This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json) Hash identifier: TDmOpU5ArAv3RSbVc7nVHdjkWT2edslYrKtEu0e5sUo= Subject key identifier: 23:1E:96:1D:52:7C:4A:18:14:E0:E8:40:0A:AD:4D:B2:57:1F:F2:31 Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed Certificate serial: 019BF2E2CD545E106019F6492B11EE818471 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft Manifest number: 0AB6 Signing time: Sun 25 Jan 2026 02:01:48 +0000 Manifest this update: Sun 25 Jan 2026 02:01:48 +0000 Manifest next update: Mon 26 Jan 2026 02:01:48 +0000 Files and hashes: 1: FktoGPzZbczbmYJMIxqyJDI4khU.roa (hash: Pd0QRgXE7TDiEULALaOfHMuU4dgReo9hAwqDI7vm89k=) 2: US1mag2Y_3gLjw3yqH5mtWjR1xQ.roa (hash: x23CUUEuBT6VTtfDeTHM6jIMOQ/mrX2YC4/4lHl02CU=) 3: fe4S5caqbGhoCjojIWugfijS-l4.roa (hash: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g=) 4: kzMrI0imiRYxMSuFebP347S2bPA.roa (hash: a8zAVtnqtJmQ1e+sW7khdVocz/PbfFWHd0bXadNEbws=) 5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: OR0YCYartgdW9G+Jcol2zUVrV73wLS77aURXNMgSbD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:cd:54:5e:10:60:19:f6:49:2b:11:ee:81:84:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed Validity Not Before: Jan 25 02:01:48 2026 GMT Not After : Jan 26 02:01:48 2026 GMT Subject: CN=231e961d527c4a1814e0e8400aad4db2571ff231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8a:22:46:ab:8d:52:96:dc:8b:4e:28:19:21: 00:e4:48:11:30:df:2c:0a:82:10:5c:93:a7:b0:db: ac:2c:45:1f:71:f7:e9:2c:0c:66:2b:fd:72:0c:77: a5:ad:4e:d9:88:09:8a:b4:5e:86:d0:86:a1:cb:d3: 10:2d:5c:28:e5:3a:43:4a:af:2e:0a:f2:3b:40:a1: 6d:97:7b:14:ad:f5:12:eb:ee:7b:a0:6e:e6:0c:e7: d4:2e:f8:69:82:70:f8:53:10:c4:b2:bd:d4:f8:53: ca:b2:c1:4d:ea:ff:14:35:c9:53:ff:ca:ae:3c:c3: a8:72:e4:b2:5e:42:eb:d1:bf:eb:c1:3c:5a:fb:b7: f7:f6:f1:e5:a3:17:8b:0e:13:3a:c9:ff:0d:c3:d8: ab:7f:fa:ae:62:21:33:1a:57:72:49:e9:79:c3:f5: de:4c:4d:3d:76:9a:81:68:bb:9e:34:ce:9d:4a:23: 2f:22:c2:51:ca:43:8f:64:7a:21:42:39:e1:37:2d: 6f:19:bb:33:2b:fd:0d:97:2c:01:37:40:38:01:d9: bd:2f:4d:d8:3d:26:ca:29:af:be:b3:9f:2c:4e:b4: 12:7a:89:f4:35:d1:ac:2f:dc:4f:5d:0a:12:79:20: 84:a8:85:4f:aa:bc:b6:2d:26:59:01:24:97:ec:0d: eb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1E:96:1D:52:7C:4A:18:14:E0:E8:40:0A:AD:4D:B2:57:1F:F2:31 X509v3 Authority Key Identifier: keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1a:54:d9:fa:ac:a7:b8:6a:4e:b5:42:11:46:94:bb:3d:4a: 11:92:f4:d9:aa:5e:04:ba:d2:f6:a7:34:ed:0f:54:07:11:f3: 89:6a:e1:8c:1c:e0:0e:d5:0f:d4:89:4d:4c:e6:af:9c:d2:bf: 9d:ba:c0:d8:92:18:01:3b:f3:90:9c:c4:c3:a5:89:0b:c2:2b: a1:68:12:eb:2f:fc:f1:d5:99:6c:22:63:cd:9d:4a:ba:b4:ba: 48:49:fc:c7:40:9a:a4:01:4e:e8:84:b3:69:62:36:dd:50:ae: c0:95:e6:b1:aa:cf:e9:a4:1f:51:c9:6f:6c:fc:80:6b:b7:95: 19:26:f3:8a:3f:c9:00:f0:5d:e5:06:58:59:fc:8c:4f:1e:1b: 0a:bf:7c:02:fd:01:36:5d:90:fb:1e:cc:cd:39:b8:28:f7:27: ff:a9:83:b5:4f:1f:7a:24:0e:cb:53:32:81:2a:ce:ee:de:6e: b1:51:b3:7f:e7:87:76:75:0c:39:04:de:9d:42:f9:92:1d:75: 93:27:5c:98:f9:65:5b:4f:7b:d3:32:cd:23:de:6f:43:33:5c: 88:7f:ba:d7:1f:fe:8d:aa:a0:c1:83:1a:40:1c:99:4e:67:f0: ae:29:ec:6e:ad:a9:e3:06:02:96:c1:8b:d3:d0:3b:27:04:85: 41:a8:f2:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4s1UXhBgGfZJKxHugYRxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjk2Y2U1OWM1OTU1NzUzMGYwZWFhNDRjNjY0NTAzZDlj NDAxZWQwHhcNMjYwMTI1MDIwMTQ4WhcNMjYwMTI2MDIwMTQ4WjAzMTEwLwYDVQQD EygyMzFlOTYxZDUyN2M0YTE4MTRlMGU4NDAwYWFkNGRiMjU3MWZmMjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IoiRquNUpbci04oGSEA5EgRMN8s CoIQXJOnsNusLEUfcffpLAxmK/1yDHelrU7ZiAmKtF6G0Iahy9MQLVwo5TpDSq8u CvI7QKFtl3sUrfUS6+57oG7mDOfULvhpgnD4UxDEsr3U+FPKssFN6v8UNclT/8qu PMOocuSyXkLr0b/rwTxa+7f39vHloxeLDhM6yf8Nw9irf/quYiEzGldySel5w/Xe TE09dpqBaLueNM6dSiMvIsJRykOPZHohQjnhNy1vGbszK/0NlywBN0A4Adm9L03Y PSbKKa++s58sTrQSeon0NdGsL9xPXQoSeSCEqIVPqry2LSZZASSX7A3rbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMelh1SfEoYFODoQAqtTbJXH/IxMB8GA1UdIwQY MBaAFJy5bOWcWVV1MPDqpExmRQPZxAHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQt ZGRiMGIxNDhlNDZiLzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQtZGRiMGIxNDhlNDZi LzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxpU2fqs p7hqTrVCEUaUuz1KEZL02apeBLrS9qc07Q9UBxHziWrhjBzgDtUP1IlNTOavnNK/ nbrA2JIYATvzkJzEw6WJC8IroWgS6y/88dWZbCJjzZ1KurS6SEn8x0CapAFO6ISz aWI23VCuwJXmsarP6aQfUclvbPyAa7eVGSbzij/JAPBd5QZYWfyMTx4bCr98Av0B Nl2Q+x7MzTm4KPcn/6mDtU8feiQOy1MygSrO7t5usVGzf+eHdnUMOQTenUL5kh11 kydcmPllW0970zLNI95vQzNciH+61x/+jaqgwYMaQByZTmfwrinsbq2p4wYClsGL 09A7JwSFQajySg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:46:45 2026 by rpki-client