This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft File: NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft (raw, json) Hash identifier: YVSGDcdpT9RSHizj9Y8IVd84c3S23eNACYwMUrVNRvA= Subject key identifier: 3F:60:B6:B9:27:6F:5A:78:C9:6E:78:26:5E:5F:D6:8C:70:13:A9:FA Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77 Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877 Certificate serial: 019BF687E1D853B5365DEBAB51E996E62CD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft Manifest number: 12EB Signing time: Sun 25 Jan 2026 19:00:58 +0000 Manifest this update: Sun 25 Jan 2026 19:00:58 +0000 Manifest next update: Mon 26 Jan 2026 19:00:58 +0000 Files and hashes: 1: D3wlgMGE5QwdxwsJ-l6YOVrMLsM.roa (hash: 8VoNb/7A+xDcEz+hMFU7CsCAQw+ePCtKqSmXmX3INLs=) 2: NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl (hash: O+YgiHfKo1QSyYFV2Rl4wjvVUIM7TlOz8/TK5Z7lx44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:e1:d8:53:b5:36:5d:eb:ab:51:e9:96:e6:2c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35f1a573915153de82890eae1303067fa68b2877 Validity Not Before: Jan 25 19:00:58 2026 GMT Not After : Jan 26 19:00:58 2026 GMT Subject: CN=3f60b6b9276f5a78c96e78265e5fd68c7013a9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:b6:64:a1:16:71:df:11:c9:fb:c5:8f:48: f3:b5:25:0c:59:77:30:3e:10:c6:74:f4:bb:b3:36: 1c:67:fb:21:b4:3e:69:c3:7d:14:4b:d3:d8:35:7e: d2:e3:7b:cb:af:4e:70:60:39:37:50:99:22:02:19: b9:0f:91:54:f3:4c:ce:10:8b:2e:3f:0c:3c:e7:7e: 20:3f:73:8d:1a:41:11:8e:d0:01:62:5f:ea:9d:44: ac:8c:e8:c2:31:e5:c3:df:9e:21:c4:79:10:df:5c: bc:e3:9c:66:db:e7:56:90:84:1c:11:75:ed:f8:eb: 86:88:2c:fe:ec:bb:2b:f2:ce:d7:24:83:6e:4f:a3: 09:9a:e4:a2:1c:3e:71:79:0b:17:f1:7e:6a:5d:3a: 48:a7:fe:68:0f:a5:52:33:f9:df:76:fc:79:c2:02: 5f:cb:09:70:3d:68:e5:e4:f4:a9:09:39:f2:9c:d6: e7:67:71:07:f8:74:48:e2:25:a1:23:e6:be:08:2f: 2c:0f:22:0f:2d:8f:97:22:46:ed:fb:98:9c:44:bf: 99:80:e4:92:5b:75:aa:88:6b:1e:46:b3:2b:a7:8c: e9:8c:f6:78:da:83:25:1d:96:d7:52:0a:3f:b7:4e: 55:73:cf:33:f7:0a:8f:c7:5a:b5:be:45:0d:79:04: 0d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:60:B6:B9:27:6F:5A:78:C9:6E:78:26:5E:5F:D6:8C:70:13:A9:FA X509v3 Authority Key Identifier: keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:f6:30:08:76:bc:49:da:cb:b3:05:b3:27:bd:91:81:b4:94: 71:33:69:63:a6:cd:a2:1e:0c:4e:b3:78:b7:eb:3f:e2:2a:15: f9:c0:ef:82:f7:7b:97:6d:51:f9:de:61:0a:c5:7d:c9:0a:37: 85:66:93:d8:2f:e3:31:f8:d9:de:16:26:15:c6:83:68:bf:dc: b4:5f:2f:78:9d:8a:4e:27:ce:dc:2c:a2:41:d8:e2:bb:cc:83: 7f:d9:cf:8f:70:a6:37:2f:15:1d:66:5a:d3:79:b0:4c:f7:a4: e6:ba:4a:4b:e6:0a:4b:c1:78:aa:2b:8e:d9:11:f9:91:a1:5d: 15:96:d6:c0:30:99:74:b0:18:5a:c3:03:82:71:38:ca:54:0c: ca:17:cc:d1:d6:7b:27:7f:29:f8:8b:2d:cf:45:a9:b9:fe:a1: cc:2e:29:db:58:2b:db:10:e3:a8:d0:1b:12:f9:07:d0:50:c8: 15:8d:77:ef:5c:6f:0a:95:c6:ee:8d:0e:1d:6c:ab:cf:5a:c0: 02:f4:2b:56:ea:08:04:2d:ab:9f:b2:a8:28:d4:83:ba:3f:93: 3b:a8:8e:17:41:58:80:96:48:f2:2c:8f:fd:be:91:d8:0b:2c: 23:20:fb:4d:b5:50:55:a0:00:0f:e0:3d:67:0a:45:22:b6:b2: dd:42:b1:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h+HYU7U2XeurUemW5izWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZjFhNTczOTE1MTUzZGU4Mjg5MGVhZTEzMDMwNjdmYTY4 YjI4NzcwHhcNMjYwMTI1MTkwMDU4WhcNMjYwMTI2MTkwMDU4WjAzMTEwLwYDVQQD EygzZjYwYjZiOTI3NmY1YTc4Yzk2ZTc4MjY1ZTVmZDY4YzcwMTNhOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYG2ZKEWcd8RyfvFj0jztSUMWXcw PhDGdPS7szYcZ/shtD5pw30US9PYNX7S43vLr05wYDk3UJkiAhm5D5FU80zOEIsu Pww8534gP3ONGkERjtABYl/qnUSsjOjCMeXD354hxHkQ31y845xm2+dWkIQcEXXt +OuGiCz+7Lsr8s7XJINuT6MJmuSiHD5xeQsX8X5qXTpIp/5oD6VSM/nfdvx5wgJf ywlwPWjl5PSpCTnynNbnZ3EH+HRI4iWhI+a+CC8sDyIPLY+XIkbt+5icRL+ZgOSS W3WqiGseRrMrp4zpjPZ42oMlHZbXUgo/t05Vc88z9wqPx1q1vkUNeQQNGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9gtrknb1p4yW54Jl5f1oxwE6n6MB8GA1UdIwQY MBaAFDXxpXORUVPegokOrhMDBn+miyh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kYThiNmItMTlmYS00OTc2LWJhYTAt MzI5MjExMDI5YTFhLzEvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kYThiNmItMTlmYS00OTc2LWJhYTAtMzI5MjExMDI5YTFh LzEvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPYwCHa8 SdrLswWzJ72RgbSUcTNpY6bNoh4MTrN4t+s/4ioV+cDvgvd7l21R+d5hCsV9yQo3 hWaT2C/jMfjZ3hYmFcaDaL/ctF8veJ2KTifO3CyiQdjiu8yDf9nPj3CmNy8VHWZa 03mwTPek5rpKS+YKS8F4qiuO2RH5kaFdFZbWwDCZdLAYWsMDgnE4ylQMyhfM0dZ7 J38p+Istz0Wpuf6hzC4p21gr2xDjqNAbEvkH0FDIFY1371xvCpXG7o0OHWyrz1rA AvQrVuoIBC2rn7KoKNSDuj+TO6iOF0FYgJZI8iyP/b6R2AssIyD7TbVQVaAAD+A9 ZwpFIray3UKxKw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:12:03 2026 by rpki-client