This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft File: n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json) Hash identifier: BNq466siTFATp2n7pInzJYxs/9bt66Z27ayrlXdWgZw= Subject key identifier: F0:D8:A9:35:8B:98:67:8D:41:84:F8:E3:77:66:DD:C1:9D:CD:AB:B6 Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1 Certificate issuer: /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1 Certificate serial: 019BF4D093FC1C8101912F06FA1F7987C1E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 11:01:08 +0000 Manifest this update: Sun 25 Jan 2026 11:01:08 +0000 Manifest next update: Mon 26 Jan 2026 11:01:08 +0000 Files and hashes: 1: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: j1ZYN+U7Dty1kOEAdKYErI8IqWgUKJKRVx86TUC8nr4=) 2: qEVUH4qtPIdY31l07wJYpUogkpY.roa (hash: 1CkNjM5HwfDl6NM7jfzoD/R4QOj8Vqv8jxVT070r3q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:93:fc:1c:81:01:91:2f:06:fa:1f:79:87:c1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1 Validity Not Before: Jan 25 11:01:08 2026 GMT Not After : Jan 26 11:01:08 2026 GMT Subject: CN=f0d8a9358b98678d4184f8e37766ddc19dcdabb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ae:40:b4:76:9d:71:73:3a:ec:7a:ac:04:69: 7b:4d:bf:04:54:31:37:8b:22:99:f9:10:95:3c:50: ff:07:a3:de:39:bd:bd:52:d5:d4:ed:a5:60:b5:3c: 7c:24:d5:49:dc:c5:86:69:0d:83:a0:17:a3:f9:25: 9e:ce:05:33:d7:15:2f:43:44:e1:f9:bd:90:45:9a: 19:8e:40:6c:77:8a:90:21:f4:b5:eb:d7:42:40:d1: 64:7a:d0:4f:86:05:1b:22:b5:b2:c4:c6:0f:f7:a2: aa:f9:e1:29:1e:46:0f:12:4b:a5:5d:5f:85:4a:a0: ed:0d:60:fa:cc:66:bf:30:26:e6:9a:81:39:40:b3: b2:55:cf:2a:18:85:68:d4:05:39:75:44:5c:7c:31: dc:8c:6f:02:95:b8:e3:c7:80:78:d7:3e:8b:99:37: 74:5b:1e:a4:8f:ac:51:ca:9a:e0:8f:5a:18:a0:0e: 81:48:ed:8f:6f:09:72:78:39:44:27:f8:b3:b9:c9: 0f:2b:e1:d9:6d:1f:dd:83:bb:ff:d7:98:ee:6d:2e: f1:6b:c6:e2:a2:7c:d4:bb:36:b7:03:cc:4a:4e:b0: 64:dd:31:83:df:88:1b:8b:0d:42:9a:49:84:e7:30: a5:70:29:50:68:c5:68:ed:99:e3:b8:df:bb:ff:a0: cd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D8:A9:35:8B:98:67:8D:41:84:F8:E3:77:66:DD:C1:9D:CD:AB:B6 X509v3 Authority Key Identifier: keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:46:4b:b3:dc:3b:a3:83:61:a8:02:11:de:0d:de:64:35:cf: d0:02:6c:bf:8e:94:01:ca:b4:2a:fa:ed:43:e9:0f:73:38:ae: 80:40:b8:28:df:43:e6:43:80:7d:5b:ea:c2:96:53:22:c7:5f: 20:f8:bb:5b:66:cc:8d:ec:f8:c4:08:dc:f5:76:e5:82:1c:9a: 64:fc:56:58:c1:2d:72:b9:5b:b4:23:c3:f7:fe:20:50:33:88: 55:28:ee:28:92:b2:61:10:87:71:1c:02:91:69:78:97:9b:31: f8:cc:98:ec:ae:57:22:92:88:a2:a0:ac:12:74:30:d5:ee:73: c4:01:a1:7a:44:3a:63:13:a8:4c:c9:8f:4e:31:b9:70:28:0b: 53:80:8c:92:73:3c:cd:b8:21:ac:f1:6e:5b:67:29:0e:ea:3b: ad:ae:15:99:ca:a1:6d:d6:f0:45:2e:a9:cc:9d:56:20:48:4c: c4:a6:b3:4c:d7:0d:1b:a3:ea:e6:f0:7d:5b:05:f2:9e:0c:fe: 9d:e6:41:e6:c5:0c:fc:48:43:8e:72:b5:52:c8:a3:c7:51:51: 66:89:1e:cd:7d:88:ca:59:6a:00:92:e6:bd:64:17:78:27:52: 37:6e:0c:ee:a6:c3:3c:da:dd:76:63:83:3f:e6:66:64:5b:43: 47:f5:38:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00JP8HIEBkS8G+h95h8HnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZGRhZjIxMzI1N2QxNzZkZjUwYWE2ZTc3NjQ4YTBjYzcy YTVmYTEwHhcNMjYwMTI1MTEwMTA4WhcNMjYwMTI2MTEwMTA4WjAzMTEwLwYDVQQD EyhmMGQ4YTkzNThiOTg2NzhkNDE4NGY4ZTM3NzY2ZGRjMTlkY2RhYmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq5AtHadcXM67HqsBGl7Tb8EVDE3 iyKZ+RCVPFD/B6PeOb29UtXU7aVgtTx8JNVJ3MWGaQ2DoBej+SWezgUz1xUvQ0Th +b2QRZoZjkBsd4qQIfS169dCQNFketBPhgUbIrWyxMYP96Kq+eEpHkYPEkulXV+F SqDtDWD6zGa/MCbmmoE5QLOyVc8qGIVo1AU5dURcfDHcjG8Clbjjx4B41z6LmTd0 Wx6kj6xRyprgj1oYoA6BSO2PbwlyeDlEJ/izuckPK+HZbR/dg7v/15jubS7xa8bi onzUuza3A8xKTrBk3TGD34gbiw1CmkmE5zClcClQaMVo7ZnjuN+7/6DNzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDYqTWLmGeNQYT443dm3cGdzau2MB8GA1UdIwQY MBaAFJ/dryEyV9F231CqbndkigzHKl+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NGE1OGItN2EzMi00NmJjLTg1YzAt MzBiNzY0ZWI0OTAwLzEvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81NGE1OGItN2EzMi00NmJjLTg1YzAtMzBiNzY0ZWI0OTAw LzEvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEZLs9w7 o4NhqAIR3g3eZDXP0AJsv46UAcq0KvrtQ+kPcziugEC4KN9D5kOAfVvqwpZTIsdf IPi7W2bMjez4xAjc9XblghyaZPxWWMEtcrlbtCPD9/4gUDOIVSjuKJKyYRCHcRwC kWl4l5sx+MyY7K5XIpKIoqCsEnQw1e5zxAGhekQ6YxOoTMmPTjG5cCgLU4CMknM8 zbghrPFuW2cpDuo7ra4VmcqhbdbwRS6pzJ1WIEhMxKazTNcNG6Pq5vB9WwXyngz+ neZB5sUM/EhDjnK1Usijx1FRZokezX2IyllqAJLmvWQXeCdSN24M7qbDPNrddmOD P+ZmZFtDR/U4qw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:23:07 2026 by rpki-client