This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json) Hash identifier: j9K3hBoM+ufxNU5vOTRWbSVPkG0+mO7HRU8W7jENlM8= Subject key identifier: 48:27:78:EC:65:81:C7:8D:F6:55:4E:C0:B1:BA:26:D9:40:77:A8:A3 Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe Certificate serial: 019BF8083ACE24C035C6CA79749CC53CF2B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft Manifest number: 04E3 Signing time: Mon 26 Jan 2026 02:00:47 +0000 Manifest this update: Mon 26 Jan 2026 02:00:47 +0000 Manifest next update: Tue 27 Jan 2026 02:00:47 +0000 Files and hashes: 1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=) 2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: mWi2Heci5iflvAupLrfxNEMf3UBLAHaIT0ABquOBPTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:3a:ce:24:c0:35:c6:ca:79:74:9c:c5:3c:f2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe Validity Not Before: Jan 26 02:00:47 2026 GMT Not After : Jan 27 02:00:47 2026 GMT Subject: CN=482778ec6581c78df6554ec0b1ba26d94077a8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:a7:25:5f:bc:01:5c:00:30:a7:97:ee:2b: da:58:c5:10:7c:e4:55:fb:a8:84:fb:b8:74:5c:23: f3:98:30:db:4c:6b:ce:c8:7f:be:6a:35:81:de:66: 7f:ff:58:0c:2b:91:96:13:d0:cf:7c:5e:6f:9b:74: 09:d9:a3:12:50:d1:04:00:28:2a:ea:68:6c:da:94: ac:83:f4:17:52:f8:b6:df:02:fb:8a:8c:41:e1:68: c1:da:d2:ef:9b:a8:92:78:4d:fc:9f:a7:75:59:d8: 18:b2:44:52:e6:92:c5:ba:96:86:79:30:23:4e:1e: 2f:7b:48:2d:19:66:c4:81:ae:e5:2e:19:3a:e2:e5: 61:d8:33:e5:95:84:3a:ad:61:ff:ef:f2:d4:f9:49: f6:05:f8:7c:7e:cc:21:32:cd:3f:ce:dd:11:f0:d7: 12:b9:04:03:23:54:0c:5f:31:52:c2:31:19:41:24: b1:8b:86:ad:0c:75:ef:16:fb:58:46:e4:5e:a6:05: 01:e3:45:d6:33:9d:6a:79:c9:8c:3b:66:b1:be:5f: 4b:11:9a:be:12:ec:f0:6a:57:97:a4:09:81:1c:0c: 8d:5b:71:54:f8:03:d5:bb:ff:85:f4:a4:e2:c7:e5: d5:f1:fc:e2:5b:f2:bb:70:c7:af:ab:61:80:5a:55: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:27:78:EC:65:81:C7:8D:F6:55:4E:C0:B1:BA:26:D9:40:77:A8:A3 X509v3 Authority Key Identifier: keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:92:57:f1:d1:1b:24:fc:66:31:0a:e3:dc:e8:6c:9d:00:c2: 5c:e0:36:54:43:d7:71:9d:9b:56:23:41:1a:af:26:c2:bf:e2: 6c:c6:51:76:d5:71:54:41:18:27:b0:7b:fc:c7:84:4a:79:9f: 6a:37:23:60:f1:98:80:b5:4e:1d:12:76:da:92:c4:56:c4:0b: d4:c6:16:4d:ba:73:e0:ab:d8:83:30:7d:eb:39:38:dd:08:99: b1:e2:25:41:fa:c0:6c:7e:dd:70:68:71:4c:c3:ee:14:8c:5e: c3:bb:89:4d:bc:12:89:e8:5c:63:e6:50:71:5c:41:09:12:5e: ca:d7:ec:8a:5d:a1:b1:53:cd:54:5b:18:07:ae:6c:34:c3:d3: 10:d8:45:05:75:d6:24:5c:12:8f:30:f2:d7:35:10:cf:4c:ad: 8e:86:68:c1:a6:c0:9b:b5:d1:58:dd:d2:7e:17:d5:4f:b2:c9: 4c:08:ee:f4:cf:2f:81:4e:6c:1d:52:bd:38:46:de:54:ed:bf: 18:f5:ed:9e:aa:58:a3:8f:5e:4b:71:37:ab:ba:7a:16:12:7d: 4e:16:bb:c3:2c:b7:8b:ab:98:b3:6d:2b:c2:33:5d:a0:60:a4: cc:5c:76:f5:26:36:ff:87:aa:2e:b9:7c:fa:7f:72:61:ed:a8: f8:49:e7:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CDrOJMA1xsp5dJzFPPK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NjAzNDA2Y2YwZTFkN2RjNGE4Nzg0YTE4OGE2MjM4ZTNj MTNhYmUwHhcNMjYwMTI2MDIwMDQ3WhcNMjYwMTI3MDIwMDQ3WjAzMTEwLwYDVQQD Eyg0ODI3NzhlYzY1ODFjNzhkZjY1NTRlYzBiMWJhMjZkOTQwNzdhOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJCnJV+8AVwAMKeX7ivaWMUQfORV +6iE+7h0XCPzmDDbTGvOyH++ajWB3mZ//1gMK5GWE9DPfF5vm3QJ2aMSUNEEACgq 6mhs2pSsg/QXUvi23wL7ioxB4WjB2tLvm6iSeE38n6d1WdgYskRS5pLFupaGeTAj Th4ve0gtGWbEga7lLhk64uVh2DPllYQ6rWH/7/LU+Un2Bfh8fswhMs0/zt0R8NcS uQQDI1QMXzFSwjEZQSSxi4atDHXvFvtYRuRepgUB40XWM51qecmMO2axvl9LEZq+ EuzwaleXpAmBHAyNW3FU+APVu/+F9KTix+XV8fziW/K7cMevq2GAWlVEnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgneOxlgceN9lVOwLG6JtlAd6ijMB8GA1UdIwQY MBaAFDRgNAbPDh19xKh4ShiKYjjjwTq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQt MWVlNTZjNWNmYmY1LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQtMWVlNTZjNWNmYmY1 LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5JX8dEb JPxmMQrj3OhsnQDCXOA2VEPXcZ2bViNBGq8mwr/ibMZRdtVxVEEYJ7B7/MeESnmf ajcjYPGYgLVOHRJ22pLEVsQL1MYWTbpz4KvYgzB96zk43QiZseIlQfrAbH7dcGhx TMPuFIxew7uJTbwSiehcY+ZQcVxBCRJeytfsil2hsVPNVFsYB65sNMPTENhFBXXW JFwSjzDy1zUQz0ytjoZowabAm7XRWN3SfhfVT7LJTAju9M8vgU5sHVK9OEbeVO2/ GPXtnqpYo49eS3E3q7p6FhJ9Tha7wyy3i6uYs20rwjNdoGCkzFx29SY2/4eqLrl8 +n9yYe2o+EnnCQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:01:54 2026 by rpki-client