This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft File: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft (raw, json) Hash identifier: Q/Yw6aoDVd001moUdzWkNWbY7g+9ssfyLczqO2MXJfE= Subject key identifier: F3:DE:11:62:4D:5D:9E:EC:50:8F:AB:FD:39:60:BE:3C:9C:AB:03:DB Authority key identifier: 35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F Certificate issuer: /CN=35e6764594e00d9ab8017893c71092cf516b101f Certificate serial: 019C41D8D5FADC536B047482A2A0BA68C4DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft Manifest number: 179D Signing time: Mon 09 Feb 2026 10:00:55 +0000 Manifest this update: Mon 09 Feb 2026 10:00:55 +0000 Manifest next update: Tue 10 Feb 2026 10:00:55 +0000 Files and hashes: 1: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl (hash: wqqyx2ATnaNdKrpim8JxCbCgA7fBc5kxHcaNbWWnHRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:d5:fa:dc:53:6b:04:74:82:a2:a0:ba:68:c4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e6764594e00d9ab8017893c71092cf516b101f Validity Not Before: Feb 9 10:00:55 2026 GMT Not After : Feb 10 10:00:55 2026 GMT Subject: CN=f3de11624d5d9eec508fabfd3960be3c9cab03db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d8:79:e1:ef:06:57:3a:30:86:52:0c:26:fc: 95:25:01:ce:a4:fb:8b:72:f2:a5:6a:22:c1:9a:db: 12:b5:84:7b:1a:25:5f:7b:ee:aa:ad:36:a1:71:8b: 3a:b2:9d:98:b9:e1:07:b6:2e:61:dc:5d:b3:f0:d4: 72:bb:78:67:5e:42:4b:15:00:f0:38:da:82:5a:b6: 48:d8:0a:f9:ff:85:02:1f:84:65:9f:d5:e8:11:0c: 23:23:8c:6a:b6:48:fb:91:a5:12:60:d9:53:58:20: ea:af:71:b0:76:cb:84:08:83:fe:ee:e0:65:dc:48: 58:b7:06:55:bb:95:c9:5b:15:58:84:0f:5d:91:eb: 88:fa:17:e1:18:91:c0:dc:94:53:f8:6f:4e:4b:db: c0:68:8c:0a:fe:b9:81:73:17:b7:4a:6f:25:07:a5: e0:50:ba:07:03:5e:4c:eb:33:50:c5:ed:63:82:af: fb:05:5d:38:dc:f2:37:1e:56:40:a8:b4:1e:48:48: 21:c1:f5:e3:e0:81:26:2f:6c:ce:1b:fe:d6:99:4f: 02:35:cb:df:30:24:98:dd:1c:95:e2:06:42:74:0e: 11:03:c4:28:be:44:ca:74:ce:aa:1d:76:cd:d1:d7: f4:eb:9f:69:ed:50:ba:9e:26:4c:da:6f:ff:39:4d: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DE:11:62:4D:5D:9E:EC:50:8F:AB:FD:39:60:BE:3C:9C:AB:03:DB X509v3 Authority Key Identifier: keyid:35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:30:d4:d8:b0:41:ce:f5:b3:6c:5e:3e:a8:41:e1:5d:45:25: 83:d2:e1:09:f8:7b:4b:7c:a9:f7:7b:f8:f3:ce:bb:0e:1f:73: 97:ac:4a:c8:ae:1f:ef:b8:e6:60:b5:f1:f0:54:26:d0:b3:c4: 61:8c:a3:5e:26:8d:4a:41:2e:c4:12:92:63:32:16:8c:99:18: 63:84:55:f5:2a:45:34:68:35:ec:e7:55:3f:5d:27:f1:a0:d3: 37:21:b5:56:66:36:eb:e1:08:f7:1a:11:54:7f:81:20:a6:74: 81:85:47:65:4c:61:3d:12:4f:c4:3b:e0:86:3d:4f:6e:26:13: ea:c8:f3:62:1e:fd:d2:43:0e:0b:df:cb:9f:c2:76:c4:1e:ef: 80:f8:b6:4d:e5:01:21:56:d5:3b:57:46:9e:27:e1:c9:cd:fc: cc:86:e1:43:ce:c5:55:22:5a:f8:33:52:27:55:9e:65:a8:47: 63:ed:c3:06:1a:8e:d0:22:01:35:94:25:a5:ed:1e:3b:d2:91: f9:f2:34:08:7c:02:63:e6:a7:48:0c:32:5b:f4:52:4c:87:1a: 15:c2:d9:fd:9f:47:52:5e:f2:37:90:27:02:1f:cf:97:0a:a0: af:9e:89:3d:73:5c:26:82:78:eb:ea:38:a9:ff:e6:76:20:a7: 43:08:da:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2NX63FNrBHSCoqC6aMTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTY3NjQ1OTRlMDBkOWFiODAxNzg5M2M3MTA5MmNmNTE2 YjEwMWYwHhcNMjYwMjA5MTAwMDU1WhcNMjYwMjEwMTAwMDU1WjAzMTEwLwYDVQQD EyhmM2RlMTE2MjRkNWQ5ZWVjNTA4ZmFiZmQzOTYwYmUzYzljYWIwM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dh54e8GVzowhlIMJvyVJQHOpPuL cvKlaiLBmtsStYR7GiVfe+6qrTahcYs6sp2YueEHti5h3F2z8NRyu3hnXkJLFQDw ONqCWrZI2Ar5/4UCH4Rln9XoEQwjI4xqtkj7kaUSYNlTWCDqr3GwdsuECIP+7uBl 3EhYtwZVu5XJWxVYhA9dkeuI+hfhGJHA3JRT+G9OS9vAaIwK/rmBcxe3Sm8lB6Xg ULoHA15M6zNQxe1jgq/7BV043PI3HlZAqLQeSEghwfXj4IEmL2zOG/7WmU8CNcvf MCSY3RyV4gZCdA4RA8QovkTKdM6qHXbN0df0659p7VC6niZM2m//OU2WTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPeEWJNXZ7sUI+r/TlgvjycqwPbMB8GA1UdIwQY MBaAFDXmdkWU4A2auAF4k8cQks9RaxAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80YzMxZjItOGYzMC00ZGJlLTkzOGQt YjJmMGIxYmNhZTVjLzEvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy80YzMxZjItOGYzMC00ZGJlLTkzOGQtYjJmMGIxYmNhZTVj LzEvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDDU2LBB zvWzbF4+qEHhXUUlg9LhCfh7S3yp93v48867Dh9zl6xKyK4f77jmYLXx8FQm0LPE YYyjXiaNSkEuxBKSYzIWjJkYY4RV9SpFNGg17OdVP10n8aDTNyG1VmY26+EI9xoR VH+BIKZ0gYVHZUxhPRJPxDvghj1PbiYT6sjzYh790kMOC9/Ln8J2xB7vgPi2TeUB IVbVO1dGnifhyc38zIbhQ87FVSJa+DNSJ1WeZahHY+3DBhqO0CIBNZQlpe0eO9KR +fI0CHwCY+anSAwyW/RSTIcaFcLZ/Z9HUl7yN5AnAh/Plwqgr56JPXNcJoJ46+o4 qf/mdiCnQwjaPg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:45 2026 by rpki-client