This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json) Hash identifier: 6qMOfxGRZ1WXJWEPtz4Mc9IGHtqG8fcU9fpm04wITJc= Subject key identifier: FE:35:2C:2B:E4:28:CC:03:CD:15:E1:9C:DA:74:A9:AF:6E:9E:4B:C4 Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45 Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45 Certificate serial: 019BF8766BD6FB6503C98668896184E64023 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft Manifest number: 0B1A Signing time: Mon 26 Jan 2026 04:01:08 +0000 Manifest this update: Mon 26 Jan 2026 04:01:08 +0000 Manifest next update: Tue 27 Jan 2026 04:01:08 +0000 Files and hashes: 1: 1-FRVJUumZVwdhXT2q-zKk8mLHm8.roa (hash: 3IVkn5lJF9QhaJ+y0HFB0zm8Gh29SnnBQ6n5lrXjxxc=) 2: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: gV/vdRmRY6Q+16Qqp1Oy6VZdU8nlsPmbxuoQcZk8e6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:6b:d6:fb:65:03:c9:86:68:89:61:84:e6:40:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45 Validity Not Before: Jan 26 04:01:08 2026 GMT Not After : Jan 27 04:01:08 2026 GMT Subject: CN=fe352c2be428cc03cd15e19cda74a9af6e9e4bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e4:f8:25:9d:30:0e:78:fc:1d:f1:13:3d:df: c0:27:74:d1:8b:4c:91:74:14:c5:36:8c:49:97:ff: d6:d3:58:ed:04:e5:0e:3a:d0:74:2f:e1:ea:da:10: 68:eb:de:f0:7c:57:3d:55:d8:03:87:35:c3:3c:ea: 07:ab:50:19:26:42:4e:f2:f4:10:5d:c2:91:71:6e: c3:aa:2a:0c:c5:4a:42:4f:46:c6:69:18:b1:af:5b: d2:fb:6c:18:77:39:df:70:55:f1:96:94:bb:33:1d: ca:50:21:62:65:a1:65:9e:ea:59:f4:ac:c3:ad:13: 6d:29:2c:a2:1e:0d:d4:ca:b4:2d:4c:06:36:af:e5: 8a:68:cf:85:91:24:60:bf:72:c2:16:0e:ac:74:a9: ed:d8:14:d5:cc:ff:9a:fc:54:85:47:81:58:1f:8b: c8:a0:16:4b:0c:5d:ae:b2:a2:9a:67:aa:0e:3c:f3: 68:09:7e:9b:ed:9a:97:2a:f6:f1:b6:16:a4:94:bb: 62:76:6c:d2:b3:1c:4a:3c:75:a8:c0:36:c7:58:f1: d2:31:e0:b4:c7:97:dd:9a:05:ac:f2:8f:54:86:73: cf:73:bd:66:98:53:3b:d2:77:91:e4:ef:11:57:b5: 79:1a:d7:b6:85:46:d8:ce:88:f4:94:18:a0:cc:7f: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:35:2C:2B:E4:28:CC:03:CD:15:E1:9C:DA:74:A9:AF:6E:9E:4B:C4 X509v3 Authority Key Identifier: keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:29:aa:18:56:56:67:ed:a5:87:c4:58:14:78:50:64:7c:3a: f6:e6:64:23:a4:1a:a9:03:af:54:b4:33:b1:32:40:29:62:2f: 03:f7:0c:dc:70:f4:69:a8:dc:5f:34:56:fd:ec:8e:95:9a:3a: 8e:2d:63:ed:08:58:cc:b9:ed:85:4d:29:ee:00:af:fc:79:96: 3d:c8:4a:23:a2:9d:0e:f4:2e:1c:55:92:53:87:b3:3a:97:5a: 01:5b:2f:50:d2:c7:2a:38:34:c2:aa:1e:8c:eb:c3:0d:64:73: 8e:b9:7f:e5:55:f3:c1:47:da:8b:75:d1:85:05:b7:37:14:5b: 1a:38:37:74:07:58:8f:89:4c:cf:ae:e0:03:cc:00:ad:92:81: 4d:3c:cc:7f:3b:49:2a:f6:33:a1:6d:41:2c:08:1a:8d:cb:f3: 3d:5c:af:67:95:41:2c:3e:b6:55:e7:a4:d6:39:a6:79:5d:c5: 3d:26:8f:e0:33:66:d7:86:91:37:02:e3:58:a1:a9:a6:03:98: 89:6e:7a:61:d7:0c:42:6e:f0:65:9a:3a:6a:a3:69:0e:5f:b6: fe:27:a4:85:f2:97:9d:c3:9b:55:3e:45:49:46:72:e0:39:bc: b3:6a:7a:66:99:b4:91:f4:56:eb:39:41:3d:07:d5:16:89:0a: 6a:d0:8b:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dmvW+2UDyYZoiWGE5kAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNjgzNGFlMzU2MzBhMDRjNzhmMjc3NjA1MjUyNjc4ZmI2 NDVjNDUwHhcNMjYwMTI2MDQwMTA4WhcNMjYwMTI3MDQwMTA4WjAzMTEwLwYDVQQD EyhmZTM1MmMyYmU0MjhjYzAzY2QxNWUxOWNkYTc0YTlhZjZlOWU0YmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+T4JZ0wDnj8HfETPd/AJ3TRi0yR dBTFNoxJl//W01jtBOUOOtB0L+Hq2hBo697wfFc9VdgDhzXDPOoHq1AZJkJO8vQQ XcKRcW7DqioMxUpCT0bGaRixr1vS+2wYdznfcFXxlpS7Mx3KUCFiZaFlnupZ9KzD rRNtKSyiHg3UyrQtTAY2r+WKaM+FkSRgv3LCFg6sdKnt2BTVzP+a/FSFR4FYH4vI oBZLDF2usqKaZ6oOPPNoCX6b7ZqXKvbxthaklLtidmzSsxxKPHWowDbHWPHSMeC0 x5fdmgWs8o9UhnPPc71mmFM70neR5O8RV7V5Gte2hUbYzoj0lBigzH8c+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP41LCvkKMwDzRXhnNp0qa9unkvEMB8GA1UdIwQY MBaAFJ5oNK41YwoEx48ndgUlJnj7ZFxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYt NTI3OTg0ZmMxMTgxLzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYtNTI3OTg0ZmMxMTgx LzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSmqGFZW Z+2lh8RYFHhQZHw69uZkI6QaqQOvVLQzsTJAKWIvA/cM3HD0aajcXzRW/eyOlZo6 ji1j7QhYzLnthU0p7gCv/HmWPchKI6KdDvQuHFWSU4ezOpdaAVsvUNLHKjg0wqoe jOvDDWRzjrl/5VXzwUfai3XRhQW3NxRbGjg3dAdYj4lMz67gA8wArZKBTTzMfztJ KvYzoW1BLAgajcvzPVyvZ5VBLD62Veek1jmmeV3FPSaP4DNm14aRNwLjWKGppgOY iW56YdcMQm7wZZo6aqNpDl+2/iekhfKXncObVT5FSUZy4Dm8s2p6Zpm0kfRW6zlB PQfVFokKatCL/A== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:48 2026 by rpki-client