This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json) Hash identifier: VnhavOs6eieJJ/y4LzJ7ld5z3e2yKdB+fIbhcXxqFps= Subject key identifier: 5A:85:36:E6:2D:E5:F9:27:4E:80:6A:28:49:D4:D5:21:1E:64:DF:B2 Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80 Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680 Certificate serial: 019BF688431A15EF9872F31C44BD2E0FCA10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft Manifest number: 0B5C Signing time: Sun 25 Jan 2026 19:01:23 +0000 Manifest this update: Sun 25 Jan 2026 19:01:23 +0000 Manifest next update: Mon 26 Jan 2026 19:01:23 +0000 Files and hashes: 1: Qm-ojB5dZpQPZIP5vLGbx-B8HzI.roa (hash: dgJjkcZELRuvGpy4Hh7iKii9g2A21viogoew+COrj5c=) 2: jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa (hash: Irf19krmpCe/DxVOK4ehxOuwwYTqv78nSt7EKoSbfvM=) 3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: 5cjTVgz3hPnAHmWtxhg+wtmkWW8Qc4MC1KCv/Lhj9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:43:1a:15:ef:98:72:f3:1c:44:bd:2e:0f:ca:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680 Validity Not Before: Jan 25 19:01:23 2026 GMT Not After : Jan 26 19:01:23 2026 GMT Subject: CN=5a8536e62de5f9274e806a2849d4d5211e64dfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:de:84:5d:9c:f5:e3:78:01:7f:55:8b:1b: 53:ad:5c:eb:84:03:33:2a:8f:57:ac:1a:39:2c:26: 88:b0:62:12:66:52:3d:8a:8d:5c:bc:9a:0d:9b:93: 92:9d:d5:fa:5d:7e:77:d2:ac:1a:a3:9e:b8:e0:f8: 7f:cf:f6:fb:d2:fb:14:6f:ff:ff:4c:3e:f6:15:bc: fa:9f:53:19:f4:5f:c6:86:d4:a7:e0:32:91:5a:5d: f0:47:b0:82:53:3f:cf:53:11:52:b9:0c:97:41:e0: 39:ac:88:60:fc:be:5e:4b:71:b1:ff:f7:ac:49:02: e4:24:22:a2:46:bd:b7:f0:16:bf:f1:ea:4e:1a:c3: 08:95:bf:58:1c:e9:89:7e:99:f1:dd:63:8f:ae:4e: 73:da:8c:0a:25:3c:cc:07:a1:22:68:2a:11:21:fa: 5e:eb:ab:92:59:48:8f:03:2d:e5:1b:88:9b:d2:dd: d7:16:da:89:74:a5:0b:92:f1:27:49:fb:00:4e:28: 0b:2a:76:a0:94:b8:f0:9f:20:26:97:67:64:28:d9: 6a:52:02:4d:e9:17:bd:70:0f:d2:64:c2:e7:8f:d6: f5:25:7f:ac:f2:15:58:3e:92:27:84:be:81:f2:2d: c6:ce:26:26:c3:8f:2e:ff:06:ba:24:63:09:86:11: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:85:36:E6:2D:E5:F9:27:4E:80:6A:28:49:D4:D5:21:1E:64:DF:B2 X509v3 Authority Key Identifier: keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:42:a4:f9:52:61:79:58:75:34:b1:1a:e7:02:f0:d7:49:e0: 34:62:e7:b3:08:1d:1a:99:07:6e:37:4e:0a:3d:4d:e6:5d:30: a4:18:6e:76:f8:b8:ec:51:8a:76:a5:42:18:5b:ba:b7:63:1c: 97:7a:61:7a:09:8c:1d:b6:12:df:ab:f5:4b:4f:fa:e6:b7:b9: ee:f2:e6:bc:c8:ff:d4:db:52:82:88:5d:e3:74:32:68:d7:e3: 24:c8:c6:79:89:6a:fd:0b:a1:5e:38:38:d9:6b:cc:a5:e0:96: 30:a8:d7:1f:0c:f4:0c:c1:65:4c:8e:1b:be:21:10:df:21:6f: c2:ce:cb:c4:03:50:c3:e0:3e:68:b2:1d:e4:d2:ec:2c:93:2f: ea:68:92:b8:11:04:59:38:56:1b:c7:0d:04:20:e9:07:1c:1b: 90:bc:88:d8:a4:cd:2b:9d:48:84:5e:8c:01:d8:61:f4:00:e3: 48:41:f1:dc:f8:c2:b0:0a:08:eb:15:4d:f7:99:72:92:6c:45: db:c4:df:ea:24:cc:cf:a4:ff:83:ba:f3:5f:0a:41:52:ab:a8: d8:a5:0a:a0:79:2d:bc:3e:b4:3e:bb:02:20:cd:11:5c:17:6e: fc:8b:ac:e9:be:9f:e4:b2:7d:40:1f:61:d9:c6:16:38:ca:07: f9:c0:f9:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iEMaFe+YcvMcRL0uD8oQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMTM5NDc2OGM5YTM5YTYxMTI2NzRkNzM3NTk3MmE2Njk2 YjQ2ODAwHhcNMjYwMTI1MTkwMTIzWhcNMjYwMTI2MTkwMTIzWjAzMTEwLwYDVQQD Eyg1YTg1MzZlNjJkZTVmOTI3NGU4MDZhMjg0OWQ0ZDUyMTFlNjRkZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypPehF2c9eN4AX9VixtTrVzrhAMz Ko9XrBo5LCaIsGISZlI9io1cvJoNm5OSndX6XX530qwao5644Ph/z/b70vsUb/// TD72Fbz6n1MZ9F/GhtSn4DKRWl3wR7CCUz/PUxFSuQyXQeA5rIhg/L5eS3Gx//es SQLkJCKiRr238Ba/8epOGsMIlb9YHOmJfpnx3WOPrk5z2owKJTzMB6EiaCoRIfpe 66uSWUiPAy3lG4ib0t3XFtqJdKULkvEnSfsATigLKnaglLjwnyAml2dkKNlqUgJN 6Re9cA/SZMLnj9b1JX+s8hVYPpInhL6B8i3GziYmw48u/wa6JGMJhhGrCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqFNuYt5fknToBqKEnU1SEeZN+yMB8GA1UdIwQY MBaAFJwTlHaMmjmmESZ01zdZcqZpa0aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUt YTcxM2ExOTE1YzkwLzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUtYTcxM2ExOTE1Yzkw LzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0Kk+VJh eVh1NLEa5wLw10ngNGLnswgdGpkHbjdOCj1N5l0wpBhudvi47FGKdqVCGFu6t2Mc l3phegmMHbYS36v1S0/65re57vLmvMj/1NtSgohd43QyaNfjJMjGeYlq/QuhXjg4 2WvMpeCWMKjXHwz0DMFlTI4bviEQ3yFvws7LxANQw+A+aLId5NLsLJMv6miSuBEE WThWG8cNBCDpBxwbkLyI2KTNK51IhF6MAdhh9ADjSEHx3PjCsAoI6xVN95lykmxF 28Tf6iTMz6T/g7rzXwpBUquo2KUKoHktvD60PrsCIM0RXBdu/Ius6b6f5LJ9QB9h 2cYWOMoH+cD5jA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:27:46 2026 by rpki-client