This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json) Hash identifier: jBDTxkcaLxc0xoI58Aiq1w16wQleO58zD1HzytX4onA= Subject key identifier: C7:08:61:67:28:A3:81:A3:4D:E6:D6:AF:D3:23:AD:89:C6:27:15:54 Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17 Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417 Certificate serial: 019BF57587372491A3E3D3CF53A96A59603F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft Manifest number: 0F85 Signing time: Sun 25 Jan 2026 14:01:18 +0000 Manifest this update: Sun 25 Jan 2026 14:01:18 +0000 Manifest next update: Mon 26 Jan 2026 14:01:18 +0000 Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: n6JtNww6cxcUr7utkKN+85hk6qF/TGaHXoMTl6XYXqw=) 2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:87:37:24:91:a3:e3:d3:cf:53:a9:6a:59:60:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417 Validity Not Before: Jan 25 14:01:18 2026 GMT Not After : Jan 26 14:01:18 2026 GMT Subject: CN=c708616728a381a34de6d6afd323ad89c6271554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a9:6d:55:9b:8d:e3:1f:ed:46:16:6d:5f:df: ed:83:98:dd:30:cb:32:9f:0d:8e:98:a9:db:17:70: aa:a6:d2:32:f6:14:4a:c7:36:be:45:54:be:4a:13: 16:3f:b7:0f:15:4f:c5:4d:f1:bf:65:86:4f:60:58: 32:86:56:7f:67:9a:4d:1c:83:6e:c9:db:39:94:94: 98:bd:00:23:1e:1f:38:5f:b9:85:48:16:62:55:c9: 99:54:82:70:7e:a0:d5:09:c5:09:85:b5:b3:13:47: c5:2a:a8:b2:46:be:bc:a9:18:df:1a:15:c3:f3:89: 3e:66:39:80:ca:c3:1c:0f:7f:ab:02:9e:6b:a5:d9: d8:2a:90:ae:ce:65:f2:f2:9e:27:95:20:43:c6:09: ae:af:3f:40:d5:9f:45:5b:f8:be:cf:c2:97:99:be: d0:24:43:f2:25:2f:19:9f:29:ad:62:46:8f:47:d0: 28:1a:a3:e8:d7:55:fe:0f:23:9e:7e:3a:4a:ed:96: 79:3b:3a:4a:03:f0:65:8f:97:df:bd:b4:91:40:44: 57:c2:ba:aa:ac:8c:3a:63:4a:a9:4e:b2:b3:c3:c4: 3d:d9:54:80:b2:eb:86:b9:39:12:db:22:e7:b2:3d: ff:29:1a:22:75:be:69:38:40:2a:0e:6d:1b:e9:96: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:08:61:67:28:A3:81:A3:4D:E6:D6:AF:D3:23:AD:89:C6:27:15:54 X509v3 Authority Key Identifier: keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:7d:79:f8:ba:65:14:78:f0:5e:a0:73:ac:85:4b:95:99:f8: 59:ad:97:bd:59:09:dd:3d:a1:53:60:8f:41:a1:8b:96:a0:c5: ec:99:93:1d:3a:33:29:bf:3b:74:71:be:e1:cb:fa:1e:fd:58: b8:ef:bc:36:68:32:80:f7:f8:72:fe:ae:77:d7:b3:79:2c:9c: d8:45:53:77:b6:ce:2e:b9:5d:49:77:d2:10:b1:0a:7d:e4:c2: 27:dd:17:c9:91:1b:24:ca:93:ff:de:fc:85:a7:23:a2:cd:93: c5:30:ae:66:51:07:24:89:d0:4d:c3:a1:10:65:c0:78:ff:a5: 1e:d0:e9:c3:19:2b:bd:d6:c6:51:a3:61:9a:ae:3d:0f:4e:e5: e7:81:50:be:52:30:43:31:ea:60:94:90:c7:d2:9c:81:45:4c: 02:a6:21:5f:79:be:38:f1:70:49:07:56:8f:11:95:dc:09:36: 9d:d7:01:51:35:9a:3f:c8:8b:41:27:ba:66:1a:44:a4:26:d8: 74:08:b8:62:df:96:b5:cb:01:71:57:9e:c3:8d:ec:1a:7a:a7: 53:83:86:62:f7:d6:5e:38:9f:05:81:f5:a4:ff:a7:b2:1f:e5: 64:74:62:dc:47:72:89:c1:ff:df:b4:a2:ef:1c:7a:3a:a0:fa: ca:7c:aa:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dYc3JJGj49PPU6lqWWA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjVmNzU0MDA0ZWRiZTMwYWI4Y2FmZWVmOWY3MTMyY2Iw YzI0MTcwHhcNMjYwMTI1MTQwMTE4WhcNMjYwMTI2MTQwMTE4WjAzMTEwLwYDVQQD EyhjNzA4NjE2NzI4YTM4MWEzNGRlNmQ2YWZkMzIzYWQ4OWM2MjcxNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKltVZuN4x/tRhZtX9/tg5jdMMsy nw2OmKnbF3CqptIy9hRKxza+RVS+ShMWP7cPFU/FTfG/ZYZPYFgyhlZ/Z5pNHINu yds5lJSYvQAjHh84X7mFSBZiVcmZVIJwfqDVCcUJhbWzE0fFKqiyRr68qRjfGhXD 84k+ZjmAysMcD3+rAp5rpdnYKpCuzmXy8p4nlSBDxgmurz9A1Z9FW/i+z8KXmb7Q JEPyJS8ZnymtYkaPR9AoGqPo11X+DyOefjpK7ZZ5OzpKA/Blj5ffvbSRQERXwrqq rIw6Y0qpTrKzw8Q92VSAsuuGuTkS2yLnsj3/KRoidb5pOEAqDm0b6ZYvmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcIYWcoo4GjTebWr9MjrYnGJxVUMB8GA1UdIwQY MBaAFDcl91QATtvjCrjK/u+fcTLLDCQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMt NzRhZmMzMDQzYjc4LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMtNzRhZmMzMDQzYjc4 LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFX15+Lpl FHjwXqBzrIVLlZn4Wa2XvVkJ3T2hU2CPQaGLlqDF7JmTHTozKb87dHG+4cv6Hv1Y uO+8NmgygPf4cv6ud9ezeSyc2EVTd7bOLrldSXfSELEKfeTCJ90XyZEbJMqT/978 hacjos2TxTCuZlEHJInQTcOhEGXAeP+lHtDpwxkrvdbGUaNhmq49D07l54FQvlIw QzHqYJSQx9KcgUVMAqYhX3m+OPFwSQdWjxGV3Ak2ndcBUTWaP8iLQSe6ZhpEpCbY dAi4Yt+WtcsBcVeew43sGnqnU4OGYvfWXjifBYH1pP+nsh/lZHRi3EdyicH/37Si 7xx6OqD6ynyqLg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:43:37 2026 by rpki-client