This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft File: NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json) Hash identifier: XTC3Y3bR8SU7CdD5jfYgKaruF40e9YT5PAjGO4xREoA= Subject key identifier: 8B:C8:E6:0C:E6:3C:5B:75:81:C4:F0:67:FE:93:E9:07:00:9A:D4:8A Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74 Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474 Certificate serial: 019C4246B41BA118B3846DD68BBD0094C4AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft Manifest number: 154A Signing time: Mon 09 Feb 2026 12:00:55 +0000 Manifest this update: Mon 09 Feb 2026 12:00:55 +0000 Manifest next update: Tue 10 Feb 2026 12:00:55 +0000 Files and hashes: 1: GxZT3TgjmIKtK7JQv_iwpTOXSpw.roa (hash: wlz5MW9CjtjeRzCliv1fAr4V5uA0E+YvY/dHxPuCPaY=) 2: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: xsKcXlTHlMW90ujvxtAGAdGEOtFdmzxb6CVPr+fEPeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b4:1b:a1:18:b3:84:6d:d6:8b:bd:00:94:c4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474 Validity Not Before: Feb 9 12:00:55 2026 GMT Not After : Feb 10 12:00:55 2026 GMT Subject: CN=8bc8e60ce63c5b7581c4f067fe93e907009ad48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:5a:97:62:1b:48:38:3b:01:03:53:b9:80: 9a:87:cb:b5:d3:fc:62:a5:3e:fc:7a:a3:57:69:78: 1d:26:dc:79:62:c3:9a:dd:c5:2d:b5:b5:2f:28:4d: 5c:98:26:b2:a0:d0:8d:93:22:02:5a:56:a8:11:8d: be:47:0e:d5:0c:ec:ee:88:5b:4b:13:02:7a:8b:b6: 43:81:85:86:72:d8:a4:d4:84:68:a6:7a:c1:04:a4: 30:13:a9:48:da:ed:24:0c:3b:da:7b:65:4e:f6:0e: d8:2e:48:36:47:89:28:3d:93:68:43:34:96:b9:5c: bf:03:ac:99:87:a6:a3:ed:56:fa:54:3c:e7:e0:17: d0:a3:c1:05:a4:0e:8d:56:d0:00:f9:a7:64:1a:3d: 34:c9:0f:7e:d2:f3:20:6b:43:be:4b:14:be:04:9f: 3f:7a:03:55:2b:18:13:2f:b5:de:c3:0d:63:1b:c3: fc:d9:8a:42:2a:13:c9:2a:e2:12:aa:4f:d6:cd:e6: 68:19:26:88:7e:9e:45:06:11:21:00:a4:1a:1c:84: 52:34:64:87:07:fe:58:d5:20:1b:84:6e:23:fd:94: b4:df:11:56:da:c6:74:59:4c:38:66:cc:1e:69:44: 81:4a:da:de:b4:87:ff:c8:8d:d7:9a:7a:3d:c2:87: f1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C8:E6:0C:E6:3C:5B:75:81:C4:F0:67:FE:93:E9:07:00:9A:D4:8A X509v3 Authority Key Identifier: keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:66:91:a0:6c:c6:06:2d:8a:ec:b2:4f:16:6e:35:68:29:12: 08:31:bb:7c:ee:31:93:87:b0:ad:08:9d:be:f7:43:3d:fd:11: dd:79:3f:52:83:8a:51:06:ae:2b:c8:9b:6d:bd:9a:42:9d:92: bc:a4:e9:76:a5:4a:45:68:25:0c:c6:57:fb:8e:96:79:68:cc: 73:d2:cf:68:c4:3d:2f:bf:85:5d:9c:87:f2:a7:db:2f:ad:a5: ab:f3:44:c4:24:cd:c2:c0:27:35:95:f5:10:0a:8a:52:1b:1e: 1a:08:16:df:cc:05:b2:ef:53:04:bd:12:95:4c:91:f0:2e:ee: d2:6e:fa:38:c2:81:2f:ad:82:b6:54:d7:97:53:dc:f9:49:37: 66:cf:35:14:0a:c5:00:8f:e2:7f:12:68:24:b8:d1:fc:2e:2f: 34:1d:83:10:49:09:4e:fb:d7:c0:d0:24:86:72:1a:1a:08:af: 26:ac:ff:11:91:ef:65:aa:74:7a:75:32:14:fd:ee:91:e5:c0: 0d:b7:13:85:8e:1c:9a:2c:05:0f:17:94:60:ba:e1:57:a5:32: 0c:ff:dc:28:a3:b5:35:b2:24:cf:dd:34:b1:96:90:2a:e7:26: 16:d9:6e:af:4c:a2:e6:28:a2:61:32:06:ab:c3:ba:41:f9:97: 0f:08:61:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrQboRizhG3Wi70AlMStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OTAyYzliNjQwZmM2ZDU3YzIzNzcxNGVkMjRkYTE3ZjJk M2U0NzQwHhcNMjYwMjA5MTIwMDU1WhcNMjYwMjEwMTIwMDU1WjAzMTEwLwYDVQQD Eyg4YmM4ZTYwY2U2M2M1Yjc1ODFjNGYwNjdmZTkzZTkwNzAwOWFkNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVdal2IbSDg7AQNTuYCah8u10/xi pT78eqNXaXgdJtx5YsOa3cUttbUvKE1cmCayoNCNkyICWlaoEY2+Rw7VDOzuiFtL EwJ6i7ZDgYWGctik1IRopnrBBKQwE6lI2u0kDDvae2VO9g7YLkg2R4koPZNoQzSW uVy/A6yZh6aj7Vb6VDzn4BfQo8EFpA6NVtAA+adkGj00yQ9+0vMga0O+SxS+BJ8/ egNVKxgTL7Xeww1jG8P82YpCKhPJKuISqk/WzeZoGSaIfp5FBhEhAKQaHIRSNGSH B/5Y1SAbhG4j/ZS03xFW2sZ0WUw4ZsweaUSBStretIf/yI3Xmno9wofxTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvI5gzmPFt1gcTwZ/6T6QcAmtSKMB8GA1UdIwQY MBaAFDWQLJtkD8bVfCN3FO0k2hfy0+R0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlpBc20yUVB4dFY4STNjVTdTVGFGX0xUNUhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTZiYWYtNDFmMy00OTg2LWI5M2Et NDE3YjRmYTU2NGVhLzEvTlpBc20yUVB4dFY4STNjVTdTVGFGX0xUNUhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mOTZiYWYtNDFmMy00OTg2LWI5M2EtNDE3YjRmYTU2NGVh LzEvTlpBc20yUVB4dFY4STNjVTdTVGFGX0xUNUhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmaRoGzG Bi2K7LJPFm41aCkSCDG7fO4xk4ewrQidvvdDPf0R3Xk/UoOKUQauK8ibbb2aQp2S vKTpdqVKRWglDMZX+46WeWjMc9LPaMQ9L7+FXZyH8qfbL62lq/NExCTNwsAnNZX1 EAqKUhseGggW38wFsu9TBL0SlUyR8C7u0m76OMKBL62CtlTXl1Pc+Uk3Zs81FArF AI/ifxJoJLjR/C4vNB2DEEkJTvvXwNAkhnIaGgivJqz/EZHvZap0enUyFP3ukeXA DbcThY4cmiwFDxeUYLrhV6UyDP/cKKO1NbIkz900sZaQKucmFtlur0yi5iiiYTIG q8O6QfmXDwhhVg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:27 2026 by rpki-client