This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json) Hash identifier: skfOTE5yYWGUHQ00/fI4RjyPd4EXiENYBlJ9U+siY4s= Subject key identifier: F7:FF:84:5C:EB:D5:09:0C:24:84:5F:12:EA:86:CE:1E:5E:81:66:81 Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06 Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306 Certificate serial: 019BF8AD2C525D233EF5A6428A2A79D276B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft Manifest number: 17A7 Signing time: Mon 26 Jan 2026 05:00:57 +0000 Manifest this update: Mon 26 Jan 2026 05:00:57 +0000 Manifest next update: Tue 27 Jan 2026 05:00:57 +0000 Files and hashes: 1: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (hash: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug=) 2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: X4mYjvN7aawT2eI3682mEGBlBQO4v4gwpEaAT8ZP4ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:2c:52:5d:23:3e:f5:a6:42:8a:2a:79:d2:76:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306 Validity Not Before: Jan 26 05:00:57 2026 GMT Not After : Jan 27 05:00:57 2026 GMT Subject: CN=f7ff845cebd5090c24845f12ea86ce1e5e816681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c2:60:f9:cb:d0:a2:cf:5d:0e:26:01:e9:22: 42:f7:1f:25:e2:2c:54:6f:cf:ec:96:e5:50:1b:9d: 16:7f:d1:b2:ee:0e:2c:0c:ed:fe:ae:8c:f8:12:db: e1:e1:d0:9e:87:69:f5:ef:aa:60:56:4e:cc:7d:39: 07:d3:c2:1e:f2:52:cf:43:9f:2c:91:0d:b8:f7:24: 52:d4:3a:45:81:e3:9e:4f:e7:5f:3f:27:de:6d:25: 61:18:04:3f:cf:3b:26:58:00:26:e4:96:74:14:32: 14:54:8e:09:1f:85:e5:48:fc:92:3d:61:61:93:7e: 2b:58:5b:c9:50:af:65:2e:f9:f6:54:fd:ed:a8:33: 1a:86:80:2b:6f:e0:5c:a3:58:d8:ce:1c:af:81:e7: 9f:dc:69:b1:97:b1:65:c6:a4:5b:0e:1d:75:54:d6: 19:18:3c:1d:48:21:36:cd:a1:e1:bc:c0:fa:79:00: 62:28:bd:55:57:5d:e6:82:c8:e1:a4:a3:7e:f9:18: cd:84:c4:db:8e:83:87:8e:1c:86:17:e1:3c:98:94: 09:28:b5:df:17:7b:13:52:e5:69:11:89:c8:1b:85: 9d:c7:42:c9:e2:e8:20:5b:d8:6c:89:0d:ff:d1:77: 39:cd:08:ed:50:cf:50:93:7f:4f:ba:0b:8f:22:f6: e8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FF:84:5C:EB:D5:09:0C:24:84:5F:12:EA:86:CE:1E:5E:81:66:81 X509v3 Authority Key Identifier: keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fa:2c:ae:7e:6d:32:9e:61:f5:db:b6:8a:bf:70:75:fd:1e: d4:d8:c0:8a:fe:c2:cd:ee:bf:00:15:87:e1:d6:dc:4c:fb:96: 71:f2:bd:1e:28:25:25:a8:61:50:0a:0e:be:84:35:67:af:b0: 88:7a:3d:c8:9f:74:bb:a8:e5:de:e1:de:56:28:d0:f5:39:45: 39:9b:9c:35:bc:12:fe:62:c5:dc:12:c9:34:ed:ca:4c:9b:c0: 30:e0:df:69:dc:61:a3:bb:1a:95:56:f6:1f:ed:6b:68:19:9c: d6:c7:c5:a4:52:b0:49:b3:a1:4d:c3:ac:2a:f8:fa:bd:fd:c2: bc:aa:a4:30:1d:f4:b6:33:3d:00:14:d9:5c:cb:c8:4c:44:c5: ef:d6:86:5d:4a:62:2d:33:31:36:2c:5c:0e:a4:ba:b5:5a:7b: cd:ae:6b:3f:d7:04:73:a8:82:7e:66:0b:1f:88:29:19:72:9c: 50:9a:48:ec:40:23:6b:a2:45:1a:06:a6:d4:c1:6f:be:a7:5d: 35:7c:1a:6b:d5:f8:d5:31:1c:e4:f4:4f:8d:36:75:7e:87:3c: b5:4a:dc:d2:a9:21:9d:50:3b:83:98:d2:fd:1a:11:a2:98:ca: 06:03:67:ab:57:87:15:6c:f4:b4:79:5c:84:41:cb:0e:f2:54: d1:ec:2f:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rSxSXSM+9aZCiip50nazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzM2NmFmNmNlMGIxYTlmNjAxNzNiMTRiNWZkZGQ3ZTBi OTYzMDYwHhcNMjYwMTI2MDUwMDU3WhcNMjYwMTI3MDUwMDU3WjAzMTEwLwYDVQQD EyhmN2ZmODQ1Y2ViZDUwOTBjMjQ4NDVmMTJlYTg2Y2UxZTVlODE2NjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48Jg+cvQos9dDiYB6SJC9x8l4ixU b8/sluVQG50Wf9Gy7g4sDO3+roz4Etvh4dCeh2n176pgVk7MfTkH08Ie8lLPQ58s kQ249yRS1DpFgeOeT+dfPyfebSVhGAQ/zzsmWAAm5JZ0FDIUVI4JH4XlSPySPWFh k34rWFvJUK9lLvn2VP3tqDMahoArb+Bco1jYzhyvgeef3Gmxl7FlxqRbDh11VNYZ GDwdSCE2zaHhvMD6eQBiKL1VV13mgsjhpKN++RjNhMTbjoOHjhyGF+E8mJQJKLXf F3sTUuVpEYnIG4Wdx0LJ4uggW9hsiQ3/0Xc5zQjtUM9Qk39PuguPIvbo6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPf/hFzr1QkMJIRfEuqGzh5egWaBMB8GA1UdIwQY MBaAFJ3DZq9s4LGp9gFzsUtf3dfguWMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgt ODJmNDc2YjVjZmRiLzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgtODJmNDc2YjVjZmRi LzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvosrn5t Mp5h9du2ir9wdf0e1NjAiv7Cze6/ABWH4dbcTPuWcfK9HiglJahhUAoOvoQ1Z6+w iHo9yJ90u6jl3uHeVijQ9TlFOZucNbwS/mLF3BLJNO3KTJvAMODfadxho7salVb2 H+1raBmc1sfFpFKwSbOhTcOsKvj6vf3CvKqkMB30tjM9ABTZXMvITETF79aGXUpi LTMxNixcDqS6tVp7za5rP9cEc6iCfmYLH4gpGXKcUJpI7EAja6JFGgam1MFvvqdd NXwaa9X41TEc5PRPjTZ1foc8tUrc0qkhnVA7g5jS/RoRopjKBgNnq1eHFWz0tHlc hEHLDvJU0ewvtg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:10 2026 by rpki-client