This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft File: nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json) Hash identifier: NfQ3sr+cjyneOrzgQ6dnFMSp4Jqmuq54zFw4gBtK5rQ= Subject key identifier: BE:84:FD:8B:74:A6:91:00:EB:08:D1:E6:6C:23:13:AC:67:90:DF:C5 Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8 Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8 Certificate serial: 019C41D888495EC33CE8E7BA60B142C2D68D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 10:00:35 +0000 Manifest this update: Mon 09 Feb 2026 10:00:35 +0000 Manifest next update: Tue 10 Feb 2026 10:00:35 +0000 Files and hashes: 1: P6MvyijEdfDH8PowPKZBFJvbCwc.roa (hash: QIBBo/B7mvu6Y0jpzZUhzPlgiko0hJqHLmPYVtkObOo=) 2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: dCwrSetYZ1ade9djCC0jWVh7O4sIGA7HztNeScppW3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:88:49:5e:c3:3c:e8:e7:ba:60:b1:42:c2:d6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8 Validity Not Before: Feb 9 10:00:35 2026 GMT Not After : Feb 10 10:00:35 2026 GMT Subject: CN=be84fd8b74a69100eb08d1e66c2313ac6790dfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:65:5f:53:bb:b8:60:d4:62:dd:56:65:a4:52: 7c:ba:7b:93:ed:e4:e0:ee:9a:d9:20:b2:f1:b4:1e: 4c:87:65:21:dd:5e:be:eb:ff:3d:ec:68:62:2f:4c: e7:02:44:ce:1a:39:32:32:50:27:c9:fd:fc:69:29: 21:1e:0d:e6:2b:df:42:bb:02:ba:a2:46:a3:e5:98: 41:ab:ad:ae:07:ca:4e:be:d5:a9:41:46:df:97:0c: 66:7a:12:87:8a:65:a7:6b:91:61:41:28:e4:96:c5: 0b:8a:24:e0:63:c4:6f:3b:e6:71:4c:b0:7d:67:5f: 79:72:cc:ce:1e:34:e2:2b:b5:92:bf:c8:4b:9c:1f: 8a:ae:d2:0a:c6:a0:a8:a7:6e:14:0d:a7:05:9f:11: 17:ca:48:8b:74:21:da:0b:ce:b1:a0:77:a6:ea:83: 3f:e0:76:c8:7c:b7:70:07:78:ed:e4:cc:4c:18:b7: 7d:8b:92:27:ff:7d:c6:b8:00:12:d9:71:fa:6a:bf: 8d:f8:91:f5:69:a9:f6:ad:62:2c:40:49:98:99:54: 58:3f:1a:3c:df:b8:cd:54:17:af:f2:01:52:40:22: 8e:94:02:22:64:04:13:1b:f5:9b:54:86:e4:12:de: 14:a0:66:86:fa:68:a5:80:37:78:18:2f:cd:26:b3: b4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:84:FD:8B:74:A6:91:00:EB:08:D1:E6:6C:23:13:AC:67:90:DF:C5 X509v3 Authority Key Identifier: keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:dc:82:f8:45:9e:09:40:9d:79:bc:3e:ea:9e:6f:fb:2b:7b: e3:f2:c5:e0:24:8d:80:6b:d7:08:ef:e9:ee:b2:d2:26:e4:34: 1c:ea:75:22:2e:f9:9a:4e:df:e0:27:56:3b:66:76:9d:c2:7a: 5d:42:94:9a:dc:d1:bd:8c:89:95:6a:3f:0d:e8:d7:0c:4b:6f: d6:61:d5:19:b0:5c:49:26:d4:94:4c:a9:fc:25:10:54:f1:c6: 97:29:49:fd:00:79:8a:fb:de:74:15:e1:a6:78:ce:27:5c:a5: 2b:68:f9:ea:4d:80:bf:7b:de:dc:09:58:a9:7e:4b:f0:46:b9: 19:df:f6:ce:25:d3:e5:98:47:98:86:8f:2d:49:4a:2c:09:2e: a2:b7:50:ec:ae:b1:07:38:1a:d6:e8:cf:92:e4:4d:89:da:0d: 71:07:a5:5f:8a:7f:2c:44:7e:73:9d:73:62:5f:be:be:4e:4c: 1b:b7:05:68:63:23:8b:5e:7c:1a:cf:11:29:dc:01:2d:f9:38: dc:fe:ed:e5:17:82:d9:e0:65:65:a4:4f:e5:fa:8e:09:95:9f: 29:12:68:2c:8a:49:88:7a:34:89:7b:2a:91:e3:2c:98:a3:bc: 30:53:36:5f:0e:96:06:0a:ea:db:a8:4a:8e:37:c3:d2:0a:d2: 3c:42:04:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2IhJXsM86Oe6YLFCwtaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYzQ0OGUxYjFlMGViZTRlOTc2YjEyMGQzOThmZTc0ZDVl MTM1ZjgwHhcNMjYwMjA5MTAwMDM1WhcNMjYwMjEwMTAwMDM1WjAzMTEwLwYDVQQD EyhiZTg0ZmQ4Yjc0YTY5MTAwZWIwOGQxZTY2YzIzMTNhYzY3OTBkZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WVfU7u4YNRi3VZlpFJ8unuT7eTg 7prZILLxtB5Mh2Uh3V6+6/897GhiL0znAkTOGjkyMlAnyf38aSkhHg3mK99CuwK6 okaj5ZhBq62uB8pOvtWpQUbflwxmehKHimWna5FhQSjklsULiiTgY8RvO+ZxTLB9 Z195cszOHjTiK7WSv8hLnB+KrtIKxqCop24UDacFnxEXykiLdCHaC86xoHem6oM/ 4HbIfLdwB3jt5MxMGLd9i5In/33GuAAS2XH6ar+N+JH1aan2rWIsQEmYmVRYPxo8 37jNVBev8gFSQCKOlAIiZAQTG/WbVIbkEt4UoGaG+milgDd4GC/NJrO0PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6E/Yt0ppEA6wjR5mwjE6xnkN/FMB8GA1UdIwQY MBaAFJ7ESOGx4Ovk6XaxINOY/nTV4TX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnNSSTRiSGc2LVRwZHJFZzA1ai1kTlhoTmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mNGNhNzktMzg0Zi00N2YyLWFlZDgt YThkMDAzODNiY2RkLzEvbnNSSTRiSGc2LVRwZHJFZzA1ai1kTlhoTmZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mNGNhNzktMzg0Zi00N2YyLWFlZDgtYThkMDAzODNiY2Rk LzEvbnNSSTRiSGc2LVRwZHJFZzA1ai1kTlhoTmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdyC+EWe CUCdebw+6p5v+yt74/LF4CSNgGvXCO/p7rLSJuQ0HOp1Ii75mk7f4CdWO2Z2ncJ6 XUKUmtzRvYyJlWo/DejXDEtv1mHVGbBcSSbUlEyp/CUQVPHGlylJ/QB5ivvedBXh pnjOJ1ylK2j56k2Av3ve3AlYqX5L8Ea5Gd/2ziXT5ZhHmIaPLUlKLAkuordQ7K6x Bzga1ujPkuRNidoNcQelX4p/LER+c51zYl++vk5MG7cFaGMji158Gs8RKdwBLfk4 3P7t5ReC2eBlZaRP5fqOCZWfKRJoLIpJiHo0iXsqkeMsmKO8MFM2Xw6WBgrq26hK jjfD0grSPEIEDg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:07 2026 by rpki-client