This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json) Hash identifier: HXw4n5OczuN0XuOctZocQfrlhMyP4p+xNkyUbpFu/Hs= Subject key identifier: 8A:FA:F8:66:73:4E:B8:3F:13:02:D3:5F:07:8A:32:2C:B2:1F:2E:B4 Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd Certificate serial: 019BF53E683C678EF95CF6ED6902FB1A5859 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 13:01:06 +0000 Manifest this update: Sun 25 Jan 2026 13:01:06 +0000 Manifest next update: Mon 26 Jan 2026 13:01:06 +0000 Files and hashes: 1: Q7VU1IAhmqh6QnPsRjKtqye9cFY.roa (hash: 5hCbvviVC6DjaUoU7fXbjYQV9Lo078pPrQ3MKFzmu/U=) 2: UMRm0dtRz3FJANd_M4r6isxg5pc.roa (hash: hL7WSRr8WKYlMsBe+yWHzd7U1Dc511hpxbpyKw8/AI8=) 3: cwpueJkAgwR--N1HcP66vBFBfHs.roa (hash: e4Ux6XpWYsR7DA/nLXViGlPPyLLw1PTyAUYLhKKvKpY=) 4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: WZUSAnEEussDdL+HKjRQamzMfrwQoCDtlXp/Uq8m4vQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:68:3c:67:8e:f9:5c:f6:ed:69:02:fb:1a:58:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd Validity Not Before: Jan 25 13:01:06 2026 GMT Not After : Jan 26 13:01:06 2026 GMT Subject: CN=8afaf866734eb83f1302d35f078a322cb21f2eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:a6:0f:9d:98:bc:2c:75:c8:0b:f6:cd:fa: a8:99:4c:7d:22:23:2e:a6:2d:83:81:38:94:d8:cc: 10:fb:78:92:2c:13:01:5c:34:99:37:6f:32:8b:59: c9:79:a9:c4:b1:55:0b:0d:55:89:fa:c5:cd:d8:dc: ec:35:40:ed:e3:a3:25:d2:95:45:b0:f5:e1:29:44: 6d:0c:f6:f1:1b:36:30:97:59:56:ba:6c:d5:dd:29: 3f:aa:c5:41:d5:3a:94:46:7b:c9:39:94:8f:7d:b3: 39:fd:18:50:5b:6d:6a:da:ef:0a:bd:fb:2d:37:2f: 0c:2e:c9:f2:19:13:f5:93:f8:ff:eb:72:86:d7:1d: 5f:da:96:15:97:09:c8:90:41:e2:ec:b6:c7:29:38: d4:64:b0:f2:3b:bc:0b:52:c7:3f:b2:0e:dd:1d:98: 92:50:91:f5:5b:9d:b8:c1:a1:ed:db:f0:e6:52:00: 87:4b:ad:d4:ec:b9:59:f3:a2:87:b3:97:1a:68:39: 0a:ca:5c:f3:2b:2a:c6:ce:94:3d:33:84:34:a0:96: 67:f1:b5:ed:0d:ea:a3:a1:79:c5:b8:96:71:08:70: 3a:e3:b0:09:f2:f1:fa:ad:48:89:95:04:ef:9d:01: 1c:2f:b3:92:4c:f0:61:42:a9:69:f7:61:b0:6a:4c: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FA:F8:66:73:4E:B8:3F:13:02:D3:5F:07:8A:32:2C:B2:1F:2E:B4 X509v3 Authority Key Identifier: keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:37:d9:d6:a5:4f:f2:80:ec:c2:a6:8b:f7:6e:17:53:11:01: ae:06:9f:7e:74:96:30:63:c2:a7:34:82:f3:e6:67:2d:a5:18: b4:72:b8:7a:7e:8e:ba:05:dd:86:aa:32:86:39:f7:8c:7d:53: bb:5d:36:da:76:65:cc:b7:e9:a6:c2:38:2a:d9:99:f6:a3:bb: e9:6d:5b:cc:44:93:f5:97:f3:98:16:e3:80:e7:05:ab:d6:5d: 4d:75:ca:07:c1:a8:18:cf:fa:39:a9:4a:76:d6:aa:7e:62:d2: 18:3b:14:1e:84:cd:6b:a5:fd:eb:7d:69:a5:5b:cd:05:c1:5d: 22:69:e5:f0:fc:b3:0c:3c:8d:a0:36:91:bd:99:05:79:61:fe: c3:d1:11:d1:b3:18:b7:32:2f:24:fd:7a:94:f3:91:9f:38:89: 69:c1:6f:38:c2:8d:a3:82:8a:50:b8:0c:41:7b:bc:a2:f5:32: 3e:73:d4:c1:e3:52:37:7e:40:09:d2:1c:f6:41:a3:3d:5f:a0: fd:32:11:70:1b:50:ef:68:75:7b:f8:67:fc:19:4c:06:b7:db: 7c:a3:8d:52:ce:32:ed:52:61:e0:b2:50:ef:24:66:ab:1a:ea: 8a:de:fc:13:13:c2:b3:f2:60:9d:13:3a:47:a6:a4:26:af:1d: 39:2f:cc:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pmg8Z475XPbtaQL7GlhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw MjhlY2QwHhcNMjYwMTI1MTMwMTA2WhcNMjYwMTI2MTMwMTA2WjAzMTEwLwYDVQQD Eyg4YWZhZjg2NjczNGViODNmMTMwMmQzNWYwNzhhMzIyY2IyMWYyZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/CmD52YvCx1yAv2zfqomUx9IiMu pi2DgTiU2MwQ+3iSLBMBXDSZN28yi1nJeanEsVULDVWJ+sXN2NzsNUDt46Ml0pVF sPXhKURtDPbxGzYwl1lWumzV3Sk/qsVB1TqURnvJOZSPfbM5/RhQW21q2u8Kvfst Ny8MLsnyGRP1k/j/63KG1x1f2pYVlwnIkEHi7LbHKTjUZLDyO7wLUsc/sg7dHZiS UJH1W524waHt2/DmUgCHS63U7LlZ86KHs5caaDkKylzzKyrGzpQ9M4Q0oJZn8bXt DeqjoXnFuJZxCHA647AJ8vH6rUiJlQTvnQEcL7OSTPBhQqlp92GwakzWzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIr6+GZzTrg/EwLTXweKMiyyHy60MB8GA1UdIwQY MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt NTJjYWQ2Njc1ZmM2LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2 LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTfZ1qVP 8oDswqaL924XUxEBrgaffnSWMGPCpzSC8+ZnLaUYtHK4en6OugXdhqoyhjn3jH1T u1022nZlzLfppsI4KtmZ9qO76W1bzEST9ZfzmBbjgOcFq9ZdTXXKB8GoGM/6OalK dtaqfmLSGDsUHoTNa6X9631ppVvNBcFdImnl8PyzDDyNoDaRvZkFeWH+w9ER0bMY tzIvJP16lPORnziJacFvOMKNo4KKULgMQXu8ovUyPnPUweNSN35ACdIc9kGjPV+g /TIRcBtQ72h1e/hn/BlMBrfbfKONUs4y7VJh4LJQ7yRmqxrqit78ExPCs/JgnRM6 R6akJq8dOS/MHg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:33 2026 by rpki-client