This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft File: NYx3zUAYPEEVsr8NznFuC8XQv9U.mft (raw, json) Hash identifier: ZlrYWgy3fPNO1IddHFUxNJ4l/B4jkT83jbStt1i+dWo= Subject key identifier: 38:18:07:3B:19:28:3E:E1:51:1A:49:FA:3E:6D:D5:3F:47:8F:FA:53 Authority key identifier: 35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5 Certificate issuer: /CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5 Certificate serial: 019C43590165E0881243C6C8CEABC2967215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft Manifest number: 057B Signing time: Mon 09 Feb 2026 17:00:32 +0000 Manifest this update: Mon 09 Feb 2026 17:00:32 +0000 Manifest next update: Tue 10 Feb 2026 17:00:32 +0000 Files and hashes: 1: NYx3zUAYPEEVsr8NznFuC8XQv9U.crl (hash: 8J4FwiqNyzhMBCr7KrgKBnr1Ndl4ujJKflCHdg+oQqY=) 2: UlEC3VpAKX5fgFyuoTuBA8htBuc.roa (hash: OCopTvk4i816iUhH+QXazE3VcJpYfdLODiRXhmC1WXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:01:65:e0:88:12:43:c6:c8:ce:ab:c2:96:72:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5 Validity Not Before: Feb 9 17:00:32 2026 GMT Not After : Feb 10 17:00:32 2026 GMT Subject: CN=3818073b19283ee1511a49fa3e6dd53f478ffa53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:e5:cf:a5:8f:fd:aa:bb:fa:cf:3c:df:a5: be:86:49:5a:39:ae:16:d3:6f:01:63:65:48:0f:4c: e4:8b:aa:19:39:88:0b:03:40:7b:1b:8e:57:e7:d8: 36:0c:a8:53:16:3d:b4:0d:ae:2d:b5:95:16:5f:b4: e2:73:cf:4f:40:4b:35:dd:7b:76:56:ee:a6:7c:b3: 82:c9:9d:52:2e:96:9e:6d:64:20:31:d8:e9:aa:1c: 05:3f:09:6b:70:9a:9e:6d:86:87:98:b4:e4:05:cb: af:44:b5:83:ab:dc:84:63:be:45:26:75:a8:0f:9e: 6a:12:b6:47:33:68:ea:b7:33:df:71:0f:ca:4d:3a: 85:4d:34:53:05:be:cd:65:bd:e4:30:3d:f7:f6:89: d1:2b:c5:5a:74:bf:46:f3:8d:8a:4a:90:0c:70:99: 3a:89:dd:e6:0b:0f:4a:a5:54:29:74:ec:6b:08:1a: 24:b9:f7:e6:7e:83:ef:60:0c:65:2a:51:f1:7c:d5: 4b:83:6c:13:45:b0:c8:13:68:f4:79:c3:a9:eb:df: 03:fe:2d:16:a8:5f:ff:21:66:0b:01:aa:b6:16:b1: 3e:48:9a:00:c4:b3:e4:58:6b:aa:b2:db:83:39:09: c4:3a:b7:7d:0b:fd:0b:3d:f5:22:4f:fb:58:1b:02: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:18:07:3B:19:28:3E:E1:51:1A:49:FA:3E:6D:D5:3F:47:8F:FA:53 X509v3 Authority Key Identifier: keyid:35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:39:2d:7d:96:a1:93:e9:7e:bb:f6:b7:fb:83:5f:d3:06:44: 0e:04:64:4a:b1:26:b6:95:09:c3:27:17:ee:e0:25:3f:79:3e: 1d:df:ea:37:c2:6d:8a:09:50:d2:bd:77:f6:61:ec:91:a5:c4: 08:76:57:6d:21:14:94:98:0a:c1:57:f5:60:50:ed:46:48:dd: 11:77:a1:08:14:da:58:53:23:e3:13:44:06:26:bc:c6:a0:42: 74:1b:f1:8c:f3:08:34:fd:ab:b5:4d:77:5f:24:ed:a4:a1:97: 72:40:9e:c5:7b:48:f7:65:1a:da:e0:47:d2:b3:36:9d:fb:e9: 75:0a:97:44:08:11:9c:b0:47:b1:de:97:30:4a:f1:2f:ab:1a: 10:17:4e:05:97:08:7c:f4:62:82:79:a3:fe:17:dd:4d:2e:93: 23:c1:b9:8f:83:85:67:cc:3c:3d:43:2d:62:a8:65:e5:bb:a9: d0:70:c8:9c:74:6a:1c:78:82:24:5c:55:d3:e1:78:0a:61:9e: 8a:0e:06:3e:54:b6:48:44:76:03:4a:4f:23:96:1e:56:57:98: 64:ee:c6:f7:53:77:b6:9b:45:d0:fa:24:52:6d:72:0f:aa:64: 04:b7:c1:f3:32:53:b5:c3:4b:b9:0b:61:f6:b9:ae:2d:d7:86: 33:15:3d:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWQFl4IgSQ8bIzqvClnIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OGM3N2NkNDAxODNjNDExNWIyYmYwZGNlNzE2ZTBiYzVk MGJmZDUwHhcNMjYwMjA5MTcwMDMyWhcNMjYwMjEwMTcwMDMyWjAzMTEwLwYDVQQD EygzODE4MDczYjE5MjgzZWUxNTExYTQ5ZmEzZTZkZDUzZjQ3OGZmYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8vlz6WP/aq7+s8836W+hklaOa4W 028BY2VID0zki6oZOYgLA0B7G45X59g2DKhTFj20Da4ttZUWX7Tic89PQEs13Xt2 Vu6mfLOCyZ1SLpaebWQgMdjpqhwFPwlrcJqebYaHmLTkBcuvRLWDq9yEY75FJnWo D55qErZHM2jqtzPfcQ/KTTqFTTRTBb7NZb3kMD339onRK8VadL9G842KSpAMcJk6 id3mCw9KpVQpdOxrCBokuffmfoPvYAxlKlHxfNVLg2wTRbDIE2j0ecOp698D/i0W qF//IWYLAaq2FrE+SJoAxLPkWGuqstuDOQnEOrd9C/0LPfUiT/tYGwJZMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgYBzsZKD7hURpJ+j5t1T9Hj/pTMB8GA1UdIwQY MBaAFDWMd81AGDxBFbK/Dc5xbgvF0L/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTll4M3pVQVlQRUVWc3I4TnpuRnVDOFhRdjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTJiNDEtN2RjNi00NWE0LWFhMDgt MzE1MWExNzk0Yjk3LzEvTll4M3pVQVlQRUVWc3I4TnpuRnVDOFhRdjlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTJiNDEtN2RjNi00NWE0LWFhMDgtMzE1MWExNzk0Yjk3 LzEvTll4M3pVQVlQRUVWc3I4TnpuRnVDOFhRdjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzktfZah k+l+u/a3+4Nf0wZEDgRkSrEmtpUJwycX7uAlP3k+Hd/qN8JtiglQ0r139mHskaXE CHZXbSEUlJgKwVf1YFDtRkjdEXehCBTaWFMj4xNEBia8xqBCdBvxjPMINP2rtU13 XyTtpKGXckCexXtI92Ua2uBH0rM2nfvpdQqXRAgRnLBHsd6XMErxL6saEBdOBZcI fPRignmj/hfdTS6TI8G5j4OFZ8w8PUMtYqhl5bup0HDInHRqHHiCJFxV0+F4CmGe ig4GPlS2SER2A0pPI5YeVleYZO7G91N3tptF0PokUm1yD6pkBLfB8zJTtcNLuQth 9rmuLdeGMxU9/w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:53 2026 by rpki-client