This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft File: nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json) Hash identifier: i/rShqrkAkalSpfL0SkiggQDUcnHFA3kAFn4BxSEZBM= Subject key identifier: BE:2F:B1:CC:7B:19:C8:1A:AC:66:1E:36:1B:55:88:C3:B7:37:08:E3 Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e Certificate serial: 019C44D9E7C041C37BD9EC1DEE4A173E078E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft Manifest number: 0D0B Signing time: Tue 10 Feb 2026 00:00:57 +0000 Manifest this update: Tue 10 Feb 2026 00:00:57 +0000 Manifest next update: Wed 11 Feb 2026 00:00:57 +0000 Files and hashes: 1: R91GiKKyBrwfLColIYR-nu2XUnc.roa (hash: fqxJrQIzt273Im8ggeZoruR/46fuYNCxgpytjXWqJG0=) 2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: 9SkSea1Upd4w5L06lL4abE/l39o+aR9n12HnEZdvds0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:e7:c0:41:c3:7b:d9:ec:1d:ee:4a:17:3e:07:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e Validity Not Before: Feb 10 00:00:57 2026 GMT Not After : Feb 11 00:00:57 2026 GMT Subject: CN=be2fb1cc7b19c81aac661e361b5588c3b73708e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:73:62:f7:a7:75:97:27:0f:5b:12:4f:4b: 4b:8a:ae:18:6a:3d:84:29:da:cc:71:78:8f:dd:43: a8:eb:7f:b4:26:06:4f:6f:0c:f6:e0:d3:bf:40:f8: 69:88:4a:97:0f:9b:b8:b9:5b:3c:60:c5:e4:28:80: 4e:16:e2:ee:42:00:9d:57:62:60:c0:5b:43:07:c7: 45:ec:4b:2c:96:df:a8:2d:78:03:13:e6:25:96:11: 8b:6b:ea:1c:24:b1:ed:13:4b:ac:20:88:b9:4c:68: 7a:44:76:97:fd:5e:b2:86:e5:47:2a:9a:ab:ae:c2: 47:a7:c2:00:db:bf:3f:be:f4:e4:49:31:62:54:b4: 00:70:3e:bf:2d:17:bb:ad:3d:2c:a6:49:e6:02:98: 23:67:71:45:54:5c:26:e5:fd:ac:de:80:12:5c:32: eb:29:a7:85:f3:35:98:46:42:93:9f:1c:9d:72:bd: b5:89:70:51:c0:e3:88:89:66:5d:42:e1:f4:9c:cc: 68:ae:ef:f2:95:1a:e1:23:b0:d5:40:c8:0a:a2:d6: 4a:22:b0:73:2f:f7:1f:64:62:64:35:8e:3c:66:c7: 06:69:e4:31:54:d1:ae:6a:12:fb:84:be:80:45:ad: ef:89:7c:ad:53:b6:70:45:7a:25:a5:cf:b8:f2:02: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2F:B1:CC:7B:19:C8:1A:AC:66:1E:36:1B:55:88:C3:B7:37:08:E3 X509v3 Authority Key Identifier: keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:57:c2:38:d7:1b:e0:c2:2d:7e:ac:a5:60:5f:fb:03:f1:ea: d7:31:8a:1f:ac:c1:43:fc:0d:86:d7:05:3c:39:05:80:53:ee: a1:13:02:17:2c:eb:7e:91:62:3f:b3:ce:f6:74:59:56:6e:f7: d2:93:69:81:1e:83:a5:84:85:4a:3c:c9:88:f9:15:21:85:34: a1:0e:98:05:ab:09:9d:11:1f:5f:29:37:6c:2e:18:46:a7:85: e4:bf:9e:b4:72:16:0a:7e:03:7e:53:9f:1d:31:4d:f8:83:0b: c9:e8:b2:3e:98:64:6c:1a:ef:96:cd:bf:db:ff:20:79:22:6e: d2:70:03:a3:6e:0a:53:5c:14:72:36:f2:ec:b9:f4:bd:59:4f: 4f:8b:02:d8:82:bb:7d:ff:99:06:a7:41:ac:d0:0d:fe:eb:61: 34:35:20:29:73:c2:f5:5c:ab:fa:d9:c2:27:17:c3:f2:4a:37: 44:9e:b4:59:bf:a2:dd:06:11:9b:cb:85:22:26:4e:90:a6:1d: d8:a8:24:4c:1a:a0:76:3d:ac:a8:eb:04:59:93:1b:2e:2b:47: 64:53:4d:2d:47:4c:e0:3c:43:a1:43:fb:15:44:e5:aa:23:09: 73:2b:be:23:bd:4b:4e:bd:70:9d:ae:8e:1f:14:82:ce:4a:38: 7a:14:02:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2efAQcN72ewd7koXPgeOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMGY3ZTk5ZmI0ZDY1NDRmMjIyZGYzOGE4OThlYjE2MmMw ZDgxOGUwHhcNMjYwMjEwMDAwMDU3WhcNMjYwMjExMDAwMDU3WjAzMTEwLwYDVQQD EyhiZTJmYjFjYzdiMTljODFhYWM2NjFlMzYxYjU1ODhjM2I3MzcwOGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBhzYvendZcnD1sST0tLiq4Yaj2E KdrMcXiP3UOo63+0JgZPbwz24NO/QPhpiEqXD5u4uVs8YMXkKIBOFuLuQgCdV2Jg wFtDB8dF7Esslt+oLXgDE+YllhGLa+ocJLHtE0usIIi5TGh6RHaX/V6yhuVHKpqr rsJHp8IA278/vvTkSTFiVLQAcD6/LRe7rT0spknmApgjZ3FFVFwm5f2s3oASXDLr KaeF8zWYRkKTnxydcr21iXBRwOOIiWZdQuH0nMxoru/ylRrhI7DVQMgKotZKIrBz L/cfZGJkNY48ZscGaeQxVNGuahL7hL6ARa3viXytU7ZwRXolpc+48gK1SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4vscx7GcgarGYeNhtViMO3NwjjMB8GA1UdIwQY MBaAFJ8Pfpn7TWVE8iLfOKiY6xYsDYGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjIt MGRmNTY2ZWE2NGRkLzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjItMGRmNTY2ZWE2NGRk LzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFfCONcb 4MItfqylYF/7A/Hq1zGKH6zBQ/wNhtcFPDkFgFPuoRMCFyzrfpFiP7PO9nRZVm73 0pNpgR6DpYSFSjzJiPkVIYU0oQ6YBasJnREfXyk3bC4YRqeF5L+etHIWCn4DflOf HTFN+IMLyeiyPphkbBrvls2/2/8geSJu0nADo24KU1wUcjby7Ln0vVlPT4sC2IK7 ff+ZBqdBrNAN/uthNDUgKXPC9Vyr+tnCJxfD8ko3RJ60Wb+i3QYRm8uFIiZOkKYd 2KgkTBqgdj2sqOsEWZMbLitHZFNNLUdM4DxDoUP7FUTlqiMJcyu+I71LTr1wna6O HxSCzko4ehQC7g== -----END CERTIFICATE-----Generated at Tue Feb 10 01:49:00 2026 by rpki-client