This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json) Hash identifier: BCoSU/B979cSUgQveJLigTlROngAIR5o2v0MQ9GSEz4= Subject key identifier: 6C:59:8E:CC:FC:4D:1E:AF:CB:A1:07:92:DB:77:D5:75:36:3F:10:20 Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52 Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152 Certificate serial: 019BF3BE52DDF9E2F65B7C49AB6C94C45EE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft Manifest number: 16F4 Signing time: Sun 25 Jan 2026 06:01:35 +0000 Manifest this update: Sun 25 Jan 2026 06:01:35 +0000 Manifest next update: Mon 26 Jan 2026 06:01:35 +0000 Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=) 2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: 3eG+83KLq8sYDVof9bfTHqGRUTZpleQaAbKSQFZmEDg=) 3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:52:dd:f9:e2:f6:5b:7c:49:ab:6c:94:c4:5e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152 Validity Not Before: Jan 25 06:01:35 2026 GMT Not After : Jan 26 06:01:35 2026 GMT Subject: CN=6c598eccfc4d1eafcba10792db77d575363f1020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:c8:30:01:2b:95:ed:44:b4:29:2f:44:40: b6:e0:f9:1b:19:b6:fd:fe:f5:94:4c:a4:b1:71:c2: 65:51:9d:bb:48:ca:1b:b9:36:60:8e:75:2b:ed:a6: f3:5b:4a:63:08:37:42:09:f4:32:7d:68:09:df:92: 6a:bb:6b:9a:6c:27:a8:f8:07:ed:2f:de:0f:d0:92: 5c:66:1e:ec:38:3d:96:b5:f1:35:2b:2b:fd:96:76: b6:d9:14:08:3c:44:59:e1:06:b9:5e:de:3f:ba:7d: d2:d0:e6:f7:c3:14:15:4c:29:59:76:86:d4:93:61: 7f:44:71:50:94:31:ae:8d:04:1b:23:c8:33:40:0c: 28:4f:18:f0:f7:38:01:0a:e1:01:b1:05:51:e7:01: 63:89:03:a1:3b:eb:d8:7d:0c:2c:bd:b0:55:e8:79: 83:07:7d:91:a8:54:76:91:6f:da:67:b4:2d:01:ff: 7e:1a:3e:1f:54:48:99:11:85:68:98:16:29:56:8e: 2a:06:13:8d:20:b8:fe:78:e0:16:f0:55:ec:ed:96: 6a:6c:c0:ba:e3:58:42:a4:c3:20:50:73:73:92:37: 06:7c:7a:98:f5:17:61:b3:66:66:b0:78:11:76:dc: ee:ff:2c:79:b8:89:c8:27:8d:61:e6:4f:c8:e2:c1: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:59:8E:CC:FC:4D:1E:AF:CB:A1:07:92:DB:77:D5:75:36:3F:10:20 X509v3 Authority Key Identifier: keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:dc:ef:cd:b9:6b:ed:4b:13:c3:d9:43:0d:96:6e:6d:8a:13: 93:cc:70:fd:63:5c:f3:aa:49:53:b8:14:bc:5b:f0:6b:9a:a6: 85:52:a4:7d:30:dc:cd:fa:1b:fd:be:6d:9e:5e:13:68:b4:5a: c4:44:6b:28:b3:8f:d5:3e:0c:ef:68:16:61:4c:53:9b:bb:f4: b3:9c:98:86:de:09:a9:33:ae:63:4b:15:6d:48:6b:84:ad:22: 92:51:0c:2f:44:0e:66:94:4f:ea:44:c4:f9:3f:75:00:2e:7d: e7:49:77:30:23:f2:02:18:c1:b3:b5:90:ab:1b:7f:cf:55:df: aa:80:09:09:27:20:24:30:7a:fa:a9:f3:6c:8a:df:8c:46:63: 31:6e:4a:b4:ed:7f:a9:be:39:2f:36:ca:34:28:d1:da:3b:5b: e6:96:65:8f:e1:30:ae:16:da:6c:44:9a:16:63:64:1a:2d:9d: 63:3e:b7:a6:2a:d2:06:ab:d6:8c:0e:17:7c:89:f2:d7:ce:19: ee:e9:d4:9d:de:20:3e:c5:58:bb:80:24:b4:91:b6:ce:87:ce: 68:99:86:d3:67:2f:61:f8:1e:cf:af:a1:8f:d1:84:2f:15:10: d1:e0:5f:63:35:ab:fb:8a:f9:fa:cb:08:04:15:49:5a:e2:58: 35:cb:17:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvlLd+eL2W3xJq2yUxF7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTRlOTVkMmY0Y2MzNGE3Mzc2YjczYzBmMDM5YjNlMTU4 ZjUxNTIwHhcNMjYwMTI1MDYwMTM1WhcNMjYwMTI2MDYwMTM1WjAzMTEwLwYDVQQD Eyg2YzU5OGVjY2ZjNGQxZWFmY2JhMTA3OTJkYjc3ZDU3NTM2M2YxMDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNbIMAErle1EtCkvREC24PkbGbb9 /vWUTKSxccJlUZ27SMobuTZgjnUr7abzW0pjCDdCCfQyfWgJ35Jqu2uabCeo+Aft L94P0JJcZh7sOD2WtfE1Kyv9lna22RQIPERZ4Qa5Xt4/un3S0Ob3wxQVTClZdobU k2F/RHFQlDGujQQbI8gzQAwoTxjw9zgBCuEBsQVR5wFjiQOhO+vYfQwsvbBV6HmD B32RqFR2kW/aZ7QtAf9+Gj4fVEiZEYVomBYpVo4qBhONILj+eOAW8FXs7ZZqbMC6 41hCpMMgUHNzkjcGfHqY9Rdhs2ZmsHgRdtzu/yx5uInIJ41h5k/I4sFZswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxZjsz8TR6vy6EHktt31XU2PxAgMB8GA1UdIwQY MBaAFJ2k6V0vTMNKc3a3PA8Dmz4Vj1FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1Zjgt NTk1OTEzODllMjQyLzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1ZjgtNTk1OTEzODllMjQy LzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidzvzblr 7UsTw9lDDZZubYoTk8xw/WNc86pJU7gUvFvwa5qmhVKkfTDczfob/b5tnl4TaLRa xERrKLOP1T4M72gWYUxTm7v0s5yYht4JqTOuY0sVbUhrhK0iklEML0QOZpRP6kTE +T91AC5950l3MCPyAhjBs7WQqxt/z1XfqoAJCScgJDB6+qnzbIrfjEZjMW5KtO1/ qb45LzbKNCjR2jtb5pZlj+EwrhbabESaFmNkGi2dYz63pirSBqvWjA4XfIny184Z 7unUnd4gPsVYu4AktJG2zofOaJmG02cvYfgez6+hj9GELxUQ0eBfYzWr+4r5+ssI BBVJWuJYNcsX0Q== -----END CERTIFICATE-----Generated at Sun Jan 25 15:23:10 2026 by rpki-client