This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json) Hash identifier: 3sbEHAcveV7kFUvfYO2SyYtlyCYCepFFKxJk/HMCOjw= Subject key identifier: E2:9B:85:55:FC:09:BB:2F:19:AC:CA:59:19:C9:0B:25:28:65:F1:D0 Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930 Certificate serial: 019BF34FB0A6EA8CA1FE04B669702EE791A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 04:00:44 +0000 Manifest this update: Sun 25 Jan 2026 04:00:44 +0000 Manifest next update: Mon 26 Jan 2026 04:00:44 +0000 Files and hashes: 1: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (hash: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ=) 2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: d9VcawfZ+mhgssAr5SxlizLqYgpHACndcWLmnLX1q+s=) 3: dsrIojswrtCAaVDG7x95eUR5UNs.roa (hash: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:b0:a6:ea:8c:a1:fe:04:b6:69:70:2e:e7:91:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930 Validity Not Before: Jan 25 04:00:44 2026 GMT Not After : Jan 26 04:00:44 2026 GMT Subject: CN=e29b8555fc09bb2f19acca5919c90b252865f1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:e2:85:52:cd:a7:5c:c4:8b:e1:34:ae:71: 5e:16:6b:6f:d6:80:9e:51:a9:a9:cd:3e:89:9e:01: 79:ac:f6:c0:af:93:e1:ee:ad:47:87:e3:d1:55:92: df:ba:43:e5:0c:9f:3b:43:3b:3a:12:9e:3b:59:59: 76:39:20:20:e2:a0:c0:d8:3a:09:60:f6:3d:8f:16: a4:33:6e:df:3a:7e:42:d7:88:ad:e3:eb:c2:45:ed: 20:45:ef:c3:ad:a6:27:75:77:2c:78:ea:38:fc:79: 44:e9:07:56:87:cd:0a:d5:2d:87:f8:0d:9e:e1:77: e7:e1:eb:96:17:96:61:ad:41:43:13:93:64:7a:78: 9c:a5:7c:85:e7:8c:74:6c:90:27:57:17:b1:01:11: df:b7:31:da:ca:cb:20:f1:50:ee:91:3e:6d:72:d8: c4:0f:e4:d7:27:c8:21:ed:50:f2:04:17:71:a5:a5: 82:dd:ad:b9:b9:3c:75:33:25:14:62:de:7b:b8:9b: 8c:ab:e4:b6:0b:c9:93:6e:87:b9:e9:b0:71:d4:81: 98:68:b2:72:33:83:b9:56:6a:0f:6b:89:4b:39:e3: 2c:0a:6b:05:96:2e:75:a9:25:71:35:bb:36:11:59: 45:bc:81:6c:6d:c2:45:ac:db:ff:c9:08:d7:e8:bc: fc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9B:85:55:FC:09:BB:2F:19:AC:CA:59:19:C9:0B:25:28:65:F1:D0 X509v3 Authority Key Identifier: keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e0:39:4c:9f:51:9f:0c:e8:42:5a:b3:bf:a9:19:58:30:b6: d2:b4:39:88:93:e2:29:56:0a:44:77:02:61:f6:a3:47:a4:2a: 60:c5:41:70:15:e2:8b:3d:db:f9:44:26:08:f1:c0:c4:25:7c: 9f:6c:c3:96:2b:9c:49:6e:68:6c:17:17:be:c3:11:9d:2a:7c: 4d:d0:22:4e:97:bb:4d:d1:75:15:34:cd:c0:1b:04:a0:aa:5b: cb:75:6f:2d:d0:6d:f1:ce:f2:10:1b:8f:ab:cd:a0:3a:8e:e5: 99:4d:6e:82:a9:ff:ae:b0:0e:87:03:16:18:10:02:2b:87:5e: ae:d5:97:4c:9e:9d:40:2e:33:03:77:85:f4:bb:a3:ed:87:2b: a9:60:b3:e0:d5:79:d4:fd:2c:cd:f7:66:4e:5b:2b:d7:e8:09: 6b:e1:56:c7:34:4e:d0:84:78:45:d9:c8:3d:3d:da:6b:57:9e: 3b:55:f7:27:5f:d6:ed:bf:48:57:f7:05:26:d5:2f:ae:25:3e: ad:d0:1f:d5:54:66:62:d3:e5:47:17:07:de:50:80:5a:2b:68: 59:77:0f:d2:89:1c:c6:49:68:cc:a8:79:1e:87:06:2e:95:69: 4c:ba:f3:8f:2c:a1:88:b1:c7:6f:7d:d9:ef:2a:59:4b:25:e0: 23:20:3b:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT7Cm6oyh/gS2aXAu55GjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjQxM2U1MzZkOTkzNTNmMGIwNTBlZTc0NmZmZGQyNGVk YjU5MzAwHhcNMjYwMTI1MDQwMDQ0WhcNMjYwMTI2MDQwMDQ0WjAzMTEwLwYDVQQD EyhlMjliODU1NWZjMDliYjJmMTlhY2NhNTkxOWM5MGIyNTI4NjVmMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArszihVLNp1zEi+E0rnFeFmtv1oCe UampzT6JngF5rPbAr5Ph7q1Hh+PRVZLfukPlDJ87Qzs6Ep47WVl2OSAg4qDA2DoJ YPY9jxakM27fOn5C14it4+vCRe0gRe/DraYndXcseOo4/HlE6QdWh80K1S2H+A2e 4Xfn4euWF5ZhrUFDE5NkenicpXyF54x0bJAnVxexARHftzHayssg8VDukT5tctjE D+TXJ8gh7VDyBBdxpaWC3a25uTx1MyUUYt57uJuMq+S2C8mTboe56bBx1IGYaLJy M4O5VmoPa4lLOeMsCmsFli51qSVxNbs2EVlFvIFsbcJFrNv/yQjX6Lz8qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKbhVX8CbsvGazKWRnJCyUoZfHQMB8GA1UdIwQY MBaAFDa0E+U22ZNT8LBQ7nRv/dJO21kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEt YTFmNTczZDA2OWRhLzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEtYTFmNTczZDA2OWRh LzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuA5TJ9R nwzoQlqzv6kZWDC20rQ5iJPiKVYKRHcCYfajR6QqYMVBcBXiiz3b+UQmCPHAxCV8 n2zDliucSW5obBcXvsMRnSp8TdAiTpe7TdF1FTTNwBsEoKpby3VvLdBt8c7yEBuP q82gOo7lmU1ugqn/rrAOhwMWGBACK4dertWXTJ6dQC4zA3eF9Luj7YcrqWCz4NV5 1P0szfdmTlsr1+gJa+FWxzRO0IR4RdnIPT3aa1eeO1X3J1/W7b9IV/cFJtUvriU+ rdAf1VRmYtPlRxcH3lCAWitoWXcP0okcxklozKh5HocGLpVpTLrzjyyhiLHHb33Z 7ypZSyXgIyA7Vg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:22:59 2026 by rpki-client