This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json) Hash identifier: /m+RpcGm1xN5fBlv7bSRZJu+9DaAyG3H+uvGfEfI9ks= Subject key identifier: 1B:D8:93:89:0E:79:3B:EA:6A:92:27:34:FF:B9:57:08:77:FD:BB:C1 Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06 Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06 Certificate serial: 019C4322BB4D408AC9D6FDBF44CF899EFDAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft Manifest number: 05C2 Signing time: Mon 09 Feb 2026 16:01:15 +0000 Manifest this update: Mon 09 Feb 2026 16:01:15 +0000 Manifest next update: Tue 10 Feb 2026 16:01:15 +0000 Files and hashes: 1: 4mcjlfKQeAXTF7xGEKQ2QAqMI50.roa (hash: JOKnaNGFem+HWwH7PdEKl79mLEfLJaQb9H34d4OS4AM=) 2: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: ov9yvnVPQ/1hcRbkTkRpsJ6pI9xhvp6iiVRcLHFXOZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:bb:4d:40:8a:c9:d6:fd:bf:44:cf:89:9e:fd:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06 Validity Not Before: Feb 9 16:01:15 2026 GMT Not After : Feb 10 16:01:15 2026 GMT Subject: CN=1bd893890e793bea6a922734ffb9570877fdbbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0b:2b:6b:57:b7:45:a0:4b:2b:ce:8b:17:9d: b5:29:05:65:d4:d8:38:68:fb:0f:4a:76:04:20:9e: b4:7e:47:92:e4:c9:ea:81:2f:28:c6:2d:8b:4c:05: 85:bd:7c:98:08:60:31:d6:e8:ea:3d:e1:c3:4a:04: 0a:15:b4:f6:26:4c:dc:f6:75:5b:61:2c:ba:a9:1d: b0:8b:3a:b9:10:ed:1d:2a:bb:bb:fc:10:e8:62:ac: f0:1c:0b:9a:dd:0f:41:f7:5b:0f:d5:9d:23:ff:10: 97:6c:e2:73:82:b9:f3:b2:f0:7d:45:93:eb:d6:04: 23:d2:22:a8:84:31:aa:a7:dd:db:9b:1c:18:89:65: 35:79:a5:12:66:ad:1e:8c:99:d0:fb:73:04:bb:79: 7b:2b:cf:2f:bc:86:36:81:c9:41:c1:46:65:06:5c: 6e:df:c1:5f:f6:c1:fa:a2:6c:40:70:7b:35:3a:c2: 2f:01:9a:68:30:50:6c:0c:83:83:b3:80:8c:b1:84: 2e:1e:4f:c6:cd:b0:b0:e0:bf:4f:8e:95:90:a1:b5: 50:07:8a:19:ef:ae:c7:49:39:d6:17:6f:0b:dd:ae: 10:c7:0f:25:96:f1:20:b1:e6:3d:91:3d:4d:c8:07: 82:00:8a:be:e8:33:3e:bd:e6:12:7a:c5:7d:c3:5a: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D8:93:89:0E:79:3B:EA:6A:92:27:34:FF:B9:57:08:77:FD:BB:C1 X509v3 Authority Key Identifier: keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:68:07:12:c4:79:61:9a:41:69:5e:ec:11:4a:2f:22:d6:4b: f2:af:0b:f2:de:e6:10:f1:7c:3d:1b:e2:11:ec:19:b8:37:c0: da:15:66:cf:77:d6:b2:55:af:1a:bd:5c:68:cc:6c:4d:fb:d1: 20:64:49:d5:21:a4:b0:a6:82:8e:d0:32:45:84:0f:6f:de:0c: 1d:ae:6b:78:6a:dd:28:77:0a:8b:87:b3:fe:19:ad:a5:a0:39: 75:83:16:61:7e:4e:c7:23:b2:72:c8:18:43:29:61:92:3b:8f: 93:66:fc:ed:0d:cb:96:90:0b:99:b4:8b:d8:ea:4d:ca:81:65: 5e:c9:4d:55:25:7c:50:b3:d1:3f:6e:0b:d2:06:ea:b8:b9:e7: 61:49:fd:ed:12:80:72:fa:19:0e:cc:7e:25:75:02:6b:4e:f1: 7d:a0:d5:ab:7c:02:a6:56:e6:02:c2:ae:aa:3c:2e:b7:4a:9b: 57:39:43:a7:ba:ee:12:bf:18:78:87:fa:a1:f6:21:c0:13:d9: 8c:88:e6:86:0d:72:09:ac:83:b3:5f:a6:11:bb:2f:88:8c:bf: 8f:6a:d7:fb:49:fe:0c:da:54:f5:14:66:1c:59:44:bb:9f:4b: ac:66:34:64:54:33:75:79:84:90:0f:d7:50:97:e8:ea:f5:92: 7e:79:c2:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrtNQIrJ1v2/RM+Jnv2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMTE2OGI4NTcxN2ExNDY2NjAwMWI1YjJmNmM5MDgwMTk5 N2RlMDYwHhcNMjYwMjA5MTYwMTE1WhcNMjYwMjEwMTYwMTE1WjAzMTEwLwYDVQQD EygxYmQ4OTM4OTBlNzkzYmVhNmE5MjI3MzRmZmI5NTcwODc3ZmRiYmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wsra1e3RaBLK86LF521KQVl1Ng4 aPsPSnYEIJ60fkeS5MnqgS8oxi2LTAWFvXyYCGAx1ujqPeHDSgQKFbT2Jkzc9nVb YSy6qR2wizq5EO0dKru7/BDoYqzwHAua3Q9B91sP1Z0j/xCXbOJzgrnzsvB9RZPr 1gQj0iKohDGqp93bmxwYiWU1eaUSZq0ejJnQ+3MEu3l7K88vvIY2gclBwUZlBlxu 38Ff9sH6omxAcHs1OsIvAZpoMFBsDIODs4CMsYQuHk/GzbCw4L9PjpWQobVQB4oZ 767HSTnWF28L3a4Qxw8llvEgseY9kT1NyAeCAIq+6DM+veYSesV9w1rT8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvYk4kOeTvqapInNP+5Vwh3/bvBMB8GA1UdIwQY MBaAFJ8RaLhXF6FGZgAbWy9skIAZl94GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84ZjY1OGMtM2ZhYy00OThkLWI5NWUt ZjQyMTliZWRkYjM3LzEvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84ZjY1OGMtM2ZhYy00OThkLWI5NWUtZjQyMTliZWRkYjM3 LzEvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGgHEsR5 YZpBaV7sEUovItZL8q8L8t7mEPF8PRviEewZuDfA2hVmz3fWslWvGr1caMxsTfvR IGRJ1SGksKaCjtAyRYQPb94MHa5reGrdKHcKi4ez/hmtpaA5dYMWYX5OxyOycsgY QylhkjuPk2b87Q3LlpALmbSL2OpNyoFlXslNVSV8ULPRP24L0gbquLnnYUn97RKA cvoZDsx+JXUCa07xfaDVq3wCplbmAsKuqjwut0qbVzlDp7ruEr8YeIf6ofYhwBPZ jIjmhg1yCayDs1+mEbsviIy/j2rX+0n+DNpU9RRmHFlEu59LrGY0ZFQzdXmEkA/X UJfo6vWSfnnC1A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:40 2026 by rpki-client