This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json) Hash identifier: 68AACBWsH2soZg8JvefD1hMiJ+qMTCELTBn2RiahKHM= Subject key identifier: 80:95:E7:A3:30:80:C5:B6:60:04:BB:58:F0:43:F7:5E:95:4B:72:44 Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Certificate serial: 019BF274ED5C25D64795BAA9B8BA50E76F8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 00:01:47 +0000 Manifest this update: Sun 25 Jan 2026 00:01:47 +0000 Manifest next update: Mon 26 Jan 2026 00:01:47 +0000 Files and hashes: 1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=) 2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=) 3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=) 4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: hVMvJ7BIts+dlaLfuZbQxZtGpK5sR69N0wNwQVq/ihs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:ed:5c:25:d6:47:95:ba:a9:b8:ba:50:e7:6f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Validity Not Before: Jan 25 00:01:47 2026 GMT Not After : Jan 26 00:01:47 2026 GMT Subject: CN=8095e7a33080c5b66004bb58f043f75e954b7244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:c3:f7:50:30:21:01:51:87:dc:2c:05:ae: f9:56:05:5a:55:ae:98:4c:ce:c0:68:26:a9:1d:a0: ec:24:82:f6:b4:e2:7b:26:a4:df:d9:53:0a:a9:b9: ac:9d:9d:a4:7b:8b:6b:e8:08:cf:59:76:a8:f2:ed: ca:27:9a:8d:ee:25:0d:3c:3c:75:a6:ec:8a:8e:50: 4f:c6:46:61:9f:3b:87:f5:2b:2f:27:0b:3b:da:dd: 47:ad:c3:67:9e:45:47:23:80:15:83:fe:b1:21:5c: 12:c0:e3:97:55:17:c0:07:83:b0:e8:7e:05:22:f6: c9:b0:ab:e3:97:d0:37:85:dd:84:3d:1b:00:79:ee: e5:1f:7b:10:e3:ce:02:e0:c6:b2:14:27:d9:72:c0: db:46:41:06:15:19:e8:b7:95:7b:fe:cd:b6:24:96: 7a:f8:95:da:5a:88:34:fe:d4:0c:64:d1:43:8e:59: 19:b3:40:7b:31:15:4f:70:0d:36:b5:2d:00:bf:8e: a8:2f:d0:7e:4c:00:15:b1:c6:6b:8b:32:28:98:7e: 90:e0:74:37:01:35:95:05:68:a9:47:a8:85:af:fa: 65:69:be:05:af:98:65:98:71:7e:c5:35:ac:52:da: a2:b4:f9:a2:a1:dd:4d:41:f0:95:84:52:cb:1a:ca: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:95:E7:A3:30:80:C5:B6:60:04:BB:58:F0:43:F7:5E:95:4B:72:44 X509v3 Authority Key Identifier: keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:42:7c:39:7f:ca:93:9f:95:d2:f2:4d:d1:c5:35:58:99:2c: 77:c7:c3:92:7a:3a:a0:63:83:97:01:f7:47:bb:cd:4b:a0:b6: 6c:47:12:e9:3d:46:d2:94:65:a1:66:61:08:6f:59:f5:4e:8b: 27:c9:a5:b3:d4:be:d0:3e:63:18:08:a2:9f:d5:ef:4a:2a:13: 67:e6:c0:15:5b:b4:d4:ef:f2:2e:3c:66:ac:35:ad:55:53:94: e8:c0:49:8a:91:3e:a7:76:9a:29:ce:19:09:2f:ed:cc:ac:0e: 5b:0b:63:8a:6e:d9:5a:9e:70:aa:61:35:fb:55:a5:e8:7c:65: a7:08:90:c1:b7:2f:dd:4a:63:83:dc:78:d8:6a:15:88:0e:66: 6a:51:99:92:de:29:e3:b3:78:1d:a0:69:3f:6c:83:29:32:1f: f0:04:e2:a6:57:d6:0a:0b:be:59:12:f9:af:1c:a9:d0:93:e6: 63:53:3b:fc:5b:3c:66:1c:72:6e:f3:c3:e9:38:82:b1:7e:f7: d1:e0:8b:b3:96:9a:5f:f3:66:9a:57:7d:4a:ea:46:8a:04:5a: e6:a9:43:82:8c:b6:2b:d4:6b:53:c5:6d:84:96:4d:4c:d0:85: 52:af:74:0a:f6:cf:95:f1:72:2a:22:e5:13:db:e7:72:06:05: 73:56:97:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydO1cJdZHlbqpuLpQ52+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1 NjVhODEwHhcNMjYwMTI1MDAwMTQ3WhcNMjYwMTI2MDAwMTQ3WjAzMTEwLwYDVQQD Eyg4MDk1ZTdhMzMwODBjNWI2NjAwNGJiNThmMDQzZjc1ZTk1NGI3MjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW7D91AwIQFRh9wsBa75VgVaVa6Y TM7AaCapHaDsJIL2tOJ7JqTf2VMKqbmsnZ2ke4tr6AjPWXao8u3KJ5qN7iUNPDx1 puyKjlBPxkZhnzuH9SsvJws72t1HrcNnnkVHI4AVg/6xIVwSwOOXVRfAB4Ow6H4F IvbJsKvjl9A3hd2EPRsAee7lH3sQ484C4MayFCfZcsDbRkEGFRnot5V7/s22JJZ6 +JXaWog0/tQMZNFDjlkZs0B7MRVPcA02tS0Av46oL9B+TAAVscZrizIomH6Q4HQ3 ATWVBWipR6iFr/plab4Fr5hlmHF+xTWsUtqitPmiod1NQfCVhFLLGsqvYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICV56MwgMW2YAS7WPBD916VS3JEMB8GA1UdIwQY MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt MTVlYTMzN2E3ODQwLzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEJ8OX/K k5+V0vJN0cU1WJksd8fDkno6oGODlwH3R7vNS6C2bEcS6T1G0pRloWZhCG9Z9U6L J8mls9S+0D5jGAiin9XvSioTZ+bAFVu01O/yLjxmrDWtVVOU6MBJipE+p3aaKc4Z CS/tzKwOWwtjim7ZWp5wqmE1+1Wl6HxlpwiQwbcv3Upjg9x42GoViA5malGZkt4p 47N4HaBpP2yDKTIf8ATiplfWCgu+WRL5rxyp0JPmY1M7/Fs8ZhxybvPD6TiCsX73 0eCLs5aaX/Nmmld9SupGigRa5qlDgoy2K9RrU8VthJZNTNCFUq90CvbPlfFyKiLl E9vncgYFc1aXfQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:57:59 2026 by rpki-client