This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json) Hash identifier: 6aF7zWavk4xPkH6s/2XF4kjIWfy8mS8LJnUkE0f9DPA= Subject key identifier: 75:9D:30:54:2E:F1:1F:B9:DA:D8:57:B6:55:29:18:CF:08:53:1E:2F Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Certificate serial: 019BF5AC42AC8E74979C36908C0FA7CD48AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft Manifest number: 17FA Signing time: Sun 25 Jan 2026 15:01:05 +0000 Manifest this update: Sun 25 Jan 2026 15:01:05 +0000 Manifest next update: Mon 26 Jan 2026 15:01:05 +0000 Files and hashes: 1: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=) 2: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=) 3: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: y3PUjLp8yfEZjTS2ArQZwqbBRZbLDUIJxiEbdAgTyd4=) 4: NZoSwUkLAmMwbEjAu-trHqR_V_k.roa (hash: 02rAztVjRcsdeDVwgkma6YqQyIyFyzIJO8lNQo5lD9o=) 5: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=) 6: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=) 7: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:42:ac:8e:74:97:9c:36:90:8c:0f:a7:cd:48:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Validity Not Before: Jan 25 15:01:05 2026 GMT Not After : Jan 26 15:01:05 2026 GMT Subject: CN=759d30542ef11fb9dad857b6552918cf08531e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:de:ac:dc:4f:7c:1c:e9:e3:fa:c4:e2:8b:85: 8a:8f:84:c6:ca:f1:fd:e4:fc:7b:6a:87:0d:60:f6: 72:8d:4d:16:54:13:bc:f9:f4:ce:07:d6:a4:fe:2d: b8:d6:f9:16:7b:21:fc:c9:aa:b8:9d:2d:86:c7:7c: 1f:10:15:ee:55:c4:c5:77:4e:d1:c3:61:d4:21:f2: 99:53:34:8d:22:73:68:45:83:50:3e:eb:f7:9a:05: fa:31:f3:67:73:d1:63:5d:9a:51:89:03:71:1e:7d: 73:77:b6:4b:5f:38:07:ea:3a:c0:b6:05:c0:70:ed: 38:7a:3b:01:c5:f9:95:17:f5:67:5d:62:cc:5d:6f: 14:35:7f:cf:bf:b5:55:f7:3b:d8:4c:31:f3:78:dd: fb:ff:26:76:05:fe:21:f5:d1:fb:b1:5d:7c:9a:3d: 96:f8:51:b9:d6:38:d5:02:55:75:fe:5e:77:85:cc: 83:a3:46:55:5e:e7:09:aa:fc:b5:10:f9:65:83:40: 80:f0:24:35:cc:47:3a:6c:61:aa:b5:7f:e9:8d:04: 46:54:57:97:68:d7:2f:a8:12:97:19:54:1f:56:53: 07:d6:56:16:6b:67:b8:79:88:fb:6e:3c:53:d0:b4: bd:27:a8:23:f1:c4:c3:3e:b7:20:56:0f:13:0a:79: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9D:30:54:2E:F1:1F:B9:DA:D8:57:B6:55:29:18:CF:08:53:1E:2F X509v3 Authority Key Identifier: keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:6b:1d:75:fd:f0:a3:17:6e:41:39:e5:c3:a1:86:07:56:db: e3:6a:b2:f1:c9:8c:c8:29:8b:b0:60:ea:6e:19:d2:8e:bf:53: b9:22:53:d5:87:5a:59:7d:83:6d:b7:05:e6:ad:2c:5e:ee:ba: 4b:87:5c:23:1c:b1:34:77:08:2c:e7:e8:7d:02:d4:30:30:19: 04:43:d3:75:62:88:6a:28:d1:24:86:c9:9a:fb:9c:89:92:90: e3:78:2b:94:8e:00:7a:2f:aa:64:d1:4e:0a:54:fb:7c:4a:10: cb:6e:fd:7c:13:86:38:af:2c:c9:1c:19:96:a7:7b:48:09:69: 00:53:63:cc:97:a9:a9:7b:bd:b1:43:a1:6d:b4:a0:1b:1b:50: 20:e7:0d:fb:64:42:98:70:30:f5:f8:35:a6:38:25:29:55:cd: d8:e6:63:40:41:61:b3:e0:9c:2b:8e:7d:ca:98:42:4e:6e:e4: 9e:6b:77:7c:e9:16:fd:3c:6f:59:46:3b:38:61:78:23:70:d4: 8a:de:58:e7:1a:6f:16:fb:5f:59:e0:c5:3b:cc:d6:0d:f6:92: d5:61:bc:ed:1e:da:e6:ff:9e:60:a5:0f:7c:db:77:47:bb:85: a2:9b:f8:8c:a0:2b:1b:a2:4d:3b:0a:7d:2b:92:42:d1:a9:f3: aa:d9:29:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rEKsjnSXnDaQjA+nzUirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl ZThkYTcwHhcNMjYwMTI1MTUwMTA1WhcNMjYwMTI2MTUwMTA1WjAzMTEwLwYDVQQD Eyg3NTlkMzA1NDJlZjExZmI5ZGFkODU3YjY1NTI5MThjZjA4NTMxZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt6s3E98HOnj+sTii4WKj4TGyvH9 5Px7aocNYPZyjU0WVBO8+fTOB9ak/i241vkWeyH8yaq4nS2Gx3wfEBXuVcTFd07R w2HUIfKZUzSNInNoRYNQPuv3mgX6MfNnc9FjXZpRiQNxHn1zd7ZLXzgH6jrAtgXA cO04ejsBxfmVF/VnXWLMXW8UNX/Pv7VV9zvYTDHzeN37/yZ2Bf4h9dH7sV18mj2W +FG51jjVAlV1/l53hcyDo0ZVXucJqvy1EPllg0CA8CQ1zEc6bGGqtX/pjQRGVFeX aNcvqBKXGVQfVlMH1lYWa2e4eYj7bjxT0LS9J6gj8cTDPrcgVg8TCnk0OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWdMFQu8R+52thXtlUpGM8IUx4vMB8GA1UdIwQY MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt MzBjZTgzNzAxYjM5LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5 LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAymsddf3w oxduQTnlw6GGB1bb42qy8cmMyCmLsGDqbhnSjr9TuSJT1YdaWX2DbbcF5q0sXu66 S4dcIxyxNHcILOfofQLUMDAZBEPTdWKIaijRJIbJmvuciZKQ43grlI4Aei+qZNFO ClT7fEoQy279fBOGOK8syRwZlqd7SAlpAFNjzJepqXu9sUOhbbSgGxtQIOcN+2RC mHAw9fg1pjglKVXN2OZjQEFhs+CcK459yphCTm7knmt3fOkW/TxvWUY7OGF4I3DU it5Y5xpvFvtfWeDFO8zWDfaS1WG87R7a5v+eYKUPfNt3R7uFopv4jKArG6JNOwp9 K5JC0anzqtkpkQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:25:46 2026 by rpki-client