This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft File: NM-cB0OwPV4EX0bprPToAKnxio4.mft (raw, json) Hash identifier: CauLECdO5y4IbUVmul4mLT2CHKgKVTBcUMAEvhdrsTQ= Subject key identifier: 69:93:E4:09:EA:FE:E9:4A:4B:FD:F8:E6:97:A8:9C:A8:5A:32:D1:9C Authority key identifier: 34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E Certificate issuer: /CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e Certificate serial: 019C439053A25D1B8E8A3D905F476EC963C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft Manifest number: 0D1C Signing time: Mon 09 Feb 2026 18:00:57 +0000 Manifest this update: Mon 09 Feb 2026 18:00:57 +0000 Manifest next update: Tue 10 Feb 2026 18:00:57 +0000 Files and hashes: 1: NM-cB0OwPV4EX0bprPToAKnxio4.crl (hash: lfpktPq2uyyBivZVdxxERC6W5L6s1FmZkkKzKm3iBXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:53:a2:5d:1b:8e:8a:3d:90:5f:47:6e:c9:63:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e Validity Not Before: Feb 9 18:00:57 2026 GMT Not After : Feb 10 18:00:57 2026 GMT Subject: CN=6993e409eafee94a4bfdf8e697a89ca85a32d19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:00:33:ad:34:68:84:c7:50:7a:c9:80:47:00: 73:13:dd:8f:7d:a8:e1:7c:f3:39:b1:cc:f5:00:37: d5:89:48:68:2d:89:90:8f:f7:e0:09:d1:13:f0:46: a6:b8:1e:e4:6d:48:bb:87:1a:1c:3d:85:70:c0:d4: 86:11:d0:5a:9d:f3:73:42:ad:92:1e:6d:45:01:0a: 8f:24:cd:4e:97:84:48:7f:b0:39:9d:fb:6b:d4:3c: 6e:2f:df:74:33:50:c0:fb:a5:3e:de:6a:3e:03:ce: 87:f0:3c:57:32:4e:4c:47:d7:89:75:93:16:86:64: 82:69:29:64:37:b5:ea:c1:5d:89:eb:9e:08:88:d8: 11:eb:f9:1e:98:17:28:34:f7:11:73:2f:6b:b6:89: 8d:d5:a3:2b:d7:a1:bc:75:f5:6a:fa:d7:98:61:e8: ba:3c:b2:36:8e:38:d4:b2:76:59:1a:1e:38:be:2d: be:94:49:88:6e:a0:f6:1a:4a:be:b7:0e:c5:65:5e: ae:fb:65:43:2d:d5:09:59:fb:22:51:33:56:c8:db: 99:a5:e9:32:38:a7:c2:1a:0b:80:81:93:9c:d8:4b: 0c:5b:ce:92:f7:db:9b:a1:3a:0c:79:ab:fd:b7:36: 8d:d2:8b:9d:cd:42:5e:35:94:c2:40:fd:a5:c0:bf: 92:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:93:E4:09:EA:FE:E9:4A:4B:FD:F8:E6:97:A8:9C:A8:5A:32:D1:9C X509v3 Authority Key Identifier: keyid:34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b8:9c:d5:99:e0:aa:28:2a:e7:b1:18:cd:38:fb:86:55:35: 0d:43:31:21:cd:c8:96:8a:ac:ea:3b:67:8b:2c:ff:b1:cc:53: 25:f7:53:4d:32:ab:22:57:a5:30:e5:fd:d6:b0:d4:80:43:0e: d3:37:72:cf:03:2d:78:17:94:65:18:2c:d6:93:66:65:61:f5: 9a:a2:32:79:17:50:48:8c:81:7b:a7:5f:dd:b5:cb:9e:91:0c: 01:d6:93:41:df:e3:ce:7a:79:b1:13:bd:5d:2e:2b:f5:f2:d9: 9c:96:3c:c6:10:f0:70:8b:43:b1:fc:94:7c:41:68:57:cc:87: 6e:c0:47:be:1b:58:70:e2:ea:a6:4f:f0:48:dd:27:4f:97:aa: af:29:b1:f5:88:92:0c:36:9c:b0:b9:fb:bf:d8:46:d7:ff:73: b1:88:77:11:bf:45:ec:f6:2a:28:01:0a:5b:66:27:e9:d7:0a: 85:2d:dc:8c:3b:87:2a:e0:cf:c3:c0:e9:11:d8:93:2c:15:75: 84:ff:5d:b2:17:c8:2d:9f:88:8b:3c:85:61:7d:bb:fb:72:eb: 7e:68:72:68:3f:12:9a:d5:60:fc:57:8f:a7:93:32:64:db:1b: 02:fb:cd:35:5c:0d:f2:a0:a0:47:57:5d:35:9b:bc:d6:a6:c5: 20:44:4a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFOiXRuOij2QX0duyWPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0Y2Y5YzA3NDNiMDNkNWUwNDVmNDZlOWFjZjRlODAwYTlm MThhOGUwHhcNMjYwMjA5MTgwMDU3WhcNMjYwMjEwMTgwMDU3WjAzMTEwLwYDVQQD Eyg2OTkzZTQwOWVhZmVlOTRhNGJmZGY4ZTY5N2E4OWNhODVhMzJkMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QAzrTRohMdQesmARwBzE92Pfajh fPM5scz1ADfViUhoLYmQj/fgCdET8EamuB7kbUi7hxocPYVwwNSGEdBanfNzQq2S Hm1FAQqPJM1Ol4RIf7A5nftr1DxuL990M1DA+6U+3mo+A86H8DxXMk5MR9eJdZMW hmSCaSlkN7XqwV2J654IiNgR6/kemBcoNPcRcy9rtomN1aMr16G8dfVq+teYYei6 PLI2jjjUsnZZGh44vi2+lEmIbqD2Gkq+tw7FZV6u+2VDLdUJWfsiUTNWyNuZpeky OKfCGguAgZOc2EsMW86S99uboToMeav9tzaN0oudzUJeNZTCQP2lwL+SdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmT5Anq/ulKS/345peonKhaMtGcMB8GA1UdIwQY MBaAFDTPnAdDsD1eBF9G6az06ACp8YqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk0tY0IwT3dQVjRFWDBicHJQVG9BS254aW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NWU0ZTAtZGExOS00Y2I5LThjOGMt ZWU4MDM1YmJiNGMxLzEvTk0tY0IwT3dQVjRFWDBicHJQVG9BS254aW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80NWU0ZTAtZGExOS00Y2I5LThjOGMtZWU4MDM1YmJiNGMx LzEvTk0tY0IwT3dQVjRFWDBicHJQVG9BS254aW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbic1Zng qigq57EYzTj7hlU1DUMxIc3Iloqs6jtniyz/scxTJfdTTTKrIlelMOX91rDUgEMO 0zdyzwMteBeUZRgs1pNmZWH1mqIyeRdQSIyBe6df3bXLnpEMAdaTQd/jznp5sRO9 XS4r9fLZnJY8xhDwcItDsfyUfEFoV8yHbsBHvhtYcOLqpk/wSN0nT5eqrymx9YiS DDacsLn7v9hG1/9zsYh3Eb9F7PYqKAEKW2Yn6dcKhS3cjDuHKuDPw8DpEdiTLBV1 hP9dshfILZ+IizyFYX27+3LrfmhyaD8SmtVg/FePp5MyZNsbAvvNNVwN8qCgR1dd NZu81qbFIERKfA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:25 2026 by rpki-client