This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json) Hash identifier: 7wfRIOwCCNdEmtabygrm67gVxQAYf2bRJ+nS6gOm1mk= Subject key identifier: 6C:BB:AC:93:B9:91:62:92:86:D5:3A:7D:89:F9:99:9F:91:F6:04:E5 Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45 Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45 Certificate serial: 019BF42BF7F3D2B5E52AAD5EE1887378EA41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft Manifest number: 133C Signing time: Sun 25 Jan 2026 08:01:20 +0000 Manifest this update: Sun 25 Jan 2026 08:01:20 +0000 Manifest next update: Mon 26 Jan 2026 08:01:20 +0000 Files and hashes: 1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=) 2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: TkcG25k4wkIv5RfaxMdt6UCopcq/5o0IO44k7iUCits=) 3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:f7:f3:d2:b5:e5:2a:ad:5e:e1:88:73:78:ea:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45 Validity Not Before: Jan 25 08:01:20 2026 GMT Not After : Jan 26 08:01:20 2026 GMT Subject: CN=6cbbac93b991629286d53a7d89f9999f91f604e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:b2:5d:ee:89:a8:2a:ab:c7:66:76:ef:96: 27:d6:c1:14:49:1a:26:99:7b:ce:a5:d7:ab:34:1e: ca:01:67:82:19:78:d6:8a:93:7f:dc:66:ee:f9:b9: a5:5b:92:2d:bd:45:46:84:97:9f:90:30:21:fd:fd: ca:d3:b8:4d:af:7c:14:fe:cf:66:00:69:28:69:e0: 13:70:c8:89:96:f6:89:f8:f1:f8:35:1b:9a:23:a8: 8a:22:e2:c0:12:11:3a:61:c8:53:5f:9a:15:84:99: 73:65:05:3b:0d:85:ab:86:20:b4:c4:33:b7:42:c0: 65:2b:54:b8:ca:e9:c0:03:93:21:34:46:48:19:9e: cf:e1:da:73:0a:d3:56:3c:dd:d8:68:5b:de:8c:00: 59:0f:dc:e2:36:4b:f0:e0:79:aa:0f:04:6c:e4:8d: b4:ca:c2:94:9c:f0:8b:b9:0d:a5:2e:6b:3c:02:8b: 97:9b:6f:69:46:5a:87:5a:0f:0e:4f:ab:79:07:88: 04:f7:a5:fb:f5:9b:53:be:77:d7:46:e7:2c:e9:72: e4:27:ae:83:4d:27:c7:14:aa:df:38:d0:32:43:39: 17:5d:a5:66:81:69:04:ed:1d:73:c7:f7:21:d7:83: 10:2b:e0:74:d3:17:58:61:87:02:b9:eb:f8:34:d6: 05:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BB:AC:93:B9:91:62:92:86:D5:3A:7D:89:F9:99:9F:91:F6:04:E5 X509v3 Authority Key Identifier: keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2b:66:9e:ca:8d:0d:31:66:79:5c:56:1c:59:07:d5:60:9c: 17:88:ef:45:90:90:02:eb:91:41:fe:5c:ef:67:5b:fd:8c:31: d5:a6:60:8c:cb:17:7c:57:7e:67:a3:cf:f9:72:a5:7b:f5:18: 1a:fd:99:cc:bd:2c:4c:f8:95:a7:7d:13:2a:fa:80:78:8b:3a: ef:3d:ba:ea:0d:f8:b2:f4:e2:a3:eb:e9:9d:cc:b2:f1:cf:c1: 26:e1:fa:f5:cb:44:6a:11:a6:79:39:8c:cc:b4:b8:cd:c3:c0: f8:92:2c:09:d7:dd:b2:f4:75:05:1a:3e:48:8a:13:c4:67:6e: e7:90:95:34:e4:7a:c8:8f:5c:3c:06:2c:f1:a7:68:db:f2:47: 23:d8:71:df:0a:50:c0:d1:9c:90:88:60:7b:3c:b2:88:a0:76: a0:9c:56:08:d7:13:a7:4e:34:a8:28:2c:f5:fb:4a:73:aa:58: f3:07:31:c7:d9:33:d2:ff:45:17:a0:b9:8c:fc:2e:51:ea:17: b8:2d:b3:d7:1c:32:82:e2:32:54:09:cd:10:1d:71:14:14:3a: bf:ae:db:3f:1d:af:43:b3:88:45:63:87:95:04:99:f5:9e:8c: ff:0f:bf:99:f4:02:cb:20:78:0a:15:c9:b4:2a:66:07:e4:35: 2e:c2:75:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K/fz0rXlKq1e4YhzeOpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NjNjNzEwNmE1ZjI2NDAxNjJlNzk4MDU4M2VhYjViZDgw MDhjNDUwHhcNMjYwMTI1MDgwMTIwWhcNMjYwMTI2MDgwMTIwWjAzMTEwLwYDVQQD Eyg2Y2JiYWM5M2I5OTE2MjkyODZkNTNhN2Q4OWY5OTk5ZjkxZjYwNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4eyXe6JqCqrx2Z275Yn1sEUSRom mXvOpderNB7KAWeCGXjWipN/3Gbu+bmlW5ItvUVGhJefkDAh/f3K07hNr3wU/s9m AGkoaeATcMiJlvaJ+PH4NRuaI6iKIuLAEhE6YchTX5oVhJlzZQU7DYWrhiC0xDO3 QsBlK1S4yunAA5MhNEZIGZ7P4dpzCtNWPN3YaFvejABZD9ziNkvw4HmqDwRs5I20 ysKUnPCLuQ2lLms8AouXm29pRlqHWg8OT6t5B4gE96X79ZtTvnfXRucs6XLkJ66D TSfHFKrfONAyQzkXXaVmgWkE7R1zx/ch14MQK+B00xdYYYcCuev4NNYFIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGy7rJO5kWKShtU6fYn5mZ+R9gTlMB8GA1UdIwQY MBaAFDdjxxBqXyZAFi55gFg+q1vYAIxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTct ODhhMGU0NTBhMTdiLzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTctODhhMGU0NTBhMTdi LzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICtmnsqN DTFmeVxWHFkH1WCcF4jvRZCQAuuRQf5c72db/Ywx1aZgjMsXfFd+Z6PP+XKle/UY Gv2ZzL0sTPiVp30TKvqAeIs67z266g34svTio+vpncyy8c/BJuH69ctEahGmeTmM zLS4zcPA+JIsCdfdsvR1BRo+SIoTxGdu55CVNOR6yI9cPAYs8ado2/JHI9hx3wpQ wNGckIhgezyyiKB2oJxWCNcTp040qCgs9ftKc6pY8wcxx9kz0v9FF6C5jPwuUeoX uC2z1xwyguIyVAnNEB1xFBQ6v67bPx2vQ7OIRWOHlQSZ9Z6M/w+/mfQCyyB4ChXJ tCpmB+Q1LsJ11w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:10:43 2026 by rpki-client