This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json) Hash identifier: St9x4oU0mqdtCTEcg8mpdvHKhopSJF5ZW+FieNWb+fo= Subject key identifier: AC:4D:F5:70:90:07:3D:14:04:C3:B4:6B:22:BB:5D:63:74:E1:17:34 Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa Certificate serial: 019BF8AD1DBD61C95A73CC5016866239C8A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 05:00:53 +0000 Manifest this update: Mon 26 Jan 2026 05:00:53 +0000 Manifest next update: Tue 27 Jan 2026 05:00:53 +0000 Files and hashes: 1: 08LcrSM5Tgh5WrAx78MCyBcUuUI.roa (hash: K9ZScW16pprknJqQJ4Lzi9WnkmX54pE86HFlLQ5ZeK0=) 2: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=) 3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=) 4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=) 5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: 6elwFz5rfARLP776c6HhSH/13/px963HCGa1W45xdSo=) 6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=) 7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=) 8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=) 9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:1d:bd:61:c9:5a:73:cc:50:16:86:62:39:c8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa Validity Not Before: Jan 26 05:00:53 2026 GMT Not After : Jan 27 05:00:53 2026 GMT Subject: CN=ac4df57090073d1404c3b46b22bb5d6374e11734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:01:53:9a:15:df:16:8e:9a:92:7d:3f:af: be:40:e9:e7:54:5b:ad:6a:36:46:16:cb:19:71:b4: 63:cc:a3:d3:5f:cb:2b:a5:13:75:e8:d6:5c:45:cc: e1:cd:b5:ac:c4:05:b0:17:49:4b:4f:a8:60:61:c8: 4c:48:cc:55:b3:87:90:5c:cb:40:51:63:67:a1:b9: e1:80:43:a9:e5:0c:40:32:09:d9:6b:c4:e7:df:3a: 6d:3e:d0:af:9a:dc:ba:9c:70:0b:04:ae:d5:96:60: 5e:a2:cd:c1:66:33:0a:fd:09:12:53:49:dd:b3:8f: 28:65:61:6d:31:0c:ad:16:49:75:38:62:c9:25:29: 16:85:74:44:52:ac:a9:94:a8:55:61:a0:3e:7f:5b: fb:72:68:e1:77:f4:f5:7d:95:1e:19:ed:67:33:25: 01:fb:99:8c:fd:91:ec:5c:8b:bd:df:e4:24:64:ce: cd:fb:06:15:cf:da:4a:2c:a3:3f:2b:ce:4c:24:16: 7d:f0:5a:d6:61:26:da:05:69:20:d5:e4:42:61:72: cb:08:01:5d:8b:7d:ca:82:e0:26:33:3b:5a:a4:a2: bb:0a:ce:26:f5:86:e4:c9:e7:82:84:8e:d3:ef:87: e7:28:b7:24:8a:01:c9:87:16:73:f7:7b:c2:3a:4f: 70:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4D:F5:70:90:07:3D:14:04:C3:B4:6B:22:BB:5D:63:74:E1:17:34 X509v3 Authority Key Identifier: keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:8b:e4:36:39:dd:8e:4a:73:b9:73:c9:6f:76:be:48:de:31: 29:e1:f5:b8:d5:1a:b7:c9:93:81:e9:a8:e8:36:8b:97:3f:f5: dc:82:66:79:54:3f:44:f5:22:76:c0:47:8a:e5:93:bf:ad:ac: 07:5a:87:ce:29:12:a1:6a:e1:96:81:07:8a:9e:db:63:f6:76: ff:46:63:f9:38:41:2b:7a:49:a3:bc:e3:db:25:e6:b9:b5:bc: 12:b2:2b:22:b1:ae:a4:6c:3f:79:0b:f2:8c:b7:76:04:4f:a5: 8b:ee:18:53:4d:84:51:d6:b4:39:cc:d9:a7:e4:e3:3b:f4:7a: 92:78:a9:4b:eb:8f:35:39:8c:ec:fa:9a:21:da:49:b9:a5:f7: 73:21:d1:6a:c1:92:79:23:03:fc:ad:59:e6:98:8b:c1:45:bc: b7:5e:27:2b:ac:41:5b:2f:4c:e1:5c:14:84:07:06:3a:9e:ec: cc:14:54:cb:c5:49:fa:fd:9c:57:67:c3:87:b3:7f:2f:80:85: 7e:45:80:ce:ae:55:70:02:84:7b:f0:69:8a:46:3a:33:a4:d9: 2f:4b:74:70:9c:c3:59:18:2e:e4:2c:0a:26:f8:79:22:d5:36: 42:03:d4:a8:37:a4:b7:2a:ad:8b:0c:3c:45:53:4f:dc:6d:76: fb:1e:0d:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rR29Yclac8xQFoZiOcijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh YmE5ZmEwHhcNMjYwMTI2MDUwMDUzWhcNMjYwMTI3MDUwMDUzWjAzMTEwLwYDVQQD EyhhYzRkZjU3MDkwMDczZDE0MDRjM2I0NmIyMmJiNWQ2Mzc0ZTExNzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuncBU5oV3xaOmpJ9P6++QOnnVFut ajZGFssZcbRjzKPTX8srpRN16NZcRczhzbWsxAWwF0lLT6hgYchMSMxVs4eQXMtA UWNnobnhgEOp5QxAMgnZa8Tn3zptPtCvmty6nHALBK7VlmBeos3BZjMK/QkSU0nd s48oZWFtMQytFkl1OGLJJSkWhXREUqyplKhVYaA+f1v7cmjhd/T1fZUeGe1nMyUB +5mM/ZHsXIu93+QkZM7N+wYVz9pKLKM/K85MJBZ98FrWYSbaBWkg1eRCYXLLCAFd i33KguAmMztapKK7Cs4m9YbkyeeChI7T74fnKLckigHJhxZz93vCOk9wxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxN9XCQBz0UBMO0ayK7XWN04Rc0MB8GA1UdIwQY MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt NDM4NDNjMmU5NDNiLzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcovkNjnd jkpzuXPJb3a+SN4xKeH1uNUat8mTgemo6DaLlz/13IJmeVQ/RPUidsBHiuWTv62s B1qHzikSoWrhloEHip7bY/Z2/0Zj+ThBK3pJo7zj2yXmubW8ErIrIrGupGw/eQvy jLd2BE+li+4YU02EUda0OczZp+TjO/R6knipS+uPNTmM7PqaIdpJuaX3cyHRasGS eSMD/K1Z5piLwUW8t14nK6xBWy9M4VwUhAcGOp7szBRUy8VJ+v2cV2fDh7N/L4CF fkWAzq5VcAKEe/BpikY6M6TZL0t0cJzDWRgu5CwKJvh5ItU2QgPUqDektyqtiww8 RVNP3G12+x4Nmw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:35 2026 by rpki-client