This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json) Hash identifier: cTdmN54FTiGb0kALUFURBR0ShIhTAgaf5qdIAGucwjk= Subject key identifier: D3:E8:08:53:EC:64:40:82:06:7A:15:F1:96:B6:B2:FE:F7:C5:18:C6 Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c Certificate serial: 019BF8AD64FDD1DF8D0F45096D0032DAA7A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 05:01:11 +0000 Manifest this update: Mon 26 Jan 2026 05:01:11 +0000 Manifest next update: Tue 27 Jan 2026 05:01:11 +0000 Files and hashes: 1: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: GD7AnZLURsKSQLRa3Uh5uxOPfE3uC6c54T2IyMjgpGs=) 2: vw7eBru87ahloA7D5EH6hOtMUII.roa (hash: 2mimZ134P7WFkHrXJ/TfKbuB976ftfTz/nzdDHlC6dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:64:fd:d1:df:8d:0f:45:09:6d:00:32:da:a7:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c Validity Not Before: Jan 26 05:01:11 2026 GMT Not After : Jan 27 05:01:11 2026 GMT Subject: CN=d3e80853ec644082067a15f196b6b2fef7c518c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d1:3a:b1:7a:d6:e2:81:ab:68:a4:a2:4e:9a: 52:74:8a:c7:41:0b:29:9f:07:3c:a4:48:09:23:5a: e6:98:6f:c7:7d:76:a5:1b:64:15:cb:57:d2:0b:84: e7:c5:b9:67:f0:17:a2:5f:ea:32:28:97:30:cf:0f: 12:62:ce:d8:77:b7:44:f9:08:27:31:79:8f:98:47: 1b:f2:cd:81:67:7c:89:a0:e6:e2:ff:4b:56:b8:8c: 92:dd:9d:f4:bc:62:80:97:a5:65:24:81:50:94:61: 5b:96:cb:22:9a:60:61:c0:e7:36:94:69:ed:f8:ef: 02:1f:e8:83:b6:6b:dd:df:90:67:56:e2:4b:98:88: 4d:e2:1d:45:9c:dd:a5:c9:44:34:46:72:86:1d:17: 1c:66:2c:1b:de:77:e2:70:7a:1e:8b:ea:ee:3c:a3: 1e:ff:1f:20:76:9e:cf:91:ad:f8:98:0a:1e:4c:96: 3f:f1:4b:0a:14:b6:47:33:6c:e2:65:3a:9d:62:ac: 96:47:94:ce:3e:4e:3e:a0:0d:52:f9:72:e5:05:54: f6:27:88:74:91:2a:c7:1e:46:80:d3:ac:bf:bb:1f: a0:f5:4a:f8:0f:13:0f:24:04:35:c8:69:bf:6e:53: fb:f4:ba:e2:40:73:08:78:34:31:67:cf:15:da:28: 2f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E8:08:53:EC:64:40:82:06:7A:15:F1:96:B6:B2:FE:F7:C5:18:C6 X509v3 Authority Key Identifier: keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:64:fe:ad:b2:9c:8f:9a:cc:34:2b:c0:b6:12:a1:d4:93:1c: 13:a2:43:6d:93:fc:7a:9a:ff:a2:a6:5f:74:1b:8a:a3:22:6c: 32:a1:cf:52:45:38:c6:cf:e3:ed:b3:c5:8c:bb:c3:12:6a:bb: 0c:61:b7:6d:07:a7:27:2b:0c:76:2e:56:be:40:28:6a:e3:bb: 4e:ae:4a:da:16:b8:8b:25:32:50:32:46:13:ad:6e:9b:f4:1f: c9:52:45:31:4b:96:43:5f:12:d2:39:84:4b:34:76:6d:fc:a5: 89:90:12:a2:99:a2:e0:24:d6:df:66:bc:f9:30:96:50:d7:df: c6:50:f2:4b:91:8c:b0:01:0f:9b:a5:65:4e:7b:1b:25:e4:2a: 66:20:7c:86:3c:4a:b4:7f:7a:a8:18:37:6f:b0:1e:28:9e:f8: f5:26:49:19:0d:6f:d6:b2:44:c6:e6:b0:71:dc:82:45:a2:29: dd:90:6c:d2:91:1f:93:71:be:5d:23:55:e8:7d:2b:86:3d:82: 22:64:60:bf:cf:16:74:b2:e1:3e:d1:49:e5:54:6b:40:95:02: 53:1b:32:f6:eb:fd:f7:75:be:3d:09:e2:79:7c:00:15:fa:88: 7e:d5:35:41:f3:85:33:12:78:b2:af:2e:ee:71:81:32:45:f8: c0:53:91:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rWT90d+ND0UJbQAy2qemMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMGFhZTZkNDVkMDZkZjdjNDI3OGVmNGYyMThlNDJkYjgw NzA5NGMwHhcNMjYwMTI2MDUwMTExWhcNMjYwMTI3MDUwMTExWjAzMTEwLwYDVQQD EyhkM2U4MDg1M2VjNjQ0MDgyMDY3YTE1ZjE5NmI2YjJmZWY3YzUxOGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtE6sXrW4oGraKSiTppSdIrHQQsp nwc8pEgJI1rmmG/HfXalG2QVy1fSC4Tnxbln8BeiX+oyKJcwzw8SYs7Yd7dE+Qgn MXmPmEcb8s2BZ3yJoObi/0tWuIyS3Z30vGKAl6VlJIFQlGFblssimmBhwOc2lGnt +O8CH+iDtmvd35BnVuJLmIhN4h1FnN2lyUQ0RnKGHRccZiwb3nficHoei+ruPKMe /x8gdp7Pka34mAoeTJY/8UsKFLZHM2ziZTqdYqyWR5TOPk4+oA1S+XLlBVT2J4h0 kSrHHkaA06y/ux+g9Ur4DxMPJAQ1yGm/blP79LriQHMIeDQxZ88V2igvawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPoCFPsZECCBnoV8Za2sv73xRjGMB8GA1UdIwQY MBaAFJwKrm1F0G33xCeO9PIY5C24BwlMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQt Yjk4YmJiMTYzN2MwLzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQtYjk4YmJiMTYzN2Mw LzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2T+rbKc j5rMNCvAthKh1JMcE6JDbZP8epr/oqZfdBuKoyJsMqHPUkU4xs/j7bPFjLvDEmq7 DGG3bQenJysMdi5WvkAoauO7Tq5K2ha4iyUyUDJGE61um/QfyVJFMUuWQ18S0jmE SzR2bfyliZASopmi4CTW32a8+TCWUNffxlDyS5GMsAEPm6VlTnsbJeQqZiB8hjxK tH96qBg3b7AeKJ749SZJGQ1v1rJExuawcdyCRaIp3ZBs0pEfk3G+XSNV6H0rhj2C ImRgv88WdLLhPtFJ5VRrQJUCUxsy9uv993W+PQnieXwAFfqIftU1QfOFMxJ4sq8u 7nGBMkX4wFORoQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:45:59 2026 by rpki-client