This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft File: nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json) Hash identifier: AWD1GVDQxtnW9PIybBPTTV6lQA2UdXkwjtGeqJG/C8s= Subject key identifier: 3D:D2:2C:15:36:49:81:A0:F1:1B:99:3B:8D:BB:61:CC:29:58:E9:BA Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69 Certificate issuer: /CN=9ce94757ac3f70b40f369307d365ebc9657bab69 Certificate serial: 019BF6BEB5790210F5526487AE52C658FD0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 20:00:52 +0000 Manifest this update: Sun 25 Jan 2026 20:00:52 +0000 Manifest next update: Mon 26 Jan 2026 20:00:52 +0000 Files and hashes: 1: 9sanimaWXZjeVWS-vHt3uwj21c8.roa (hash: xXtjrWCXxmfH7nH10gBJiS5Jtsr3rg2O1NowVzhxzC4=) 2: McecUEUwqKunvtzepCez6bQQUBk.roa (hash: CYTQm/MUz7dvxmMfHeEUwxreRSRodvZHuJFCFTsDc2E=) 3: XqoE4QEKfS73tFedkyMBR2t2Chw.roa (hash: 7QBQTr9lxf/H18imnUvnw9PKGfAGMos7jRs0YTyffvE=) 4: YAeu22loCmAQOVocekZI091KNAY.roa (hash: IyieUfnyyVgNIxndlID6xDdRxS+iTHAiCnCvVa6dBlc=) 5: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: PG5JBqwRHt9A0VwSGGAC6NzTsQJCdH/SxnKhzBolHs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:b5:79:02:10:f5:52:64:87:ae:52:c6:58:fd:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69 Validity Not Before: Jan 25 20:00:52 2026 GMT Not After : Jan 26 20:00:52 2026 GMT Subject: CN=3dd22c15364981a0f11b993b8dbb61cc2958e9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:08:58:40:bc:05:4e:dc:0d:b2:25:72:93:0f: 65:bb:86:a1:e5:07:a8:b3:49:81:ca:92:a9:b1:4f: ca:53:a1:21:da:7d:87:54:6f:fe:b3:ff:4d:fb:27: 48:5a:25:af:37:2c:fd:09:bc:d5:96:62:5e:12:f4: 3c:c9:9b:63:e4:09:b3:dc:28:c3:8e:bb:fd:60:cf: 64:9a:f7:a0:e7:3c:f5:62:10:39:24:f4:ab:5a:cf: 33:50:74:65:1c:f2:bf:05:00:01:fa:0e:87:92:cb: 90:e8:71:76:01:38:59:61:76:34:c6:27:e0:13:70: 63:df:b6:f2:ab:e2:db:98:65:3b:4a:b7:f7:eb:24: 7a:62:25:68:e7:0f:8a:b4:3b:2d:a2:88:89:e7:66: 92:ee:e3:79:ee:fd:e5:20:28:14:e0:52:f9:39:94: 3f:89:b0:30:5a:9b:01:6d:a7:ad:33:f7:94:f4:78: 6f:6b:d6:0c:4a:a7:b0:d7:30:bb:b6:97:74:56:51: 65:57:e6:ec:ba:a3:16:ee:21:73:0b:e7:63:88:f9: ef:da:0d:45:0f:3e:ee:0b:f3:f0:a6:a9:f4:6c:12: 41:74:50:34:1c:97:62:d9:52:09:6b:90:b1:68:48: 3b:00:f8:f3:e9:04:24:f3:8d:7a:85:7d:3a:d3:db: a1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D2:2C:15:36:49:81:A0:F1:1B:99:3B:8D:BB:61:CC:29:58:E9:BA X509v3 Authority Key Identifier: keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:60:66:6b:9b:89:ca:9d:f0:35:73:5b:38:55:41:df:9e:dc: 37:6b:93:f0:33:2c:c6:08:64:3f:b6:10:3c:57:8a:91:88:ba: 85:6b:b7:a0:aa:24:36:d3:7a:e4:49:a8:af:04:0a:8b:6a:dd: 94:58:c8:5e:76:13:54:f9:4e:b3:cb:39:c3:32:83:43:9f:9b: ca:78:ef:ca:b9:5f:00:0e:46:b2:cd:87:31:5e:84:c5:4b:ae: 3c:55:a8:dd:fc:8f:88:4b:15:34:de:e2:62:e3:00:46:24:61: 2d:e8:3c:40:1b:b2:c2:2c:1a:f6:b1:dd:24:59:f6:a3:ca:4e: a7:3d:f4:19:3c:8b:ff:d5:97:bd:0e:4d:bc:a1:48:d0:78:9b: 83:d7:35:4f:dd:9b:ba:10:bc:d7:7b:60:b0:11:96:06:89:c2: b5:06:af:24:29:94:81:d1:e9:bf:fc:48:f3:41:c3:16:f8:23: 6c:8b:97:73:ae:1d:dc:35:a2:1a:31:fe:ed:f0:f0:46:3d:7b: dc:dc:2d:8f:5e:f5:a5:ae:3e:1a:f1:de:a3:b4:c1:27:61:e0: df:07:d7:ce:1d:a3:cb:47:73:82:dd:0e:c7:1b:58:87:58:42: 2a:e7:99:8b:58:d1:53:d1:c8:0a:02:02:25:01:cf:63:04:11: d5:ff:fa:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vrV5AhD1UmSHrlLGWP0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTk0NzU3YWMzZjcwYjQwZjM2OTMwN2QzNjVlYmM5NjU3 YmFiNjkwHhcNMjYwMTI1MjAwMDUyWhcNMjYwMTI2MjAwMDUyWjAzMTEwLwYDVQQD EygzZGQyMmMxNTM2NDk4MWEwZjExYjk5M2I4ZGJiNjFjYzI5NThlOWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAhYQLwFTtwNsiVykw9lu4ah5Qeo s0mBypKpsU/KU6Eh2n2HVG/+s/9N+ydIWiWvNyz9CbzVlmJeEvQ8yZtj5Amz3CjD jrv9YM9kmveg5zz1YhA5JPSrWs8zUHRlHPK/BQAB+g6HksuQ6HF2AThZYXY0xifg E3Bj37byq+LbmGU7Srf36yR6YiVo5w+KtDstooiJ52aS7uN57v3lICgU4FL5OZQ/ ibAwWpsBbaetM/eU9Hhva9YMSqew1zC7tpd0VlFlV+bsuqMW7iFzC+djiPnv2g1F Dz7uC/Pwpqn0bBJBdFA0HJdi2VIJa5CxaEg7APjz6QQk8416hX0609uhCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3SLBU2SYGg8RuZO427YcwpWOm6MB8GA1UdIwQY MBaAFJzpR1esP3C0DzaTB9Nl68lle6tpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDIt ZTFlYTQxYzlhMmU2LzEvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDItZTFlYTQxYzlhMmU2 LzEvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGBma5uJ yp3wNXNbOFVB357cN2uT8DMsxghkP7YQPFeKkYi6hWu3oKokNtN65EmorwQKi2rd lFjIXnYTVPlOs8s5wzKDQ5+bynjvyrlfAA5Gss2HMV6ExUuuPFWo3fyPiEsVNN7i YuMARiRhLeg8QBuywiwa9rHdJFn2o8pOpz30GTyL/9WXvQ5NvKFI0Hibg9c1T92b uhC813tgsBGWBonCtQavJCmUgdHpv/xI80HDFvgjbIuXc64d3DWiGjH+7fDwRj17 3Nwtj171pa4+GvHeo7TBJ2Hg3wfXzh2jy0dzgt0OxxtYh1hCKueZi1jRU9HICgIC JQHPYwQR1f/6Zg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:43 2026 by rpki-client