This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: ETrkvi4lt9aycy52pCNBb2nLAVqYXtI1ERpRKQRfoBo= Subject key identifier: 2E:4A:76:8F:57:C0:3B:C9:9F:7C:84:7C:D0:A3:52:FF:91:59:41:EB Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019BF72CDC77BBD50F055EFDED9D631ADE22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 1524 Signing time: Sun 25 Jan 2026 22:01:10 +0000 Manifest this update: Sun 25 Jan 2026 22:01:10 +0000 Manifest next update: Mon 26 Jan 2026 22:01:10 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: TEHHAlkX9O6EfAexlUffk5uK7bLa7/7I2k3Bi5xvzko=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:dc:77:bb:d5:0f:05:5e:fd:ed:9d:63:1a:de:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Jan 25 22:01:10 2026 GMT Not After : Jan 26 22:01:10 2026 GMT Subject: CN=2e4a768f57c03bc99f7c847cd0a352ff915941eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:60:bf:09:90:93:86:a8:35:bb:27:88:7d:c6: c2:79:9a:5b:bf:21:e1:bd:30:7a:64:9e:87:18:e0: 71:71:18:8c:a1:39:cb:1e:74:1b:99:de:cd:4c:4a: 06:12:4e:52:43:1a:61:b9:16:bf:7c:bb:bd:2e:71: b6:55:d9:b7:2f:39:74:8f:cd:3d:6f:86:91:1e:28: 46:b6:50:85:ff:e6:d6:b3:40:97:71:9f:71:50:1f: 48:74:e6:fa:6d:cb:6d:70:0a:41:c5:26:02:3e:18: ec:2e:a6:7d:5f:37:1c:58:83:42:5a:dd:3c:3e:21: 55:8f:c1:d1:e5:19:60:4e:cc:3c:1d:ff:9c:43:95: 2c:89:85:75:1f:1a:ab:5f:a4:2d:5e:f8:72:07:01: d7:9d:7f:4d:02:0a:83:53:02:5c:a1:09:68:08:da: a7:6c:29:72:f9:6e:85:ab:61:af:c7:1b:50:ff:5a: b8:c0:3b:14:fe:49:42:c4:c0:98:74:3c:41:0a:01: 09:7a:b6:58:9c:33:62:c6:68:77:db:08:54:4e:1d: 15:fd:07:8e:f0:ce:94:70:52:6e:d4:a3:0c:c2:27: ee:c5:20:db:4d:72:a0:f4:cd:ce:a9:95:66:75:c8: f7:ea:b0:fa:81:88:28:30:cb:57:de:41:ab:71:54: 04:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4A:76:8F:57:C0:3B:C9:9F:7C:84:7C:D0:A3:52:FF:91:59:41:EB X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8d:33:da:f5:17:3e:7e:83:52:fb:67:f0:06:4e:35:a4:45: e4:a9:d1:89:87:c9:cf:f4:b0:c4:0a:45:92:e2:a6:38:62:b2: 46:60:d7:f0:ec:dc:d2:c5:86:cf:68:cb:d0:c2:97:c8:93:67: 78:5a:88:e7:10:7a:17:b7:50:d6:4a:c4:ad:10:7c:72:b3:fb: a7:cb:bf:8b:bc:65:3c:0a:4f:8e:8c:11:0a:56:d1:46:c5:00: 7a:18:5f:01:3d:96:66:bb:fc:53:a6:97:f7:d5:aa:78:ca:91: 17:fb:e2:98:b8:20:61:35:86:0f:4f:6b:0e:65:22:b6:77:a1: 89:f2:e4:9f:11:3a:8c:b0:45:fd:7d:ea:2e:11:11:e0:32:d6: 54:7e:70:ab:3a:5a:90:b8:2f:96:e0:b7:c7:6e:87:ce:7e:9b: ff:38:f7:8c:41:5f:03:4f:d5:cc:ea:d8:49:95:e5:2e:8c:be: 0b:dd:2a:4d:ae:d5:93:06:39:64:43:b1:38:45:62:73:0e:ef: cb:c6:82:9e:e9:ae:0e:02:4c:9b:f8:c2:0a:7f:f0:17:95:10: 5e:bb:67:95:6d:0f:e9:eb:01:86:ac:01:0f:76:4f:e2:15:5c: 4c:34:cd:aa:32:e5:f2:38:e4:c5:6e:e0:ef:c3:3b:33:f5:ef: 98:2a:2d:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LNx3u9UPBV797Z1jGt4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwMTI1MjIwMTEwWhcNMjYwMTI2MjIwMTEwWjAzMTEwLwYDVQQD EygyZTRhNzY4ZjU3YzAzYmM5OWY3Yzg0N2NkMGEzNTJmZjkxNTk0MWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32C/CZCThqg1uyeIfcbCeZpbvyHh vTB6ZJ6HGOBxcRiMoTnLHnQbmd7NTEoGEk5SQxphuRa/fLu9LnG2Vdm3Lzl0j809 b4aRHihGtlCF/+bWs0CXcZ9xUB9IdOb6bcttcApBxSYCPhjsLqZ9XzccWINCWt08 PiFVj8HR5RlgTsw8Hf+cQ5UsiYV1HxqrX6QtXvhyBwHXnX9NAgqDUwJcoQloCNqn bCly+W6Fq2GvxxtQ/1q4wDsU/klCxMCYdDxBCgEJerZYnDNixmh32whUTh0V/QeO 8M6UcFJu1KMMwifuxSDbTXKg9M3OqZVmdcj36rD6gYgoMMtX3kGrcVQENwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5Kdo9XwDvJn3yEfNCjUv+RWUHrMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY0z2vUX Pn6DUvtn8AZONaRF5KnRiYfJz/SwxApFkuKmOGKyRmDX8Ozc0sWGz2jL0MKXyJNn eFqI5xB6F7dQ1krErRB8crP7p8u/i7xlPApPjowRClbRRsUAehhfAT2WZrv8U6aX 99WqeMqRF/vimLggYTWGD09rDmUitnehifLknxE6jLBF/X3qLhER4DLWVH5wqzpa kLgvluC3x26Hzn6b/zj3jEFfA0/VzOrYSZXlLoy+C90qTa7VkwY5ZEOxOEVicw7v y8aCnumuDgJMm/jCCn/wF5UQXrtnlW0P6esBhqwBD3ZP4hVcTDTNqjLl8jjkxW7g 78M7M/XvmCot/A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:55:43 2026 by rpki-client