This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json) Hash identifier: ZUNh2bCA6wLm2QCjhiITFI5yancceYpfrezBjAR0nDs= Subject key identifier: 86:A9:CD:67:5A:D1:CB:39:BA:D8:02:D6:28:A8:E8:3C:8C:DB:10:C1 Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9 Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9 Certificate serial: 019C41A1A5E7BED649D72B6B39E57A67EA34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft Manifest number: 1146 Signing time: Mon 09 Feb 2026 09:00:38 +0000 Manifest this update: Mon 09 Feb 2026 09:00:38 +0000 Manifest next update: Tue 10 Feb 2026 09:00:38 +0000 Files and hashes: 1: GJLrnN9jbFArqwGuqjb_171b46A.roa (hash: d5vjSxzfWWDDhURSXFjGweH1v9cRHkRxXTKq0QW8dR4=) 2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: tNLsrsQKaRMrNuyfCJj0/XEM5dTAaxutyZa59WUl5WI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:a5:e7:be:d6:49:d7:2b:6b:39:e5:7a:67:ea:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9 Validity Not Before: Feb 9 09:00:38 2026 GMT Not After : Feb 10 09:00:38 2026 GMT Subject: CN=86a9cd675ad1cb39bad802d628a8e83c8cdb10c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:0d:19:34:ea:e0:a4:2d:f2:77:dc:bb:47: 61:c8:83:10:cb:a4:27:e8:29:36:0f:2b:e0:f5:ed: 7e:6a:70:04:15:d2:1a:e9:a8:24:ed:ca:d5:53:15: 4b:31:8c:52:3d:b5:08:f1:95:f2:d2:e1:40:a2:5d: be:70:57:54:04:3b:9b:a0:43:f8:43:f1:96:2a:92: 2c:8c:dd:3c:d2:4c:79:32:55:07:a6:e9:19:51:96: dc:3e:d2:62:0f:59:0f:14:af:85:27:bf:e5:54:3c: 77:f1:69:f2:4b:63:e4:76:79:d0:7e:d0:94:a7:da: 3a:06:44:72:4f:45:64:e9:fb:ef:c8:c9:e2:4e:b5: ca:fd:f4:cc:d1:c5:15:aa:1c:b7:b0:f5:40:23:b3: 66:93:5b:bb:9c:23:d2:ab:26:a4:6b:eb:62:36:fe: 35:86:d7:3e:89:bb:08:7a:5c:e3:48:59:fc:b7:4c: ee:f3:fb:04:68:7a:97:8a:49:fc:99:ad:5c:58:3d: 3e:d3:ca:de:0a:59:ec:f8:0e:bd:d1:fe:6c:2e:a4: 0c:17:2e:20:65:83:14:c8:f0:27:15:f1:5e:b0:4d: c5:14:fd:e1:94:1d:60:c2:d8:95:3f:fc:d1:63:3e: e7:b7:1a:4d:06:a5:ee:43:a1:a8:1a:a6:67:79:ab: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A9:CD:67:5A:D1:CB:39:BA:D8:02:D6:28:A8:E8:3C:8C:DB:10:C1 X509v3 Authority Key Identifier: keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:fa:ee:20:f1:d9:99:5a:77:1d:ad:23:03:64:4b:37:f5:5c: e9:18:59:3d:3f:0f:95:46:19:2d:af:73:76:18:d5:7d:d2:df: d2:89:fe:4a:23:02:b6:c9:4b:2c:36:b2:99:66:48:9e:26:b2: 06:87:2a:dc:18:88:23:7b:f3:0a:e7:04:85:bc:25:c3:e2:2f: cd:c7:8e:bf:ce:ed:d4:85:d1:e7:39:85:c0:4c:2e:a7:bd:52: f1:a1:64:eb:61:65:6c:1b:cd:4f:fc:fa:08:10:12:40:5e:71: 9b:bd:8e:a6:75:8a:96:ce:40:8f:c5:0a:68:81:fe:fd:cb:b8: 0f:0b:7e:a8:af:03:a2:64:e4:82:d0:6c:de:f2:e3:b5:b1:07: d3:5a:4f:32:16:80:66:1d:8d:2e:b9:72:5a:5c:ea:a4:ae:f3: 17:10:9b:d7:41:30:40:75:e6:02:43:13:fa:c3:4b:9e:fe:96: 1d:b7:a0:2d:0d:36:c3:47:c4:8f:68:d3:a1:e8:97:6d:65:46: 10:07:58:4d:86:8a:f5:7d:a8:a0:68:84:84:7a:22:9c:97:1a: 64:5a:99:23:ee:cf:c5:ce:7b:fa:b5:3c:c8:6d:47:0f:b8:34: c2:15:d0:d7:cb:b2:27:25:6d:c6:40:de:47:18:5d:33:98:5c: 9b:ff:2a:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoaXnvtZJ1ytrOeV6Z+o0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YTYzZGM4NjEyMGU4N2Y0Y2ZmOGM1OWFmMzI2MWU2ZTEy OTJmZDkwHhcNMjYwMjA5MDkwMDM4WhcNMjYwMjEwMDkwMDM4WjAzMTEwLwYDVQQD Eyg4NmE5Y2Q2NzVhZDFjYjM5YmFkODAyZDYyOGE4ZTgzYzhjZGIxMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohMNGTTq4KQt8nfcu0dhyIMQy6Qn 6Ck2Dyvg9e1+anAEFdIa6agk7crVUxVLMYxSPbUI8ZXy0uFAol2+cFdUBDuboEP4 Q/GWKpIsjN080kx5MlUHpukZUZbcPtJiD1kPFK+FJ7/lVDx38WnyS2PkdnnQftCU p9o6BkRyT0Vk6fvvyMniTrXK/fTM0cUVqhy3sPVAI7Nmk1u7nCPSqyaka+tiNv41 htc+ibsIelzjSFn8t0zu8/sEaHqXikn8ma1cWD0+08reClns+A690f5sLqQMFy4g ZYMUyPAnFfFesE3FFP3hlB1gwtiVP/zRYz7ntxpNBqXuQ6GoGqZneat5WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIapzWda0cs5utgC1iio6DyM2xDBMB8GA1UdIwQY MBaAFDSmPchhIOh/TP+MWa8yYebhKS/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEt ZmM3YTBlYTZiMGUyLzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEtZmM3YTBlYTZiMGUy LzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfruIPHZ mVp3Ha0jA2RLN/Vc6RhZPT8PlUYZLa9zdhjVfdLf0on+SiMCtslLLDaymWZIniay Bocq3BiII3vzCucEhbwlw+IvzceOv87t1IXR5zmFwEwup71S8aFk62FlbBvNT/z6 CBASQF5xm72OpnWKls5Aj8UKaIH+/cu4Dwt+qK8DomTkgtBs3vLjtbEH01pPMhaA Zh2NLrlyWlzqpK7zFxCb10EwQHXmAkMT+sNLnv6WHbegLQ02w0fEj2jToeiXbWVG EAdYTYaK9X2ooGiEhHoinJcaZFqZI+7Pxc57+rU8yG1HD7g0whXQ18uyJyVtxkDe RxhdM5hcm/8qEg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:50 2026 by rpki-client