This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft File: N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json) Hash identifier: Fl6qdv1KE8k20m0TDmapiiAaZ3NX7RUSIomTsDBkqKY= Subject key identifier: AB:A5:22:1D:33:60:98:22:7A:61:25:98:49:23:27:7C:A5:7B:3D:CD Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e Certificate serial: 019BF2E225D80657AF730B374856F3C75103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 02:01:05 +0000 Manifest this update: Sun 25 Jan 2026 02:01:05 +0000 Manifest next update: Mon 26 Jan 2026 02:01:05 +0000 Files and hashes: 1: 2a6CDxxUrQGBmDt9bRl1JF_nyvc.roa (hash: ZSsnNRN6qb6nlLwR6tJUMByyx0s8BQTn0qVgNGvcWZc=) 2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: 5Hgg3MDZgvMkVqHD74EYnsyzf8zpdqnhDDPF1xGrAgk=) 3: Ol3Cdb1XyRY6urO3sw4yVDwme94.roa (hash: tfUvfQzgGXJJiO1C8x+8AL672Tfl8NCYZs94wHKASfw=) 4: fJoKECLKUeD5DLyAzQSfUcqojno.roa (hash: 3zNqg/msTStClL6VJhx0R8PHg/rjNiAgrUFnWqVj+Y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:25:d8:06:57:af:73:0b:37:48:56:f3:c7:51:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e Validity Not Before: Jan 25 02:01:05 2026 GMT Not After : Jan 26 02:01:05 2026 GMT Subject: CN=aba5221d336098227a6125984923277ca57b3dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:70:19:0c:2f:15:0f:86:f2:14:2a:9c:af:4d: 9a:a6:a4:8e:cd:6e:15:0f:a5:6a:84:56:db:86:7a: 5c:80:65:7a:12:89:cc:35:4e:c6:f9:ee:ad:f9:2d: 11:11:bf:5f:1e:78:72:02:07:91:39:d8:e4:f0:4b: 32:e5:6a:b3:22:01:bf:a5:c1:62:15:e2:5f:89:4d: 71:74:f3:29:d0:f9:43:80:bf:36:6b:91:8b:87:b8: d4:1b:7f:6c:5d:5f:ac:bc:6f:7c:ed:23:10:47:51: 56:e0:7e:c9:69:9b:00:e7:58:bb:41:da:f1:e3:0a: 8e:81:69:11:af:2d:f3:e5:44:9e:b9:f2:4d:87:0c: 84:34:40:c9:5d:db:11:68:21:2c:99:3d:39:76:6d: 07:c4:40:f0:37:5e:04:b8:e0:f7:63:23:23:fa:78: f5:01:a9:d3:40:d0:32:d9:d6:2f:f2:5d:41:9b:e5: 8c:52:29:91:f9:31:ff:10:78:f4:59:0a:db:88:98: a7:66:28:3e:ad:af:0c:9d:69:b2:52:81:9e:87:9a: 54:fa:ec:3a:c3:cb:fb:42:55:c6:4b:40:b6:be:3d: 45:22:09:ac:a4:10:07:4f:85:05:3f:21:ec:d8:ac: bb:cd:ee:4f:b0:e3:a9:3f:30:03:2d:d2:ef:e3:a0: 8f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A5:22:1D:33:60:98:22:7A:61:25:98:49:23:27:7C:A5:7B:3D:CD X509v3 Authority Key Identifier: keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:05:37:48:23:af:ec:01:7d:55:4d:41:dc:12:3d:56:58:be: 0a:b2:73:77:a3:97:8b:75:73:58:27:a2:fa:88:e3:9a:a6:64: 18:b9:3d:75:fd:99:84:38:86:4d:51:0e:3c:11:8a:77:b0:40: 82:b3:32:ea:b3:0c:9e:02:c7:93:b1:67:90:ba:10:ac:8d:5e: b2:43:01:39:e6:46:13:99:25:b2:bb:5b:97:5e:ee:da:bd:e2: 33:64:a9:77:8f:e5:db:4c:13:8c:cd:3d:46:34:39:75:bf:ea: 30:94:03:3b:6a:2b:6b:f8:66:c9:d9:a3:bb:11:56:fb:07:7b: 82:63:f0:b0:20:12:56:11:66:db:d6:54:86:74:43:1f:80:de: 7c:d2:06:c5:82:1c:48:f7:47:16:38:9a:dc:f8:ce:ae:d5:6f: c1:1b:45:d7:76:3e:ef:75:ef:35:3c:e2:3d:7a:da:bd:9d:bc: 7e:5e:c7:88:e0:5a:94:12:7a:70:3b:76:8c:12:95:f1:54:89: 9f:b4:1b:76:eb:85:41:22:62:ad:c4:10:9e:fa:44:93:5f:54: 70:dc:d8:7d:77:3c:e8:e7:2a:c9:33:4e:48:42:bc:d6:6d:4b: ac:62:e1:64:38:bf:bd:6e:f0:53:81:45:aa:27:be:c1:e3:46: fc:bd:0d:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4iXYBlevcws3SFbzx1EDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OGFhNmVkNGI2Y2FjNmIzYTUyOTYxYmNmYTIyOWNmZGEw MDA4MGUwHhcNMjYwMTI1MDIwMTA1WhcNMjYwMTI2MDIwMTA1WjAzMTEwLwYDVQQD EyhhYmE1MjIxZDMzNjA5ODIyN2E2MTI1OTg0OTIzMjc3Y2E1N2IzZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HAZDC8VD4byFCqcr02apqSOzW4V D6VqhFbbhnpcgGV6EonMNU7G+e6t+S0REb9fHnhyAgeROdjk8Esy5WqzIgG/pcFi FeJfiU1xdPMp0PlDgL82a5GLh7jUG39sXV+svG987SMQR1FW4H7JaZsA51i7Qdrx 4wqOgWkRry3z5USeufJNhwyENEDJXdsRaCEsmT05dm0HxEDwN14EuOD3YyMj+nj1 AanTQNAy2dYv8l1Bm+WMUimR+TH/EHj0WQrbiJinZig+ra8MnWmyUoGeh5pU+uw6 w8v7QlXGS0C2vj1FIgmspBAHT4UFPyHs2Ky7ze5PsOOpPzADLdLv46CPuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKulIh0zYJgiemElmEkjJ3ylez3NMB8GA1UdIwQY MBaAFDeKpu1LbKxrOlKWG8+iKc/aAAgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAt ZjRiOWRhNDgwZWUyLzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAtZjRiOWRhNDgwZWUy LzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgU3SCOv 7AF9VU1B3BI9Vli+CrJzd6OXi3VzWCei+ojjmqZkGLk9df2ZhDiGTVEOPBGKd7BA grMy6rMMngLHk7FnkLoQrI1eskMBOeZGE5klsrtbl17u2r3iM2Spd4/l20wTjM09 RjQ5db/qMJQDO2ora/hmydmjuxFW+wd7gmPwsCASVhFm29ZUhnRDH4DefNIGxYIc SPdHFjia3PjOrtVvwRtF13Y+73XvNTziPXravZ28fl7HiOBalBJ6cDt2jBKV8VSJ n7QbduuFQSJircQQnvpEk19UcNzYfXc86OcqyTNOSEK81m1LrGLhZDi/vW7wU4FF qie+weNG/L0NuA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:14:53 2026 by rpki-client