This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json) Hash identifier: l2vAbKXxHCmopX4FxZxlLFpc5rv8qapVfsGBOTklA0I= Subject key identifier: AC:76:E9:BE:2E:06:A0:AB:60:72:B4:AD:C0:A0:A0:1E:E9:4B:3E:8C Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09 Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909 Certificate serial: 019BF3504669E2541C87F68AF6240592EF12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft Manifest number: 1568 Signing time: Sun 25 Jan 2026 04:01:22 +0000 Manifest this update: Sun 25 Jan 2026 04:01:22 +0000 Manifest next update: Mon 26 Jan 2026 04:01:22 +0000 Files and hashes: 1: 7CJ50Z4jSScacH7m-JbxhQfRAT8.roa (hash: DeZQIphwpcBhptFjXao8KHzyokPEFqwFhAKphJ/giEM=) 2: JOjsmVlflGoiSPZ3EdXzNHqwPxQ.roa (hash: x1TQNb6OLI+ULwCdM0E8bCboywBE0qslaF9HtDCN484=) 3: YWzwe319rfYXpYuP3IvXqCx8tZo.roa (hash: 1w3/nvkpGpApD4pL14BdnheXsuPZSDSH4dgaXoYHNHo=) 4: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: aiDf+uCa+tpxoWTGldA+hBjRxNzg6KlZ8BdT31FVMrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:46:69:e2:54:1c:87:f6:8a:f6:24:05:92:ef:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909 Validity Not Before: Jan 25 04:01:22 2026 GMT Not After : Jan 26 04:01:22 2026 GMT Subject: CN=ac76e9be2e06a0ab6072b4adc0a0a01ee94b3e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:18:ee:c2:1e:0b:c6:84:2a:60:2a:77:b9: 17:c1:40:9f:81:ef:d1:ac:22:8a:17:dc:e7:82:e5: d5:ff:03:0c:0e:63:fd:0c:d5:d4:7c:62:2c:63:71: 83:9f:8f:46:34:41:1d:17:4e:17:e8:e9:fc:54:36: 77:0b:6c:b8:de:5b:3b:ab:0c:a8:a3:1e:35:63:ce: 50:73:24:b7:07:6b:14:7a:fa:09:b4:2e:b7:2c:81: 43:c7:57:a7:aa:72:b0:60:24:6a:2c:0f:97:81:86: 27:00:ee:ad:50:3c:ab:c9:69:8e:62:e4:3b:4a:5c: cb:5b:ae:ec:73:c1:e3:24:ad:0d:e7:df:31:82:06: 09:06:d7:49:c8:e9:cc:16:85:17:0e:c8:65:2e:60: 09:f6:15:05:c6:8d:38:ec:ff:55:e0:68:39:90:f8: a7:cf:68:4d:61:6f:c4:7e:7f:24:ce:d5:fa:9d:d8: d0:3a:f4:81:d7:78:9f:4d:5b:41:6a:09:4f:c4:88: 51:5c:78:84:95:56:89:68:78:fb:03:19:cf:02:e8: a3:10:f5:aa:76:86:73:13:51:a4:10:8d:e5:33:a3: 34:35:9c:47:92:1f:ee:b3:8c:f2:62:64:df:43:57: 7d:a7:62:8b:47:96:0f:35:ce:c3:37:82:a1:1e:2f: 85:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:76:E9:BE:2E:06:A0:AB:60:72:B4:AD:C0:A0:A0:1E:E9:4B:3E:8C X509v3 Authority Key Identifier: keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ef:6b:89:f0:55:0d:a4:8f:d1:e8:a7:03:0a:a2:38:03:95: 97:9e:b1:e0:2b:22:31:27:ee:ee:01:c1:32:cc:42:9f:dd:83: c6:20:1e:cd:77:5f:1a:35:70:be:71:5b:3a:7b:ab:eb:7d:83: 69:98:56:c5:28:ec:3a:fb:b4:68:08:ea:38:2a:fe:f8:45:36: 41:b3:a3:9c:37:27:49:d2:a2:fe:71:88:50:e3:80:3e:e4:77: 62:a5:33:08:cd:d9:17:b8:21:32:90:ad:e1:32:31:0c:a8:ce: 9a:ac:54:e4:01:9f:2d:63:70:c5:f8:16:92:8c:47:83:80:c5: 18:7b:fb:39:99:b2:22:cf:5c:4d:e1:d1:f0:6d:90:49:ff:b9: 62:1f:60:a0:a2:8d:e8:45:67:36:2f:95:c9:d1:73:02:8b:75: 9d:d9:e7:40:4b:15:d8:23:a9:c3:5d:92:c6:ee:6c:f7:f2:a8: cd:8e:ad:d6:04:02:39:eb:b3:f8:47:2f:e0:64:75:3b:c1:55: e0:90:f3:ad:99:70:fb:00:f3:2f:37:6f:22:00:0c:31:58:b5: 91:e5:d0:a8:e4:9b:d4:95:0c:37:b6:9a:39:5a:92:be:1a:54: 17:35:21:8a:7b:af:2e:57:25:d2:7f:ea:1a:bc:07:44:c5:cb: 30:d5:8c:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUEZp4lQch/aK9iQFku8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMWJkOTczMmU2Y2RkNmU3NDk0ZDc5MTg3ZmNhODU1YjUx OTk5MDkwHhcNMjYwMTI1MDQwMTIyWhcNMjYwMTI2MDQwMTIyWjAzMTEwLwYDVQQD EyhhYzc2ZTliZTJlMDZhMGFiNjA3MmI0YWRjMGEwYTAxZWU5NGIzZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0MY7sIeC8aEKmAqd7kXwUCfge/R rCKKF9znguXV/wMMDmP9DNXUfGIsY3GDn49GNEEdF04X6On8VDZ3C2y43ls7qwyo ox41Y85QcyS3B2sUevoJtC63LIFDx1enqnKwYCRqLA+XgYYnAO6tUDyryWmOYuQ7 SlzLW67sc8HjJK0N598xggYJBtdJyOnMFoUXDshlLmAJ9hUFxo047P9V4Gg5kPin z2hNYW/Efn8kztX6ndjQOvSB13ifTVtBaglPxIhRXHiElVaJaHj7AxnPAuijEPWq doZzE1GkEI3lM6M0NZxHkh/us4zyYmTfQ1d9p2KLR5YPNc7DN4KhHi+FNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKx26b4uBqCrYHK0rcCgoB7pSz6MMB8GA1UdIwQY MBaAFJ8b2XMubN1udJTXkYf8qFW1GZkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTct ZDhiODIwMmQ3Nzg2LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTctZDhiODIwMmQ3Nzg2 LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUu9rifBV DaSP0einAwqiOAOVl56x4CsiMSfu7gHBMsxCn92DxiAezXdfGjVwvnFbOnur632D aZhWxSjsOvu0aAjqOCr++EU2QbOjnDcnSdKi/nGIUOOAPuR3YqUzCM3ZF7ghMpCt 4TIxDKjOmqxU5AGfLWNwxfgWkoxHg4DFGHv7OZmyIs9cTeHR8G2QSf+5Yh9goKKN 6EVnNi+VydFzAot1ndnnQEsV2COpw12Sxu5s9/KozY6t1gQCOeuz+Ecv4GR1O8FV 4JDzrZlw+wDzLzdvIgAMMVi1keXQqOSb1JUMN7aaOVqSvhpUFzUhinuvLlcl0n/q GrwHRMXLMNWMNg== -----END CERTIFICATE-----Generated at Sun Jan 25 06:12:07 2026 by rpki-client