This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft File: n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json) Hash identifier: QPF6zjONYyyCGgg/NVhiFQ5qiKBXDuIy6z9R8B83POQ= Subject key identifier: 19:71:7A:3F:A9:56:6D:17:A6:96:3E:A8:2E:B8:C4:A3:28:34:B7:FF Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D Certificate issuer: /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d Certificate serial: 019BF6F5BBF389E39F254EF83E3261CEBF33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft Manifest number: 0771 Signing time: Sun 25 Jan 2026 21:00:58 +0000 Manifest this update: Sun 25 Jan 2026 21:00:58 +0000 Manifest next update: Mon 26 Jan 2026 21:00:58 +0000 Files and hashes: 1: IVyr9TDbDX_pP70HeSId022KL1g.roa (hash: fpC1adTUWc8ZZMx++n/r65zHb13GStL3YQc2TtjYHOc=) 2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: cVR/It0UnB046k9AVRpgMlIt3ei1MNqXdHoi+bFSZhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:bb:f3:89:e3:9f:25:4e:f8:3e:32:61:ce:bf:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d Validity Not Before: Jan 25 21:00:58 2026 GMT Not After : Jan 26 21:00:58 2026 GMT Subject: CN=19717a3fa9566d17a6963ea82eb8c4a32834b7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:63:59:29:b0:c8:f3:78:c8:bf:2f:ec:cf:a2: a8:f5:b6:a9:8b:21:de:91:ff:50:5f:0f:fd:7d:67: ab:56:a0:41:03:8f:a7:38:91:24:ba:2f:2d:e8:28: dc:5d:db:db:37:32:17:78:c9:10:21:c7:0b:55:62: ac:e8:b1:0a:3a:38:16:fc:0c:bf:c6:d5:3e:2c:57: a3:58:8e:d2:3f:7b:6d:59:0d:fe:81:e6:70:e8:36: 3a:dc:ae:bd:79:8d:f8:61:c4:a2:37:15:b0:cd:86: b8:9f:a2:75:46:de:fe:5a:af:15:d7:b4:b8:d8:22: 0f:2e:3f:70:9d:fd:15:59:12:35:ce:32:ed:6b:f9: 06:74:a5:62:30:93:6f:99:16:03:09:d8:8b:67:e2: 6a:81:fd:a9:58:8c:a0:90:7b:99:2f:6a:c9:c7:77: d0:aa:c8:6f:55:c7:f4:e1:6c:88:0e:e5:40:31:f6: c8:72:c9:e3:81:e9:32:ba:70:73:8a:4b:ac:b3:d7: 5b:bc:e9:ba:fe:b7:60:a9:ca:54:78:33:86:4f:1b: 63:ed:4a:7f:2a:8f:ed:ac:c6:2e:b5:9a:ed:10:31: d3:02:30:49:13:e7:54:1e:e6:f8:0a:32:23:be:26: e2:61:03:52:7a:94:c4:91:cf:00:21:03:11:fa:28: bf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:71:7A:3F:A9:56:6D:17:A6:96:3E:A8:2E:B8:C4:A3:28:34:B7:FF X509v3 Authority Key Identifier: keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d8:e1:17:bb:68:36:fe:55:fc:ba:e3:78:e2:91:f7:cd:4b: bf:30:ff:3f:9f:8a:4b:8b:ee:7e:28:05:8b:1e:f1:be:f1:79: d8:87:db:ab:c3:fb:d6:eb:fd:08:52:1e:c1:13:20:9d:6e:f4: 66:38:f0:3e:0f:9d:30:31:e9:83:c8:f8:0c:6b:ab:28:5f:ee: 1d:02:81:1d:71:85:02:47:ad:85:d1:5e:61:b5:9a:dd:3c:81: ea:c9:f2:8b:7f:58:23:e6:aa:08:76:13:8c:7d:8e:a3:36:96: 2e:59:e2:15:66:0a:5a:a2:a1:f1:ed:69:53:93:c7:0e:d9:6f: b2:b8:34:ad:d1:3b:cc:2f:ca:8b:06:38:7e:01:cc:b7:64:f8: 1e:25:0d:9e:6c:96:ba:16:89:e6:a8:12:5d:5d:d2:b4:fa:14: 59:db:67:6f:8e:d2:72:94:dd:c7:c5:e2:cd:ab:7a:d8:e5:ed: ab:b8:71:43:b2:54:11:70:d5:d2:1c:c4:e4:39:77:3e:53:0c: 11:22:95:49:3c:5b:ce:4d:58:fa:25:61:10:26:a2:b8:28:8e: c4:d6:f4:22:ec:cd:07:25:26:8d:18:60:58:15:b6:5d:94:15: d8:7a:7c:61:c3:6a:55:a2:ce:bd:60:cf:40:94:74:ed:2f:5d: fd:3d:4e:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29bvzieOfJU74PjJhzr8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZmMxN2Y4N2NlYWZhODc4ZmNlM2JkZTY4YTcxNWRkZTE3 YzNlM2QwHhcNMjYwMTI1MjEwMDU4WhcNMjYwMTI2MjEwMDU4WjAzMTEwLwYDVQQD EygxOTcxN2EzZmE5NTY2ZDE3YTY5NjNlYTgyZWI4YzRhMzI4MzRiN2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GNZKbDI83jIvy/sz6Ko9bapiyHe kf9QXw/9fWerVqBBA4+nOJEkui8t6CjcXdvbNzIXeMkQIccLVWKs6LEKOjgW/Ay/ xtU+LFejWI7SP3ttWQ3+geZw6DY63K69eY34YcSiNxWwzYa4n6J1Rt7+Wq8V17S4 2CIPLj9wnf0VWRI1zjLta/kGdKViMJNvmRYDCdiLZ+Jqgf2pWIygkHuZL2rJx3fQ qshvVcf04WyIDuVAMfbIcsnjgekyunBzikuss9dbvOm6/rdgqcpUeDOGTxtj7Up/ Ko/trMYutZrtEDHTAjBJE+dUHub4CjIjvibiYQNSepTEkc8AIQMR+ii/bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlxej+pVm0XppY+qC64xKMoNLf/MB8GA1UdIwQY MBaAFJ/8F/h86vqHj8473minFd3hfD49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjkt MWYyNDUwMDJkNjQwLzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjktMWYyNDUwMDJkNjQw LzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9jhF7to Nv5V/LrjeOKR981LvzD/P5+KS4vufigFix7xvvF52Ifbq8P71uv9CFIewRMgnW70 ZjjwPg+dMDHpg8j4DGurKF/uHQKBHXGFAkethdFeYbWa3TyB6snyi39YI+aqCHYT jH2OozaWLlniFWYKWqKh8e1pU5PHDtlvsrg0rdE7zC/KiwY4fgHMt2T4HiUNnmyW uhaJ5qgSXV3StPoUWdtnb47ScpTdx8Xizat62OXtq7hxQ7JUEXDV0hzE5Dl3PlMM ESKVSTxbzk1Y+iVhECaiuCiOxNb0IuzNByUmjRhgWBW2XZQV2Hp8YcNqVaLOvWDP QJR07S9d/T1OGQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:45 2026 by rpki-client