This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json) Hash identifier: ahtpb2hJ/LtyNCxqfnF02jJx8CSi0ZrFT7INj35OuUk= Subject key identifier: 64:82:CA:E6:9E:73:F1:67:16:B5:F3:26:DD:BF:F3:79:6B:DE:63:71 Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08 Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808 Certificate serial: 019C41D834D6E21D8AA096D2C53D1E6E3C41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft Manifest number: 1091 Signing time: Mon 09 Feb 2026 10:00:14 +0000 Manifest this update: Mon 09 Feb 2026 10:00:14 +0000 Manifest next update: Tue 10 Feb 2026 10:00:14 +0000 Files and hashes: 1: 5hcH1GzZhZ8O8qI4d4Zi7O_RjUE.roa (hash: dxTVG5tLErq0ptsL/SIuT5v8Akxf05W3YRl2mwfObes=) 2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: GnRycSqVu8aCEIruwM2OYqbTvUevmqc+RguIbNspFUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:34:d6:e2:1d:8a:a0:96:d2:c5:3d:1e:6e:3c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808 Validity Not Before: Feb 9 10:00:14 2026 GMT Not After : Feb 10 10:00:14 2026 GMT Subject: CN=6482cae69e73f16716b5f326ddbff3796bde6371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a1:d1:36:ef:66:79:1b:d4:6b:13:74:a4:23: fe:94:ba:d0:6c:d5:bc:99:48:6e:70:a1:55:4a:ce: 53:9e:ae:7b:e1:1c:90:3d:8e:06:38:ff:7a:ae:2c: ed:37:02:2a:6a:f0:fc:fd:b1:2c:ff:18:e9:ec:3d: 65:ec:ca:cf:7a:78:46:f2:59:74:7b:12:e2:31:b7: 6c:6a:51:2f:a1:ed:f8:2d:3f:f8:e3:2c:a0:29:de: 1c:71:91:5d:2b:11:47:67:f4:fa:cc:04:b9:12:a5: 95:c7:a9:89:aa:a7:86:72:74:6f:1e:92:7e:4f:f3: 06:18:39:d7:ea:54:07:34:37:7c:c6:a3:43:5c:55: b9:e5:6c:88:9d:48:f9:70:65:39:e5:18:b6:a1:e4: b5:38:4c:54:06:bc:46:69:b0:36:39:5b:b0:54:65: 2b:bb:2d:07:2e:6a:9d:40:72:7c:e0:71:63:47:c6: c9:08:db:f8:29:06:2c:ab:13:6f:0f:71:70:e3:bc: c8:c3:4c:29:ee:e0:1f:6b:88:fc:56:7e:69:de:2d: 92:45:4b:dd:99:5b:73:fb:cb:c2:71:73:b0:2f:6b: bf:31:42:10:97:dc:dc:49:2c:cb:b9:9f:66:e8:fb: c5:8f:60:34:50:ee:ac:84:92:22:00:42:22:f0:57: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:82:CA:E6:9E:73:F1:67:16:B5:F3:26:DD:BF:F3:79:6B:DE:63:71 X509v3 Authority Key Identifier: keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:84:bf:12:d8:c4:d0:10:9e:69:e1:63:21:e3:0e:e2:05:0b: 12:61:73:81:38:d1:ad:b1:67:72:6a:cd:08:c0:e8:e8:5b:38: 3e:bf:3f:cf:6c:de:d7:4b:75:f4:0c:5c:a8:c0:87:69:d3:ba: 23:7c:47:0b:8d:53:2e:0a:24:f3:5f:44:c3:3f:3c:f3:26:3a: 12:f7:3d:55:6f:46:1e:02:82:dd:ce:45:61:49:2a:a4:97:7c: 33:6d:77:ca:5f:ca:2e:a8:c9:be:d3:3b:18:df:57:5e:9b:07: 43:07:37:a4:1d:20:03:16:87:7e:80:10:8a:5e:9e:9b:11:40: 56:7d:18:70:f9:a1:67:3b:b0:a3:57:3d:4f:ed:5e:63:a5:44: 39:f8:b9:7c:3d:3c:81:90:84:42:a3:04:1b:40:f6:81:3a:59: 88:48:a1:2c:dd:fb:39:d6:84:ff:a6:39:39:a4:32:2b:a5:b3: 44:24:68:de:31:0e:2b:71:7d:8d:f2:0e:28:e9:3c:b0:87:55: 0e:11:dc:0c:de:ab:df:f4:87:0b:50:20:7c:0a:4a:eb:6b:74: 67:32:23:26:2f:d7:b7:b7:e7:db:b0:21:05:33:59:25:2e:ea: 73:a7:09:16:20:6c:53:bc:0b:e5:2b:fb:25:e3:87:5e:0b:62: 37:b9:ca:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2DTW4h2KoJbSxT0ebjxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNWNmMmY4Yjc5ZGY2NjI0MTdlYzk2NTZlZDExNjZlOTFh YWI4MDgwHhcNMjYwMjA5MTAwMDE0WhcNMjYwMjEwMTAwMDE0WjAzMTEwLwYDVQQD Eyg2NDgyY2FlNjllNzNmMTY3MTZiNWYzMjZkZGJmZjM3OTZiZGU2MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6HRNu9meRvUaxN0pCP+lLrQbNW8 mUhucKFVSs5Tnq574RyQPY4GOP96riztNwIqavD8/bEs/xjp7D1l7MrPenhG8ll0 exLiMbdsalEvoe34LT/44yygKd4ccZFdKxFHZ/T6zAS5EqWVx6mJqqeGcnRvHpJ+ T/MGGDnX6lQHNDd8xqNDXFW55WyInUj5cGU55Ri2oeS1OExUBrxGabA2OVuwVGUr uy0HLmqdQHJ84HFjR8bJCNv4KQYsqxNvD3Fw47zIw0wp7uAfa4j8Vn5p3i2SRUvd mVtz+8vCcXOwL2u/MUIQl9zcSSzLuZ9m6PvFj2A0UO6shJIiAEIi8Fc0MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSCyuaec/FnFrXzJt2/83lr3mNxMB8GA1UdIwQY MBaAFJ5c8vi3nfZiQX7JZW7RFm6RqrgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmx6eS1MZWQ5bUpCZnNsbGJ0RVdicEdxdUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZjE0ZWEtZWJiYi00YzhlLWJlMzEt OWMxZTEzZTBlNTc4LzEvbmx6eS1MZWQ5bUpCZnNsbGJ0RVdicEdxdUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZjE0ZWEtZWJiYi00YzhlLWJlMzEtOWMxZTEzZTBlNTc4 LzEvbmx6eS1MZWQ5bUpCZnNsbGJ0RVdicEdxdUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIS/EtjE 0BCeaeFjIeMO4gULEmFzgTjRrbFncmrNCMDo6Fs4Pr8/z2ze10t19AxcqMCHadO6 I3xHC41TLgok819Ewz888yY6Evc9VW9GHgKC3c5FYUkqpJd8M213yl/KLqjJvtM7 GN9XXpsHQwc3pB0gAxaHfoAQil6emxFAVn0YcPmhZzuwo1c9T+1eY6VEOfi5fD08 gZCEQqMEG0D2gTpZiEihLN37OdaE/6Y5OaQyK6WzRCRo3jEOK3F9jfIOKOk8sIdV DhHcDN6r3/SHC1AgfApK62t0ZzIjJi/Xt7fn27AhBTNZJS7qc6cJFiBsU7wL5Sv7 JeOHXgtiN7nKcw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:41 2026 by rpki-client