This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json) Hash identifier: dAqHel6HWRAS+MdcwhhP3G8TkhqRZ2plJ02eusSIuAk= Subject key identifier: 1E:85:16:DB:34:40:97:07:66:E3:CA:34:5A:84:EC:3D:46:35:63:98 Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62 Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662 Certificate serial: 019C42B472267D27DB38BCA30E6491D33C3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft Manifest number: 0E64 Signing time: Mon 09 Feb 2026 14:00:47 +0000 Manifest this update: Mon 09 Feb 2026 14:00:47 +0000 Manifest next update: Tue 10 Feb 2026 14:00:47 +0000 Files and hashes: 1: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: kGy/ClN7Jvqz21yLjuuJkOOhDc+MnGMbLrqMbgydAMo=) 2: q6CwaYt60BDQuc3_ZWsbWaNz8Dg.roa (hash: JEtY03ZZCO1pOzbBLbHUtClYuSPCvPVo4T1050vxYC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:72:26:7d:27:db:38:bc:a3:0e:64:91:d3:3c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662 Validity Not Before: Feb 9 14:00:47 2026 GMT Not After : Feb 10 14:00:47 2026 GMT Subject: CN=1e8516db3440970766e3ca345a84ec3d46356398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:fb:ad:5b:04:04:d1:c2:06:d6:48:e6:c7: d7:c9:4e:05:a2:9b:b5:92:b2:cf:52:33:8c:44:f7: 21:f0:b4:ac:c2:55:fb:8f:46:d9:d8:a4:f3:8c:f4: 14:a0:5f:02:a1:79:a0:c7:da:f8:e5:51:cb:b1:48: 02:a7:79:9c:44:20:ba:9e:da:7c:94:1a:90:78:dd: 18:94:a9:b3:fc:0c:70:d5:fb:19:36:d6:1a:4e:5c: 55:c5:16:9a:55:38:67:fc:a5:01:b6:34:69:c7:83: 53:4f:c6:88:86:9c:c0:e4:b3:c9:d3:33:a0:c5:bc: 40:6a:0f:27:72:5c:05:84:27:24:80:0c:06:1b:6e: 7c:9e:b9:7e:2b:be:28:5b:91:6a:58:3d:ec:b6:87: 3a:ad:dd:f0:13:bb:e7:1a:8b:d4:24:b5:bb:d9:28: a8:0c:1a:79:30:52:a9:5a:fb:21:c5:fd:6b:62:db: c1:45:32:59:66:93:89:ef:81:f5:e6:73:fb:29:c4: 28:77:5a:27:ab:d6:65:2d:ab:01:48:bc:af:9e:e6: 1f:09:7d:fb:d7:39:3f:f1:e2:44:ce:1d:2f:55:26: f2:1b:34:f1:06:da:0d:a0:2f:b0:db:8a:fe:1c:bd: 4c:82:0a:1a:f9:7a:81:ea:f4:ab:00:9e:9b:6b:d3: da:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:85:16:DB:34:40:97:07:66:E3:CA:34:5A:84:EC:3D:46:35:63:98 X509v3 Authority Key Identifier: keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d0:a6:31:c9:2b:e2:51:7b:19:34:36:84:34:bf:0c:87:78: 04:de:c2:16:48:72:f6:28:83:8f:fe:29:a1:90:92:df:03:9e: d7:0e:86:e2:b5:62:7b:3c:89:4c:a9:07:d6:b2:42:d8:87:8c: 0b:51:73:e6:07:8c:33:27:91:48:6f:1e:e4:d6:85:a8:e5:95: 01:54:21:d8:cf:7b:39:1a:c7:9d:d8:6a:ac:73:3e:3c:55:5b: 13:22:83:5f:20:d2:97:ad:3a:a1:21:6c:bd:06:59:f3:5d:68: 6a:a3:42:73:dd:3c:e5:5f:7d:05:9d:88:39:57:ff:08:03:50: 85:9a:fb:e5:8a:56:f9:65:a3:c1:ce:7f:f1:c9:b3:cc:be:19: 93:a2:72:3b:06:4c:12:76:22:1e:92:fa:07:f5:e4:bc:b8:1e: a2:63:86:10:67:72:e8:f0:34:c5:83:5d:66:3e:f9:d9:01:9d: 14:4d:53:4e:7b:c0:25:a6:ee:d6:80:4d:4e:c4:ce:a9:e1:d1: 62:bb:f8:7f:0b:c1:07:1b:d0:48:55:8c:1e:da:83:21:10:82: 49:94:27:16:b8:f0:ec:ee:6f:29:3f:eb:f3:b0:df:e1:6c:97: b0:93:93:bf:f5:1d:3c:0a:40:4a:b1:60:57:45:ce:aa:f8:e5: e1:d3:9f:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtHImfSfbOLyjDmSR0zw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMmNiN2Y5Y2EwZWZkNzJiZTI1OGE0YTA5MzU4ODA2Mzc0 YjQ2NjIwHhcNMjYwMjA5MTQwMDQ3WhcNMjYwMjEwMTQwMDQ3WjAzMTEwLwYDVQQD EygxZTg1MTZkYjM0NDA5NzA3NjZlM2NhMzQ1YTg0ZWMzZDQ2MzU2Mzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bj7rVsEBNHCBtZI5sfXyU4Fopu1 krLPUjOMRPch8LSswlX7j0bZ2KTzjPQUoF8CoXmgx9r45VHLsUgCp3mcRCC6ntp8 lBqQeN0YlKmz/Axw1fsZNtYaTlxVxRaaVThn/KUBtjRpx4NTT8aIhpzA5LPJ0zOg xbxAag8nclwFhCckgAwGG258nrl+K74oW5FqWD3stoc6rd3wE7vnGovUJLW72Sio DBp5MFKpWvshxf1rYtvBRTJZZpOJ74H15nP7KcQod1onq9ZlLasBSLyvnuYfCX37 1zk/8eJEzh0vVSbyGzTxBtoNoC+w24r+HL1Mggoa+XqB6vSrAJ6ba9PaNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6FFts0QJcHZuPKNFqE7D1GNWOYMB8GA1UdIwQY MBaAFJwst/nKDv1yviWKSgk1iAY3S0ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUt N2Y5MmMzNGViMDdjLzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUtN2Y5MmMzNGViMDdj LzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdCmMckr 4lF7GTQ2hDS/DId4BN7CFkhy9iiDj/4poZCS3wOe1w6G4rViezyJTKkH1rJC2IeM C1Fz5geMMyeRSG8e5NaFqOWVAVQh2M97ORrHndhqrHM+PFVbEyKDXyDSl606oSFs vQZZ811oaqNCc9085V99BZ2IOVf/CANQhZr75YpW+WWjwc5/8cmzzL4Zk6JyOwZM EnYiHpL6B/XkvLgeomOGEGdy6PA0xYNdZj752QGdFE1TTnvAJabu1oBNTsTOqeHR Yrv4fwvBBxvQSFWMHtqDIRCCSZQnFrjw7O5vKT/r87Df4WyXsJOTv/UdPApASrFg V0XOqvjl4dOfpA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:13 2026 by rpki-client