This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json) Hash identifier: ukIO/1unsTIJvK9lMoAxRTv2aHU6h/oMkWxkKpG9bCQ= Subject key identifier: 05:E0:9A:2C:62:3A:B3:BB:5C:D2:57:9D:B2:34:F9:4B:64:FC:CA:AF Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48 Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148 Certificate serial: 019C41D8CDA25F94220443FE0E076C2FF332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft Manifest number: 1537 Signing time: Mon 09 Feb 2026 10:00:53 +0000 Manifest this update: Mon 09 Feb 2026 10:00:53 +0000 Manifest next update: Tue 10 Feb 2026 10:00:53 +0000 Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: doo+PnodFh8PLX1jgYMRVGSXUjbl1aYnKcFxfrOXx3g=) 2: yY2vlrWyIY4apa6paDeTCxfPgaU.roa (hash: 6y+VApPzYyS4SGDKt87iuWrwk2coenfHGpex1d3nrQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:cd:a2:5f:94:22:04:43:fe:0e:07:6c:2f:f3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148 Validity Not Before: Feb 9 10:00:53 2026 GMT Not After : Feb 10 10:00:53 2026 GMT Subject: CN=05e09a2c623ab3bb5cd2579db234f94b64fccaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:5d:7a:aa:ac:e0:66:60:24:77:9d:99:db: fb:d8:cd:85:d2:77:fa:97:9f:fe:64:e7:3e:e9:5a: 9e:3f:d2:db:6a:d7:cc:75:33:a9:a2:a1:98:49:a2: d3:33:4a:e5:04:36:07:4f:6f:36:2e:4e:2e:bd:c5: 49:af:c9:d1:29:a9:30:07:94:21:ea:87:ae:ce:66: 92:f8:75:6c:a9:7e:b3:3a:f7:9b:e6:76:a7:1d:52: a0:e0:b6:5e:c3:8d:27:66:bc:c2:8d:74:1b:87:6d: be:05:d2:e8:c3:fa:1f:f7:27:ab:1b:fc:c4:a3:84: a5:fd:15:db:4e:fc:1c:e3:04:57:77:7c:22:a0:ea: 35:69:7a:08:f1:e1:3c:23:29:36:06:e6:1f:f9:f1: f3:0d:29:7d:31:de:b1:1f:d0:1b:ae:03:60:b8:f5: b0:6e:96:7c:c9:71:a1:19:97:3d:cb:b4:5c:fb:76: 41:04:42:41:04:a8:3e:d3:60:f4:36:d2:a5:e6:a1: 60:c9:ae:5a:90:62:6c:c9:eb:38:69:a0:28:3f:98: bc:60:55:00:1d:b6:aa:d7:ed:30:a3:15:07:98:e5: cd:2d:14:fd:25:1a:f4:c9:07:3c:94:7b:33:ad:d5: 7e:08:39:a1:36:f0:fa:e8:61:f8:67:0f:df:95:1e: 3d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E0:9A:2C:62:3A:B3:BB:5C:D2:57:9D:B2:34:F9:4B:64:FC:CA:AF X509v3 Authority Key Identifier: keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:aa:3a:31:7e:da:fb:3d:e6:a2:dc:1b:c3:57:b1:a5:c4:a6: d1:cb:b9:cd:3d:56:63:43:98:ba:d4:d5:2d:33:83:18:e3:21: 07:74:d3:63:6a:c5:4d:78:fd:5e:a4:9f:35:af:ba:50:65:dc: dd:43:ee:5b:3a:1b:98:f0:9f:7e:a5:c1:a8:87:97:41:14:0c: c9:1c:bb:9c:64:fe:3f:b1:85:f8:25:65:28:52:b8:fe:d1:9c: 06:8a:ea:fd:a0:7b:28:23:bc:30:2f:65:39:8a:84:17:d9:ee: c7:8d:01:ee:d0:84:7d:93:10:4e:eb:4f:8f:73:71:26:93:21: 15:97:73:0d:2e:cb:1f:f6:4b:8b:b1:a3:01:9b:24:fb:21:f5: 13:67:9d:e6:26:5f:18:d5:76:0c:54:f5:41:6d:3b:1e:0e:78: 0a:aa:e2:67:84:d6:62:91:3f:15:bb:ed:98:cb:3e:32:28:85: bf:5f:f0:c4:89:3e:a1:c3:bd:09:3a:a3:f3:1e:f4:a5:16:95: 5e:a2:48:8d:59:b3:dc:ff:aa:85:37:23:0a:8e:13:6d:4a:c4: 0d:8e:fa:28:81:35:c0:77:5b:4c:b5:77:e3:63:b5:e8:f2:db: e7:1f:cb:4a:b6:be:d9:e7:24:43:52:2f:47:e0:22:4b:80:95: 32:5f:1c:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2M2iX5QiBEP+DgdsL/MyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWM3MjQzYmVmMmRjNzc1YWU2NzY5Mjg4OWQ1ZDI2YzFi MmQxNDgwHhcNMjYwMjA5MTAwMDUzWhcNMjYwMjEwMTAwMDUzWjAzMTEwLwYDVQQD EygwNWUwOWEyYzYyM2FiM2JiNWNkMjU3OWRiMjM0Zjk0YjY0ZmNjYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF9deqqs4GZgJHedmdv72M2F0nf6 l5/+ZOc+6VqeP9LbatfMdTOpoqGYSaLTM0rlBDYHT282Lk4uvcVJr8nRKakwB5Qh 6oeuzmaS+HVsqX6zOveb5nanHVKg4LZew40nZrzCjXQbh22+BdLow/of9yerG/zE o4Sl/RXbTvwc4wRXd3wioOo1aXoI8eE8Iyk2BuYf+fHzDSl9Md6xH9AbrgNguPWw bpZ8yXGhGZc9y7Rc+3ZBBEJBBKg+02D0NtKl5qFgya5akGJsyes4aaAoP5i8YFUA Hbaq1+0woxUHmOXNLRT9JRr0yQc8lHszrdV+CDmhNvD66GH4Zw/flR492wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXgmixiOrO7XNJXnbI0+Utk/MqvMB8GA1UdIwQY MBaAFDWcckO+8tx3WuZ2koidXSbBstFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEt NjFmZmI2NTA2NjQ0LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEtNjFmZmI2NTA2NjQ0 LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUao6MX7a +z3motwbw1expcSm0cu5zT1WY0OYutTVLTODGOMhB3TTY2rFTXj9XqSfNa+6UGXc 3UPuWzobmPCffqXBqIeXQRQMyRy7nGT+P7GF+CVlKFK4/tGcBorq/aB7KCO8MC9l OYqEF9nux40B7tCEfZMQTutPj3NxJpMhFZdzDS7LH/ZLi7GjAZsk+yH1E2ed5iZf GNV2DFT1QW07Hg54CqriZ4TWYpE/FbvtmMs+MiiFv1/wxIk+ocO9CTqj8x70pRaV XqJIjVmz3P+qhTcjCo4TbUrEDY76KIE1wHdbTLV342O16PLb5x/LSra+2eckQ1Iv R+AiS4CVMl8cig== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:36 2026 by rpki-client