This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json) Hash identifier: 8K8vEp9Yz1WEwOTaW0afUCnFw4ZZf6JWNF0ofpW4Ue0= Subject key identifier: 0F:93:23:AE:CE:07:DC:D2:4F:25:85:78:42:7F:E3:B4:6B:08:4E:C1 Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e Certificate serial: 019BF5E3B84D111EF3E8E3A66E8163A2874E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 16:01:40 +0000 Manifest this update: Sun 25 Jan 2026 16:01:40 +0000 Manifest next update: Mon 26 Jan 2026 16:01:40 +0000 Files and hashes: 1: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: p4onQfZ/jbBAwOEjgTiHVUcz1DfS9hb2M+7cK7VCI3o=) 2: h9csAbPkQWfATuuCxHD4BYCCVSo.roa (hash: uOXNbpvZvHEf4Spk0vf1dg88f9LIRcDmba0q2K0ziEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:b8:4d:11:1e:f3:e8:e3:a6:6e:81:63:a2:87:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e Validity Not Before: Jan 25 16:01:40 2026 GMT Not After : Jan 26 16:01:40 2026 GMT Subject: CN=0f9323aece07dcd24f258578427fe3b46b084ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:31:07:37:6a:e6:37:12:ac:f8:8c:14:3e: d7:7b:8e:b7:90:25:93:61:65:08:5f:9f:e3:40:64: 4f:06:33:c1:e6:db:bc:3b:36:1b:23:41:fb:f7:01: 53:e6:19:4f:61:af:7c:55:95:7a:6b:0d:9a:c4:08: 4a:7a:8b:c5:03:c7:c9:18:47:e6:ed:7a:fd:c3:cf: e7:a1:70:63:8e:4f:c1:47:84:cc:02:07:cb:43:5b: 2f:e5:98:3b:8a:8c:07:3c:16:8e:32:cf:1c:42:0e: cf:9b:f9:6d:2c:c4:7e:ac:b7:ee:a9:ca:d1:d2:12: ce:36:59:59:5a:ef:dd:85:83:6b:c9:e8:4c:f6:13: 6b:0a:60:d7:9c:d0:54:82:c0:5d:1c:6e:02:14:72: e8:02:09:2d:cc:00:e7:4f:21:3a:62:d1:94:b6:3d: 98:92:b5:0d:fa:ba:81:31:ec:06:ba:df:bb:92:51: db:9f:6f:28:c6:25:ae:78:a0:f6:22:01:0c:82:d3: e6:33:0d:80:ac:82:33:59:ec:df:65:7a:6b:c9:44: 68:93:c6:8c:17:2d:9f:18:52:dd:ad:1d:88:3d:34: 51:63:a3:52:4f:ff:ad:df:8c:c7:51:4c:0d:b8:b9: f5:27:f5:d5:d6:07:82:ef:2f:93:49:5a:85:03:a2: f7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:93:23:AE:CE:07:DC:D2:4F:25:85:78:42:7F:E3:B4:6B:08:4E:C1 X509v3 Authority Key Identifier: keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1b:05:98:de:44:74:0e:f9:c9:22:7d:fe:47:b7:4f:99:ba: 67:12:c5:eb:33:00:30:27:0e:c8:37:4e:05:e5:72:eb:2f:88: ac:c5:4f:d6:5b:81:9c:ca:b9:d5:83:04:a2:9a:9f:38:89:47: 67:aa:4f:3b:98:af:19:b6:fa:5a:54:04:7f:aa:62:7f:b2:f1: 45:ec:3c:ea:7c:83:98:07:3a:2b:2e:2f:2d:51:1f:50:1a:d9: f2:39:63:49:00:b5:3a:21:05:45:9d:38:0e:a6:0f:cb:6e:58: 71:83:82:a3:9a:a3:52:07:f9:08:a1:74:dd:47:84:66:72:a2: be:99:bb:32:c7:66:cd:e4:fc:0e:48:21:2c:a8:5d:0d:09:ae: 76:38:bb:9b:57:72:75:dc:f8:ce:8e:a4:93:ad:ac:6d:de:13: fb:c4:93:19:8f:21:b1:9a:36:c8:17:b0:36:3c:25:bf:4c:e2: f3:0f:ab:72:2d:8e:b0:2f:b7:d6:ee:d1:59:ce:a5:49:cd:54: e8:7a:34:fe:4f:85:73:b9:0f:04:57:d3:71:d0:b5:a2:3b:af: 86:ab:ac:71:47:23:27:dc:a1:22:a6:55:df:18:05:da:ee:c0: a4:90:f4:4c:40:33:7f:b4:2b:68:72:90:05:62:e9:1d:a9:67: b6:19:60:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv147hNER7z6OOmboFjoodOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTU4YTU4ZDE3Y2FiOGZmOWE3OTE1NmY2NmJlZDVhNzg3 OTlmN2UwHhcNMjYwMTI1MTYwMTQwWhcNMjYwMTI2MTYwMTQwWjAzMTEwLwYDVQQD EygwZjkzMjNhZWNlMDdkY2QyNGYyNTg1Nzg0MjdmZTNiNDZiMDg0ZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK0xBzdq5jcSrPiMFD7Xe463kCWT YWUIX5/jQGRPBjPB5tu8OzYbI0H79wFT5hlPYa98VZV6aw2axAhKeovFA8fJGEfm 7Xr9w8/noXBjjk/BR4TMAgfLQ1sv5Zg7iowHPBaOMs8cQg7Pm/ltLMR+rLfuqcrR 0hLONllZWu/dhYNryehM9hNrCmDXnNBUgsBdHG4CFHLoAgktzADnTyE6YtGUtj2Y krUN+rqBMewGut+7klHbn28oxiWueKD2IgEMgtPmMw2ArIIzWezfZXpryURok8aM Fy2fGFLdrR2IPTRRY6NST/+t34zHUUwNuLn1J/XV1geC7y+TSVqFA6L3cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+TI67OB9zSTyWFeEJ/47RrCE7BMB8GA1UdIwQY MBaAFDSViljRfKuP+aeRVvZr7Vp4eZ9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQt NDY4MTA2MTM1MzhhLzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQtNDY4MTA2MTM1Mzhh LzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBsFmN5E dA75ySJ9/ke3T5m6ZxLF6zMAMCcOyDdOBeVy6y+IrMVP1luBnMq51YMEopqfOIlH Z6pPO5ivGbb6WlQEf6pif7LxRew86nyDmAc6Ky4vLVEfUBrZ8jljSQC1OiEFRZ04 DqYPy25YcYOCo5qjUgf5CKF03UeEZnKivpm7MsdmzeT8DkghLKhdDQmudji7m1dy ddz4zo6kk62sbd4T+8STGY8hsZo2yBewNjwlv0zi8w+rci2OsC+31u7RWc6lSc1U 6Ho0/k+Fc7kPBFfTcdC1ojuvhquscUcjJ9yhIqZV3xgF2u7ApJD0TEAzf7QraHKQ BWLpHalnthlg7Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:05:57 2026 by rpki-client