This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft File: NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json) Hash identifier: oSA1MSFL/2T/5p+VPp7PIFW7SYkntJEfZMSt/5yU3BI= Subject key identifier: CE:16:8A:0F:F1:A3:49:F9:1A:B4:14:FD:74:BE:CC:BB:9C:D9:52:D5 Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d Certificate serial: 019BF198661A1A22B90AA0BAB4958BBFAA74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft Manifest number: 17EA Signing time: Sat 24 Jan 2026 20:00:55 +0000 Manifest this update: Sat 24 Jan 2026 20:00:55 +0000 Manifest next update: Sun 25 Jan 2026 20:00:55 +0000 Files and hashes: 1: 1IT2YxPCfIxNq71vO4148RYnUFE.roa (hash: Wc3xK74C+nn8hA7fgodWur3oZYQffDuB/6q65gbxW3o=) 2: MiAk1Fn8h7yjl0ZEieRDcfLk_Ys.roa (hash: czv9oaDX9uocQn5ZLcnNiN6ZQ7Qagrx62umbfHCmvmg=) 3: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: 1SK/03ljewHXPa7j9nAxj2GJaMmVCrg+6P8Ogi+hxH8=) 4: pP3Gylt_cXScwQG05O-i7ZbberI.roa (hash: D1R0gSpuoCuRFT+1LOp+3fEZGMYLA7llVr4974Zw4U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:98:66:1a:1a:22:b9:0a:a0:ba:b4:95:8b:bf:aa:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d Validity Not Before: Jan 24 20:00:55 2026 GMT Not After : Jan 25 20:00:55 2026 GMT Subject: CN=ce168a0ff1a349f91ab414fd74beccbb9cd952d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:55:28:0a:98:49:65:4b:6e:e1:69:f0:bc: 97:63:04:f6:be:a7:f3:50:b1:7b:71:f3:bc:40:32: f9:f4:10:fa:f2:ed:c2:89:aa:9f:48:a6:f1:68:6e: 57:8e:4f:5f:65:b6:76:d3:c1:fc:60:62:44:42:d8: 18:75:95:3f:fe:44:9f:26:68:2d:a1:06:82:45:e6: 58:5b:50:78:d1:38:b7:12:f1:f3:ab:33:ea:a0:97: a4:5c:81:4a:10:ce:e1:9e:12:1b:9b:38:cf:b1:e5: 07:08:2a:af:56:54:91:27:f0:46:61:b0:a7:37:b3: cd:9d:de:99:c3:67:e6:49:15:00:f6:d9:69:fb:2e: 9e:3d:f6:62:99:44:37:51:12:a5:49:c7:c4:f1:43: 4b:f5:6c:fb:cf:89:0d:8d:6a:28:93:67:e6:11:c3: 24:a9:80:05:a0:f9:83:a9:99:59:39:8a:bb:2e:7c: d2:06:15:4c:8e:e6:8a:51:28:8b:be:bd:1c:02:25: cf:ef:26:60:72:62:44:a7:89:55:a6:10:43:e4:68: 41:78:8e:79:89:e7:51:04:66:f1:3b:d3:29:ad:0e: 78:aa:3a:0a:8f:05:3a:c7:bd:8e:f0:00:bf:4d:f8: b9:3c:da:c1:73:fb:c5:4d:eb:d5:30:35:bb:99:df: 96:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:16:8A:0F:F1:A3:49:F9:1A:B4:14:FD:74:BE:CC:BB:9C:D9:52:D5 X509v3 Authority Key Identifier: keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:db:19:9c:1d:cc:2b:3e:de:b3:1b:7c:7d:c5:03:7a:01:15: dc:a9:87:09:c3:2a:4e:64:93:b3:2e:ce:7a:1f:fc:23:8b:dc: 71:82:a5:e6:f8:bb:8f:22:0e:8b:67:89:ee:e9:47:82:2b:c4: 11:32:e8:a1:d3:a1:57:7b:8c:b7:17:63:64:99:5d:64:70:0e: 7c:4e:a4:87:44:af:49:9b:21:06:0a:86:af:c6:c2:d5:7b:2c: 93:a2:2c:2a:1d:02:bf:53:1f:6a:bf:e9:d6:2f:74:ba:5b:eb: 8e:54:f9:75:1b:53:3f:90:7f:01:60:5f:cf:86:cd:b7:db:75: bd:01:72:8f:15:e3:64:39:35:00:0c:23:71:c9:81:50:6a:3e: 76:dc:5b:31:45:b3:71:57:34:d1:d4:b6:0f:15:27:1f:3f:33: 79:16:e5:62:f2:05:fa:e5:d0:92:ec:d9:82:c7:68:d6:0a:78: b7:8b:d7:19:b9:be:f9:2b:18:c3:99:45:9b:1f:ac:f2:0a:fe: a8:91:b1:6a:77:e9:b6:c5:79:b5:ae:10:c9:7f:68:b5:be:f7: df:08:f3:84:a0:17:5f:f3:41:f1:ff:ae:b0:8a:f9:a3:8e:cd: 35:55:08:00:7e:28:7f:c6:d8:76:47:cd:26:ce:d7:cc:cd:d4: 92:ba:4e:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxmGYaGiK5CqC6tJWLv6p0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NmE5ZDU0MjI5NzU3N2IzN2FhMGM0MjMxOTVhZmUyYTk4 ZTEzNWQwHhcNMjYwMTI0MjAwMDU1WhcNMjYwMTI1MjAwMDU1WjAzMTEwLwYDVQQD EyhjZTE2OGEwZmYxYTM0OWY5MWFiNDE0ZmQ3NGJlY2NiYjljZDk1MmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhxVKAqYSWVLbuFp8LyXYwT2vqfz ULF7cfO8QDL59BD68u3CiaqfSKbxaG5Xjk9fZbZ208H8YGJEQtgYdZU//kSfJmgt oQaCReZYW1B40Ti3EvHzqzPqoJekXIFKEM7hnhIbmzjPseUHCCqvVlSRJ/BGYbCn N7PNnd6Zw2fmSRUA9tlp+y6ePfZimUQ3URKlScfE8UNL9Wz7z4kNjWook2fmEcMk qYAFoPmDqZlZOYq7LnzSBhVMjuaKUSiLvr0cAiXP7yZgcmJEp4lVphBD5GhBeI55 iedRBGbxO9MprQ54qjoKjwU6x72O8AC/Tfi5PNrBc/vFTevVMDW7md+WYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4Wig/xo0n5GrQU/XS+zLuc2VLVMB8GA1UdIwQY MBaAFDZqnVQil1d7N6oMQjGVr+KpjhNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzc1NDUtYzVmYS00M2JkLTg4Mzkt ZDE4NWRlYzA2MDEyLzEvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYzc1NDUtYzVmYS00M2JkLTg4MzktZDE4NWRlYzA2MDEy LzEvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNsZnB3M Kz7esxt8fcUDegEV3KmHCcMqTmSTsy7Oeh/8I4vccYKl5vi7jyIOi2eJ7ulHgivE ETLoodOhV3uMtxdjZJldZHAOfE6kh0SvSZshBgqGr8bC1Xssk6IsKh0Cv1Mfar/p 1i90ulvrjlT5dRtTP5B/AWBfz4bNt9t1vQFyjxXjZDk1AAwjccmBUGo+dtxbMUWz cVc00dS2DxUnHz8zeRblYvIF+uXQkuzZgsdo1gp4t4vXGbm++SsYw5lFmx+s8gr+ qJGxanfptsV5ta4QyX9otb733wjzhKAXX/NB8f+usIr5o47NNVUIAH4of8bYdkfN Js7XzM3UkrpOWg== -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:36 2026 by rpki-client