This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json) Hash identifier: MBxWlJ6NR5GyKlwlfHjuc1mj5Wp7AmuPw77L8WpgM6s= Subject key identifier: C3:CA:9B:7D:57:46:3B:8A:98:60:A1:8D:0F:69:48:22:BC:F8:06:C7 Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f Certificate serial: 019BF4D0F0515B1B41901DA1EDB2FBF314A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft Manifest number: 13C5 Signing time: Sun 25 Jan 2026 11:01:32 +0000 Manifest this update: Sun 25 Jan 2026 11:01:32 +0000 Manifest next update: Mon 26 Jan 2026 11:01:32 +0000 Files and hashes: 1: 8Blpmhg56UtYFzHPUGEc8r1tGxk.roa (hash: ZeBRyf2GdsztNKgCVDcLxg6L0hXsn4muZMO3aaOgEDY=) 2: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: A3FrYhNgJnqf5BBnEjvtXAzAudBjIW4FlLNGc8nhL9I=) 3: kZxYAWzX74NAE37QVjZYwdiy08g.roa (hash: UpUGn6BX93JUf+igiqvnQCmLw41MVtW2FFB1GnAAkLs=) 4: nscX6HThd1wN8UnSg1ZdjqXq-gI.roa (hash: siyWzC01/7D6KwgOGvzUXqq60mfjtP7SOo5lCWwEAqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:f0:51:5b:1b:41:90:1d:a1:ed:b2:fb:f3:14:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f Validity Not Before: Jan 25 11:01:32 2026 GMT Not After : Jan 26 11:01:32 2026 GMT Subject: CN=c3ca9b7d57463b8a9860a18d0f694822bcf806c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:7a:43:6d:63:0a:ff:73:bc:31:19:d8:83: fb:f8:17:c0:df:3d:b4:41:83:61:de:c0:ad:9e:9b: fc:79:42:f6:89:26:07:72:80:60:8a:1f:1d:37:a4: 68:4f:09:9f:6e:45:3a:f1:3a:e1:70:bb:df:06:ff: 1f:b5:7c:30:9d:4e:80:a4:32:48:22:dd:f8:7e:f3: e8:cc:0a:4c:d4:e3:32:6d:70:0b:b6:1c:34:52:c5: 74:3e:e6:ef:7c:39:25:59:cf:c4:8d:85:e5:19:e0: c4:c1:ae:f6:8a:69:5d:14:c0:67:60:fb:1e:59:95: 5e:ff:d5:75:99:b3:0d:fe:8c:c5:38:e6:19:5c:49: 65:7a:56:04:3f:5c:d7:d3:59:22:73:0f:81:b9:c6: f1:33:60:06:6e:cb:c8:12:98:af:40:7e:e0:39:cb: 09:f6:53:e4:66:8c:87:f1:e5:5e:d6:e4:f0:da:e0: 3a:32:55:e1:0e:e9:48:7b:dc:38:fe:84:07:10:e3: d8:09:12:8d:2d:1d:26:44:78:86:1b:59:29:31:6f: 31:cf:db:9d:22:67:5a:86:68:d0:e7:c6:e4:ee:09: 93:47:22:4e:13:62:44:d0:ca:23:e0:1d:3c:cc:f4: 80:10:99:99:c3:01:68:7e:bd:ed:33:4b:1a:6e:c1: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CA:9B:7D:57:46:3B:8A:98:60:A1:8D:0F:69:48:22:BC:F8:06:C7 X509v3 Authority Key Identifier: keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:95:1f:24:a8:fd:de:7c:ee:ea:d6:99:37:52:cc:3a:98:aa: e1:c1:28:6d:14:9e:53:a3:7b:73:cb:8a:67:12:83:17:e8:65: c1:d1:15:16:85:fc:18:dd:c4:b2:27:71:7a:2f:a2:63:1d:35: d4:e6:f9:ca:71:88:cf:6d:44:61:00:3e:c9:42:44:0d:33:2f: 8d:84:93:f4:8b:cf:1c:12:70:43:d2:5c:ba:23:75:a7:bd:a4: eb:1b:97:bf:02:d1:cb:bc:18:90:57:05:b3:5f:4e:91:d7:d3: 48:97:d7:76:58:e0:33:c2:61:67:45:c8:63:b6:b6:f1:db:59: db:a8:92:ec:37:9d:e5:e5:13:c2:c9:49:31:72:0f:52:ce:cd: 8c:1c:24:be:61:85:7b:4b:56:0e:d9:72:bd:d5:37:b7:aa:b6: e0:df:4a:e5:68:a8:56:d4:b5:44:3a:d1:0e:2d:67:0b:f2:14: ad:14:8d:dc:b6:40:75:ec:cb:28:9b:1c:6c:a4:f7:6d:27:f1: 37:50:06:a4:d6:b8:27:cd:fa:d1:b8:3c:53:d3:1f:73:6d:9c: 37:41:53:a2:4a:01:6d:90:72:2f:f7:52:be:f6:44:14:a5:15: 05:df:d3:1f:71:6f:6a:63:b9:7a:cb:59:69:00:f4:88:41:ed: a4:ca:9a:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00PBRWxtBkB2h7bL78xSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm ZmJmNmYwHhcNMjYwMTI1MTEwMTMyWhcNMjYwMTI2MTEwMTMyWjAzMTEwLwYDVQQD EyhjM2NhOWI3ZDU3NDYzYjhhOTg2MGExOGQwZjY5NDgyMmJjZjgwNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdF6Q21jCv9zvDEZ2IP7+BfA3z20 QYNh3sCtnpv8eUL2iSYHcoBgih8dN6RoTwmfbkU68TrhcLvfBv8ftXwwnU6ApDJI It34fvPozApM1OMybXALthw0UsV0PubvfDklWc/EjYXlGeDEwa72imldFMBnYPse WZVe/9V1mbMN/ozFOOYZXEllelYEP1zX01kicw+BucbxM2AGbsvIEpivQH7gOcsJ 9lPkZoyH8eVe1uTw2uA6MlXhDulIe9w4/oQHEOPYCRKNLR0mRHiGG1kpMW8xz9ud ImdahmjQ58bk7gmTRyJOE2JE0Moj4B08zPSAEJmZwwFofr3tM0sabsGNiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPKm31XRjuKmGChjQ9pSCK8+AbHMB8GA1UdIwQY MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut ZjEwZjczYTllY2IzLzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5UfJKj9 3nzu6taZN1LMOpiq4cEobRSeU6N7c8uKZxKDF+hlwdEVFoX8GN3Esidxei+iYx01 1Ob5ynGIz21EYQA+yUJEDTMvjYST9IvPHBJwQ9JcuiN1p72k6xuXvwLRy7wYkFcF s19OkdfTSJfXdljgM8JhZ0XIY7a28dtZ26iS7Ded5eUTwslJMXIPUs7NjBwkvmGF e0tWDtlyvdU3t6q24N9K5WioVtS1RDrRDi1nC/IUrRSN3LZAdezLKJscbKT3bSfx N1AGpNa4J8360bg8U9Mfc22cN0FTokoBbZByL/dSvvZEFKUVBd/TH3FvamO5estZ aQD0iEHtpMqaSg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:09 2026 by rpki-client