This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json) Hash identifier: PSbChwdmxY/D3t84drppcL30hGsen+lX84GnhX0oRGc= Subject key identifier: A8:3D:56:FB:93:5E:C3:1F:FC:EB:74:58:BE:DC:5B:51:D4:A8:71:BE Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba Certificate serial: 019C446C81EBB325C3F91AA650EEDED3C02D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft Manifest number: 0B6E Signing time: Mon 09 Feb 2026 22:01:27 +0000 Manifest this update: Mon 09 Feb 2026 22:01:27 +0000 Manifest next update: Tue 10 Feb 2026 22:01:27 +0000 Files and hashes: 1: gCdkelcku20UE3AgB6eQSuQOOYY.roa (hash: dJjFIayFe8nzFROO5Sz7ye6wsmq4p85VT0pjVrRuHPw=) 2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: UvnmK7or+tIAVE2ekDIEXMncpEkW7cm+uG9Q6NS2C18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:81:eb:b3:25:c3:f9:1a:a6:50:ee:de:d3:c0:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba Validity Not Before: Feb 9 22:01:27 2026 GMT Not After : Feb 10 22:01:27 2026 GMT Subject: CN=a83d56fb935ec31ffceb7458bedc5b51d4a871be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d1:83:54:39:eb:84:f6:21:b1:1a:ed:6d:48: 38:87:ca:42:1e:79:75:dc:a8:5a:7c:d1:58:9c:4f: 1d:a7:76:7e:42:37:03:73:2f:31:09:0b:64:48:bd: 7a:12:5f:e1:59:9b:93:fc:31:08:af:2c:02:8c:3a: a0:0b:df:f5:b8:47:fc:d4:f3:40:5a:d9:87:6c:d9: a1:a6:35:8f:cc:69:5c:f4:1c:63:ae:b5:32:75:aa: 31:ff:a4:f8:d1:6a:f7:0b:9a:95:ad:6e:0e:e2:36: b4:f1:c7:43:43:9d:43:96:0e:04:fa:de:ce:6a:fd: 72:da:21:99:4a:f9:fb:18:ad:fb:a8:e0:3c:e1:57: 91:f8:a6:ed:e3:0e:22:1f:e1:62:6f:a9:d9:85:f8: b0:00:dc:f5:29:d7:2e:87:27:42:ed:35:b1:3e:53: 8c:48:b3:17:42:0f:a4:50:73:7b:fb:24:65:2b:db: 72:99:0b:4c:33:79:7f:a8:a3:6e:78:86:95:2f:eb: cb:37:9d:23:16:a3:b1:8e:67:ae:f2:65:f8:c3:aa: 2f:40:e3:0b:6f:8a:e8:7b:58:f9:8a:18:77:87:34: 3c:a0:76:ea:72:f9:bc:6c:5e:22:85:6a:d7:5c:fb: ac:59:a2:8c:97:83:d0:f4:c8:28:b8:86:74:ff:08: 82:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3D:56:FB:93:5E:C3:1F:FC:EB:74:58:BE:DC:5B:51:D4:A8:71:BE X509v3 Authority Key Identifier: keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f2:6a:10:21:ac:b9:58:46:94:b6:28:a3:b2:2a:57:4a:3d: 16:d9:15:cd:63:30:83:f6:65:2c:37:83:c8:98:83:31:1e:f6: 66:ed:e7:20:c0:d7:03:5c:66:0b:8c:b0:07:8a:1f:6b:37:e9: 21:9d:45:76:e9:56:b1:48:e3:99:be:a3:83:68:b0:a9:e3:b8: ac:0f:79:b4:85:cf:54:2d:43:48:dd:ff:58:f1:a9:08:97:85: 8e:62:91:d6:59:f2:e1:2a:92:a3:6c:b4:23:fd:6c:90:c8:2b: aa:2d:14:96:58:0b:d3:02:4f:3a:e0:b7:ba:79:43:a4:d8:49: ed:71:d0:33:4c:b3:15:af:5e:0c:b0:df:06:00:4d:e8:a5:b2: 48:5b:db:3d:be:a3:a2:91:59:6a:02:c1:c6:f9:f5:0c:02:af: 21:ab:2d:ed:9e:5f:28:44:5d:be:8f:df:b6:2b:3b:f7:eb:51: d1:41:7a:73:fb:b2:47:a4:cc:33:92:ab:c8:b9:2f:3f:e0:4d: b0:31:b0:ac:8a:af:f2:be:94:e6:60:59:ff:19:1e:b9:0b:29: 68:67:53:69:b5:7e:1c:6e:8a:36:2c:09:7e:5c:e0:74:37:2a: 1f:e8:16:c1:12:ae:a5:17:b8:a0:86:e4:3b:b1:07:19:07:3a: 1d:8c:61:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbIHrsyXD+RqmUO7e08AtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOGMwOGY0YWQ4ZmVhZDM3MWRhM2U3YzAyYjZjZmQ2ODlm Y2E1YmEwHhcNMjYwMjA5MjIwMTI3WhcNMjYwMjEwMjIwMTI3WjAzMTEwLwYDVQQD EyhhODNkNTZmYjkzNWVjMzFmZmNlYjc0NThiZWRjNWI1MWQ0YTg3MWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NGDVDnrhPYhsRrtbUg4h8pCHnl1 3KhafNFYnE8dp3Z+QjcDcy8xCQtkSL16El/hWZuT/DEIrywCjDqgC9/1uEf81PNA WtmHbNmhpjWPzGlc9BxjrrUydaox/6T40Wr3C5qVrW4O4ja08cdDQ51Dlg4E+t7O av1y2iGZSvn7GK37qOA84VeR+Kbt4w4iH+Fib6nZhfiwANz1KdcuhydC7TWxPlOM SLMXQg+kUHN7+yRlK9tymQtMM3l/qKNueIaVL+vLN50jFqOxjmeu8mX4w6ovQOML b4roe1j5ihh3hzQ8oHbqcvm8bF4ihWrXXPusWaKMl4PQ9MgouIZ0/wiC9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKg9VvuTXsMf/Ot0WL7cW1HUqHG+MB8GA1UdIwQY MBaAFJ2MCPStj+rTcdo+fAK2z9aJ/KW6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbll3STlLMlA2dE54Mmo1OEFyYlAxb244cGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mYWE1MGYtNGRlMS00ZDFjLWI4MDMt MTliZjc4MTA5NjFiLzEvbll3STlLMlA2dE54Mmo1OEFyYlAxb244cGJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9mYWE1MGYtNGRlMS00ZDFjLWI4MDMtMTliZjc4MTA5NjFi LzEvbll3STlLMlA2dE54Mmo1OEFyYlAxb244cGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfJqECGs uVhGlLYoo7IqV0o9FtkVzWMwg/ZlLDeDyJiDMR72Zu3nIMDXA1xmC4ywB4ofazfp IZ1FdulWsUjjmb6jg2iwqeO4rA95tIXPVC1DSN3/WPGpCJeFjmKR1lny4SqSo2y0 I/1skMgrqi0UllgL0wJPOuC3unlDpNhJ7XHQM0yzFa9eDLDfBgBN6KWySFvbPb6j opFZagLBxvn1DAKvIast7Z5fKERdvo/ftis79+tR0UF6c/uyR6TMM5KryLkvP+BN sDGwrIqv8r6U5mBZ/xkeuQspaGdTabV+HG6KNiwJflzgdDcqH+gWwRKupRe4oIbk O7EHGQc6HYxhVg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:32 2026 by rpki-client