This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json) Hash identifier: 5Fah4EXv84yDtBFtc6tNNKioSzlI5PEl4rIuxiOOqUY= Subject key identifier: 20:48:C9:46:7B:BB:66:07:B5:44:3E:61:4C:6F:06:37:8C:76:49:D4 Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f Certificate serial: 019C42EAF7C70F472F6CE46810A229F841C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 15:00:20 +0000 Manifest this update: Mon 09 Feb 2026 15:00:20 +0000 Manifest next update: Tue 10 Feb 2026 15:00:20 +0000 Files and hashes: 1: 2faiVit9OjueZahp7YpMGI9nPX0.roa (hash: OgjxqGpyZOwTD9iVONTR2DO+mW7tsVQaXV48+jDEJWE=) 2: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: gRvFlFHsoRfZYaXB1OMwEBFl4EppjYrCxq+j+3u/6Ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:f7:c7:0f:47:2f:6c:e4:68:10:a2:29:f8:41:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f Validity Not Before: Feb 9 15:00:20 2026 GMT Not After : Feb 10 15:00:20 2026 GMT Subject: CN=2048c9467bbb6607b5443e614c6f06378c7649d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:b2:08:d8:6a:a5:6e:8f:bd:6d:4b:35:24: 6e:83:8d:9a:c1:1d:9b:e5:29:9c:01:63:33:a5:53: 86:8f:9b:bf:9f:6e:ca:75:fd:8a:54:64:79:99:2b: 90:4e:42:db:ca:e3:3e:e2:b7:11:57:a9:94:c8:8c: 0f:64:72:76:62:ea:f4:1b:24:49:62:27:2c:72:36: 9b:8f:9a:52:6c:73:07:e6:1f:25:95:db:c1:ab:4f: 74:63:3c:b8:38:14:f8:d2:5d:ca:f9:66:9b:c8:c8: 1f:d0:2f:45:d8:a1:03:50:99:40:18:f8:5c:c2:68: f6:ac:1d:0c:6e:f8:e9:87:fb:77:e6:0d:cb:85:a9: e0:dc:17:30:bd:9e:cb:35:f1:12:9c:e6:44:d4:59: 06:ae:95:64:44:d9:27:30:b4:bc:f7:cf:03:3a:84: 0a:c1:93:8d:6b:4c:c1:8f:58:68:dd:1a:7e:c6:e1: d7:90:02:72:62:72:85:85:17:5f:0b:36:1b:ca:d1: a5:29:03:c0:cd:92:09:8f:a3:a7:75:24:49:40:f2: bd:a2:07:79:1a:71:ac:57:56:ce:d8:9b:60:bd:76: 45:e3:54:9a:c2:8b:a5:0e:ab:d9:fd:90:dd:bd:99: 4a:51:8b:c4:d3:9e:a5:53:fa:62:b5:3e:b6:cc:f9: 5e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:48:C9:46:7B:BB:66:07:B5:44:3E:61:4C:6F:06:37:8C:76:49:D4 X509v3 Authority Key Identifier: keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:12:bc:7f:7b:2f:ef:bd:c2:e2:86:bc:da:5e:c8:ba:2e:eb: db:d0:b7:38:cf:8c:37:de:3c:8a:3b:c9:68:ff:85:75:02:62: 1e:c1:90:b1:ca:b9:54:47:e4:73:f9:c0:6b:02:42:ea:3e:81: 0a:77:d9:3b:f2:3d:52:a1:c3:f0:f4:27:e6:bc:77:0b:6d:47: 36:7f:bb:51:51:e1:ba:82:8e:dd:1d:c6:3e:20:6e:f6:ae:b1: bc:3e:cd:e8:1a:79:09:d8:f1:29:a6:ae:ff:d4:5f:3b:46:79: 91:c7:3b:f7:a0:0e:37:8d:e5:ff:fe:9a:76:6e:b3:e9:54:73: f5:ce:2f:da:01:83:f9:04:0f:71:6d:1e:d0:0a:f2:9b:67:7f: 33:bd:20:2c:06:7c:f0:94:7e:54:d2:cc:16:d0:c4:49:41:71: 84:a4:40:40:d6:50:e3:ff:53:a2:71:01:b9:a7:34:3f:e7:09: d3:df:16:a7:8d:b3:27:4b:c9:aa:01:01:2a:2f:dc:3e:29:2b: e7:6d:f6:f1:58:bb:6f:bc:24:b2:05:e2:61:2d:25:13:34:9a: 13:35:a2:27:04:03:3c:a7:12:e9:28:5e:b0:b6:d2:2a:fc:df: a6:5d:0c:23:94:d6:36:8f:f1:39:a2:20:20:ab:71:d8:f9:46: ea:fe:94:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6vfHD0cvbORoEKIp+EHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YWFmYTVjM2YyZjhlNGEwODNmODFmMGNiODdiYzdhZWE0 NDg5MWYwHhcNMjYwMjA5MTUwMDIwWhcNMjYwMjEwMTUwMDIwWjAzMTEwLwYDVQQD EygyMDQ4Yzk0NjdiYmI2NjA3YjU0NDNlNjE0YzZmMDYzNzhjNzY0OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjOyCNhqpW6PvW1LNSRug42awR2b 5SmcAWMzpVOGj5u/n27Kdf2KVGR5mSuQTkLbyuM+4rcRV6mUyIwPZHJ2Yur0GyRJ Yicscjabj5pSbHMH5h8lldvBq090Yzy4OBT40l3K+WabyMgf0C9F2KEDUJlAGPhc wmj2rB0Mbvjph/t35g3Lhang3BcwvZ7LNfESnOZE1FkGrpVkRNknMLS8988DOoQK wZONa0zBj1ho3Rp+xuHXkAJyYnKFhRdfCzYbytGlKQPAzZIJj6OndSRJQPK9ogd5 GnGsV1bO2JtgvXZF41SawoulDqvZ/ZDdvZlKUYvE056lU/pitT62zPleJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBIyUZ7u2YHtUQ+YUxvBjeMdknUMB8GA1UdIwQY MBaAFDaq+lw/L45KCD+B8MuHvHrqRIkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4Mjkt MTUyYTU5NDc5ZTY5LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4MjktMTUyYTU5NDc5ZTY5 LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhK8f3sv 773C4oa82l7Iui7r29C3OM+MN948ijvJaP+FdQJiHsGQscq5VEfkc/nAawJC6j6B CnfZO/I9UqHD8PQn5rx3C21HNn+7UVHhuoKO3R3GPiBu9q6xvD7N6Bp5CdjxKaau /9RfO0Z5kcc796AON43l//6adm6z6VRz9c4v2gGD+QQPcW0e0Arym2d/M70gLAZ8 8JR+VNLMFtDESUFxhKRAQNZQ4/9TonEBuac0P+cJ098Wp42zJ0vJqgEBKi/cPikr 52328Vi7b7wksgXiYS0lEzSaEzWiJwQDPKcS6ShesLbSKvzfpl0MI5TWNo/xOaIg IKtx2PlG6v6UjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:58 2026 by rpki-client