This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json) Hash identifier: wBpXcHA+az6oTzkb2k6o1xy1bULK0sRGw2ikRV5aANM= Subject key identifier: 7B:D3:95:4A:23:27:05:F5:99:AC:6A:92:01:F9:A0:90:ED:32:70:EB Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e Certificate serial: 019BF42BCA3EDEA928DEFB774AD4274169D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 08:01:09 +0000 Manifest this update: Sun 25 Jan 2026 08:01:09 +0000 Manifest next update: Mon 26 Jan 2026 08:01:09 +0000 Files and hashes: 1: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (hash: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU=) 2: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: qo5/OHfHdIE4cY0POgJkQkcXUAIVnALerlCJ+KX6nJk=) 3: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (hash: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc=) 4: VXXJGd4FEOBiTRuvKylQZSh5MPc.roa (hash: 9Lce4m09pJL6B9nHSj0pDfxmZ/8/J6ec+N4whDnZ0b8=) 5: ZuK1S3Ghc42zA0OJKwC9zhMPjd8.roa (hash: qj8u0n4HOzKDi6033J2/YLNKzCyWyCiJX2ywZI9NyUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:ca:3e:de:a9:28:de:fb:77:4a:d4:27:41:69:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e Validity Not Before: Jan 25 08:01:09 2026 GMT Not After : Jan 26 08:01:09 2026 GMT Subject: CN=7bd3954a232705f599ac6a9201f9a090ed3270eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:87:8f:de:66:6b:93:30:98:d1:be:6c:96:52: 41:ba:35:30:77:d6:e7:7b:4d:f9:79:1e:13:30:b0: c1:0e:4a:f2:4b:b6:f2:e8:8b:50:6f:27:64:96:35: 91:22:8a:a2:d2:98:77:c7:a4:a3:22:ef:be:be:e6: 57:4f:0b:46:d2:f8:04:e5:b4:b7:80:13:02:0c:53: a9:bb:41:fc:61:fb:5d:d4:d9:55:79:cb:bb:42:14: d7:2a:0f:68:fd:03:21:08:3a:83:57:6d:57:51:a4: 4e:d4:46:b8:36:b3:b2:09:99:a3:50:d3:53:86:59: 2a:5b:e7:17:c1:c4:74:35:6c:93:bc:d9:3f:db:5d: c3:9d:40:f0:c2:4c:e0:92:90:a8:2d:e8:02:52:55: 5d:ee:9b:1b:c0:da:97:a8:33:e3:c0:9c:86:db:b1: 24:22:42:cd:e8:f3:e1:ef:05:bb:f2:6c:90:87:3b: 7a:7b:0b:01:4b:8f:07:97:ed:1b:2c:ee:e2:bb:68: 1e:ef:ed:6a:c8:82:fa:ea:2e:c9:cb:fb:e8:8a:16: d5:0c:9f:86:8f:49:e7:f4:1b:32:27:c2:a7:78:13: f4:f3:a8:77:28:15:a9:9c:dc:8e:85:17:57:bf:90: 95:dd:7e:13:ba:ac:47:79:ac:22:4b:91:be:96:53: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D3:95:4A:23:27:05:F5:99:AC:6A:92:01:F9:A0:90:ED:32:70:EB X509v3 Authority Key Identifier: keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a4:38:b5:8f:19:7a:71:cc:68:5a:8f:b1:cb:c0:43:97:80: f9:3a:24:a4:42:97:80:20:29:99:c2:34:df:c6:b5:9c:f5:6d: a2:08:f8:70:54:cb:63:0a:12:e1:25:1e:19:1c:0f:c0:2a:cc: 92:29:b4:b9:78:5d:7d:43:c7:60:72:de:02:0c:53:d8:45:55: 8b:02:13:8c:72:5b:fc:8c:6e:7b:75:6d:b3:53:47:7e:55:7d: 85:c9:ec:b4:e4:5d:1a:3a:e2:72:14:9a:69:a4:f0:27:77:6b: db:16:cb:60:a6:1e:a9:aa:ef:3e:e8:8a:7b:f1:84:93:5f:7e: 8f:26:24:54:dd:68:f2:87:29:84:32:78:d3:81:cf:fa:5d:e9: 52:37:2a:0a:14:54:60:2e:b6:c0:31:44:1e:19:57:40:4f:ad: 32:e3:af:70:b6:83:39:42:90:19:7c:56:3a:c5:33:7a:58:0f: 51:a1:91:3a:11:45:a6:aa:9d:5f:2f:f6:e8:69:53:52:7b:32: 0e:6f:03:29:3f:13:79:6a:2d:16:b5:86:db:b5:25:e4:b0:b7: be:d2:02:3a:25:29:bd:96:ef:0d:f2:f5:9d:73:4b:46:50:2f: 2d:8f:26:25:c1:32:fb:13:b3:ab:4a:54:30:58:e3:ca:ad:b8: 7c:b7:a8:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K8o+3qko3vt3StQnQWnVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWFlNjQ2ZWEzNGFkMjY4OGFjYTJmZGQxYTZmMzM0MDM1 NjQ5NWUwHhcNMjYwMTI1MDgwMTA5WhcNMjYwMTI2MDgwMTA5WjAzMTEwLwYDVQQD Eyg3YmQzOTU0YTIzMjcwNWY1OTlhYzZhOTIwMWY5YTA5MGVkMzI3MGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IeP3mZrkzCY0b5sllJBujUwd9bn e035eR4TMLDBDkryS7by6ItQbydkljWRIoqi0ph3x6SjIu++vuZXTwtG0vgE5bS3 gBMCDFOpu0H8Yftd1NlVecu7QhTXKg9o/QMhCDqDV21XUaRO1Ea4NrOyCZmjUNNT hlkqW+cXwcR0NWyTvNk/213DnUDwwkzgkpCoLegCUlVd7psbwNqXqDPjwJyG27Ek IkLN6PPh7wW78myQhzt6ewsBS48Hl+0bLO7iu2ge7+1qyIL66i7Jy/voihbVDJ+G j0nn9BsyJ8KneBP086h3KBWpnNyOhRdXv5CV3X4TuqxHeawiS5G+llOxVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvTlUojJwX1maxqkgH5oJDtMnDrMB8GA1UdIwQY MBaAFDRa5kbqNK0miKyi/dGm8zQDVkleMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMt ZjQ5MTIwYmVkNTFjLzEvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMtZjQ5MTIwYmVkNTFj LzEvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqQ4tY8Z enHMaFqPscvAQ5eA+TokpEKXgCApmcI038a1nPVtogj4cFTLYwoS4SUeGRwPwCrM kim0uXhdfUPHYHLeAgxT2EVViwITjHJb/Ixue3Vts1NHflV9hcnstORdGjrichSa aaTwJ3dr2xbLYKYeqarvPuiKe/GEk19+jyYkVN1o8ocphDJ404HP+l3pUjcqChRU YC62wDFEHhlXQE+tMuOvcLaDOUKQGXxWOsUzelgPUaGROhFFpqqdXy/26GlTUnsy Dm8DKT8TeWotFrWG27Ul5LC3vtICOiUpvZbvDfL1nXNLRlAvLY8mJcEy+xOzq0pU MFjjyq24fLeo+g== -----END CERTIFICATE-----Generated at Sun Jan 25 11:35:29 2026 by rpki-client