This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json) Hash identifier: rWFceVyQINfinj7p5i+JRBbovF8XdsUo6SNUKRNz4hU= Subject key identifier: A5:C1:F8:C8:BB:E1:0A:D8:D4:E0:0E:86:2D:05:49:C9:6D:BE:AE:26 Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Certificate serial: 019BF79A4C33FA69110D20281CCCC0948AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft Manifest number: 04B1 Signing time: Mon 26 Jan 2026 00:00:42 +0000 Manifest this update: Mon 26 Jan 2026 00:00:42 +0000 Manifest next update: Tue 27 Jan 2026 00:00:42 +0000 Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=) 2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: 4ZhLQaS/mxJD6ZjZKd7G06WElft1AviMmPHdmCnsioY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:4c:33:fa:69:11:0d:20:28:1c:cc:c0:94:8a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Validity Not Before: Jan 26 00:00:42 2026 GMT Not After : Jan 27 00:00:42 2026 GMT Subject: CN=a5c1f8c8bbe10ad8d4e00e862d0549c96dbeae26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:54:f7:9b:3d:e7:a2:3e:1f:06:82:86:6e: 68:4a:cf:9c:9f:c3:80:1d:2f:de:70:34:1e:75:59: 61:2c:c8:9e:63:6a:5c:23:81:c5:18:89:79:cd:ec: 8c:8d:9e:06:2e:05:6e:64:67:e1:92:f3:86:23:c9: 7b:2f:92:40:b4:48:d9:3f:cc:cd:5d:71:87:90:b8: b3:f9:f1:65:d5:a1:20:8b:3d:f9:87:91:9e:93:b9: af:23:66:f6:88:e8:cd:72:f2:37:7e:c9:3e:52:07: b2:88:25:d0:d4:b0:95:72:0a:60:2d:fb:29:c2:1e: c5:4a:26:43:37:18:1f:c0:ac:74:1e:9e:83:73:83: 25:9c:5b:47:c5:2f:e3:44:eb:06:d1:af:9a:42:5b: b3:66:e4:03:6f:55:80:d7:55:8e:82:8c:20:3a:0a: b2:ac:b3:3a:c2:21:63:ab:03:70:18:6c:71:f0:e3: 76:c9:42:ff:18:c3:8c:56:e2:04:60:cb:2e:19:b9: 46:4d:f9:f9:37:53:89:0a:56:ce:47:8b:09:84:53: 99:a8:b8:cf:c5:c2:4f:e0:84:0b:8b:95:c1:14:f9: 3a:ad:04:39:07:cf:28:aa:c3:9b:dc:1a:e8:69:9a: c4:b8:5d:8c:1c:27:e8:dd:1d:b6:28:01:70:e5:a5: ff:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C1:F8:C8:BB:E1:0A:D8:D4:E0:0E:86:2D:05:49:C9:6D:BE:AE:26 X509v3 Authority Key Identifier: keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:4d:01:03:58:a0:db:e3:fc:14:5e:44:df:93:71:cc:79:d4: e6:56:35:64:30:44:a5:f9:6c:3c:ae:9a:4b:04:23:b2:20:b8: ba:88:3b:ac:de:ef:5f:a7:39:dd:d1:f9:22:18:6f:77:87:94: 31:ba:65:a1:d3:24:80:9f:4e:ab:a7:8d:e7:14:4b:25:fb:cc: b6:00:e0:f8:6e:4b:01:6e:35:30:8c:4c:05:c6:1a:81:a9:f3: d7:0c:00:aa:34:1c:ed:3d:23:da:6d:b6:58:c3:46:cb:3c:48: 2c:e8:e8:82:17:ac:eb:47:86:e7:ce:4a:ee:8f:9e:bb:50:de: 86:0d:fb:88:b9:02:4e:63:5c:cf:11:c0:6a:40:5b:93:be:c7: d6:19:aa:63:87:3e:96:fb:30:9b:12:6c:52:ac:74:0a:3d:14: de:0b:0b:c5:05:8c:92:4d:28:e6:97:6a:ac:0e:fa:33:d4:9e: cc:1c:a8:1a:55:f8:6e:9d:f4:d7:ed:32:c4:bf:3f:54:f9:ea: 1a:7e:38:95:0b:dd:0c:4c:1a:8d:74:10:f7:22:17:ec:cc:82: bc:ef:c8:9e:83:e5:bd:59:bf:32:85:50:0f:7e:85:88:44:ef: 11:74:14:2a:01:b9:ab:b4:4e:6a:b0:ba:bc:08:0f:7e:32:46: 8d:c6:47:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mkwz+mkRDSAoHMzAlIrBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NmQ1Zjk0NTg4MzhmY2YxNmNjMjg3MDIyNWVlNWY4OGZm OTRkY2EwHhcNMjYwMTI2MDAwMDQyWhcNMjYwMTI3MDAwMDQyWjAzMTEwLwYDVQQD EyhhNWMxZjhjOGJiZTEwYWQ4ZDRlMDBlODYyZDA1NDljOTZkYmVhZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK9U95s956I+HwaChm5oSs+cn8OA HS/ecDQedVlhLMieY2pcI4HFGIl5zeyMjZ4GLgVuZGfhkvOGI8l7L5JAtEjZP8zN XXGHkLiz+fFl1aEgiz35h5Gek7mvI2b2iOjNcvI3fsk+UgeyiCXQ1LCVcgpgLfsp wh7FSiZDNxgfwKx0Hp6Dc4MlnFtHxS/jROsG0a+aQluzZuQDb1WA11WOgowgOgqy rLM6wiFjqwNwGGxx8ON2yUL/GMOMVuIEYMsuGblGTfn5N1OJClbOR4sJhFOZqLjP xcJP4IQLi5XBFPk6rQQ5B88oqsOb3BroaZrEuF2MHCfo3R22KAFw5aX/kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXB+Mi74QrY1OAOhi0FScltvq4mMB8GA1UdIwQY MBaAFDdtX5RYg4/PFswocCJe5fiP+U3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAt NDQxMTAxMmFiOTllLzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAtNDQxMTAxMmFiOTll LzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu00BA1ig 2+P8FF5E35NxzHnU5lY1ZDBEpflsPK6aSwQjsiC4uog7rN7vX6c53dH5Ihhvd4eU MbplodMkgJ9Oq6eN5xRLJfvMtgDg+G5LAW41MIxMBcYaganz1wwAqjQc7T0j2m22 WMNGyzxILOjoghes60eG585K7o+eu1Dehg37iLkCTmNczxHAakBbk77H1hmqY4c+ lvswmxJsUqx0Cj0U3gsLxQWMkk0o5pdqrA76M9SezByoGlX4bp301+0yxL8/VPnq Gn44lQvdDEwajXQQ9yIX7MyCvO/InoPlvVm/MoVQD36FiETvEXQUKgG5q7ROarC6 vAgPfjJGjcZHNA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:03 2026 by rpki-client