This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json) Hash identifier: Cus7oDVrnr8v92igPsPFqGqNQt8c2JVQF3oOY0BCKjE= Subject key identifier: BF:C1:B7:6A:65:C0:29:00:9F:01:BE:F8:CC:EC:15:0E:6B:3D:6E:19 Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2 Certificate serial: 019BF80895457FFACF9336A841C45E258804 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft Manifest number: 0745 Signing time: Mon 26 Jan 2026 02:01:10 +0000 Manifest this update: Mon 26 Jan 2026 02:01:10 +0000 Manifest next update: Tue 27 Jan 2026 02:01:10 +0000 Files and hashes: 1: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: /Y2EmJMt5Sr26AR+aXPh0cMDl4JmpH9TWEGnKwuWi2w=) 2: kekcgSv-eDONMe6ZG8p99c62CHY.roa (hash: YXzQs9p+P9jRTPWs0pwKa3KkCYRND2jAcNEa4dtHmUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:95:45:7f:fa:cf:93:36:a8:41:c4:5e:25:88:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2 Validity Not Before: Jan 26 02:01:10 2026 GMT Not After : Jan 27 02:01:10 2026 GMT Subject: CN=bfc1b76a65c029009f01bef8ccec150e6b3d6e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:1d:30:fb:1c:f9:81:76:25:86:33:d8:f8:5d: e5:38:46:91:fc:a7:c8:ce:12:b1:e0:13:4f:b2:f4: e5:01:9e:f3:3a:90:83:3e:90:fe:b1:24:8e:75:f7: fc:7f:d5:41:ab:f1:20:11:ac:51:3a:a9:14:c1:1f: ad:2d:e0:67:ac:ef:58:47:44:19:a8:a7:32:81:7b: f4:2d:d1:93:84:b4:5e:bf:4c:4d:6d:28:39:e8:59: 35:d0:e7:70:c8:bc:27:91:7d:86:9f:5e:49:df:e6: 51:10:42:bf:fd:3f:b5:c6:7f:a7:01:e2:96:8f:56: 1f:25:b3:a8:e0:ce:20:57:77:cc:ae:60:a8:74:3a: ee:14:e3:3f:32:43:8b:01:14:95:eb:aa:b2:87:7c: 2a:bc:b8:c1:37:cb:3e:7d:87:14:d5:d4:ba:43:2d: 20:62:98:ef:dd:c9:90:53:61:74:37:8b:29:5a:da: 17:b4:86:c4:84:f0:23:09:11:20:e0:9b:f0:eb:30: 51:8a:43:bf:d2:be:77:d2:86:59:55:a2:e7:6b:71: 2c:fd:f0:59:b1:ae:30:eb:31:7d:17:41:21:68:f9: 81:41:af:c1:16:d1:f9:96:8f:50:77:2e:e4:f2:43: 95:05:06:fb:b8:8f:08:f6:9b:46:34:df:7d:8d:5c: d8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C1:B7:6A:65:C0:29:00:9F:01:BE:F8:CC:EC:15:0E:6B:3D:6E:19 X509v3 Authority Key Identifier: keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1d:9c:88:08:23:b5:66:2b:da:ff:65:dc:2a:5e:2b:55:f7: 49:7c:18:7b:72:bb:b6:cc:2c:26:59:ac:84:2e:cb:fd:8e:ab: 4f:a9:28:9f:b9:c9:a8:36:9f:c8:d3:83:da:3b:3e:23:f3:3c: 69:d3:c0:a4:0a:b5:5c:cf:51:2d:43:11:ce:98:be:ff:cf:92: 6a:56:d2:cf:79:b3:ec:c0:f0:7b:2e:c4:4d:10:ef:85:5e:73: 6e:2e:67:a6:d8:49:9a:20:4a:28:ac:fc:8f:fe:54:30:b3:0a: fd:46:d4:85:10:4a:14:12:5c:58:73:6e:51:da:29:5e:47:08: 18:cc:c3:e4:60:91:43:2d:12:a6:22:7d:19:14:d8:69:3e:14: 07:cd:84:f6:99:cd:bf:05:b0:28:94:1a:da:f1:a3:20:fe:c1: da:50:57:08:e0:22:11:12:c9:df:e2:49:66:4b:04:4c:b4:69: d5:9e:a5:7b:e0:5d:03:21:00:7e:05:d8:ed:c2:bf:5b:ee:df: 31:08:3e:94:d6:31:a1:20:fd:f8:1e:e6:e2:85:1d:67:c2:a3: ed:d1:f1:a4:be:a0:17:4e:fd:14:3f:8d:cb:f1:d1:1a:82:56: 85:a6:4e:6e:7d:4c:35:d5:ee:a2:01:cf:c8:e5:23:d9:37:63: c1:e1:9f:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CJVFf/rPkzaoQcReJYgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWVlY2FiOTU3MGNmMGFmZmE4MWJlNzQ4ZTkxMjhmNTVl NDE2YzIwHhcNMjYwMTI2MDIwMTEwWhcNMjYwMTI3MDIwMTEwWjAzMTEwLwYDVQQD EyhiZmMxYjc2YTY1YzAyOTAwOWYwMWJlZjhjY2VjMTUwZTZiM2Q2ZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+x0w+xz5gXYlhjPY+F3lOEaR/KfI zhKx4BNPsvTlAZ7zOpCDPpD+sSSOdff8f9VBq/EgEaxROqkUwR+tLeBnrO9YR0QZ qKcygXv0LdGThLRev0xNbSg56Fk10OdwyLwnkX2Gn15J3+ZREEK//T+1xn+nAeKW j1YfJbOo4M4gV3fMrmCodDruFOM/MkOLARSV66qyh3wqvLjBN8s+fYcU1dS6Qy0g Ypjv3cmQU2F0N4spWtoXtIbEhPAjCREg4Jvw6zBRikO/0r530oZZVaLna3Es/fBZ sa4w6zF9F0EhaPmBQa/BFtH5lo9Qdy7k8kOVBQb7uI8I9ptGNN99jVzYswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/Bt2plwCkAnwG++MzsFQ5rPW4ZMB8GA1UdIwQY MBaAFDRe7KuVcM8K/6gb50jpEo9V5BbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDct ZTcyZmE1NTMxZDQ1LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDctZTcyZmE1NTMxZDQ1 LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOR2ciAgj tWYr2v9l3CpeK1X3SXwYe3K7tswsJlmshC7L/Y6rT6kon7nJqDafyNOD2js+I/M8 adPApAq1XM9RLUMRzpi+/8+SalbSz3mz7MDwey7ETRDvhV5zbi5npthJmiBKKKz8 j/5UMLMK/UbUhRBKFBJcWHNuUdopXkcIGMzD5GCRQy0SpiJ9GRTYaT4UB82E9pnN vwWwKJQa2vGjIP7B2lBXCOAiERLJ3+JJZksETLRp1Z6le+BdAyEAfgXY7cK/W+7f MQg+lNYxoSD9+B7m4oUdZ8Kj7dHxpL6gF079FD+Ny/HRGoJWhaZObn1MNdXuogHP yOUj2TdjweGfcw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:04 2026 by rpki-client