c:ad:54:63:5c:30:be:9b:d4:ac:d1:44:d9:5a:d3: 5f:4e:8a:e4:67:24:3b:bb:26:1a:53:77:ec:46:de: 08:aa:b4:47:20:57:cb:b3:41:64:46:7a:f9:3a:97: b8:5d:a3:e3:ce:7d:79:53:4b:c0:5c:78:35:02:7e: 90:26:d4:7b:f4:24:98:1b:e6:96:1e:11:b6:ca:d4: d3:1f:a4:9c:f9:95:a4:0c:f4:9c:6f:d5:4c:6f:c1: 2f:38:cf:5e:ad:33:ac:3f:b8:1e:a2:9a:a6:06:08: 6a:a6:8b:61:38:4b:f6:3a:5e:90:e5:96:de:80:64: 04:d8:5f:45:cb:d8:96:50:03:b1:58:f7:5d:5a:8a: a2:0e:c7:ce:4f:0d:95:70:2e:1c:eb:22:be:c9:e9: 02:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F1:1C:82:73:0E:22:14:A0:0B:75:06:79:B0:82:A5:27:A5:6F:D8 X509v3 Authority Key Identifier: keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:86:b0:40:d2:71:22:9e:c8:58:9b:ba:ca:7c:9c:11:48:f4: d5:00:44:81:55:06:09:69:12:13:cc:5c:95:c5:db:c8:68:15: 8e:d7:38:57:d5:4c:68:86:43:ab:f6:ec:4d:dd:07:44:ae:ab: dc:af:f5:e8:0b:30:b5:13:ae:57:14:19:49:f6:44:0c:e3:e2: 81:c1:4c:8f:81:d1:aa:ce:7f:3b:9f:72:ab:d2:4f:07:af:1b: 69:b9:55:e0:af:44:9d:3c:a7:a2:2e:16:3e:f6:a7:3f:cb:b2: 87:3f:0f:f3:1e:f1:33:30:d6:7a:a3:88:8d:79:d5:41:f3:ac: fd:b9:c4:70:79:c5:c5:20:59:f8:17:cb:70:f1:83:55:e9:7b: 7d:1b:c6:ea:8b:d0:81:cc:56:69:ee:d5:9f:37:d9:9f:7b:d0: 52:92:b4:24:06:a9:fa:7a:0b:d5:f7:f3:93:f6:25:5b:05:d8: 5f:88:8d:b3:ba:5b:04:3a:53:63:9f:b8:ba:ad:f8:33:70:f0: 6a:1f:4d:34:e8:3c:22:ba:b8:71:23:ac:9e:ec:a3:e8:07:d8: 9b:53:21:40:e2:65:f9:f4:99:75:0d:f2:f0:af:51:f0:f3:22: cd:b4:40:4b:9b:09:c8:9d:65:3b:78:c6:47:aa:05:6a:f7:9e: 06:8e:e5:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkE3GyWiJnuO60COjZbwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YjFjY2U0ZDViYWQ4ZDljMmVkY2E0MDBlMmJmYzU0YTI0 MTg1YmYwHhcNMjYwMjA5MTgwMDU2WhcNMjYwMjEwMTgwMDU2WjAzMTEwLwYDVQQD Eyg0OWYxMWM4MjczMGUyMjE0YTAwYjc1MDY3OWIwODJhNTI3YTU2ZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mvRvkWgDH7pDItW/Yw5gMSz2PaV DblA1GK9EnvWhO6ULJFwIlCDsGGi8G9Eym+1hzaYvX7MxLnPJlR90gq7NbQC/slm YUKPUD4zzVGkHxRibxCCirAUNgIzU9fOctNMoB1+77AQr/lMrVRjXDC+m9Ss0UTZ WtNfTorkZyQ7uyYaU3fsRt4IqrRHIFfLs0FkRnr5Ope4XaPjzn15U0vAXHg1An6Q JtR79CSYG+aWHhG2ytTTH6Sc+ZWkDPScb9VMb8EvOM9erTOsP7geopqmBghqpoth OEv2Ol6Q5ZbegGQE2F9Fy9iWUAOxWPddWoqiDsfOTw2VcC4c6yK+yekCrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnxHIJzDiIUoAt1BnmwgqUnpW/YMB8GA1UdIwQY MBaAFDWxzOTVutjZwu3KQA4r/FSiQYW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zMDMxODQtOWY3ZS00NTgzLTgwYmEt Y2ZkM2I1M2RjNDU2LzEvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zMDMxODQtOWY3ZS00NTgzLTgwYmEtY2ZkM2I1M2RjNDU2 LzEvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4awQNJx Ip7IWJu6ynycEUj01QBEgVUGCWkSE8xclcXbyGgVjtc4V9VMaIZDq/bsTd0HRK6r 3K/16AswtROuVxQZSfZEDOPigcFMj4HRqs5/O59yq9JPB68bablV4K9EnTynoi4W PvanP8uyhz8P8x7xMzDWeqOIjXnVQfOs/bnEcHnFxSBZ+BfLcPGDVel7fRvG6ovQ gcxWae7VnzfZn3vQUpK0JAap+noL1ffzk/YlWwXYX4iNs7pbBDpTY5+4uq34M3Dw ah9NNOg8Irq4cSOsnuyj6AfYm1MhQOJl+fSZdQ3y8K9R8PMizbRAS5sJyJ1lO3jG R6oFaveeBo7l0w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:54 2026 by rpki-client