This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json) Hash identifier: S3JPB1fLwC8zjhyVwK/IeIo/jKHHFtZnzjYltOD305I= Subject key identifier: 05:3E:5D:22:FC:DF:26:B4:F4:36:82:1A:74:8C:9E:C4:31:81:8B:36 Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22 Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522 Certificate serial: 019BF4626EDB41D1B43A01F739ED45C3DFFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft Manifest number: 0100 Signing time: Sun 25 Jan 2026 09:00:50 +0000 Manifest this update: Sun 25 Jan 2026 09:00:50 +0000 Manifest next update: Mon 26 Jan 2026 09:00:50 +0000 Files and hashes: 1: 0vgmqw6xycNNl0cWpB4qhyVyouw.roa (hash: FUonhc03FaZe1yF8ZpkvBUnS9tWVnGxjVteioipKBjo=) 2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: V3WG4DNULp8f9tTiOUQOzCRnpqurRX2aDMORfx+7hgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:6e:db:41:d1:b4:3a:01:f7:39:ed:45:c3:df:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522 Validity Not Before: Jan 25 09:00:50 2026 GMT Not After : Jan 26 09:00:50 2026 GMT Subject: CN=053e5d22fcdf26b4f436821a748c9ec431818b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:19:2a:07:05:6b:54:f3:ea:db:0f:4f:1d:c8: a7:12:ba:2f:13:78:24:af:3f:23:35:92:ef:22:b8: 60:e3:6b:70:bd:41:3a:93:6d:01:83:8e:d7:7a:6e: e2:6f:c1:af:ca:0b:85:fe:e0:29:85:04:48:95:2e: c7:d6:34:0e:ff:8b:f6:76:ca:ea:ae:a3:da:fb:ee: b3:ca:03:ed:07:93:cf:62:89:f5:08:67:ee:ad:65: 12:65:3b:61:37:a9:76:b9:da:e0:5a:c4:c3:e7:b7: fe:9f:1c:55:24:e5:20:8c:9d:8e:e2:7c:07:28:bf: ac:40:ae:e7:ca:3f:dd:a7:6b:02:16:0e:73:34:b1: 34:2b:0d:81:d1:75:6c:01:69:cf:f3:92:9c:61:11: cd:e2:65:57:f5:02:f1:6d:c2:a7:a0:b0:d8:b0:a3: c2:c7:8d:b6:f7:f3:56:3a:e5:27:e2:3a:2f:3e:d2: 42:c6:9a:be:e0:d0:60:9a:20:83:80:5a:0e:dc:b6: 66:05:ba:7e:c4:5b:b4:29:04:00:89:19:ba:cb:d0: 66:0c:f9:9c:d8:2d:4e:03:fb:f5:5a:7b:33:34:b1: 01:9c:f7:73:6a:89:55:90:82:b2:66:9f:93:49:64: eb:f1:23:7d:0f:65:07:0c:44:15:cc:13:1c:f5:f5: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3E:5D:22:FC:DF:26:B4:F4:36:82:1A:74:8C:9E:C4:31:81:8B:36 X509v3 Authority Key Identifier: keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:28:fe:47:49:0a:98:7a:da:6d:0c:57:cd:85:86:47:26:b0: 45:f0:20:c8:fd:5f:10:24:c2:ba:f1:fe:02:a0:fc:8f:e2:bc: e0:da:ef:b4:d4:23:ef:be:e4:9b:c1:17:f8:43:5e:ec:dd:ce: 7b:54:04:75:0e:d8:c1:1d:f2:5d:72:00:cd:da:25:3f:5f:06: ca:5b:d7:af:09:64:0d:45:29:41:d7:69:3b:90:ef:a8:29:1d: b3:cf:12:fc:53:10:78:a9:cb:cb:53:07:6e:2a:d0:78:cf:47: d8:e2:5a:d9:2d:a0:27:29:d6:2d:be:98:fa:82:31:ee:58:ba: af:eb:fc:c9:ea:ed:26:c3:f6:57:d7:d2:fa:66:9e:ac:c1:8b: 7e:9f:cc:86:f8:20:7a:73:e6:23:02:f8:a8:e2:1f:c1:ae:bf: b2:3e:cf:4d:f6:fb:8f:4d:da:9a:63:c0:64:35:94:1e:6a:e5: c1:a0:2d:75:73:27:66:5c:91:03:17:c5:82:94:09:72:68:e8: 6e:9c:89:9f:6e:f0:19:36:f6:04:fe:93:ea:1d:ee:3f:93:8d: 69:40:47:32:b6:11:77:95:07:95:72:85:be:c5:aa:52:ce:57: 28:95:f7:d6:0f:3f:6e:07:bf:d9:ff:4e:14:26:14:1c:b5:5a: 99:81:05:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Ym7bQdG0OgH3Oe1Fw9/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTZiNTFlZGYzOWViZjA2NjJiMmM4MzRkNjVkMWJkMWRl ODI1MjIwHhcNMjYwMTI1MDkwMDUwWhcNMjYwMTI2MDkwMDUwWjAzMTEwLwYDVQQD EygwNTNlNWQyMmZjZGYyNmI0ZjQzNjgyMWE3NDhjOWVjNDMxODE4YjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRkqBwVrVPPq2w9PHcinErovE3gk rz8jNZLvIrhg42twvUE6k20Bg47Xem7ib8GvyguF/uAphQRIlS7H1jQO/4v2dsrq rqPa++6zygPtB5PPYon1CGfurWUSZTthN6l2udrgWsTD57f+nxxVJOUgjJ2O4nwH KL+sQK7nyj/dp2sCFg5zNLE0Kw2B0XVsAWnP85KcYRHN4mVX9QLxbcKnoLDYsKPC x4229/NWOuUn4jovPtJCxpq+4NBgmiCDgFoO3LZmBbp+xFu0KQQAiRm6y9BmDPmc 2C1OA/v1WnszNLEBnPdzaolVkIKyZp+TSWTr8SN9D2UHDEQVzBMc9fWjiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAU+XSL83ya09DaCGnSMnsQxgYs2MB8GA1UdIwQY MBaAFJ5WtR7fOevwZissg01l0b0d6CUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNjNmMmUtOTdiMC00ZGU4LTg3ZWQt NTYzYTE0ZTg2ZDYwLzEvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lNjNmMmUtOTdiMC00ZGU4LTg3ZWQtNTYzYTE0ZTg2ZDYw LzEvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSj+R0kK mHrabQxXzYWGRyawRfAgyP1fECTCuvH+AqD8j+K84NrvtNQj777km8EX+ENe7N3O e1QEdQ7YwR3yXXIAzdolP18GylvXrwlkDUUpQddpO5DvqCkds88S/FMQeKnLy1MH birQeM9H2OJa2S2gJynWLb6Y+oIx7li6r+v8yertJsP2V9fS+maerMGLfp/Mhvgg enPmIwL4qOIfwa6/sj7PTfb7j03ammPAZDWUHmrlwaAtdXMnZlyRAxfFgpQJcmjo bpyJn27wGTb2BP6T6h3uP5ONaUBHMrYRd5UHlXKFvsWqUs5XKJX31g8/bge/2f9O FCYUHLVamYEFug== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:23 2026 by rpki-client