This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json) Hash identifier: FFyEQxMsoi+wnEuWFCECqHH55iPa/YT1mRE9T9KpZrA= Subject key identifier: 52:3C:EB:74:BC:24:B7:8E:1D:5E:8D:EF:7C:5D:D7:E9:0F:54:20:A8 Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3 Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3 Certificate serial: 019C427DA0FA393A6604372D28E8AB7866E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft Manifest number: 1552 Signing time: Mon 09 Feb 2026 13:00:55 +0000 Manifest this update: Mon 09 Feb 2026 13:00:55 +0000 Manifest next update: Tue 10 Feb 2026 13:00:55 +0000 Files and hashes: 1: 9tVe1cWkeYt1M8DUyjkUiER9-Eo.roa (hash: wE6I1csBO6GEmAQaIzNTh2tvdzqwUCjixq3m2Z3pzSw=) 2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: sGOBcA1X7HGgu85bgA4xS5XLcwSwD3fej2U17O9Wego=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a0:fa:39:3a:66:04:37:2d:28:e8:ab:78:66:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3 Validity Not Before: Feb 9 13:00:55 2026 GMT Not After : Feb 10 13:00:55 2026 GMT Subject: CN=523ceb74bc24b78e1d5e8def7c5dd7e90f5420a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:31:4a:cd:9d:bb:f4:12:7a:1d:81:61:fb: 6b:2d:67:29:52:98:e4:a7:a2:49:6f:99:fb:62:0a: c4:dd:89:4d:35:3b:b0:6e:6c:9d:b5:a7:4e:57:c0: 29:95:5a:66:01:73:c7:12:de:e3:8a:7d:d1:b4:9d: fb:d6:3a:f4:16:02:e8:0d:1e:d5:16:51:47:4b:5f: f9:6d:2b:a4:2a:75:a7:39:81:05:58:99:82:83:7e: 9d:4f:d5:86:f1:70:c9:4b:06:92:8f:71:6c:e4:df: 55:ad:7d:2a:e1:70:cd:ba:db:46:1f:a4:e6:a3:0c: 93:02:61:15:8e:eb:c9:1f:78:83:63:9e:69:a5:8b: bb:46:33:5d:72:fc:63:e7:3f:17:4a:77:84:1d:2a: 6b:94:c2:74:f7:59:57:53:bd:be:0d:d5:1e:15:86: dd:82:aa:7a:f2:8d:93:58:0c:11:14:c1:62:f3:54: 6f:a5:b0:62:45:16:d4:1c:84:16:d4:9c:73:2a:0a: cf:e7:44:20:eb:3a:69:44:0a:ea:1b:19:a3:92:57: b3:17:56:4c:ab:08:18:c7:53:12:6f:37:33:7d:25: 7f:00:b0:3d:04:34:d6:cb:ba:ba:28:a9:56:47:00: 65:7c:ef:45:d9:dd:c2:73:53:cf:16:e2:0f:d8:df: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3C:EB:74:BC:24:B7:8E:1D:5E:8D:EF:7C:5D:D7:E9:0F:54:20:A8 X509v3 Authority Key Identifier: keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:20:20:35:8b:17:7d:65:88:64:33:8d:72:47:d2:3c:51:4d: 3f:08:22:09:88:aa:87:e8:76:ef:ce:1f:ba:f3:a6:a6:db:b4: 2f:2a:fb:4f:57:dc:79:ca:84:25:4f:d4:54:68:49:65:1f:85: f6:42:94:f4:ac:51:73:d7:d4:c7:f3:8b:1e:fc:e9:b2:86:41: 50:23:79:4b:1d:69:38:f1:fc:90:91:13:25:54:81:83:37:d1: 65:3d:cd:9a:00:de:f1:cb:d9:0d:20:a8:38:b7:2c:e4:eb:25: 30:f0:5d:be:da:51:62:6c:fd:95:9b:0b:c5:83:1b:9b:dc:c7: 3b:d2:c7:ca:08:fe:5b:ce:6c:5c:31:f7:65:26:e1:f2:b1:fb: 80:26:52:f4:c4:02:0d:32:23:5f:42:e6:9d:75:4c:2f:ad:1b: c9:b4:10:b7:4d:82:34:86:ad:09:30:69:f2:6e:98:d5:74:21: 7f:cb:93:36:d7:b6:fc:35:13:3f:12:4d:d4:e7:78:97:21:cf: 5e:65:fc:48:53:10:e7:68:a4:49:4f:aa:36:41:a3:26:f9:3a: 1b:08:13:b0:f2:9a:1d:d0:5e:4f:f3:4b:42:9c:b7:37:b0:17: c6:96:37:79:a4:0a:21:e0:28:5e:3a:a3:01:41:b5:a3:57:e7: e0:59:0d:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaD6OTpmBDctKOireGblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNDY1NDI3MjY2Njg0MzZmYTkzZTc1N2ZlZWY0ZDQ1ZTI0 Y2Q2ZTMwHhcNMjYwMjA5MTMwMDU1WhcNMjYwMjEwMTMwMDU1WjAzMTEwLwYDVQQD Eyg1MjNjZWI3NGJjMjRiNzhlMWQ1ZThkZWY3YzVkZDdlOTBmNTQyMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfsxSs2du/QSeh2BYftrLWcpUpjk p6JJb5n7YgrE3YlNNTuwbmydtadOV8AplVpmAXPHEt7jin3RtJ371jr0FgLoDR7V FlFHS1/5bSukKnWnOYEFWJmCg36dT9WG8XDJSwaSj3Fs5N9VrX0q4XDNuttGH6Tm owyTAmEVjuvJH3iDY55ppYu7RjNdcvxj5z8XSneEHSprlMJ091lXU72+DdUeFYbd gqp68o2TWAwRFMFi81RvpbBiRRbUHIQW1JxzKgrP50Qg6zppRArqGxmjklezF1ZM qwgYx1MSbzczfSV/ALA9BDTWy7q6KKlWRwBlfO9F2d3Cc1PPFuIP2N9NrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFI863S8JLeOHV6N73xd1+kPVCCoMB8GA1UdIwQY MBaAFJ1GVCcmZoQ2+pPnV/7vTUXiTNbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQt MjllMzVhZTkxMmRhLzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQtMjllMzVhZTkxMmRh LzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiAgNYsX fWWIZDONckfSPFFNPwgiCYiqh+h2784fuvOmptu0Lyr7T1fcecqEJU/UVGhJZR+F 9kKU9KxRc9fUx/OLHvzpsoZBUCN5Sx1pOPH8kJETJVSBgzfRZT3NmgDe8cvZDSCo OLcs5OslMPBdvtpRYmz9lZsLxYMbm9zHO9LHygj+W85sXDH3ZSbh8rH7gCZS9MQC DTIjX0LmnXVML60bybQQt02CNIatCTBp8m6Y1XQhf8uTNte2/DUTPxJN1Od4lyHP XmX8SFMQ52ikSU+qNkGjJvk6GwgTsPKaHdBeT/NLQpy3N7AXxpY3eaQKIeAoXjqj AUG1o1fn4FkNQA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:42 2026 by rpki-client