This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json) Hash identifier: OwD7dGhzJbAw/cpi/l1DNijWxcJfwsz4bV1/aG2GwVI= Subject key identifier: 65:B4:81:26:56:DE:7B:BC:93:A1:10:33:44:85:67:C0:47:66:18:67 Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04 Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104 Certificate serial: 019C4358EB78B88403FF6E51ABD1D2DD815F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft Manifest number: 0D85 Signing time: Mon 09 Feb 2026 17:00:26 +0000 Manifest this update: Mon 09 Feb 2026 17:00:26 +0000 Manifest next update: Tue 10 Feb 2026 17:00:26 +0000 Files and hashes: 1: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: OssrI68FCttvX10YfAXJjcIozOwCy7wBNbbmTfJ+4V4=) 2: QK0mOdG40zIzUlHnuUgQoD_cUNo.roa (hash: zxJjpxSeZ9UWE8WyEG7kXzpGqf6oWC16IltjE0DZr50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:eb:78:b8:84:03:ff:6e:51:ab:d1:d2:dd:81:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3646213198899edfa8b42add473ada218748e104 Validity Not Before: Feb 9 17:00:26 2026 GMT Not After : Feb 10 17:00:26 2026 GMT Subject: CN=65b4812656de7bbc93a11033448567c047661867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:16:ba:d3:1a:0a:0b:3d:bd:d8:47:b6:71:65: 67:20:5a:2a:01:11:3c:08:9d:8b:cb:45:d0:00:29: 33:d5:85:4f:3d:87:e9:db:c5:e6:48:fd:0f:79:b6: dc:e1:0f:49:a4:41:46:bd:49:52:e3:b2:ae:02:37: c9:c1:f7:97:88:b8:f0:30:24:19:82:30:73:2f:67: 5e:d2:cf:42:59:4f:2d:42:ca:6a:a2:fc:e0:82:f6: 0a:43:e0:b1:3d:a8:ca:b4:47:60:9f:2b:c9:f9:1b: 39:3a:a8:5a:dc:06:49:a8:a8:f6:15:cb:c9:07:7c: db:69:97:37:15:24:aa:0f:01:ba:68:8d:89:5e:cc: 95:05:5d:7c:a0:56:e6:22:82:a9:c9:f2:05:ed:81: fc:25:58:df:d3:20:b5:19:27:ba:0e:de:94:67:8c: b7:0e:d2:7a:47:af:38:43:1c:2c:c4:dd:a3:ee:37: e1:82:a2:cc:fd:29:5d:9b:36:31:58:7a:1e:c7:bc: c5:c7:49:f6:68:21:65:8d:cf:0d:42:cc:95:56:8e: 75:97:cf:c2:b4:73:5e:07:a2:a1:c3:fd:b3:17:cd: 15:74:aa:0c:d9:99:08:ed:3e:06:b2:18:9f:98:d7: 83:3b:d6:e7:fa:6c:8a:f2:24:d5:ed:e9:44:e3:53: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B4:81:26:56:DE:7B:BC:93:A1:10:33:44:85:67:C0:47:66:18:67 X509v3 Authority Key Identifier: keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:3a:c9:49:53:5b:fd:cc:4a:9b:2e:fb:55:3d:3a:11:ea:34: 35:7c:66:ed:7f:57:aa:dd:c9:35:2c:84:c3:52:6c:d8:8f:f8: 6a:0e:4e:c2:04:a9:0f:2d:32:6c:aa:f7:a9:31:10:f3:08:c8: 12:12:5b:ac:b3:07:ad:e2:61:be:b3:9d:2a:96:ba:14:81:19: 61:66:bc:3f:cb:c0:3d:a4:31:0e:8d:af:a3:16:71:21:c9:fd: 95:00:a0:e1:2a:53:8d:87:a8:73:60:f5:6f:38:99:09:36:47: 9e:80:22:a1:a7:ab:93:ef:16:ea:1d:01:d6:f7:19:45:1d:e9: ea:91:37:cf:be:0d:d6:6f:5f:d9:03:d5:70:16:d2:38:bd:8b: 43:27:73:fc:21:95:75:2e:96:56:22:25:d1:a4:ec:0a:c4:65: 14:f5:af:15:72:f7:23:84:6c:8c:05:c6:60:6d:9a:ad:41:33: 00:2f:2d:9f:fb:f2:02:fe:24:81:47:60:00:aa:df:1b:0d:78: 9b:a1:1e:69:ff:91:1a:51:33:1a:64:bf:32:2b:b8:d2:9f:ec: 28:13:73:17:3e:25:7d:42:28:ec:9f:df:25:84:ae:6f:97:a5: 46:70:8a:14:3f:1e:67:dc:6a:52:da:74:26:1e:81:2d:b5:76: 61:d1:c1:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWOt4uIQD/25Rq9HS3YFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDYyMTMxOTg4OTllZGZhOGI0MmFkZDQ3M2FkYTIxODc0 OGUxMDQwHhcNMjYwMjA5MTcwMDI2WhcNMjYwMjEwMTcwMDI2WjAzMTEwLwYDVQQD Eyg2NWI0ODEyNjU2ZGU3YmJjOTNhMTEwMzM0NDg1NjdjMDQ3NjYxODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ha60xoKCz292Ee2cWVnIFoqARE8 CJ2Ly0XQACkz1YVPPYfp28XmSP0Pebbc4Q9JpEFGvUlS47KuAjfJwfeXiLjwMCQZ gjBzL2de0s9CWU8tQspqovzggvYKQ+CxPajKtEdgnyvJ+Rs5Oqha3AZJqKj2FcvJ B3zbaZc3FSSqDwG6aI2JXsyVBV18oFbmIoKpyfIF7YH8JVjf0yC1GSe6Dt6UZ4y3 DtJ6R684QxwsxN2j7jfhgqLM/SldmzYxWHoex7zFx0n2aCFljc8NQsyVVo51l8/C tHNeB6Khw/2zF80VdKoM2ZkI7T4GshifmNeDO9bn+myK8iTV7elE41NZvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGW0gSZW3nu8k6EQM0SFZ8BHZhhnMB8GA1UdIwQY MBaAFDZGITGYiZ7fqLQq3Uc62iGHSOEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtZaE1aaUpudC1vdENyZFJ6cmFJWWRJNFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zNzZkNDUtYzAwYS00ZWU5LTk4NmIt MDZkYzM4YjU3NTM1LzEvTmtZaE1aaUpudC1vdENyZFJ6cmFJWWRJNFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8zNzZkNDUtYzAwYS00ZWU5LTk4NmItMDZkYzM4YjU3NTM1 LzEvTmtZaE1aaUpudC1vdENyZFJ6cmFJWWRJNFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzrJSVNb /cxKmy77VT06Eeo0NXxm7X9Xqt3JNSyEw1Js2I/4ag5OwgSpDy0ybKr3qTEQ8wjI EhJbrLMHreJhvrOdKpa6FIEZYWa8P8vAPaQxDo2voxZxIcn9lQCg4SpTjYeoc2D1 bziZCTZHnoAioaerk+8W6h0B1vcZRR3p6pE3z74N1m9f2QPVcBbSOL2LQydz/CGV dS6WViIl0aTsCsRlFPWvFXL3I4RsjAXGYG2arUEzAC8tn/vyAv4kgUdgAKrfGw14 m6Eeaf+RGlEzGmS/Miu40p/sKBNzFz4lfUIo7J/fJYSub5elRnCKFD8eZ9xqUtp0 Jh6BLbV2YdHB3g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:24 2026 by rpki-client