This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json) Hash identifier: DUfw3zcxUPDxEUrGQUMofuA5gFbaCNXHj+sXK18x6QI= Subject key identifier: D3:74:38:05:CD:BC:71:9B:B1:B5:AC:09:F0:2A:90:3D:25:64:7A:88 Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5 Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5 Certificate serial: 019C43FDB45925758127FC2ED8867D7FE1AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft Manifest number: 13CF Signing time: Mon 09 Feb 2026 20:00:26 +0000 Manifest this update: Mon 09 Feb 2026 20:00:26 +0000 Manifest next update: Tue 10 Feb 2026 20:00:26 +0000 Files and hashes: 1: G0aKcDsl1PqdjVR3FQskokbeFo4.roa (hash: 1L7mF5eSE/OQ8Z7D7J6lT/W3zitG2LYDWe4kI69m0FM=) 2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: YoqdSzR4q7mg3lPSGyiBF5SiUHWfQ3skDGHweiipagw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:b4:59:25:75:81:27:fc:2e:d8:86:7d:7f:e1:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5 Validity Not Before: Feb 9 20:00:26 2026 GMT Not After : Feb 10 20:00:26 2026 GMT Subject: CN=d3743805cdbc719bb1b5ac09f02a903d25647a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2e:46:fe:9c:42:d9:fc:46:84:21:a1:84:f6: f8:b2:23:20:ca:14:62:ff:8d:83:2f:72:fc:b7:b2: 79:74:45:8e:6b:13:49:8a:20:03:97:dc:23:2f:bd: e9:5e:92:52:75:c4:d8:11:9d:d9:b5:52:f7:74:6c: 23:6f:90:59:2e:14:a4:2d:1e:dc:75:02:8e:1c:ae: e1:6c:8c:a3:67:e1:3f:0f:93:4a:c1:06:e2:7b:a3: 41:e5:6e:ba:2a:18:f1:1f:5f:ce:a5:32:75:4b:6c: 54:1d:6c:38:97:e8:2b:69:9b:98:a6:27:92:d6:10: 71:bc:08:2f:8b:12:a3:d2:22:7a:b2:81:4a:82:0a: 09:b5:5b:93:26:45:fe:a9:ce:d6:02:0f:bc:1a:a9: 26:0d:34:4f:a6:fe:7e:7c:b9:c0:3d:ea:b1:dc:c4: b6:46:fc:e1:44:ad:08:94:42:19:25:55:4b:b4:7d: 4e:2e:7e:24:11:f8:8f:6d:f8:b5:b6:27:b9:32:86: a7:8c:cc:5d:8a:0f:0b:c1:32:ad:fa:aa:25:7d:10: 20:f0:e1:de:c2:45:48:58:5d:5a:38:2d:37:80:73: 28:bc:49:bf:5d:c3:af:6c:38:06:54:3b:7a:e8:ce: 13:c1:89:0b:dd:5b:1b:42:92:75:0d:f6:47:93:e8: 69:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:74:38:05:CD:BC:71:9B:B1:B5:AC:09:F0:2A:90:3D:25:64:7A:88 X509v3 Authority Key Identifier: keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:39:e5:ef:98:f0:60:10:93:07:ad:60:71:a5:ce:3e:7f:6e: 05:23:38:8e:f2:56:4e:84:5f:22:c4:1f:43:80:25:1e:f9:dc: 0a:1f:d5:e6:a0:62:d8:74:f9:dd:94:ad:b3:35:56:3d:db:bb: af:76:72:3a:27:f0:89:5a:7c:7a:f5:c5:41:9b:1d:fa:8a:ef: 1b:3b:bf:2b:7e:5a:f2:a5:c6:76:bf:9c:94:35:ce:78:29:99: 31:3f:22:77:11:65:e1:fc:5e:e8:26:ff:68:39:fa:3e:f9:92: 01:06:22:aa:0a:03:4c:c4:00:62:c3:59:d1:ae:69:8d:36:36: 99:3f:99:9d:b3:f3:62:5f:e1:3b:b0:6d:7e:32:cc:ed:49:39: 97:4b:16:65:bd:72:9f:67:db:cd:de:53:c8:cb:f6:a9:b7:00: 1c:ea:89:77:57:e2:29:9b:dc:fe:a9:6e:2f:22:d7:cd:d5:45: 83:55:6c:15:48:dd:3e:b1:fc:56:82:d9:f0:b1:ff:d1:d8:ed: b2:f6:01:ae:77:9f:65:6e:c1:3c:ea:28:2c:6f:39:92:48:66: 45:62:81:35:ad:df:e2:43:5f:e4:8a:01:d5:3f:26:21:74:8a: ce:c0:6f:13:a6:fa:1d:6e:3c:7a:55:67:98:3c:3d:29:15:cf: a8:4c:1d:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/bRZJXWBJ/wu2IZ9f+GvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTIyZGNhMmEyZGIwYTU5ZmU1NjY4MWM4ZDFjNDA2Nzdh NzQ1YjUwHhcNMjYwMjA5MjAwMDI2WhcNMjYwMjEwMjAwMDI2WjAzMTEwLwYDVQQD EyhkMzc0MzgwNWNkYmM3MTliYjFiNWFjMDlmMDJhOTAzZDI1NjQ3YTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i5G/pxC2fxGhCGhhPb4siMgyhRi /42DL3L8t7J5dEWOaxNJiiADl9wjL73pXpJSdcTYEZ3ZtVL3dGwjb5BZLhSkLR7c dQKOHK7hbIyjZ+E/D5NKwQbie6NB5W66KhjxH1/OpTJ1S2xUHWw4l+graZuYpieS 1hBxvAgvixKj0iJ6soFKggoJtVuTJkX+qc7WAg+8GqkmDTRPpv5+fLnAPeqx3MS2 RvzhRK0IlEIZJVVLtH1OLn4kEfiPbfi1tie5MoanjMxdig8LwTKt+qolfRAg8OHe wkVIWF1aOC03gHMovEm/XcOvbDgGVDt66M4TwYkL3VsbQpJ1DfZHk+hpCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNN0OAXNvHGbsbWsCfAqkD0lZHqIMB8GA1UdIwQY MBaAFJziLcoqLbCln+VmgcjRxAZ3p0W1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82YjBlMGUtOGJlNS00YmY5LWI0Mjct NzBkNjMxMDdkMDVkLzEvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82YjBlMGUtOGJlNS00YmY5LWI0MjctNzBkNjMxMDdkMDVk LzEvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTnl75jw YBCTB61gcaXOPn9uBSM4jvJWToRfIsQfQ4AlHvncCh/V5qBi2HT53ZStszVWPdu7 r3ZyOifwiVp8evXFQZsd+orvGzu/K35a8qXGdr+clDXOeCmZMT8idxFl4fxe6Cb/ aDn6PvmSAQYiqgoDTMQAYsNZ0a5pjTY2mT+ZnbPzYl/hO7BtfjLM7Uk5l0sWZb1y n2fbzd5TyMv2qbcAHOqJd1fiKZvc/qluLyLXzdVFg1VsFUjdPrH8VoLZ8LH/0djt svYBrnefZW7BPOooLG85kkhmRWKBNa3f4kNf5IoB1T8mIXSKzsBvE6b6HW48elVn mDw9KRXPqEwdzA== -----END CERTIFICATE-----Generated at Tue Feb 10 05:50:44 2026 by rpki-client