This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft File: N6MHIGgl2WIY507NCN0t2d3A-dc.mft (raw, json) Hash identifier: /biubvjdWFJ9zCLZCzVF9du3OjD6yd8SD45LyvdO2UY= Subject key identifier: 90:97:A0:1E:C4:EE:DD:F0:96:80:E6:0D:F5:A4:33:C9:7E:1F:30:F7 Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7 Certificate issuer: /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7 Certificate serial: 019BF4D0177C6C103E1972F7A153E0F784D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft Manifest number: 18 Signing time: Sun 25 Jan 2026 11:00:36 +0000 Manifest this update: Sun 25 Jan 2026 11:00:36 +0000 Manifest next update: Mon 26 Jan 2026 11:00:36 +0000 Files and hashes: 1: N6MHIGgl2WIY507NCN0t2d3A-dc.crl (hash: KkwrSRfjc4hy9cNS3rmjkm52OwHYOqlAUdvs8kt0KUw=) 2: xelSWXpfJDe6boWv98tvaG7k9Pk.asa (hash: ONJj17M0jiWjVPo0TwV78223Q3WkimmKmsX8ilFZxDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:17:7c:6c:10:3e:19:72:f7:a1:53:e0:f7:84:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7 Validity Not Before: Jan 25 11:00:36 2026 GMT Not After : Jan 26 11:00:36 2026 GMT Subject: CN=9097a01ec4eeddf09680e60df5a433c97e1f30f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4b:23:84:59:42:08:fb:dd:d4:f8:6a:b3:a4: 4e:68:21:49:f0:3b:a5:ad:3e:66:e5:05:1d:f7:39: f3:81:24:6b:cd:95:ae:e8:9c:03:46:d8:5a:ed:63: f3:8f:4e:bc:c3:04:be:c1:82:4d:30:39:b2:cf:e9: 84:9e:a6:76:03:e8:2f:42:1c:57:b8:a3:73:fc:2b: 92:b6:9f:36:81:e0:34:0e:8c:0c:f0:22:f8:39:b9: c1:42:c9:a9:e3:8b:5f:6e:bc:41:e0:d5:8b:44:43: ee:f2:98:29:f9:2e:d8:0f:e6:85:28:93:8e:f9:59: b6:2d:3f:d6:32:0a:03:ca:8a:e2:52:22:e3:b0:87: eb:6d:f8:fa:95:c7:9b:3d:c2:44:be:13:a3:a9:fb: 81:0a:a0:d4:13:ce:5a:da:a5:08:b6:c1:58:cb:43: da:1f:15:26:d0:87:79:20:b3:97:d5:74:46:f0:ab: e1:b9:62:a8:cd:70:5e:cb:75:7e:c2:f2:1d:f9:71: 23:96:4b:e2:de:e5:0f:10:29:c6:34:f7:ca:ce:c2: 5b:ad:3c:2d:f8:67:3b:e3:60:4a:82:ae:46:c5:1e: 42:7a:4f:0d:0e:81:b5:78:05:10:cb:7b:0b:78:f0: 57:70:3d:ad:f0:fd:cc:06:d1:84:1a:96:62:67:fa: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:97:A0:1E:C4:EE:DD:F0:96:80:E6:0D:F5:A4:33:C9:7E:1F:30:F7 X509v3 Authority Key Identifier: keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:35:59:23:79:64:88:14:af:f0:09:58:0d:eb:df:78:57:b8: 1e:42:72:be:07:6b:2a:8c:1a:36:ff:00:09:75:83:e5:65:ef: 51:e2:e5:54:08:15:39:80:b8:1d:02:f5:1c:ce:cb:ac:ed:3b: 0f:46:f3:f6:4e:86:02:96:89:b2:4c:c1:e9:b6:cb:49:86:e8: 62:83:96:91:8f:0a:2c:e8:55:b9:b1:fd:e0:6e:46:c6:08:73: 93:87:98:95:4d:ec:6b:ad:a3:94:6f:4d:80:41:13:87:9f:60: bc:51:7c:4f:26:4d:be:2d:18:09:2a:94:d2:73:3c:2d:41:18: bb:a3:27:3c:b5:4b:7a:e4:7e:87:bc:6a:ff:ee:8f:2f:23:49: 66:8f:46:d1:9d:92:04:cf:73:4f:88:b6:5a:6c:0e:1c:3c:75: 5c:cb:24:44:2c:bc:20:8d:a2:5d:de:52:93:13:ef:bf:4c:19: 44:52:64:4d:f5:54:aa:c0:a0:88:bb:52:ef:85:ce:7f:77:4f: 07:1d:49:de:a2:02:13:b5:8f:44:61:46:b1:55:89:b6:cb:5f: 29:bb:d7:59:0e:a2:36:6b:0f:8d:64:c3:ae:0e:5b:3d:f7:dd: 8a:87:c1:ab:bf:ba:9b:5a:45:89:24:b6:dc:4a:09:9a:30:a7: 8c:42:70:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Bd8bBA+GXL3oVPg94TRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTMwNzIwNjgyNWQ5NjIxOGU3NGVjZDA4ZGQyZGQ5ZGRj MGY5ZDcwHhcNMjYwMTI1MTEwMDM2WhcNMjYwMTI2MTEwMDM2WjAzMTEwLwYDVQQD Eyg5MDk3YTAxZWM0ZWVkZGYwOTY4MGU2MGRmNWE0MzNjOTdlMWYzMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EsjhFlCCPvd1Phqs6ROaCFJ8Dul rT5m5QUd9znzgSRrzZWu6JwDRtha7WPzj068wwS+wYJNMDmyz+mEnqZ2A+gvQhxX uKNz/CuStp82geA0DowM8CL4ObnBQsmp44tfbrxB4NWLREPu8pgp+S7YD+aFKJOO +Vm2LT/WMgoDyoriUiLjsIfrbfj6lcebPcJEvhOjqfuBCqDUE85a2qUItsFYy0Pa HxUm0Id5ILOX1XRG8KvhuWKozXBey3V+wvId+XEjlkvi3uUPECnGNPfKzsJbrTwt +Gc742BKgq5GxR5Cek8NDoG1eAUQy3sLePBXcD2t8P3MBtGEGpZiZ/o+LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCXoB7E7t3wloDmDfWkM8l+HzD3MB8GA1UdIwQY MBaAFDejByBoJdliGOdOzQjdLdndwPnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQt NDI4YTUzMmFjZWYwLzEvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQtNDI4YTUzMmFjZWYw LzEvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjVZI3lk iBSv8AlYDevfeFe4HkJyvgdrKowaNv8ACXWD5WXvUeLlVAgVOYC4HQL1HM7LrO07 D0bz9k6GApaJskzB6bbLSYboYoOWkY8KLOhVubH94G5Gxghzk4eYlU3sa62jlG9N gEETh59gvFF8TyZNvi0YCSqU0nM8LUEYu6MnPLVLeuR+h7xq/+6PLyNJZo9G0Z2S BM9zT4i2WmwOHDx1XMskRCy8II2iXd5SkxPvv0wZRFJkTfVUqsCgiLtS74XOf3dP Bx1J3qICE7WPRGFGsVWJtstfKbvXWQ6iNmsPjWTDrg5bPffdiofBq7+6m1pFiSS2 3EoJmjCnjEJwkg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:51 2026 by rpki-client