This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json) Hash identifier: FuphXIPnws+KIcb651bAGPi7EPBZnrmv33dgGuo814I= Subject key identifier: 44:B0:56:62:56:7E:38:36:7D:DD:9D:A8:85:97:56:29:24:EE:78:06 Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce Certificate serial: 019C4358E620AC61185041FB90423FB93614 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft Manifest number: 0DBB Signing time: Mon 09 Feb 2026 17:00:25 +0000 Manifest this update: Mon 09 Feb 2026 17:00:25 +0000 Manifest next update: Tue 10 Feb 2026 17:00:25 +0000 Files and hashes: 1: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: iIBV2WdxoSw/gBXuKzgg87X0sWuiEu3J2vkC+KkRQTU=) 2: z4L6AD3m-R2tfOhJaueCbCo3ru0.roa (hash: 0ubsZGhqaNgq/MTbY8mEdyeAa24CrlFwOd2MlfZ80j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:e6:20:ac:61:18:50:41:fb:90:42:3f:b9:36:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce Validity Not Before: Feb 9 17:00:25 2026 GMT Not After : Feb 10 17:00:25 2026 GMT Subject: CN=44b05662567e38367ddd9da88597562924ee7806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:e6:9d:cf:56:a5:1e:01:7b:b4:b7:ee:bd: 36:20:ad:90:e8:61:32:5b:53:2b:5d:67:b5:67:77: e9:04:4a:ea:0e:ee:33:76:8e:91:91:5f:ee:e2:4b: e3:21:0c:34:a6:65:ef:f5:45:db:83:1c:f7:a4:ac: 2b:53:bd:b0:6a:44:a3:9d:dc:46:fd:ad:88:a4:5a: e3:5b:48:87:ea:c5:09:b5:d9:74:91:a4:b1:0d:07: 20:d2:7b:4f:89:bb:27:84:74:76:f5:72:81:83:9a: cd:d8:4f:ea:21:71:98:ae:c0:76:7e:b0:c7:52:23: 82:ca:e1:58:96:4f:d2:0a:4c:e4:9e:44:c5:c9:09: e5:19:2f:6b:21:89:f0:aa:ca:6a:e6:4f:1d:76:bd: d3:8f:6a:ba:fe:3c:e9:ed:d8:3b:55:92:04:bc:2f: 8b:9b:cd:1f:5b:de:96:b1:54:8a:63:3e:39:13:51: 1f:06:01:24:f9:4f:3c:18:cf:e3:58:6e:bf:bc:bd: f4:a9:31:29:bc:6a:2b:3a:d9:5f:1d:3c:da:ca:c4: 9c:09:d1:3f:57:7d:1d:3c:0d:c2:ed:6b:f5:ef:01: 6a:98:d4:92:38:75:fa:62:88:e2:bd:57:45:52:84: 9e:67:3d:ac:3f:c7:01:ed:b2:9d:b1:ca:23:61:bd: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B0:56:62:56:7E:38:36:7D:DD:9D:A8:85:97:56:29:24:EE:78:06 X509v3 Authority Key Identifier: keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:c2:12:e8:4b:19:4d:2f:50:da:25:77:6d:17:28:df:c0:45: 44:22:7b:b2:70:e2:1c:10:38:52:af:4f:c8:a5:7d:50:87:88: 77:c7:d7:ef:b5:43:97:f4:a8:6c:26:09:55:da:c6:f7:9d:ee: 50:a3:07:4e:bb:01:14:84:9d:8f:29:cf:e9:15:ac:3c:33:d8: f9:31:0c:55:63:38:d4:03:55:43:35:c8:9c:ae:96:c8:1f:97: dc:f6:28:b4:ca:fe:d6:31:74:29:29:75:96:36:6d:6a:0d:07: 15:17:49:bf:3e:7d:54:cf:cb:1a:0d:bb:3e:6d:96:d6:69:bc: 52:59:eb:72:4c:4a:da:e1:69:b1:4d:5b:d4:53:76:b1:92:64: c1:a8:b5:b4:1b:67:0b:7f:d3:f1:bf:aa:0f:26:67:7b:49:ca: 0f:c4:e7:e6:a6:fe:38:17:18:63:a8:95:0e:61:91:3b:f9:9d: c4:e1:02:77:a4:89:8f:d2:42:c7:1f:27:05:6d:33:29:38:5f: 73:80:fa:aa:26:47:bf:91:d7:50:4b:6d:90:d0:b1:e2:8d:45: 33:af:f2:c4:47:21:84:ae:0f:45:94:a8:80:25:ed:56:8d:6e: d5:32:42:f4:2d:a2:38:3f:1d:09:da:27:02:3e:b4:26:5e:a6: 81:42:a5:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWOYgrGEYUEH7kEI/uTYUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZDY0MmZkNGUzNTU5NWI1ZmQ0NThhNDNhM2FjYWM4Yjkx Mzk1Y2UwHhcNMjYwMjA5MTcwMDI1WhcNMjYwMjEwMTcwMDI1WjAzMTEwLwYDVQQD Eyg0NGIwNTY2MjU2N2UzODM2N2RkZDlkYTg4NTk3NTYyOTI0ZWU3ODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lLmnc9WpR4Be7S37r02IK2Q6GEy W1MrXWe1Z3fpBErqDu4zdo6RkV/u4kvjIQw0pmXv9UXbgxz3pKwrU72wakSjndxG /a2IpFrjW0iH6sUJtdl0kaSxDQcg0ntPibsnhHR29XKBg5rN2E/qIXGYrsB2frDH UiOCyuFYlk/SCkzknkTFyQnlGS9rIYnwqspq5k8ddr3Tj2q6/jzp7dg7VZIEvC+L m80fW96WsVSKYz45E1EfBgEk+U88GM/jWG6/vL30qTEpvGorOtlfHTzaysScCdE/ V30dPA3C7Wv17wFqmNSSOHX6YojivVdFUoSeZz2sP8cB7bKdscojYb3KlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESwVmJWfjg2fd2dqIWXVikk7ngGMB8GA1UdIwQY MBaAFJ3WQv1ONVlbX9RYpDo6ysi5E5XOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84MjVjY2UtMDY0My00YjBiLTk0Yjgt YjcyNzNjOGUzMDIzLzEvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84MjVjY2UtMDY0My00YjBiLTk0YjgtYjcyNzNjOGUzMDIz LzEvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtsIS6EsZ TS9Q2iV3bRco38BFRCJ7snDiHBA4Uq9PyKV9UIeId8fX77VDl/SobCYJVdrG953u UKMHTrsBFISdjynP6RWsPDPY+TEMVWM41ANVQzXInK6WyB+X3PYotMr+1jF0KSl1 ljZtag0HFRdJvz59VM/LGg27Pm2W1mm8UlnrckxK2uFpsU1b1FN2sZJkwai1tBtn C3/T8b+qDyZne0nKD8Tn5qb+OBcYY6iVDmGRO/mdxOECd6SJj9JCxx8nBW0zKThf c4D6qiZHv5HXUEttkNCx4o1FM6/yxEchhK4PRZSogCXtVo1u1TJC9C2iOD8dCdon Aj60Jl6mgUKlfQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:40 2026 by rpki-client