This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json) Hash identifier: ic5fgvVJ1/7sZIAk/AH3CbJzCoxyM0/VrtCa52ddBsE= Subject key identifier: 29:72:48:04:04:71:EE:1D:B4:4A:D4:51:4D:63:B5:3D:41:70:04:BA Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48 Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148 Certificate serial: 019BF687A826EEABD868B66160E4B7E9D283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft Manifest number: 1510 Signing time: Sun 25 Jan 2026 19:00:44 +0000 Manifest this update: Sun 25 Jan 2026 19:00:44 +0000 Manifest next update: Mon 26 Jan 2026 19:00:44 +0000 Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: 46iFJaE7ZTIj9hia9hAnR3IlYXRfjCS6nLcFvtNzXA4=) 2: yY2vlrWyIY4apa6paDeTCxfPgaU.roa (hash: 6y+VApPzYyS4SGDKt87iuWrwk2coenfHGpex1d3nrQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:a8:26:ee:ab:d8:68:b6:61:60:e4:b7:e9:d2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148 Validity Not Before: Jan 25 19:00:44 2026 GMT Not After : Jan 26 19:00:44 2026 GMT Subject: CN=297248040471ee1db44ad4514d63b53d417004ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:f5:b3:3e:53:75:b3:06:45:b7:7b:88:a5: 86:b1:d3:88:b7:12:74:73:74:32:d6:f4:f1:c6:93: dd:1c:b3:65:1e:4b:59:f2:ec:c5:87:28:ee:0d:22: 62:6e:9f:6b:e5:96:6d:e5:c9:07:f9:12:07:8f:d6: e4:7e:eb:73:7c:27:b3:75:88:2f:d0:ec:68:21:97: 28:40:21:5d:90:e7:c9:7d:14:cf:16:cc:46:74:d0: 35:c2:d3:65:4a:52:e4:6c:77:92:01:ff:f4:75:ba: bc:d4:a9:c1:9b:1a:f7:89:0d:d1:b4:9f:ca:e0:e1: 2c:ce:5b:ce:8c:82:fb:e0:b5:a6:57:87:51:80:f6: 2f:fb:90:2f:21:b9:21:38:13:df:be:33:6b:a0:e3: 00:11:b9:ef:4a:3b:45:8e:bf:2b:02:79:90:0d:8a: 31:2e:0b:bc:81:2d:8c:2f:3f:14:52:29:9c:10:db: 63:63:89:04:76:89:bc:e7:e2:6f:18:80:fc:d6:f7: 21:76:86:a6:d6:33:c2:cf:aa:a3:d8:7d:60:6b:fa: 76:d7:91:f3:f7:b5:4e:4f:f9:9f:74:16:49:7e:47: 29:7a:24:e1:f4:99:7e:58:05:14:21:a4:70:f6:f5: 36:6d:81:9e:a9:83:32:f2:d0:51:f2:3a:91:36:40: e0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:72:48:04:04:71:EE:1D:B4:4A:D4:51:4D:63:B5:3D:41:70:04:BA X509v3 Authority Key Identifier: keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:51:28:fd:20:83:6a:90:5b:c2:f7:43:3e:00:c4:6f:41:80: 19:f6:ea:ca:02:6c:4b:29:84:0a:89:6b:82:af:71:e1:79:36: 23:c4:df:cb:6b:1c:2a:cb:f1:cd:07:18:5a:73:ad:dc:33:90: d9:8c:6c:c9:59:54:0f:1e:3e:08:05:24:06:81:17:68:9f:b0: 24:c9:ef:b3:e3:cb:e1:1e:a6:7c:b3:a8:5a:64:ef:3e:f2:81: 15:15:e3:66:da:6c:93:8c:ca:e7:8d:cb:f9:65:cb:f8:00:40: 2c:62:f9:bd:59:d3:4a:6e:82:07:a6:bb:7f:04:31:94:26:78: 8b:21:20:98:f8:0b:e7:e5:c3:c0:b9:de:7c:14:82:35:60:cf: 9e:6b:bb:f1:cb:6d:28:20:19:b5:d0:f7:3f:b6:1b:45:ed:20: 2f:93:cd:f6:a3:8f:7b:70:66:0c:e0:3b:7c:65:6c:56:e3:4b: a3:e2:3c:9c:75:a7:3e:f1:fc:8a:82:c2:92:3a:5b:e9:94:85: 65:fb:44:0e:e6:ea:2c:ea:c1:1b:ce:45:74:ea:47:49:fb:85: 50:43:01:c3:76:50:d0:61:bb:67:5a:4a:32:7d:e6:3c:c3:a8: 9a:bb:e5:12:67:4c:49:d4:6a:99:de:f5:68:77:63:61:b9:b1: 9c:81:90:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h6gm7qvYaLZhYOS36dKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWM3MjQzYmVmMmRjNzc1YWU2NzY5Mjg4OWQ1ZDI2YzFi MmQxNDgwHhcNMjYwMTI1MTkwMDQ0WhcNMjYwMTI2MTkwMDQ0WjAzMTEwLwYDVQQD EygyOTcyNDgwNDA0NzFlZTFkYjQ0YWQ0NTE0ZDYzYjUzZDQxNzAwNGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY/1sz5TdbMGRbd7iKWGsdOItxJ0 c3Qy1vTxxpPdHLNlHktZ8uzFhyjuDSJibp9r5ZZt5ckH+RIHj9bkfutzfCezdYgv 0OxoIZcoQCFdkOfJfRTPFsxGdNA1wtNlSlLkbHeSAf/0dbq81KnBmxr3iQ3RtJ/K 4OEszlvOjIL74LWmV4dRgPYv+5AvIbkhOBPfvjNroOMAEbnvSjtFjr8rAnmQDYox Lgu8gS2MLz8UUimcENtjY4kEdom85+JvGID81vchdoam1jPCz6qj2H1ga/p215Hz 97VOT/mfdBZJfkcpeiTh9Jl+WAUUIaRw9vU2bYGeqYMy8tBR8jqRNkDgEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClySAQEce4dtErUUU1jtT1BcAS6MB8GA1UdIwQY MBaAFDWcckO+8tx3WuZ2koidXSbBstFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEt NjFmZmI2NTA2NjQ0LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEtNjFmZmI2NTA2NjQ0 LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1Eo/SCD apBbwvdDPgDEb0GAGfbqygJsSymEColrgq9x4Xk2I8Tfy2scKsvxzQcYWnOt3DOQ 2YxsyVlUDx4+CAUkBoEXaJ+wJMnvs+PL4R6mfLOoWmTvPvKBFRXjZtpsk4zK543L +WXL+ABALGL5vVnTSm6CB6a7fwQxlCZ4iyEgmPgL5+XDwLnefBSCNWDPnmu78ctt KCAZtdD3P7YbRe0gL5PN9qOPe3BmDOA7fGVsVuNLo+I8nHWnPvH8ioLCkjpb6ZSF ZftEDubqLOrBG85FdOpHSfuFUEMBw3ZQ0GG7Z1pKMn3mPMOomrvlEmdMSdRqmd71 aHdjYbmxnIGQxA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:42 2026 by rpki-client