This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json) Hash identifier: bAFY8cC4l0jxo7V1oOxOBowgzXTZ5UlRQu+GPES7pqM= Subject key identifier: 56:6D:A3:CA:A8:5C:38:A5:B8:57:A4:46:65:09:53:6F:07:E2:CE:75 Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03 Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603 Certificate serial: 019BF650CA218EA49AFF0AFCC655C158EE44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 18:00:48 +0000 Manifest this update: Sun 25 Jan 2026 18:00:48 +0000 Manifest next update: Mon 26 Jan 2026 18:00:48 +0000 Files and hashes: 1: WUA-8043AhVJq3-rCBC1_Z6ym2Q.roa (hash: uFmweGUa9mThJ5dM41jk0vxxDTuGE59oPYV9R1R2bgQ=) 2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: pIHjmXp8THpPMNQ23xcHj59bwdQ33KE3hLewdBphnsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:ca:21:8e:a4:9a:ff:0a:fc:c6:55:c1:58:ee:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603 Validity Not Before: Jan 25 18:00:48 2026 GMT Not After : Jan 26 18:00:48 2026 GMT Subject: CN=566da3caa85c38a5b857a4466509536f07e2ce75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:b4:c3:ac:56:01:4a:96:93:9d:9a:6c:5f: a6:28:b7:1d:92:70:3d:30:67:99:d4:f9:ad:4d:b8: 05:43:3e:3e:ed:0f:61:97:f5:fd:2f:e4:1f:9f:60: bf:b5:e8:1d:fc:6d:82:6f:80:15:92:f2:a2:39:ea: 1f:45:0f:10:fc:86:22:90:af:b1:c5:5d:f0:d7:9a: 55:2c:29:35:df:19:11:68:a3:50:8e:db:4b:8b:ee: 52:c0:60:ad:0e:a2:12:9b:0a:f7:de:a2:ee:b1:39: c9:de:70:65:58:c1:8a:72:b2:32:52:10:2b:fd:0f: 2a:79:36:aa:60:d1:2b:2b:69:fd:0e:12:43:31:32: fc:0b:86:98:34:56:e1:43:15:4e:0e:6f:90:39:06: 9c:9b:12:a9:fd:8b:65:b3:5f:4f:6c:75:d8:9f:dd: 28:7d:bf:a6:bd:a1:a1:74:07:e4:42:f6:27:0b:13: 8c:a0:f5:16:96:1b:65:1e:b0:36:93:9c:9c:be:af: 39:02:ed:cb:51:39:28:b2:f4:4f:5e:ed:cf:30:50: 8d:ad:85:d5:75:53:56:66:33:63:87:ec:1d:c5:0c: c5:d1:ea:fd:9f:ce:9a:69:0e:0f:40:b8:79:7a:d6: 2b:27:5e:6e:4b:17:d3:dc:1d:48:a6:e5:d3:21:69: 03:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6D:A3:CA:A8:5C:38:A5:B8:57:A4:46:65:09:53:6F:07:E2:CE:75 X509v3 Authority Key Identifier: keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:dc:50:1b:3d:97:07:8c:45:c6:9d:c1:94:87:1c:08:6a:2c: f9:ee:53:14:33:58:02:06:a6:6e:a4:11:f7:67:7a:87:e1:4f: 1f:17:99:1e:7e:6d:2d:8c:b2:65:93:e3:54:9f:8c:e3:c8:f3: b9:0e:e4:72:56:08:a5:be:67:fe:ea:40:b5:02:62:1f:9b:19: 86:76:a6:95:ab:33:3b:17:85:23:e3:24:97:cf:35:b9:2d:e3: d8:48:24:f0:17:0b:f4:7b:ad:12:da:dc:a3:74:79:d3:e3:8d: 44:ce:e5:78:59:6d:01:6f:5e:c9:59:2d:e0:d2:18:d0:1b:a0: e6:40:05:d7:8c:1b:a2:ae:41:60:91:96:2d:03:9c:2c:8c:d7: b5:3a:54:df:89:36:55:22:42:17:77:2f:8e:75:59:d8:58:15: fc:c9:6e:c8:09:3d:e0:70:5d:53:48:0a:b1:4d:be:4e:b5:50: e8:6e:54:22:8e:5e:57:eb:1d:69:e1:97:65:e6:ba:d0:19:36: 3d:4a:d5:53:0c:df:75:58:eb:0d:89:16:b0:f6:37:a3:ff:08: b6:ea:ce:6e:e7:c9:b1:ae:17:87:7e:54:6c:6b:79:5c:89:6e: c9:c5:ee:71:c3:2f:c2:6b:8e:97:0d:8d:32:b4:88:54:42:bd: 2c:e6:50:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UMohjqSa/wr8xlXBWO5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGNmNTEyNDdhYjU3ZjUyNmYzODA3MjU5YTc4ZDJiMDI1 OTA2MDMwHhcNMjYwMTI1MTgwMDQ4WhcNMjYwMTI2MTgwMDQ4WjAzMTEwLwYDVQQD Eyg1NjZkYTNjYWE4NWMzOGE1Yjg1N2E0NDY2NTA5NTM2ZjA3ZTJjZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvku0w6xWAUqWk52abF+mKLcdknA9 MGeZ1PmtTbgFQz4+7Q9hl/X9L+Qfn2C/tegd/G2Cb4AVkvKiOeofRQ8Q/IYikK+x xV3w15pVLCk13xkRaKNQjttLi+5SwGCtDqISmwr33qLusTnJ3nBlWMGKcrIyUhAr /Q8qeTaqYNErK2n9DhJDMTL8C4aYNFbhQxVODm+QOQacmxKp/Ytls19PbHXYn90o fb+mvaGhdAfkQvYnCxOMoPUWlhtlHrA2k5ycvq85Au3LUTkosvRPXu3PMFCNrYXV dVNWZjNjh+wdxQzF0er9n86aaQ4PQLh5etYrJ15uSxfT3B1IpuXTIWkDMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZto8qoXDiluFekRmUJU28H4s51MB8GA1UdIwQY MBaAFJ5M9RJHq1f1JvOAclmnjSsCWQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMt M2NmMzA2ODA3YTdlLzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMtM2NmMzA2ODA3YTdl LzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtxQGz2X B4xFxp3BlIccCGos+e5TFDNYAgambqQR92d6h+FPHxeZHn5tLYyyZZPjVJ+M48jz uQ7kclYIpb5n/upAtQJiH5sZhnamlaszOxeFI+Mkl881uS3j2Egk8BcL9HutEtrc o3R50+ONRM7leFltAW9eyVkt4NIY0Bug5kAF14wboq5BYJGWLQOcLIzXtTpU34k2 VSJCF3cvjnVZ2FgV/MluyAk94HBdU0gKsU2+TrVQ6G5UIo5eV+sdaeGXZea60Bk2 PUrVUwzfdVjrDYkWsPY3o/8IturObufJsa4Xh35UbGt5XIluycXuccMvwmuOlw2N MrSIVEK9LOZQOA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:20 2026 by rpki-client