This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json) Hash identifier: okPEmmqkSNGyTEevwjJ9Uf6FzhdS1qYH3Eikwy0zg+c= Subject key identifier: B6:3F:53:7E:7A:39:03:2B:2D:0A:87:29:5D:7D:F9:74:CD:4B:AC:69 Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99 Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699 Certificate serial: 019BF6F57AE3D69F918F4E63D96AB4091B65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft Manifest number: 0CCD Signing time: Sun 25 Jan 2026 21:00:41 +0000 Manifest this update: Sun 25 Jan 2026 21:00:41 +0000 Manifest next update: Mon 26 Jan 2026 21:00:41 +0000 Files and hashes: 1: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (hash: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8=) 2: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: dt/piCQebpSZeiiF2Ao4XPFUBVf9oIn1hlZd8TFNrZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:7a:e3:d6:9f:91:8f:4e:63:d9:6a:b4:09:1b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699 Validity Not Before: Jan 25 21:00:41 2026 GMT Not After : Jan 26 21:00:41 2026 GMT Subject: CN=b63f537e7a39032b2d0a87295d7df974cd4bac69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:56:d4:3d:c0:3f:fc:a3:0a:e5:41:42:39: 6d:4f:66:da:85:c4:7b:15:7a:16:f3:c0:df:82:2b: 80:02:8c:2d:ba:71:b7:f3:db:a7:52:8d:6b:7e:1e: b7:54:a8:34:a2:de:14:30:57:3e:90:84:5a:50:d1: 07:a5:90:72:25:9c:d8:a3:60:40:46:71:29:3f:d8: b4:10:75:11:0b:06:f2:d3:1e:8c:27:a5:dd:a2:4b: 9a:59:d5:76:62:0e:96:b9:ba:81:33:a4:e2:18:0f: 18:7a:e1:2a:fa:b8:28:58:9c:7f:3f:cc:af:69:bc: 3d:82:96:e1:df:de:88:07:ea:b7:49:79:0e:b2:be: 50:2e:17:1c:e0:a6:99:9d:a9:da:88:c2:0e:c7:9f: 63:99:da:0f:91:a7:79:ee:11:78:e1:74:3a:12:b7: bd:74:3a:1b:8c:2c:3f:42:3a:14:c1:7d:54:58:60: 46:65:f1:ef:78:e6:72:dc:28:ce:53:8e:bf:e6:ac: bf:17:3f:86:ea:f6:06:51:d3:26:69:d4:c0:47:28: d3:f4:e4:be:f0:ad:c2:4a:68:3a:33:87:c1:8a:7d: 2f:87:70:cf:49:7f:ee:fa:39:dc:5a:38:a8:e6:3f: e7:ec:ef:d1:10:cc:41:a8:8d:11:b2:7a:bb:48:71: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3F:53:7E:7A:39:03:2B:2D:0A:87:29:5D:7D:F9:74:CD:4B:AC:69 X509v3 Authority Key Identifier: keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:96:cc:c4:99:94:a4:f0:dc:4b:21:db:96:70:d8:d0:29:ce: 38:3f:08:57:d8:e3:04:7e:c7:48:be:d8:81:0f:55:8e:74:e2: 2e:fe:16:6d:e3:dd:48:ef:03:48:6e:2c:15:07:92:61:d2:f3: 76:15:fd:7d:25:ed:0a:6f:42:f2:4a:3a:e1:a1:10:ed:a6:d3: ab:9d:06:e2:88:56:47:a8:14:45:a5:2a:6a:a1:bc:57:66:4c: d0:6b:b1:4c:5a:df:78:8f:af:06:85:2a:0a:5c:5d:aa:4b:af: a8:d8:47:da:2d:a9:0f:2a:dc:03:a7:47:46:cd:55:2a:b3:a8: ee:4a:56:48:78:4d:52:08:9d:a9:3b:04:7f:c1:3c:65:8c:4b: f9:32:59:5c:5e:ae:5d:0d:ed:26:ce:1e:85:bf:5f:af:73:90: 18:93:f3:96:64:13:76:6c:ad:2d:ed:68:62:a8:26:af:c6:17: b6:ab:39:2f:67:71:01:33:d2:35:99:ec:f1:fb:35:fa:53:ae: 19:d5:d6:35:73:3a:0d:2a:41:b2:d2:00:04:d4:04:72:60:a5: 61:93:5b:a4:54:51:d2:00:01:8a:16:fd:a0:4f:53:f1:b0:31: 5d:d5:8c:51:ee:47:d5:3c:9f:9c:f3:b1:5b:28:38:5b:72:ee: 08:82:e9:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29Xrj1p+Rj05j2Wq0CRtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTY1MmI4MzhmZjJkOTY3MmFjOGNhNjZiYTY2MGRkNGU0 NWQ2OTkwHhcNMjYwMTI1MjEwMDQxWhcNMjYwMTI2MjEwMDQxWjAzMTEwLwYDVQQD EyhiNjNmNTM3ZTdhMzkwMzJiMmQwYTg3Mjk1ZDdkZjk3NGNkNGJhYzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtClW1D3AP/yjCuVBQjltT2bahcR7 FXoW88DfgiuAAowtunG389unUo1rfh63VKg0ot4UMFc+kIRaUNEHpZByJZzYo2BA RnEpP9i0EHURCwby0x6MJ6XdokuaWdV2Yg6WubqBM6TiGA8YeuEq+rgoWJx/P8yv abw9gpbh396IB+q3SXkOsr5QLhcc4KaZnanaiMIOx59jmdoPkad57hF44XQ6Ere9 dDobjCw/QjoUwX1UWGBGZfHveOZy3CjOU46/5qy/Fz+G6vYGUdMmadTARyjT9OS+ 8K3CSmg6M4fBin0vh3DPSX/u+jncWjio5j/n7O/REMxBqI0Rsnq7SHFa1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY/U356OQMrLQqHKV19+XTNS6xpMB8GA1UdIwQY MBaAFDUWUrg4/y2WcqyMpmumYN1ORdaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQt MWNkNTA2MDcwYmI1LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQtMWNkNTA2MDcwYmI1 LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJbMxJmU pPDcSyHblnDY0CnOOD8IV9jjBH7HSL7YgQ9VjnTiLv4WbePdSO8DSG4sFQeSYdLz dhX9fSXtCm9C8ko64aEQ7abTq50G4ohWR6gURaUqaqG8V2ZM0GuxTFrfeI+vBoUq ClxdqkuvqNhH2i2pDyrcA6dHRs1VKrOo7kpWSHhNUgidqTsEf8E8ZYxL+TJZXF6u XQ3tJs4ehb9fr3OQGJPzlmQTdmytLe1oYqgmr8YXtqs5L2dxATPSNZns8fs1+lOu GdXWNXM6DSpBstIABNQEcmClYZNbpFRR0gABihb9oE9T8bAxXdWMUe5H1TyfnPOx Wyg4W3LuCILpsg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:40 2026 by rpki-client