This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json) Hash identifier: b0UkxuRvJCCK47875aOeRR8Rc9kRzYklJizRnn+wFPE= Subject key identifier: 8A:54:B8:35:5D:9A:AF:C6:C2:45:87:10:90:CE:14:13:B8:6B:8D:16 Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e Certificate serial: 019BF8769644D8A08577F257934CD848F0AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft Manifest number: 0F61 Signing time: Mon 26 Jan 2026 04:01:19 +0000 Manifest this update: Mon 26 Jan 2026 04:01:19 +0000 Manifest next update: Tue 27 Jan 2026 04:01:19 +0000 Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: UHQKsoQS8jDnUnknGtrfaF2LU67/Hjdwy0NOy0W8w3k=) 2: VqjhvtfIA_j9AGS9yJpDBA7pkTI.roa (hash: IZDq9Jb7er+qUs+ORA/YfhCgdw6n3hVb81p9+8Go++s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:96:44:d8:a0:85:77:f2:57:93:4c:d8:48:f0:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e Validity Not Before: Jan 26 04:01:19 2026 GMT Not After : Jan 27 04:01:19 2026 GMT Subject: CN=8a54b8355d9aafc6c245871090ce1413b86b8d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:f9:f8:9d:36:34:0b:93:d7:96:a3:84:94: af:18:e1:36:3d:06:4b:df:60:00:97:af:b9:d1:c7: 0a:3a:0f:45:2b:1f:80:d0:65:16:25:4d:04:7f:e5: a8:51:d3:89:2f:0f:c5:da:90:40:71:54:d1:09:ce: 8a:cf:84:ef:71:88:f8:f0:72:9b:a1:9c:3f:a8:f7: 13:13:37:6a:47:d2:82:1a:f4:d9:0d:6f:9f:a7:9c: 06:dc:6d:1a:bc:c1:eb:ef:09:a0:24:3f:37:62:8c: c3:49:b6:d2:8b:eb:d0:61:de:be:3b:19:49:e3:10: 59:f4:29:24:60:b0:bb:6b:36:6c:0c:ec:1d:8e:b5: 73:b4:91:3f:f4:f4:28:85:91:67:d9:2c:a4:43:3c: bc:30:25:25:4f:1c:6b:5b:b3:fd:0f:d5:7a:b4:63: 5d:bd:72:f6:76:49:1b:66:b1:dd:11:f7:dc:80:3b: 18:ae:0b:fe:50:15:59:5c:cc:5b:20:4a:0e:1c:58: 8f:4d:9f:fb:eb:45:57:a1:82:ae:a4:79:1c:08:9d: 4f:1d:b7:3e:37:45:5f:1b:d7:9d:2c:44:61:45:dd: ef:58:d7:67:1c:7a:24:43:20:fc:94:91:bb:00:5d: 62:42:d9:29:6c:f0:96:2c:5a:69:2f:2e:d8:ae:44: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:54:B8:35:5D:9A:AF:C6:C2:45:87:10:90:CE:14:13:B8:6B:8D:16 X509v3 Authority Key Identifier: keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:37:e3:1c:ac:23:de:73:c8:23:57:2f:dd:fc:f6:ba:7e:1b: dc:04:f8:bd:e3:80:e1:a4:03:5e:19:5c:23:17:86:af:6b:86: cb:e6:00:dd:26:9b:b0:cf:2c:e2:5e:52:89:48:e3:28:75:2b: 7a:43:da:91:e4:ec:d6:80:3c:7f:fb:78:e0:13:ca:8d:62:4d: 40:06:c2:44:d1:6a:df:5a:5e:7c:ba:47:1b:b7:08:40:c0:f0: 27:08:bd:77:28:2d:27:11:20:a2:40:73:64:69:d7:b7:1a:7b: fa:53:dd:19:80:08:ab:d4:21:14:29:ea:36:55:44:87:66:ac: 38:dc:49:f4:b1:43:7c:e8:54:ee:ac:0e:62:12:86:78:3d:ec: c4:2c:7b:f5:c8:14:6e:fa:a4:02:bf:cd:e1:d8:d3:b4:3a:fc: 1a:47:e0:2f:1d:64:b9:8b:c2:4d:f0:28:28:3c:c3:76:a1:89: 2a:fd:05:dc:07:35:9f:d4:b0:3c:c4:35:17:a6:54:3c:e5:98: b3:ec:8b:e5:7c:74:67:00:6a:a3:c1:e5:80:f4:f9:72:79:c2: d2:ec:54:20:cf:45:c4:98:87:e2:10:97:11:13:88:87:ab:e5: 36:46:86:88:9c:cf:23:34:bf:f1:d7:98:af:d5:44:70:c7:c7: 98:93:9a:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dpZE2KCFd/JXk0zYSPCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTExMGI1OTM2MmY2NzNlYWUzM2I2NmVlN2FlYTNjNDAy ODI5NGUwHhcNMjYwMTI2MDQwMTE5WhcNMjYwMTI3MDQwMTE5WjAzMTEwLwYDVQQD Eyg4YTU0YjgzNTVkOWFhZmM2YzI0NTg3MTA5MGNlMTQxM2I4NmI4ZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVP5+J02NAuT15ajhJSvGOE2PQZL 32AAl6+50ccKOg9FKx+A0GUWJU0Ef+WoUdOJLw/F2pBAcVTRCc6Kz4TvcYj48HKb oZw/qPcTEzdqR9KCGvTZDW+fp5wG3G0avMHr7wmgJD83YozDSbbSi+vQYd6+OxlJ 4xBZ9CkkYLC7azZsDOwdjrVztJE/9PQohZFn2SykQzy8MCUlTxxrW7P9D9V6tGNd vXL2dkkbZrHdEffcgDsYrgv+UBVZXMxbIEoOHFiPTZ/760VXoYKupHkcCJ1PHbc+ N0VfG9edLERhRd3vWNdnHHokQyD8lJG7AF1iQtkpbPCWLFppLy7YrkR6AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpUuDVdmq/GwkWHEJDOFBO4a40WMB8GA1UdIwQY MBaAFDThELWTYvZz6uM7Zu566jxAKClOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYt MWJiMjdjNWQzOTdlLzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYtMWJiMjdjNWQzOTdl LzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETfjHKwj 3nPII1cv3fz2un4b3AT4veOA4aQDXhlcIxeGr2uGy+YA3SabsM8s4l5SiUjjKHUr ekPakeTs1oA8f/t44BPKjWJNQAbCRNFq31pefLpHG7cIQMDwJwi9dygtJxEgokBz ZGnXtxp7+lPdGYAIq9QhFCnqNlVEh2asONxJ9LFDfOhU7qwOYhKGeD3sxCx79cgU bvqkAr/N4djTtDr8GkfgLx1kuYvCTfAoKDzDdqGJKv0F3Ac1n9SwPMQ1F6ZUPOWY s+yL5Xx0ZwBqo8HlgPT5cnnC0uxUIM9FxJiH4hCXEROIh6vlNkaGiJzPIzS/8deY r9VEcMfHmJOaIg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:12 2026 by rpki-client