This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json) Hash identifier: q5bfdGsWxhkYDfn86Uvctnxf7SicnB8CPqgryYtCax4= Subject key identifier: 03:27:F8:C9:32:21:60:AA:D4:81:A1:20:7F:7F:39:C9:8D:1C:89:3C Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18 Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718 Certificate serial: 019C43C6FE44FAA99E448928EA4F357724B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft Manifest number: 02B0 Signing time: Mon 09 Feb 2026 19:00:40 +0000 Manifest this update: Mon 09 Feb 2026 19:00:40 +0000 Manifest next update: Tue 10 Feb 2026 19:00:40 +0000 Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: EdRfIP81owxfp/hnow/+C+kQKbkSrUgB0dLP/xfwo6U=) 2: gpmwXd1BMpqeIv12eURMuR5vqrE.roa (hash: MaL/Mi+QAF5aIJfDW1OwguAqm+8Ed9pFbma9rR1Um2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:fe:44:fa:a9:9e:44:89:28:ea:4f:35:77:24:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718 Validity Not Before: Feb 9 19:00:40 2026 GMT Not After : Feb 10 19:00:40 2026 GMT Subject: CN=0327f8c9322160aad481a1207f7f39c98d1c893c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:d7:88:f1:cd:a5:a0:70:c4:b3:3a:fe:f2: cd:ac:52:4b:f5:8b:bc:eb:c0:46:9f:9e:15:ba:dd: 9c:4c:38:6f:40:c4:bd:fc:97:01:5d:bf:83:0e:1b: 62:26:db:db:7c:9d:1c:c6:51:2a:9c:df:84:42:05: 3a:28:da:50:d1:a4:55:a6:41:d4:54:b5:cb:b8:3e: e1:b7:15:da:37:50:90:dc:bc:48:41:ca:d9:b1:f2: 95:31:14:56:e4:49:f9:11:fb:0d:05:b6:7d:6c:2f: f0:46:8d:60:e9:5f:39:18:a8:73:23:27:53:1e:1b: 09:4a:bc:ef:56:21:c7:78:4e:61:0d:34:54:f8:ec: f5:d3:e2:c6:53:1b:2c:d5:63:1a:06:60:27:87:a0: 2f:d3:a4:7c:eb:09:2f:1f:8c:35:ab:6f:ea:88:92: b3:84:42:1d:2f:a0:4c:a9:7c:85:ca:44:41:87:95: 56:56:a4:07:28:99:b6:68:25:f2:0c:a5:8d:35:ab: 7f:77:ab:97:10:fd:6f:b5:f6:30:74:ee:32:b0:bc: 86:0a:4d:9b:a0:28:bb:58:1b:a1:ac:c8:e8:a9:2f: cd:1a:2a:bf:5b:54:0e:01:92:3f:29:47:d7:52:7a: cf:20:c2:3d:45:b3:24:a3:88:c7:45:8d:dc:09:8d: cd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:27:F8:C9:32:21:60:AA:D4:81:A1:20:7F:7F:39:C9:8D:1C:89:3C X509v3 Authority Key Identifier: keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3a:e3:a4:29:64:95:aa:58:e8:74:64:88:1d:ba:40:ff:db: b5:15:c1:8c:90:6c:e4:ff:b2:c4:f6:b6:f9:b2:df:9b:19:6e: 3c:28:65:05:47:3d:89:13:42:32:b5:a1:d7:9c:4e:48:0b:67: e7:27:ab:3d:d3:db:14:97:bd:45:f6:e5:0a:95:6f:ba:96:f5: ff:29:53:9a:23:c2:ea:44:70:1b:1a:f7:ad:e1:b8:99:c8:d7: 10:a9:f5:a0:8e:09:1c:e4:6d:1f:a0:c8:68:9e:78:04:1c:53: 41:c0:a6:3b:29:aa:f2:0a:d9:9d:48:3f:ad:7c:f3:72:08:7f: 62:12:c4:ce:46:20:c7:7a:f7:f3:f7:a9:fe:65:9e:b2:a3:d0: b5:e4:ff:87:2c:b2:a0:65:50:c5:e9:dd:47:a2:42:30:f0:51: 76:b8:d2:74:49:f1:30:02:84:e6:45:93:96:0e:0d:d7:79:97: ff:87:ed:ec:1b:2b:76:4b:01:3e:e1:10:76:ed:40:35:fa:bf: 0a:74:47:07:4e:ba:97:4f:6c:61:66:c9:78:ed:6a:9e:b5:56: 83:5e:84:76:f1:30:6a:cf:65:81:af:7b:c4:b3:32:8c:f8:49: cb:f6:41:75:1f:1e:6e:17:8a:21:cc:ea:58:b4:11:37:2a:da: d5:a9:df:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxv5E+qmeRIko6k81dyS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjQxOGYwMDRkNTg0ZjJmZTI2Yzg0MjM1ZTY2YmI2YjI5 NDI3MTgwHhcNMjYwMjA5MTkwMDQwWhcNMjYwMjEwMTkwMDQwWjAzMTEwLwYDVQQD EygwMzI3ZjhjOTMyMjE2MGFhZDQ4MWExMjA3ZjdmMzljOThkMWM4OTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cbXiPHNpaBwxLM6/vLNrFJL9Yu8 68BGn54Vut2cTDhvQMS9/JcBXb+DDhtiJtvbfJ0cxlEqnN+EQgU6KNpQ0aRVpkHU VLXLuD7htxXaN1CQ3LxIQcrZsfKVMRRW5En5EfsNBbZ9bC/wRo1g6V85GKhzIydT HhsJSrzvViHHeE5hDTRU+Oz10+LGUxss1WMaBmAnh6Av06R86wkvH4w1q2/qiJKz hEIdL6BMqXyFykRBh5VWVqQHKJm2aCXyDKWNNat/d6uXEP1vtfYwdO4ysLyGCk2b oCi7WBuhrMjoqS/NGiq/W1QOAZI/KUfXUnrPIMI9RbMko4jHRY3cCY3NoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMn+MkyIWCq1IGhIH9/OcmNHIk8MB8GA1UdIwQY MBaAFDckGPAE1YTy/ibIQjXma7aylCcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85M2M4NTEtYmFhNi00MTIxLWJjZGQt YTEzNmEzMjg5NWMwLzEvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85M2M4NTEtYmFhNi00MTIxLWJjZGQtYTEzNmEzMjg5NWMw LzEvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDrjpClk lapY6HRkiB26QP/btRXBjJBs5P+yxPa2+bLfmxluPChlBUc9iRNCMrWh15xOSAtn 5yerPdPbFJe9RfblCpVvupb1/ylTmiPC6kRwGxr3reG4mcjXEKn1oI4JHORtH6DI aJ54BBxTQcCmOymq8grZnUg/rXzzcgh/YhLEzkYgx3r38/ep/mWesqPQteT/hyyy oGVQxendR6JCMPBRdrjSdEnxMAKE5kWTlg4N13mX/4ft7BsrdksBPuEQdu1ANfq/ CnRHB066l09sYWbJeO1qnrVWg16EdvEwas9lga97xLMyjPhJy/ZBdR8ebheKIczq WLQRNyra1anfyA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:55 2026 by rpki-client