This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json) Hash identifier: VwHUBPn6ikXfFztZjjJCus+2uV4MBcp1Jz5AdidWOqs= Subject key identifier: 0F:A0:19:0F:5F:99:D4:3F:4A:26:7B:7D:7B:A4:29:28:70:78:5B:EF Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8 Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8 Certificate serial: 019C41D89349D04B7B6D6400A11FB2D78528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft Manifest number: 09DF Signing time: Mon 09 Feb 2026 10:00:38 +0000 Manifest this update: Mon 09 Feb 2026 10:00:38 +0000 Manifest next update: Tue 10 Feb 2026 10:00:38 +0000 Files and hashes: 1: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: qvMwh/sWxgYvBK4YPU3X2z0umXvRe1aTPwPjk8xiorA=) 2: qA3ImQcdu-q2a1X16c9AUNh8cvo.roa (hash: 0LDllHhDiUHrvufBGDxeRBb8RrRX38Z7Lp/cTDfB448=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:93:49:d0:4b:7b:6d:64:00:a1:1f:b2:d7:85:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8 Validity Not Before: Feb 9 10:00:38 2026 GMT Not After : Feb 10 10:00:38 2026 GMT Subject: CN=0fa0190f5f99d43f4a267b7d7ba4292870785bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:fb:1a:d0:6a:e7:e9:3d:3a:3f:66:d9:47: c7:de:c8:47:2e:fd:da:2c:e4:dc:6c:9d:1f:9d:a2: 78:27:c9:e9:e8:59:08:63:15:3a:d0:80:8c:c5:e3: 18:b5:87:de:29:a5:c5:13:e4:78:e1:f8:b9:d2:c5: fa:75:38:b7:c4:65:15:0a:ee:1a:09:f9:e6:d9:9b: 89:ab:54:85:5e:60:5b:ce:f0:f4:90:e2:b5:22:5c: 0b:b7:f5:ea:89:0e:fb:f5:e4:e2:90:83:af:07:ed: 53:fb:12:9e:ff:00:a7:83:69:e0:02:72:3b:b5:35: ce:2e:7b:de:d7:b2:ea:e0:f0:25:b4:08:7e:0f:1a: 15:c9:0a:1d:95:91:38:1c:5b:b4:e1:6f:dc:7e:a5: 6c:4f:ea:04:31:50:61:cc:46:a0:14:7d:35:cc:b9: 73:56:4f:c5:2a:31:18:79:0b:09:da:a8:dd:1a:f1: 30:57:e4:32:f3:31:f6:ab:41:28:f4:0e:46:a8:db: df:15:72:55:7f:7e:c7:08:c2:ad:19:22:fc:c5:ff: 20:27:6b:67:e4:16:2a:e5:ce:5b:67:c8:3d:78:13: f4:c4:4d:d6:78:9d:10:e3:2e:e3:bc:63:a1:95:19: 1a:fe:70:39:b1:ff:3c:f4:a5:6a:fc:35:ce:30:91: 54:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A0:19:0F:5F:99:D4:3F:4A:26:7B:7D:7B:A4:29:28:70:78:5B:EF X509v3 Authority Key Identifier: keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d6:cf:eb:ce:93:b4:82:f3:fc:91:1a:55:b3:8d:be:1e:06: 8a:1c:67:e0:b8:e4:1f:0e:37:11:e6:d4:ec:c1:80:76:27:80: 3c:a3:7f:0d:6f:20:ab:91:03:94:e6:d6:07:d9:13:22:d7:f2: 25:31:64:96:d3:75:ec:3f:19:26:2a:a2:4c:58:f6:da:64:7f: 1d:f8:02:33:d9:db:17:ce:af:1b:20:02:5d:93:c9:5c:e2:56: ca:86:c4:75:9b:98:bd:3d:16:27:64:e0:7a:bb:53:31:d0:b7: 65:5a:51:56:e6:7f:ab:ce:3f:6b:98:0b:98:63:6c:0c:f2:cf: 21:95:cc:8a:71:c9:9e:aa:c0:5a:52:1a:c9:23:10:b1:67:f3: 3d:c9:db:dd:bb:3c:68:9c:d3:37:69:4c:7d:de:07:64:d6:c2: 63:ae:d9:68:e7:09:05:4a:a1:ec:0b:8f:e2:f0:1f:43:3a:30: 9a:6f:6a:39:70:cd:d6:6c:77:ff:62:fe:75:9d:3c:f3:b8:9d: 6c:ec:82:24:14:88:25:9b:1b:ff:e5:08:31:de:a9:bb:ac:86: be:26:be:39:3d:44:e6:8e:a8:23:48:7f:1b:a2:36:05:55:81: 8c:fd:a7:2e:66:50:f3:f2:75:fe:84:c4:64:93:90:0d:41:0f: 1f:fe:04:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JNJ0Et7bWQAoR+y14UoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Mjg1YWUyMmQ3MWVmMjQ0NzhmMGNhZWMwZjI5YzdkZDkx NGMzYzgwHhcNMjYwMjA5MTAwMDM4WhcNMjYwMjEwMTAwMDM4WjAzMTEwLwYDVQQD EygwZmEwMTkwZjVmOTlkNDNmNGEyNjdiN2Q3YmE0MjkyODcwNzg1YmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxH7GtBq5+k9Oj9m2UfH3shHLv3a LOTcbJ0fnaJ4J8np6FkIYxU60ICMxeMYtYfeKaXFE+R44fi50sX6dTi3xGUVCu4a Cfnm2ZuJq1SFXmBbzvD0kOK1IlwLt/XqiQ779eTikIOvB+1T+xKe/wCng2ngAnI7 tTXOLnve17Lq4PAltAh+DxoVyQodlZE4HFu04W/cfqVsT+oEMVBhzEagFH01zLlz Vk/FKjEYeQsJ2qjdGvEwV+Qy8zH2q0Eo9A5GqNvfFXJVf37HCMKtGSL8xf8gJ2tn 5BYq5c5bZ8g9eBP0xE3WeJ0Q4y7jvGOhlRka/nA5sf889KVq/DXOMJFUWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+gGQ9fmdQ/SiZ7fXukKShweFvvMB8GA1UdIwQY MBaAFDcoWuItce8kR48MrsDynH3ZFMPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEt M2YyZWI1NmIyYmQzLzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEtM2YyZWI1NmIyYmQz LzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndbP686T tILz/JEaVbONvh4Gihxn4LjkHw43EebU7MGAdieAPKN/DW8gq5EDlObWB9kTItfy JTFkltN17D8ZJiqiTFj22mR/HfgCM9nbF86vGyACXZPJXOJWyobEdZuYvT0WJ2Tg ertTMdC3ZVpRVuZ/q84/a5gLmGNsDPLPIZXMinHJnqrAWlIaySMQsWfzPcnb3bs8 aJzTN2lMfd4HZNbCY67ZaOcJBUqh7AuP4vAfQzowmm9qOXDN1mx3/2L+dZ0887id bOyCJBSIJZsb/+UIMd6pu6yGvia+OT1E5o6oI0h/G6I2BVWBjP2nLmZQ8/J1/oTE ZJOQDUEPH/4Eag== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:27 2026 by rpki-client