This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json) Hash identifier: 2VykygltokcO2+A1xyHDCHJ7UMIPDp7XBo2XTvUVpKI= Subject key identifier: 22:02:89:2A:E7:6E:4C:F7:AC:CD:46:C7:19:BE:35:4D:E4:9C:96:CA Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10 Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810 Certificate serial: 019C435933EBAA3D84C909C8C72A338B53CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 17:00:45 +0000 Manifest this update: Mon 09 Feb 2026 17:00:45 +0000 Manifest next update: Tue 10 Feb 2026 17:00:45 +0000 Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: 7UB9n2tvgPFR07714E70KUsLKAkR/Sqm6Qb0mhKXaD0=) 2: TM1bxUMPDPyCHRavcIw7WxQjRbU.roa (hash: UaG8J2YnGAjViEmyxsyTzCRJYYoHOIo0htvybh8voBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:33:eb:aa:3d:84:c9:09:c8:c7:2a:33:8b:53:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810 Validity Not Before: Feb 9 17:00:45 2026 GMT Not After : Feb 10 17:00:45 2026 GMT Subject: CN=2202892ae76e4cf7accd46c719be354de49c96ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:91:24:68:d4:6a:3c:77:03:40:92:22:3a: b9:6a:94:1c:9e:3c:63:75:0e:fe:93:f6:a9:08:b6: 94:26:49:98:3f:11:9d:ed:ae:7b:8a:8c:71:c0:6c: 77:5f:a6:50:63:f6:a5:c6:a3:a1:17:2f:70:d3:23: 0f:d5:df:d2:19:18:c5:fb:80:1b:b5:7e:f5:77:0c: 00:03:ff:63:b7:95:7e:dd:cb:cd:59:41:3f:60:50: 66:d1:58:26:c4:7a:1d:fe:b4:32:6e:2b:be:5a:5c: 2d:78:c8:53:b8:40:84:c2:03:4a:a5:2e:88:04:ca: 01:c1:22:ec:ad:77:d7:35:fa:13:26:28:12:c3:ac: e9:7f:44:a5:6d:30:c1:c6:b2:ca:67:d0:86:aa:e8: 5f:5e:3e:f5:1e:ad:95:62:be:53:2d:50:4b:bc:a8: 49:55:fe:2d:a6:8d:fd:0b:d2:f9:43:f0:35:c9:67: c1:ba:36:ad:2e:e4:45:2f:44:06:b7:31:bb:92:ed: d0:3a:42:c3:32:bb:5b:86:29:6f:6f:e4:1a:7f:e0: 98:d5:3f:81:16:ba:7e:7d:15:6c:1b:a9:a2:24:c7: cd:d8:25:44:27:bf:b3:4f:3b:43:4c:a6:38:c7:7c: 51:a9:db:60:6c:d8:62:e4:98:cd:05:72:8c:f9:2e: fc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:02:89:2A:E7:6E:4C:F7:AC:CD:46:C7:19:BE:35:4D:E4:9C:96:CA X509v3 Authority Key Identifier: keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d2:a4:43:9a:b7:20:9b:ce:fa:ef:56:1d:d1:e1:21:76:2d: 18:41:6c:9f:5c:da:43:a2:49:2d:ce:f5:05:93:91:cc:dc:e1: 2d:a3:18:b0:e2:a8:04:1f:ac:a1:04:6f:b9:02:79:b2:d3:8b: 74:eb:2b:0a:7f:4b:fa:47:48:23:23:73:7e:3b:10:7c:24:e1: b5:25:ce:4d:5a:1a:9c:83:c1:3b:35:55:10:3a:70:60:20:ce: a1:df:73:68:43:4a:d2:33:eb:cf:2d:cf:b2:ad:d7:e6:72:aa: 89:9f:cf:26:2e:6b:24:ef:3f:55:78:f9:b8:87:e8:3c:4c:3f: 77:e1:42:b5:07:1f:33:e5:d5:ff:ae:6e:71:64:8a:b2:a5:b6: be:0e:82:c9:6b:9b:b3:70:e9:ec:55:1a:57:8a:df:7f:3d:14: 06:47:fc:b6:8a:ea:09:5f:8c:33:94:45:18:1f:60:62:a2:6f: 90:f9:c5:fd:8d:17:02:d1:4a:78:1a:77:01:69:7a:d8:0c:32: 08:41:7d:21:1d:b6:90:e1:d5:25:95:e6:5d:3d:55:0a:21:be: f6:99:81:30:a6:15:20:f3:07:f6:7c:48:05:c7:40:3b:98:0e: 34:32:76:26:e3:a7:cc:57:89:4f:5a:0c:52:fe:29:5f:32:c8: da:b4:85:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTPrqj2EyQnIxyozi1POMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MWZiODVkNGY4MDhjYjE2MDdhMmJlNGY0YTc5OGNhM2Vh ZDM4MTAwHhcNMjYwMjA5MTcwMDQ1WhcNMjYwMjEwMTcwMDQ1WjAzMTEwLwYDVQQD EygyMjAyODkyYWU3NmU0Y2Y3YWNjZDQ2YzcxOWJlMzU0ZGU0OWM5NmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz6RJGjUajx3A0CSIjq5apQcnjxj dQ7+k/apCLaUJkmYPxGd7a57ioxxwGx3X6ZQY/alxqOhFy9w0yMP1d/SGRjF+4Ab tX71dwwAA/9jt5V+3cvNWUE/YFBm0VgmxHod/rQybiu+WlwteMhTuECEwgNKpS6I BMoBwSLsrXfXNfoTJigSw6zpf0SlbTDBxrLKZ9CGquhfXj71Hq2VYr5TLVBLvKhJ Vf4tpo39C9L5Q/A1yWfBujatLuRFL0QGtzG7ku3QOkLDMrtbhilvb+Qaf+CY1T+B Frp+fRVsG6miJMfN2CVEJ7+zTztDTKY4x3xRqdtgbNhi5JjNBXKM+S78LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCICiSrnbkz3rM1Gxxm+NU3knJbKMB8GA1UdIwQY MBaAFDcfuF1PgIyxYHor5PSnmMo+rTgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMt ZDdiMmM5MzQ0MmQzLzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMtZDdiMmM5MzQ0MmQz LzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNKkQ5q3 IJvO+u9WHdHhIXYtGEFsn1zaQ6JJLc71BZORzNzhLaMYsOKoBB+soQRvuQJ5stOL dOsrCn9L+kdIIyNzfjsQfCThtSXOTVoanIPBOzVVEDpwYCDOod9zaENK0jPrzy3P sq3X5nKqiZ/PJi5rJO8/VXj5uIfoPEw/d+FCtQcfM+XV/65ucWSKsqW2vg6CyWub s3Dp7FUaV4rffz0UBkf8torqCV+MM5RFGB9gYqJvkPnF/Y0XAtFKeBp3AWl62Awy CEF9IR22kOHVJZXmXT1VCiG+9pmBMKYVIPMH9nxIBcdAO5gONDJ2JuOnzFeJT1oM Uv4pXzLI2rSFog== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:34 2026 by rpki-client