This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: 9nZIPIYp/kvswljl/MB1v1IsCGalWIGuFiRqlKkoED4= Subject key identifier: 0E:81:38:86:EF:E8:F0:7E:FB:23:04:EB:1E:85:01:4C:1C:45:8D:6C Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019BF72CE944D41D9FEDB380F42939652108 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 17E0 Signing time: Sun 25 Jan 2026 22:01:14 +0000 Manifest this update: Sun 25 Jan 2026 22:01:14 +0000 Manifest next update: Mon 26 Jan 2026 22:01:14 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 3: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 4: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 5: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 6: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 7: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: lAtat+RbOyFyn6b2Dnsyh9zp9CxxohCZLfxjG0QxiU0=) 9: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 10: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 11: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 12: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 13: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 14: jIciP85UIj70W740hLw1umDPl8U.roa (hash: wrY0tv/GkQoOFiGmbPrfGkCZnbqrkkaA3u07XZ08OZM=) 15: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 16: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 17: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 18: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 19: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 20: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:e9:44:d4:1d:9f:ed:b3:80:f4:29:39:65:21:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 25 22:01:14 2026 GMT Not After : Jan 26 22:01:14 2026 GMT Subject: CN=0e813886efe8f07efb2304eb1e85014c1c458d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:79:0a:76:06:d7:7b:b6:79:91:70:57:87: 61:43:f3:67:fa:66:0a:fe:b2:b2:7e:a1:41:a7:f6: 38:d9:59:2c:a7:52:4e:57:8f:e2:50:bb:88:29:02: 76:03:02:3e:19:4e:10:a4:28:f5:7e:2c:a6:a8:48: ca:bf:1b:b2:e6:60:7a:98:14:1e:86:bf:45:96:b7: 76:67:45:bf:a7:e9:59:6b:d5:c4:df:c8:65:9e:61: 33:b9:e6:78:81:0b:2a:d7:99:01:e6:52:d9:e6:b4: 1f:5b:98:65:71:76:01:d7:a2:b7:d6:99:c7:68:8d: e1:00:2c:0b:a3:41:2c:bd:14:bb:dc:16:76:52:09: 2c:a7:bc:7a:9b:9f:72:31:fd:97:7f:17:69:e9:6c: a3:a4:01:8d:1d:92:a1:8b:15:88:5e:ef:9c:57:a4: 88:40:01:d9:1e:7e:33:22:2d:95:7d:db:29:1e:b0: 93:fb:2a:13:9e:a0:3a:20:04:21:85:30:e1:1f:c8: 67:61:30:4c:80:10:db:89:12:e1:cb:1b:ee:6b:79: 4d:73:98:1b:45:59:58:68:b0:c1:a5:e8:b3:4b:78: 4b:1c:2f:5f:4f:13:d3:b6:f9:2b:d4:49:2f:d1:96: 26:43:85:b5:d7:75:70:97:9f:0f:b7:36:22:49:9d: 2c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:81:38:86:EF:E8:F0:7E:FB:23:04:EB:1E:85:01:4C:1C:45:8D:6C X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bd:21:af:eb:5c:f4:cc:2b:63:72:76:d9:d3:e6:8a:47:68: a3:0b:a2:dc:3c:3a:db:fc:07:f4:b9:1c:a9:c4:ab:8a:8c:c7: bc:3f:c9:28:28:a7:7c:52:1a:3b:c6:1c:03:86:28:92:4c:05: 7d:3a:c0:80:3f:25:a6:cc:29:12:ed:e6:ba:e5:2f:74:2a:8b: 9a:d9:4b:f9:00:ee:50:bb:92:09:90:ef:02:e6:fe:22:d2:77: ea:f1:39:78:f4:7d:9c:05:99:ef:7b:4c:50:33:e3:e7:57:5c: ec:93:56:f7:e4:4d:4c:9b:18:33:1f:e4:63:07:1a:2e:1d:2a: bf:29:01:9f:51:df:e4:ed:a1:a6:be:77:01:bc:6d:14:7f:ba: 59:e9:4b:e7:6b:30:80:17:55:8c:8e:41:d5:92:2c:4a:8a:e0: 96:3e:f9:f8:bf:32:ae:0d:8a:c0:a2:77:10:95:0f:2f:06:a1: 00:3c:44:97:9c:b4:8c:04:ce:58:59:7b:f2:ac:5b:08:6f:a1: ac:d3:0b:7f:14:9c:84:39:39:d9:1f:8f:09:f3:0b:1c:53:57: 8e:07:7f:c3:24:ae:15:05:a4:11:16:5d:b1:8c:8c:30:17:c3: 5a:b7:e6:23:7b:43:f0:cd:20:45:d9:ce:e2:07:c3:42:a2:b9: 7e:5a:4f:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LOlE1B2f7bOA9Ck5ZSEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTI1MjIwMTE0WhcNMjYwMTI2MjIwMTE0WjAzMTEwLwYDVQQD EygwZTgxMzg4NmVmZThmMDdlZmIyMzA0ZWIxZTg1MDE0YzFjNDU4ZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHJ5CnYG13u2eZFwV4dhQ/Nn+mYK /rKyfqFBp/Y42Vksp1JOV4/iULuIKQJ2AwI+GU4QpCj1fiymqEjKvxuy5mB6mBQe hr9Flrd2Z0W/p+lZa9XE38hlnmEzueZ4gQsq15kB5lLZ5rQfW5hlcXYB16K31pnH aI3hACwLo0EsvRS73BZ2Ugksp7x6m59yMf2Xfxdp6WyjpAGNHZKhixWIXu+cV6SI QAHZHn4zIi2VfdspHrCT+yoTnqA6IAQhhTDhH8hnYTBMgBDbiRLhyxvua3lNc5gb RVlYaLDBpeizS3hLHC9fTxPTtvkr1Ekv0ZYmQ4W113Vwl58PtzYiSZ0s4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6BOIbv6PB++yME6x6FAUwcRY1sMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf70hr+tc 9MwrY3J22dPmikdoowui3Dw62/wH9LkcqcSriozHvD/JKCinfFIaO8YcA4YokkwF fTrAgD8lpswpEu3muuUvdCqLmtlL+QDuULuSCZDvAub+ItJ36vE5ePR9nAWZ73tM UDPj51dc7JNW9+RNTJsYMx/kYwcaLh0qvykBn1Hf5O2hpr53AbxtFH+6WelL52sw gBdVjI5B1ZIsSorglj75+L8yrg2KwKJ3EJUPLwahADxEl5y0jATOWFl78qxbCG+h rNMLfxSchDk52R+PCfMLHFNXjgd/wySuFQWkERZdsYyMMBfDWrfmI3tD8M0gRdnO 4gfDQqK5flpPEg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:28:02 2026 by rpki-client