This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft File: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json) Hash identifier: aLWSCPVlUSuX7DgVGOpOU5zL+hgsE7A48TkwJ4yH0UA= Subject key identifier: BE:8E:2F:92:28:6E:99:97:DD:89:87:E3:26:6A:CC:86:59:30:99:DB Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA Certificate issuer: /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa Certificate serial: 019C41D8DAEE97DCF8641FA366B0FA9C88CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft Manifest number: 1447 Signing time: Mon 09 Feb 2026 10:00:56 +0000 Manifest this update: Mon 09 Feb 2026 10:00:56 +0000 Manifest next update: Tue 10 Feb 2026 10:00:56 +0000 Files and hashes: 1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: ZojuExLtmGEg1gLBDjRanMkKI1/jPPxRuvRySzav8Yk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:da:ee:97:dc:f8:64:1f:a3:66:b0:fa:9c:88:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa Validity Not Before: Feb 9 10:00:56 2026 GMT Not After : Feb 10 10:00:56 2026 GMT Subject: CN=be8e2f92286e9997dd8987e3266acc86593099db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:83:49:85:70:72:a7:c1:8c:3d:6e:6e:88:49: 60:bc:93:28:cc:90:3e:c5:7e:c1:13:de:59:38:02: 38:1e:2b:35:e0:8a:21:af:42:aa:e6:9b:4d:27:69: be:d3:87:7e:10:e5:1d:aa:40:78:7b:78:f0:64:e0: 8d:9b:7c:37:37:c7:a0:d4:5b:17:2e:fc:aa:ed:da: 34:34:4c:3a:94:9d:18:61:f4:81:8a:58:12:23:c6: 80:45:ad:aa:ca:b2:6a:8d:1f:5d:5b:d9:f6:3e:3c: e5:b6:2f:be:b0:8c:9b:ab:76:28:41:8f:12:cf:c5: 01:bc:a6:72:d8:1f:30:be:87:b6:cc:bb:4b:c1:4c: 5e:bb:b2:be:50:04:d8:47:b7:91:c5:4c:c8:a5:0e: 1f:2a:d5:43:40:db:63:90:c7:ab:36:22:e7:ee:20: 0b:94:7c:ff:07:31:6e:36:8c:16:63:a9:09:f0:58: 8e:e7:93:e0:f1:30:3c:fb:dc:48:84:6b:d3:df:82: 53:c3:0a:78:b9:7b:4c:25:d1:01:1a:a8:2a:83:1a: 31:49:ee:52:3d:d2:bc:5b:fb:f5:5f:a8:fa:2f:53: a9:fd:9d:04:7f:5b:c5:21:6f:d2:83:85:66:8c:e4: c2:44:96:3d:da:dd:8c:e0:0a:5f:cf:3b:7c:86:1c: cf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8E:2F:92:28:6E:99:97:DD:89:87:E3:26:6A:CC:86:59:30:99:DB X509v3 Authority Key Identifier: keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:85:81:cc:af:ae:c4:8d:16:e9:3b:a7:ce:a7:d0:2c:99:48: b4:c4:91:40:4d:eb:5d:63:b9:80:b4:df:45:05:af:66:8a:03: 2e:f4:18:57:a0:d9:4c:cd:dd:74:cd:2b:2f:24:f7:b7:76:d4: 55:5e:e7:66:09:45:7f:7f:93:46:c4:b2:96:67:29:3f:0e:9d: eb:3c:01:bb:d4:70:9a:7b:17:13:4e:83:98:cf:31:65:49:19: 59:32:00:5c:b5:4b:7d:d4:7f:c2:ae:75:d6:24:a4:e8:86:fe: c8:4c:15:4e:b9:90:01:2a:0e:d6:ec:90:2e:0c:48:56:71:13: 49:c4:d2:7d:c0:75:9a:f6:da:aa:00:c1:be:32:b2:6f:90:a7: a3:6a:d3:35:75:be:34:7e:76:c6:27:7f:2e:6e:4c:85:0e:d8: d7:3e:25:be:fd:9a:4b:a6:66:94:2f:9a:5d:7b:82:9d:9d:97: e4:04:62:ff:1f:2d:9e:94:68:0d:c5:1a:35:e6:4d:5e:52:af: 24:0c:90:1a:ac:9c:b1:29:b3:97:23:30:0a:41:bb:62:65:fd: fc:a9:15:7d:cd:06:91:6f:fc:c2:a0:ee:c3:ba:76:e8:52:c8: 72:87:ec:80:87:7e:fa:f7:98:84:ad:5f:68:b2:ee:23:a9:df: 94:bf:87:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Nrul9z4ZB+jZrD6nIjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OGFlNTgwYjJmN2I0NWMzZDJhZTlmMTlmM2MxYmU5N2U4 MzlhYWEwHhcNMjYwMjA5MTAwMDU2WhcNMjYwMjEwMTAwMDU2WjAzMTEwLwYDVQQD EyhiZThlMmY5MjI4NmU5OTk3ZGQ4OTg3ZTMyNjZhY2M4NjU5MzA5OWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4NJhXByp8GMPW5uiElgvJMozJA+ xX7BE95ZOAI4His14Iohr0Kq5ptNJ2m+04d+EOUdqkB4e3jwZOCNm3w3N8eg1FsX Lvyq7do0NEw6lJ0YYfSBilgSI8aARa2qyrJqjR9dW9n2Pjzlti++sIybq3YoQY8S z8UBvKZy2B8wvoe2zLtLwUxeu7K+UATYR7eRxUzIpQ4fKtVDQNtjkMerNiLn7iAL lHz/BzFuNowWY6kJ8FiO55Pg8TA8+9xIhGvT34JTwwp4uXtMJdEBGqgqgxoxSe5S PdK8W/v1X6j6L1Op/Z0Ef1vFIW/Sg4VmjOTCRJY92t2M4Apfzzt8hhzPuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6OL5IobpmX3YmH4yZqzIZZMJnbMB8GA1UdIwQY MBaAFDWK5YCy97RcPSrp8Z88G+l+g5qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2Njct NTI0ZjNhMmY2OGIzLzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2NjctNTI0ZjNhMmY2OGIz LzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoWBzK+u xI0W6TunzqfQLJlItMSRQE3rXWO5gLTfRQWvZooDLvQYV6DZTM3ddM0rLyT3t3bU VV7nZglFf3+TRsSylmcpPw6d6zwBu9RwmnsXE06DmM8xZUkZWTIAXLVLfdR/wq51 1iSk6Ib+yEwVTrmQASoO1uyQLgxIVnETScTSfcB1mvbaqgDBvjKyb5Cno2rTNXW+ NH52xid/Lm5MhQ7Y1z4lvv2aS6ZmlC+aXXuCnZ2X5ARi/x8tnpRoDcUaNeZNXlKv JAyQGqycsSmzlyMwCkG7YmX9/KkVfc0GkW/8wqDuw7p26FLIcofsgId++veYhK1f aLLuI6nflL+H/Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:05 2026 by rpki-client