This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json) Hash identifier: ENKtaYOHemVrVwLqho7MfUYxqGx2W4K8ikANw2XWDHw= Subject key identifier: 66:8F:18:68:B6:32:60:8D:D7:70:BB:02:36:FD:F8:A6:57:30:D9:71 Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17 Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417 Certificate serial: 019C42B45EFCE96A3AD3CDB1CCA4289BC980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft Manifest number: 0FAD Signing time: Mon 09 Feb 2026 14:00:42 +0000 Manifest this update: Mon 09 Feb 2026 14:00:42 +0000 Manifest next update: Tue 10 Feb 2026 14:00:42 +0000 Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: RWpQXb7N5pUuiB/tqTJeyv+c06ieuKpuZlJR/CXLa+E=) 2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:5e:fc:e9:6a:3a:d3:cd:b1:cc:a4:28:9b:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417 Validity Not Before: Feb 9 14:00:42 2026 GMT Not After : Feb 10 14:00:42 2026 GMT Subject: CN=668f1868b632608dd770bb0236fdf8a65730d971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d7:a9:ab:16:ee:92:1b:48:af:30:44:40:a0: d5:bd:bb:3d:87:44:55:2e:c8:90:00:4b:6a:66:61: ea:53:fa:69:95:e5:5c:7e:93:00:61:dc:8d:a3:1c: 9d:26:73:4f:8e:1c:e7:99:a5:ec:0c:c3:6f:87:65: ab:c4:23:2c:1d:6d:4b:fb:51:7d:1b:b5:2a:4e:e3: 63:89:a8:fd:c4:81:cc:dc:b6:fd:c6:bb:6a:39:4a: 59:69:52:78:e9:17:9b:8e:21:a0:34:fe:5a:cf:dd: aa:5b:df:e6:98:2a:8f:eb:d7:68:c4:2a:8b:db:da: c3:be:10:61:97:2a:41:c3:c2:de:f6:a5:81:98:5e: e4:df:59:7b:d0:d7:f1:8d:54:fb:a6:d5:44:f6:94: 36:93:5c:da:a4:64:87:62:1b:cf:a0:e8:0e:fe:e8: 5e:7c:d8:d2:09:d1:7f:4c:1a:4a:d2:fd:4b:7c:a0: 11:6c:a1:e4:ad:44:75:3d:99:b7:64:51:8b:31:86: 58:c2:03:8d:b5:46:26:b2:7c:1f:f2:f4:7e:a1:01: 1e:89:84:2c:d1:e9:6b:d5:28:36:94:09:cc:ed:e9: 50:9c:45:72:8a:d4:ba:1e:c8:0b:0b:67:e9:62:b2: 8c:98:da:fd:ee:f0:9c:a3:f0:c2:42:29:33:bd:c5: 92:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8F:18:68:B6:32:60:8D:D7:70:BB:02:36:FD:F8:A6:57:30:D9:71 X509v3 Authority Key Identifier: keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9c:50:ff:44:de:bf:b5:d6:ce:ca:fd:93:f3:db:6c:e5:48: f8:79:23:60:a7:96:19:d2:42:46:48:2b:89:c7:8c:f0:a8:21: 56:40:17:8b:8a:74:12:56:35:ef:14:2c:52:78:a1:1d:7d:28: 30:29:7c:8e:d0:a8:80:3e:41:91:b5:40:23:cd:c6:05:b2:e4: c7:44:12:8b:79:70:7e:d6:3e:cc:74:37:c1:38:2f:77:06:82: 59:7f:c1:90:6c:cf:05:af:f0:de:c8:7b:eb:ee:b6:08:f6:9d: 7d:0a:57:2d:9a:3b:e9:99:5b:cd:b9:fc:89:0b:27:6f:98:b2: ff:7d:3b:b2:13:eb:5b:fa:d0:db:a6:dd:20:10:5b:01:93:a4: d7:5f:42:17:cc:aa:e6:7e:90:ca:ef:83:ea:ab:ce:ae:61:25: 1d:09:0a:cd:4a:95:ad:e5:1b:e5:c9:58:4c:68:53:06:01:f0: dd:c8:04:66:ee:3d:2f:f7:23:d2:e8:cd:b8:b1:c9:34:ab:dd: a4:c2:1e:1e:1e:92:39:b8:5c:fb:c5:5d:f1:11:88:ad:4f:f2: 95:22:55:0e:fa:74:3c:48:89:2a:6f:82:de:ab:d9:98:d7:88: 65:53:c1:cc:c7:c9:27:13:b8:6e:a0:9b:52:dd:46:a6:d3:4a: 79:64:e9:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtF786Wo6082xzKQom8mAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjVmNzU0MDA0ZWRiZTMwYWI4Y2FmZWVmOWY3MTMyY2Iw YzI0MTcwHhcNMjYwMjA5MTQwMDQyWhcNMjYwMjEwMTQwMDQyWjAzMTEwLwYDVQQD Eyg2NjhmMTg2OGI2MzI2MDhkZDc3MGJiMDIzNmZkZjhhNjU3MzBkOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNepqxbukhtIrzBEQKDVvbs9h0RV LsiQAEtqZmHqU/ppleVcfpMAYdyNoxydJnNPjhznmaXsDMNvh2WrxCMsHW1L+1F9 G7UqTuNjiaj9xIHM3Lb9xrtqOUpZaVJ46RebjiGgNP5az92qW9/mmCqP69doxCqL 29rDvhBhlypBw8Le9qWBmF7k31l70NfxjVT7ptVE9pQ2k1zapGSHYhvPoOgO/uhe fNjSCdF/TBpK0v1LfKARbKHkrUR1PZm3ZFGLMYZYwgONtUYmsnwf8vR+oQEeiYQs 0elr1Sg2lAnM7elQnEVyitS6HsgLC2fpYrKMmNr97vCco/DCQikzvcWSRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaPGGi2MmCN13C7Ajb9+KZXMNlxMB8GA1UdIwQY MBaAFDcl91QATtvjCrjK/u+fcTLLDCQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMt NzRhZmMzMDQzYjc4LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMtNzRhZmMzMDQzYjc4 LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZxQ/0Te v7XWzsr9k/PbbOVI+HkjYKeWGdJCRkgriceM8KghVkAXi4p0ElY17xQsUnihHX0o MCl8jtCogD5BkbVAI83GBbLkx0QSi3lwftY+zHQ3wTgvdwaCWX/BkGzPBa/w3sh7 6+62CPadfQpXLZo76Zlbzbn8iQsnb5iy/307shPrW/rQ26bdIBBbAZOk119CF8yq 5n6Qyu+D6qvOrmElHQkKzUqVreUb5clYTGhTBgHw3cgEZu49L/cj0ujNuLHJNKvd pMIeHh6SObhc+8Vd8RGIrU/ylSJVDvp0PEiJKm+C3qvZmNeIZVPBzMfJJxO4bqCb Ut1GptNKeWTpkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:00 2026 by rpki-client