This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json) Hash identifier: zv67jzfdYIM54NGoITu5++UDi9fZgsKNhY+WcEKtIKQ= Subject key identifier: 67:58:23:3D:9D:F7:0F:6D:DB:50:DC:1F:D4:F5:04:0C:CE:C9:AB:1B Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04 Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004 Certificate serial: 019BF79A26A194FD87D321D8CBC1F0EF2505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft Manifest number: 1744 Signing time: Mon 26 Jan 2026 00:00:33 +0000 Manifest this update: Mon 26 Jan 2026 00:00:33 +0000 Manifest next update: Tue 27 Jan 2026 00:00:33 +0000 Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: H77TPG7wg4IE41+Ybbq6yNSqTGO7Dy8wa7voWG7yZ3s=) 2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=) 3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:26:a1:94:fd:87:d3:21:d8:cb:c1:f0:ef:25:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004 Validity Not Before: Jan 26 00:00:33 2026 GMT Not After : Jan 27 00:00:33 2026 GMT Subject: CN=6758233d9df70f6ddb50dc1fd4f5040ccec9ab1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a4:1c:9f:81:7e:d9:36:9f:bd:f8:55:31:06: ad:88:8d:6e:07:e5:4a:1a:07:35:79:50:e2:0d:9c: 18:af:1a:78:b5:32:96:7e:b2:17:b5:aa:c0:9d:83: d3:1d:b4:69:59:fb:d0:00:b2:e9:b8:c6:d9:48:ca: 4d:f7:4e:8d:49:e5:d2:29:53:f9:bc:24:38:34:31: 44:45:e4:7b:f4:f7:bc:1e:34:c8:07:7e:b3:27:12: 36:f7:6a:b9:14:58:56:cd:88:e4:de:bf:9a:6c:bc: 60:07:43:0d:73:ed:86:2d:95:bd:dd:e9:27:3d:d5: 99:16:2b:a9:02:03:1a:fc:b5:87:c3:70:e9:28:30: 66:aa:74:0b:15:b0:27:2e:2d:fd:15:54:29:05:85: ac:fd:7e:33:6f:33:75:d6:aa:c9:45:dc:64:65:ba: 63:f6:bf:61:97:7c:2c:48:2a:99:12:d0:2b:8e:86: 72:52:33:f2:5c:86:c9:b2:06:8a:f6:7a:b2:11:6a: ac:38:54:6f:8c:11:ed:ba:b7:da:9a:59:44:a7:34: 45:16:b6:00:ef:26:53:64:c1:ba:36:a4:3c:eb:62: 6f:b5:bc:64:7a:7b:d1:99:18:66:90:d3:07:b2:08: 2d:20:72:42:b8:65:4d:27:54:cf:bb:46:90:61:1d: 6c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:58:23:3D:9D:F7:0F:6D:DB:50:DC:1F:D4:F5:04:0C:CE:C9:AB:1B X509v3 Authority Key Identifier: keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ff:03:db:af:f0:1d:8e:1c:07:02:c1:71:77:fb:06:4d:ef: 60:ed:45:67:cd:ed:1d:f3:b1:b4:2d:32:4d:b5:1d:5c:fc:b5: 36:35:5f:1e:85:6c:c3:ab:46:3c:7e:50:c3:c4:e5:49:45:34: 52:bd:80:87:50:ab:73:ba:b6:5b:6c:37:c6:b4:42:02:dc:bc: ac:3c:0c:93:ef:3e:3f:9f:68:c3:b9:dd:a9:3f:95:dd:cc:e7: 2a:76:72:bd:4e:d8:c7:d5:81:8e:b4:52:69:d4:6c:6f:d9:19: 6f:f8:1e:54:88:7b:cf:9f:98:36:b4:61:d9:b9:71:11:e0:38: 18:e4:37:87:b4:65:5a:d7:23:41:d5:5c:91:cd:ff:27:20:02: 0b:39:34:b5:35:4b:33:4a:55:a1:96:a9:a9:11:79:68:2d:6f: b3:21:c0:5f:b8:6d:7d:1a:d2:a3:47:0f:fd:30:e4:ff:3e:74: ff:4c:21:11:5f:48:59:a5:c7:d6:70:85:62:1b:ef:96:d3:e7: d8:07:18:37:1a:24:21:98:64:26:23:e5:f2:0b:89:fa:9c:9f: b7:e5:67:eb:8c:2f:2e:a8:bd:88:02:66:fa:bd:8f:24:e7:a2: f6:f8:48:1c:85:d7:ae:8c:12:1f:a7:42:f1:bb:0a:2c:84:47: e6:c4:83:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3miahlP2H0yHYy8Hw7yUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Y2VhYTYyNmNiZDg5MDUyZjM1NDUzMzVkZmRiMzFhMTMz ODMwMDQwHhcNMjYwMTI2MDAwMDMzWhcNMjYwMTI3MDAwMDMzWjAzMTEwLwYDVQQD Eyg2NzU4MjMzZDlkZjcwZjZkZGI1MGRjMWZkNGY1MDQwY2NlYzlhYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aQcn4F+2TafvfhVMQatiI1uB+VK Ggc1eVDiDZwYrxp4tTKWfrIXtarAnYPTHbRpWfvQALLpuMbZSMpN906NSeXSKVP5 vCQ4NDFEReR79Pe8HjTIB36zJxI292q5FFhWzYjk3r+abLxgB0MNc+2GLZW93ekn PdWZFiupAgMa/LWHw3DpKDBmqnQLFbAnLi39FVQpBYWs/X4zbzN11qrJRdxkZbpj 9r9hl3wsSCqZEtArjoZyUjPyXIbJsgaK9nqyEWqsOFRvjBHturfamllEpzRFFrYA 7yZTZMG6NqQ862JvtbxkenvRmRhmkNMHsggtIHJCuGVNJ1TPu0aQYR1s3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdYIz2d9w9t21DcH9T1BAzOyasbMB8GA1UdIwQY MBaAFDfOqmJsvYkFLzVFM139sxoTODAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAt ZTE1YThiNzBlOGQyLzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAtZTE1YThiNzBlOGQy LzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/8D26/w HY4cBwLBcXf7Bk3vYO1FZ83tHfOxtC0yTbUdXPy1NjVfHoVsw6tGPH5Qw8TlSUU0 Ur2Ah1Crc7q2W2w3xrRCAty8rDwMk+8+P59ow7ndqT+V3cznKnZyvU7Yx9WBjrRS adRsb9kZb/geVIh7z5+YNrRh2blxEeA4GOQ3h7RlWtcjQdVckc3/JyACCzk0tTVL M0pVoZapqRF5aC1vsyHAX7htfRrSo0cP/TDk/z50/0whEV9IWaXH1nCFYhvvltPn 2AcYNxokIZhkJiPl8guJ+pyft+Vn64wvLqi9iAJm+r2PJOei9vhIHIXXrowSH6dC 8bsKLIRH5sSDmQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:46 2026 by rpki-client