This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json) Hash identifier: kJoyEoSE/kXeRiyXVj2PpMqJBjweglw7d+tdkkD9nL4= Subject key identifier: D7:21:F8:FB:8D:3D:36:41:80:89:F4:D6:BE:50:74:BC:16:4E:4D:EC Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b Certificate serial: 019C41A2677AEFB49821A6D8A3400E85044F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft Manifest number: 1043 Signing time: Mon 09 Feb 2026 09:01:28 +0000 Manifest this update: Mon 09 Feb 2026 09:01:28 +0000 Manifest next update: Tue 10 Feb 2026 09:01:28 +0000 Files and hashes: 1: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=) 2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: zXv4+cdfY0i3VsP74tTPSCXiHZtCl51MCiQGO/nMm6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:67:7a:ef:b4:98:21:a6:d8:a3:40:0e:85:04:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b Validity Not Before: Feb 9 09:01:28 2026 GMT Not After : Feb 10 09:01:28 2026 GMT Subject: CN=d721f8fb8d3d36418089f4d6be5074bc164e4dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7c:98:28:74:4b:ec:17:17:4d:7b:c0:4b:2d: 28:6d:7f:5a:48:1b:97:c7:28:6e:9b:51:75:c5:ee: 7c:e3:44:3d:89:24:ab:87:b1:8a:31:f7:46:cf:92: 86:a3:22:92:44:dc:2f:d9:ad:be:1c:b0:26:ee:29: 70:08:cc:80:c9:36:0a:f4:24:e7:a3:9a:1a:ab:98: d4:cf:43:9e:ac:6e:8b:76:f0:46:c6:75:33:ed:96: 6a:97:40:a3:02:bd:55:0b:6f:fc:21:b2:67:af:92: a4:19:99:c7:41:6c:5c:8c:23:e4:6d:42:a3:34:3e: 0e:af:33:21:6f:88:72:2c:29:55:6f:5c:be:1f:44: 96:b1:d6:7f:a0:98:62:ff:40:df:81:d1:26:e5:a5: bd:61:be:dc:ed:e1:12:37:b9:34:ab:5e:f5:b3:9d: 1b:16:89:a8:2c:1d:03:df:0c:d4:8a:81:6a:5d:86: 96:dd:1d:89:0b:cb:19:ca:e2:26:8a:eb:e3:53:0a: 87:8f:31:56:5a:31:b0:c9:54:71:72:09:48:b2:a3: ab:b0:67:67:c1:be:2d:d7:7a:7d:50:a4:e2:a4:d5: a5:a5:e3:c3:88:3a:0f:fd:6e:b0:57:2d:19:13:38: 83:de:26:86:78:c6:1d:a6:b2:31:6a:2a:05:c4:dc: a8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:F8:FB:8D:3D:36:41:80:89:F4:D6:BE:50:74:BC:16:4E:4D:EC X509v3 Authority Key Identifier: keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e6:ec:01:65:8f:86:36:7f:69:cd:75:45:07:61:6b:2d:ef: 0a:c2:a9:77:eb:e8:40:9f:cd:58:d3:cd:c0:70:29:21:f9:08: 35:06:13:d5:9b:d0:47:20:1d:55:29:48:4a:00:5e:29:07:36: f9:b6:69:16:c1:bc:76:14:d5:c1:1c:1d:9f:15:33:23:f9:70: 38:51:76:9c:92:c4:df:a7:91:85:c7:47:f0:b0:21:f7:17:4a: 59:a8:93:f8:09:bd:51:0b:29:88:08:64:f0:d7:17:e0:7d:8c: f2:4f:08:aa:04:93:08:3b:57:9b:23:d4:f5:06:cf:42:25:2e: 16:ea:08:e3:e9:ef:90:37:5f:ba:9d:a3:92:a9:df:57:88:4f: 52:af:18:d5:d2:b0:2f:94:4b:30:f1:28:d0:95:ec:d7:34:3f: 9a:c0:09:d7:a3:3b:03:25:ca:35:5c:9b:7a:cb:ae:af:ac:9a: e3:86:da:ac:a1:dd:7b:c4:13:e2:c0:8f:09:ca:2b:c6:1a:b3: 94:38:33:9a:18:05:0c:f6:17:d4:44:b5:ad:45:18:8c:1b:ed: c9:7c:c2:06:6e:a5:cb:07:f2:b6:7e:9b:4e:07:9e:04:f0:9e: cb:d2:41:39:c4:18:7f:e1:3f:1a:6b:aa:b9:a5:de:b6:96:35: ac:ab:3d:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBomd677SYIabYo0AOhQRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl Y2VlOGIwHhcNMjYwMjA5MDkwMTI4WhcNMjYwMjEwMDkwMTI4WjAzMTEwLwYDVQQD EyhkNzIxZjhmYjhkM2QzNjQxODA4OWY0ZDZiZTUwNzRiYzE2NGU0ZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13yYKHRL7BcXTXvASy0obX9aSBuX xyhum1F1xe5840Q9iSSrh7GKMfdGz5KGoyKSRNwv2a2+HLAm7ilwCMyAyTYK9CTn o5oaq5jUz0OerG6LdvBGxnUz7ZZql0CjAr1VC2/8IbJnr5KkGZnHQWxcjCPkbUKj ND4OrzMhb4hyLClVb1y+H0SWsdZ/oJhi/0DfgdEm5aW9Yb7c7eESN7k0q171s50b FomoLB0D3wzUioFqXYaW3R2JC8sZyuImiuvjUwqHjzFWWjGwyVRxcglIsqOrsGdn wb4t13p9UKTipNWlpePDiDoP/W6wVy0ZEziD3iaGeMYdprIxaioFxNyo4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNch+PuNPTZBgIn01r5QdLwWTk3sMB8GA1UdIwQY MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt Yjk2ZDJmYmVmZWJkLzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+bsAWWP hjZ/ac11RQdhay3vCsKpd+voQJ/NWNPNwHApIfkINQYT1ZvQRyAdVSlISgBeKQc2 +bZpFsG8dhTVwRwdnxUzI/lwOFF2nJLE36eRhcdH8LAh9xdKWaiT+Am9UQspiAhk 8NcX4H2M8k8IqgSTCDtXmyPU9QbPQiUuFuoI4+nvkDdfup2jkqnfV4hPUq8Y1dKw L5RLMPEo0JXs1zQ/msAJ16M7AyXKNVybesuur6ya44barKHde8QT4sCPCcorxhqz lDgzmhgFDPYX1ES1rUUYjBvtyXzCBm6lywfytn6bTgeeBPCey9JBOcQYf+E/Gmuq uaXetpY1rKs9Qg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:09 2026 by rpki-client