This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json) Hash identifier: qwQzrBJWVJCHmdIvWCDxtE/tsjzmbGWcDsmr4VDkvSQ= Subject key identifier: 9E:50:AC:5E:49:14:E0:F1:B2:BC:A4:27:AF:BB:2D:C8:81:43:D3:7D Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a Certificate serial: 019C44DA12EC5171F3224C1D02CAF4F7C87A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft Manifest number: 1812 Signing time: Tue 10 Feb 2026 00:01:07 +0000 Manifest this update: Tue 10 Feb 2026 00:01:07 +0000 Manifest next update: Wed 11 Feb 2026 00:01:07 +0000 Files and hashes: 1: 9mN_oHf4GD05-BUH6BsB01tvt3Y.roa (hash: ZuxdvlwmVs1w0KroWX43G/v/gBodCt7QRPbyICFM9A0=) 2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: wfjrO6+1uy/JQoXGo7BWz51KqVTktHAyXYVmBZyeURo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:12:ec:51:71:f3:22:4c:1d:02:ca:f4:f7:c8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a Validity Not Before: Feb 10 00:01:07 2026 GMT Not After : Feb 11 00:01:07 2026 GMT Subject: CN=9e50ac5e4914e0f1b2bca427afbb2dc88143d37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:4e:2c:79:db:98:d6:d2:08:e8:bb:ab:28: 6c:f2:24:e9:5d:fc:b3:3c:dd:59:d5:af:2d:21:a1: 22:93:28:10:95:8f:03:94:14:2b:f9:88:20:fe:5f: e3:bf:01:bc:c8:73:ce:1c:cc:9a:89:a3:90:f9:fc: 53:dc:43:b2:13:13:d1:ab:ef:5f:ba:37:81:9c:44: 44:5a:e2:b0:e8:5a:b1:d3:f8:2e:fd:18:cb:ae:ef: 1b:0f:42:db:70:02:04:69:12:59:41:68:e1:07:cf: 1f:0f:e1:ff:6c:79:09:43:54:cb:a5:e0:2f:88:a9: b2:a2:bb:d4:48:e4:0f:f7:35:5c:3e:2f:49:42:fb: 36:da:a4:79:94:1e:74:93:cb:be:73:13:2b:77:3b: 4f:41:aa:0f:c1:01:58:5d:78:7f:59:89:8f:f9:f4: 87:5b:9c:e0:53:f4:ab:1d:40:f9:c7:23:15:d8:e4: dd:1f:f9:2a:0a:f6:5c:7b:6c:b7:1f:83:6f:f0:f1: e3:d7:aa:77:c5:99:d6:05:44:02:b6:bb:cc:73:1f: 13:62:85:c2:b5:93:41:94:2d:37:07:0f:de:ef:44: 82:f6:20:ed:1b:8d:f8:62:ef:b2:17:23:40:4d:15: 17:04:f9:85:15:c9:18:ac:7c:72:e4:a9:7c:7e:58: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:50:AC:5E:49:14:E0:F1:B2:BC:A4:27:AF:BB:2D:C8:81:43:D3:7D X509v3 Authority Key Identifier: keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:cb:44:15:78:50:32:73:fe:44:4d:07:92:cf:c6:f9:0c:71: 76:07:52:45:b6:17:61:bd:d1:f9:63:d3:aa:0d:f7:e8:f5:f3: d6:e1:3c:db:83:07:cb:0e:d6:3b:13:98:3b:5f:86:16:66:73: d9:14:d9:94:44:b5:94:85:15:5c:f1:f4:a9:72:33:13:f2:67: 57:c9:1b:b4:58:06:3d:fc:a5:c0:f4:82:b6:b8:5a:ea:8f:7a: 06:b7:66:83:dd:85:2e:98:b0:4d:0f:c0:4c:2b:a7:c4:14:ef: f8:3f:03:ac:14:80:91:e8:bc:0f:1a:8f:48:79:1f:d1:1f:0d: 82:51:d6:91:71:6e:a5:ea:5d:d8:33:4f:75:d6:54:3f:3b:d2: db:84:a8:5d:96:26:de:00:f3:29:38:90:df:b5:72:3e:61:57: 3b:2b:ae:89:f7:15:17:5a:28:bd:5b:f0:dd:b8:14:6f:bd:00: 27:f0:c2:a5:6c:b0:3e:88:89:62:fd:0f:5a:5c:22:1b:c3:b5: ff:f3:39:bb:d1:d4:f3:0a:fa:d0:ba:7a:ec:fe:ca:d2:ec:d1: ad:b9:c2:73:8b:78:52:87:e1:cf:26:9f:0c:98:b9:e1:6a:69: 69:9d:68:af:fc:bf:94:26:e4:51:b4:6d:73:79:0c:75:b0:f7: fc:2e:15:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2hLsUXHzIkwdAsr098h6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTJiNmEwNTE0NzFiZWM1MWRiNzRkNzI1NmU3YTMwYTU1 ZWNmMWEwHhcNMjYwMjEwMDAwMTA3WhcNMjYwMjExMDAwMTA3WjAzMTEwLwYDVQQD Eyg5ZTUwYWM1ZTQ5MTRlMGYxYjJiY2E0MjdhZmJiMmRjODgxNDNkMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwxOLHnbmNbSCOi7qyhs8iTpXfyz PN1Z1a8tIaEikygQlY8DlBQr+Ygg/l/jvwG8yHPOHMyaiaOQ+fxT3EOyExPRq+9f ujeBnEREWuKw6Fqx0/gu/RjLru8bD0LbcAIEaRJZQWjhB88fD+H/bHkJQ1TLpeAv iKmyorvUSOQP9zVcPi9JQvs22qR5lB50k8u+cxMrdztPQaoPwQFYXXh/WYmP+fSH W5zgU/SrHUD5xyMV2OTdH/kqCvZce2y3H4Nv8PHj16p3xZnWBUQCtrvMcx8TYoXC tZNBlC03Bw/e70SC9iDtG434Yu+yFyNATRUXBPmFFckYrHxy5Kl8flhmfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5QrF5JFODxsrykJ6+7LciBQ9N9MB8GA1UdIwQY MBaAFJxStqBRRxvsUdt01yVuejClXs8aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAt MjgyOWFhM2RmMjU4LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAtMjgyOWFhM2RmMjU4 LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANctEFXhQ MnP+RE0Hks/G+QxxdgdSRbYXYb3R+WPTqg336PXz1uE824MHyw7WOxOYO1+GFmZz 2RTZlES1lIUVXPH0qXIzE/JnV8kbtFgGPfylwPSCtrha6o96Brdmg92FLpiwTQ/A TCunxBTv+D8DrBSAkei8DxqPSHkf0R8NglHWkXFupepd2DNPddZUPzvS24SoXZYm 3gDzKTiQ37VyPmFXOyuuifcVF1oovVvw3bgUb70AJ/DCpWywPoiJYv0PWlwiG8O1 //M5u9HU8wr60Lp67P7K0uzRrbnCc4t4UofhzyafDJi54WppaZ1or/y/lCbkUbRt c3kMdbD3/C4VtQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:14 2026 by rpki-client