This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json) Hash identifier: kxEye5UTrYlb9XradXnm6CaNlRM6hKkKDace818P4f0= Subject key identifier: 65:F3:5F:88:9B:C8:8F:B8:D1:4B:5C:D5:30:8E:5B:F2:08:18:19:8B Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9 Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9 Certificate serial: 019BF951AC1772CA90DF6E71A047E9C74121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft Manifest number: 1139 Signing time: Mon 26 Jan 2026 08:00:37 +0000 Manifest this update: Mon 26 Jan 2026 08:00:37 +0000 Manifest next update: Tue 27 Jan 2026 08:00:37 +0000 Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: JT1W0JsIX6rizl6x5vOB2DlvgaevsV4oFLpwoV7xmBE=) 2: fs8coMQW-wdjxvCj9ZMHuDg86fI.roa (hash: 9FrwB/m2Bh+Pc1afpUHCCGmxJk3UX+3t1k97wVkOTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:ac:17:72:ca:90:df:6e:71:a0:47:e9:c7:41:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9 Validity Not Before: Jan 26 08:00:37 2026 GMT Not After : Jan 27 08:00:37 2026 GMT Subject: CN=65f35f889bc88fb8d14b5cd5308e5bf20818198b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:90:52:ad:2a:07:3a:28:cb:bd:55:e9:3d: 58:36:3b:9c:2e:e6:36:bb:b2:b5:a6:51:f2:31:3d: ed:56:e9:1c:68:98:36:37:d2:dc:d2:ca:e3:91:32: 98:f0:ed:96:08:87:7c:e1:93:21:ca:ee:4f:92:a4: 9a:2c:4d:c3:22:79:cf:e8:ff:e9:74:0a:4c:e5:8f: e6:05:38:9c:43:9d:67:40:d4:59:0a:d4:b4:18:3f: 0a:55:6f:2d:b9:6e:e4:f9:f9:c4:ce:4a:7a:f0:d1: 18:e0:c7:7d:40:e4:ca:52:22:3c:a0:19:43:04:6e: c1:d1:b1:be:b3:e4:e0:26:4e:90:83:52:0f:4d:93: 7d:51:54:e2:bf:0e:75:24:29:06:2e:7e:a1:a8:18: 48:5c:7d:3a:3e:4a:79:e5:48:a8:ff:f6:4e:a7:45: 09:c1:42:66:6c:13:d4:dc:f9:0a:00:ea:6e:1f:43: 15:c2:26:6d:6b:96:0e:f0:8c:fb:37:fe:c0:f3:47: c5:78:b7:bc:42:56:71:e0:95:74:ac:0d:85:71:65: 7f:93:a0:c4:9c:49:c9:ff:9b:e2:46:4c:52:46:12: f3:c3:4a:7b:c7:6e:b0:84:c5:74:77:56:ea:99:dc: 76:10:d3:5d:f4:9e:35:50:2a:db:6d:0d:41:d3:b2: 84:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F3:5F:88:9B:C8:8F:B8:D1:4B:5C:D5:30:8E:5B:F2:08:18:19:8B X509v3 Authority Key Identifier: keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:84:24:49:8d:8f:42:00:13:57:d9:ab:bf:79:9a:2e:d5:f8: e4:6c:99:ed:f3:b1:1f:e6:0f:6f:08:10:b4:f9:c1:ad:c7:c1: d9:3e:1b:ee:d3:a1:6d:7a:24:4f:41:98:ae:88:90:01:f6:3b: b4:b4:92:60:92:bd:ff:54:8d:94:72:fe:e9:db:8d:d5:52:db: f2:dc:37:60:68:ae:f3:43:ea:7f:e3:a3:a1:66:11:80:bf:04: 05:1c:76:eb:68:49:7a:63:e6:ab:95:97:3b:89:f0:7c:2b:45: 74:57:5d:4a:cf:ab:f5:32:18:04:63:92:e5:bb:80:db:6a:97: 91:31:c2:7d:af:3e:69:fc:f9:34:de:3f:a8:46:e8:27:92:f1: aa:51:42:b3:c5:ca:33:d2:8f:44:5d:28:3b:ef:ad:97:97:4d: 3d:f6:69:ab:1f:22:8a:01:f5:a9:b3:9c:7d:b5:45:f5:89:b5: 1e:72:d8:98:48:5e:b9:87:8d:08:0a:e9:67:17:1f:99:fd:8c: 7b:e3:dc:0d:06:e2:d9:b1:e5:5e:95:e6:a0:9e:f1:83:71:10: fe:fe:82:48:d7:01:b0:83:ba:5e:c4:e1:8e:1b:d4:d7:0d:87: 98:42:32:93:7a:45:e0:a9:25:5d:c3:61:d0:16:2c:c6:37:6d: c1:40:ce:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UawXcsqQ325xoEfpx0EhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YWYwNDFkMTJjNGFkYjY2ZjhjMTYxMTNjOWE2MTQ3ZDAy Mzg4ZDkwHhcNMjYwMTI2MDgwMDM3WhcNMjYwMTI3MDgwMDM3WjAzMTEwLwYDVQQD Eyg2NWYzNWY4ODliYzg4ZmI4ZDE0YjVjZDUzMDhlNWJmMjA4MTgxOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxveQUq0qBzooy71V6T1YNjucLuY2 u7K1plHyMT3tVukcaJg2N9Lc0srjkTKY8O2WCId84ZMhyu5PkqSaLE3DInnP6P/p dApM5Y/mBTicQ51nQNRZCtS0GD8KVW8tuW7k+fnEzkp68NEY4Md9QOTKUiI8oBlD BG7B0bG+s+TgJk6Qg1IPTZN9UVTivw51JCkGLn6hqBhIXH06Pkp55Uio//ZOp0UJ wUJmbBPU3PkKAOpuH0MVwiZta5YO8Iz7N/7A80fFeLe8QlZx4JV0rA2FcWV/k6DE nEnJ/5viRkxSRhLzw0p7x26whMV0d1bqmdx2ENNd9J41UCrbbQ1B07KE+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXzX4ibyI+40Utc1TCOW/IIGBmLMB8GA1UdIwQY MBaAFDavBB0SxK22b4wWETyaYUfQI4jZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2Mt MDYxZGQ2ODEzMzJjLzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2MtMDYxZGQ2ODEzMzJj LzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIQkSY2P QgATV9mrv3maLtX45GyZ7fOxH+YPbwgQtPnBrcfB2T4b7tOhbXokT0GYroiQAfY7 tLSSYJK9/1SNlHL+6duN1VLb8tw3YGiu80Pqf+OjoWYRgL8EBRx262hJemPmq5WX O4nwfCtFdFddSs+r9TIYBGOS5buA22qXkTHCfa8+afz5NN4/qEboJ5LxqlFCs8XK M9KPRF0oO++tl5dNPfZpqx8iigH1qbOcfbVF9Ym1HnLYmEheuYeNCArpZxcfmf2M e+PcDQbi2bHlXpXmoJ7xg3EQ/v6CSNcBsIO6XsThjhvU1w2HmEIyk3pF4KklXcNh 0BYsxjdtwUDOuQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:40:02 2026 by rpki-client