This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json) Hash identifier: 8jI2SdCRNAUzM1qbVTLKV3YbHly3ltlCQInjaIocfos= Subject key identifier: 82:21:4B:F2:B9:E8:C3:DC:E8:8B:07:E4:59:C5:BE:67:E3:CB:7A:B8 Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa Certificate serial: 019C41A161A60F6282E6BC2DA8F9AD67F337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft Manifest number: 0635 Signing time: Mon 09 Feb 2026 09:00:21 +0000 Manifest this update: Mon 09 Feb 2026 09:00:21 +0000 Manifest next update: Tue 10 Feb 2026 09:00:21 +0000 Files and hashes: 1: 3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa (hash: ho5K0lj5JJPTZqPc5laRkOJ8PLSca4Q9mg+67aNhjzk=) 2: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: Z5otYQPK2HvaY8XQSx09wJ//scuj3UjKUNB6ZqLdTiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:61:a6:0f:62:82:e6:bc:2d:a8:f9:ad:67:f3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa Validity Not Before: Feb 9 09:00:21 2026 GMT Not After : Feb 10 09:00:21 2026 GMT Subject: CN=82214bf2b9e8c3dce88b07e459c5be67e3cb7ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:71:fa:47:e7:d5:b9:ab:a1:d7:62:21:5f:48: 0a:a2:fa:4c:7f:c1:9d:cc:c1:6d:72:ac:53:d0:95: db:a1:21:86:f4:46:ba:ea:f6:bb:7b:59:30:ff:39: aa:af:05:1b:61:fd:da:94:d4:de:ca:82:8e:79:64: 6c:5e:6f:7b:cb:93:d6:f7:74:b0:97:ba:47:c8:01: da:30:59:40:ca:59:19:a6:b9:a5:e7:f9:94:85:27: 9c:a4:62:f9:8a:ca:5e:44:1e:35:68:d2:8e:29:a6: 01:db:8d:2f:14:0e:db:76:c1:a7:58:f5:b6:fa:f2: 50:06:f1:b8:0e:21:e1:46:47:60:53:11:e6:16:28: e9:52:49:48:ca:40:80:cf:99:91:0a:88:23:6c:aa: b9:3e:c8:e6:d0:fa:74:63:46:46:57:12:b4:f4:10: a6:ee:cc:18:08:df:67:5d:f7:12:c4:8f:1b:d3:b6: 76:76:cb:10:a4:04:b0:a4:f4:f7:cc:fe:31:05:31: 24:43:71:3a:0e:2c:4b:9b:c1:15:be:a7:2e:3a:2d: 4d:21:c0:a5:1a:3d:4c:cf:3b:78:f9:ad:62:cd:dc: b0:c0:b9:f9:86:7a:05:8f:54:13:35:60:2a:1c:15: 04:55:1a:79:19:b4:3c:30:0b:c4:27:f7:11:e1:4c: 2c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:21:4B:F2:B9:E8:C3:DC:E8:8B:07:E4:59:C5:BE:67:E3:CB:7A:B8 X509v3 Authority Key Identifier: keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5b:07:ab:b4:c8:c5:bb:26:07:a9:f0:6c:4c:1f:57:a9:02: 1b:91:78:0d:64:51:d9:b3:e0:4c:18:2e:02:86:87:b0:51:06: 81:97:61:3a:80:82:3a:41:14:26:66:0f:43:df:cf:76:b9:4e: b7:16:8d:80:1c:2d:c9:3a:92:43:57:e7:fb:4b:d6:ce:48:f2: ba:f3:40:9b:ca:95:62:64:14:c3:80:54:13:04:06:ae:78:f6: d8:f9:72:56:58:c5:d7:37:4e:75:d9:8a:45:9e:0d:7f:78:6c: fc:4c:5e:af:08:5e:f5:41:ee:11:21:de:7e:98:01:4b:c0:0e: ee:70:0a:21:7a:fd:70:b7:80:f5:55:28:da:4d:6a:59:cf:a3: a2:11:0a:56:9d:8e:9e:3c:6e:42:68:b9:bc:53:e0:ab:e5:9a: 22:29:b0:d4:15:52:03:23:1e:bc:a7:e7:94:f0:81:dc:d8:a1: b0:13:ff:f2:e8:e7:e0:a1:80:c1:82:09:c5:05:1e:77:8d:8b: 20:26:87:f4:1b:7d:4e:8c:15:4c:41:a8:4f:91:7c:f8:c1:91: 1d:40:06:22:bc:42:da:d5:43:c4:b8:53:64:6e:6d:aa:25:cd: 99:77:9e:ca:4f:ca:94:42:3c:d4:1b:b1:f1:7a:0d:ee:32:f4: b6:91:b7:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWGmD2KC5rwtqPmtZ/M3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTNkYmM1ODI5ZWM1MDBiMzM0MjZhMTg4ZDAzOTkzOTVi ODA2YWEwHhcNMjYwMjA5MDkwMDIxWhcNMjYwMjEwMDkwMDIxWjAzMTEwLwYDVQQD Eyg4MjIxNGJmMmI5ZThjM2RjZTg4YjA3ZTQ1OWM1YmU2N2UzY2I3YWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXH6R+fVuauh12IhX0gKovpMf8Gd zMFtcqxT0JXboSGG9Ea66va7e1kw/zmqrwUbYf3alNTeyoKOeWRsXm97y5PW93Sw l7pHyAHaMFlAylkZprml5/mUhSecpGL5ispeRB41aNKOKaYB240vFA7bdsGnWPW2 +vJQBvG4DiHhRkdgUxHmFijpUklIykCAz5mRCogjbKq5Psjm0Pp0Y0ZGVxK09BCm 7swYCN9nXfcSxI8b07Z2dssQpASwpPT3zP4xBTEkQ3E6DixLm8EVvqcuOi1NIcCl Gj1Mzzt4+a1izdywwLn5hnoFj1QTNWAqHBUEVRp5GbQ8MAvEJ/cR4UwsowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIhS/K56MPc6IsH5FnFvmfjy3q4MB8GA1UdIwQY MBaAFDdT28WCnsUAszQmoYjQOZOVuAaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMt MDM3OTkzMGY4Mjg2LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMtMDM3OTkzMGY4Mjg2 LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVsHq7TI xbsmB6nwbEwfV6kCG5F4DWRR2bPgTBguAoaHsFEGgZdhOoCCOkEUJmYPQ9/PdrlO txaNgBwtyTqSQ1fn+0vWzkjyuvNAm8qVYmQUw4BUEwQGrnj22PlyVljF1zdOddmK RZ4Nf3hs/Exerwhe9UHuESHefpgBS8AO7nAKIXr9cLeA9VUo2k1qWc+johEKVp2O njxuQmi5vFPgq+WaIimw1BVSAyMevKfnlPCB3NihsBP/8ujn4KGAwYIJxQUed42L ICaH9Bt9TowVTEGoT5F8+MGRHUAGIrxC2tVDxLhTZG5tqiXNmXeeyk/KlEI81Bux 8XoN7jL0tpG3RQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:03 2026 by rpki-client