This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft File: N0mXVDn-T_qTECYqy91fcjzuIiM.mft (raw, json) Hash identifier: E9+UKvilQVoqo2SFuGStlgakxXRtYWKy7OA3TgP2Fqs= Subject key identifier: 85:97:F0:22:26:AB:C6:F4:2C:8F:03:32:E8:C4:D5:A1:40:E1:99:DE Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23 Certificate issuer: /CN=3749975439fe4ffa9310262acbdd5f723cee2223 Certificate serial: 019BF687BBD36F296D126A717C32FA86F395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft Manifest number: 17DF Signing time: Sun 25 Jan 2026 19:00:49 +0000 Manifest this update: Sun 25 Jan 2026 19:00:49 +0000 Manifest next update: Mon 26 Jan 2026 19:00:49 +0000 Files and hashes: 1: N0mXVDn-T_qTECYqy91fcjzuIiM.crl (hash: pxI1QvuKBJQDV+3xjakW+MI6i8NY9/V0//77IU9FGAM=) 2: Xu_M6qzcK7mfWZCHmn6JKUUrAt0.roa (hash: 3PFCQYjH23ubKta8UeYrfDkFec6WuV94yV14I25LNoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:bb:d3:6f:29:6d:12:6a:71:7c:32:fa:86:f3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223 Validity Not Before: Jan 25 19:00:49 2026 GMT Not After : Jan 26 19:00:49 2026 GMT Subject: CN=8597f02226abc6f42c8f0332e8c4d5a140e199de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:fa:02:3d:b3:a6:c3:9e:0a:9e:9b:ec:32: 18:d8:4b:f5:d1:23:68:b4:25:f5:2d:f6:ac:0b:fa: 00:7a:e6:fd:d6:b9:47:44:a0:6a:72:f0:05:80:ee: 20:cc:d4:74:be:48:86:df:0c:71:7b:0d:e9:e7:94: 34:bb:f5:33:24:df:43:43:ec:59:76:50:f4:26:e3: dc:a3:f6:89:52:d0:21:9e:c3:d0:20:df:23:74:a0: 5a:9f:1f:6c:e8:39:6b:80:57:7b:66:9d:7a:39:b4: 82:c7:19:6f:4e:41:3e:10:da:fa:a3:e4:f3:32:9c: cd:24:0a:b3:ca:6d:13:ad:56:14:3f:43:1d:a6:bb: 62:4f:66:59:42:a8:b8:4a:98:5b:9a:a3:aa:f3:7a: e5:ba:b0:6f:00:d2:c0:85:aa:12:07:7d:72:89:64: d2:23:fe:06:33:cf:f0:4e:0c:83:70:2e:80:18:19: 76:47:31:e8:19:0c:d8:c7:8b:b1:81:67:73:a3:58: e9:d0:1a:2b:50:69:35:2b:d8:44:44:43:9c:d8:d4: 00:38:c4:3d:95:fa:89:c5:85:68:b4:c7:b8:5b:99: 30:c5:91:49:7f:cb:a4:3a:bb:ae:fa:8c:0e:c5:0c: d0:2b:00:30:29:5b:d6:bc:d4:0f:20:7c:8e:d4:3b: 8f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:97:F0:22:26:AB:C6:F4:2C:8F:03:32:E8:C4:D5:A1:40:E1:99:DE X509v3 Authority Key Identifier: keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a1:6b:e4:8d:c4:6a:b9:c5:f4:e0:11:02:fd:af:51:4b:8e: 09:e4:5d:ce:14:17:cc:d3:ef:80:9b:fe:95:4f:49:1f:7c:52: cc:34:82:00:e2:5b:26:e5:09:c3:7c:9f:5f:a7:79:77:1d:dc: dd:1c:1b:54:27:af:fa:76:2e:27:3e:b6:4e:02:17:ae:04:1a: 8a:2e:95:74:31:55:85:72:da:28:23:be:ae:b6:06:15:e6:de: da:e1:3c:88:78:98:e9:1b:6e:76:74:0c:27:b5:7f:0f:af:1d: e1:a4:01:18:ae:1a:c6:e6:c3:3e:db:a9:45:f0:eb:dc:8a:a1: 2c:cd:0e:bc:d9:96:d7:c3:a7:3e:20:e5:3a:7f:6e:d7:60:39: 82:b4:6c:22:07:73:09:ef:64:79:0a:1b:07:7d:bb:ae:52:9e: 05:73:6a:82:64:67:dd:a4:23:12:45:60:cc:20:2f:56:93:5c: 32:7a:1f:df:01:d0:04:29:f1:6d:db:ce:f3:f0:4f:36:0a:a1: fc:a6:c5:a9:7a:fd:98:c6:38:c2:4f:95:77:bd:f0:05:72:19: 64:62:84:bc:79:a7:ff:50:47:8f:53:c3:69:88:ff:54:49:43: 01:71:e0:81:12:00:e8:08:dc:aa:62:d9:0a:c0:1f:6b:1a:b3: b0:48:e9:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h7vTbyltEmpxfDL6hvOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NDk5NzU0MzlmZTRmZmE5MzEwMjYyYWNiZGQ1ZjcyM2Nl ZTIyMjMwHhcNMjYwMTI1MTkwMDQ5WhcNMjYwMTI2MTkwMDQ5WjAzMTEwLwYDVQQD Eyg4NTk3ZjAyMjI2YWJjNmY0MmM4ZjAzMzJlOGM0ZDVhMTQwZTE5OWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq/6Aj2zpsOeCp6b7DIY2Ev10SNo tCX1LfasC/oAeub91rlHRKBqcvAFgO4gzNR0vkiG3wxxew3p55Q0u/UzJN9DQ+xZ dlD0JuPco/aJUtAhnsPQIN8jdKBanx9s6DlrgFd7Zp16ObSCxxlvTkE+ENr6o+Tz MpzNJAqzym0TrVYUP0MdprtiT2ZZQqi4SphbmqOq83rlurBvANLAhaoSB31yiWTS I/4GM8/wTgyDcC6AGBl2RzHoGQzYx4uxgWdzo1jp0BorUGk1K9hEREOc2NQAOMQ9 lfqJxYVotMe4W5kwxZFJf8ukOruu+owOxQzQKwAwKVvWvNQPIHyO1DuPEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWX8CImq8b0LI8DMujE1aFA4ZneMB8GA1UdIwQY MBaAFDdJl1Q5/k/6kxAmKsvdX3I87iIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjBtWFZEbi1UX3FURUNZcXk5MWZjanp1SWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zZmM0ZTAtZWI1Zi00MmQzLTk4ZTEt YmUwMGE2NTEwM2FkLzEvTjBtWFZEbi1UX3FURUNZcXk5MWZjanp1SWlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8zZmM0ZTAtZWI1Zi00MmQzLTk4ZTEtYmUwMGE2NTEwM2Fk LzEvTjBtWFZEbi1UX3FURUNZcXk5MWZjanp1SWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaFr5I3E arnF9OARAv2vUUuOCeRdzhQXzNPvgJv+lU9JH3xSzDSCAOJbJuUJw3yfX6d5dx3c 3RwbVCev+nYuJz62TgIXrgQaii6VdDFVhXLaKCO+rrYGFebe2uE8iHiY6RtudnQM J7V/D68d4aQBGK4axubDPtupRfDr3IqhLM0OvNmW18OnPiDlOn9u12A5grRsIgdz Ce9keQobB327rlKeBXNqgmRn3aQjEkVgzCAvVpNcMnof3wHQBCnxbdvO8/BPNgqh /KbFqXr9mMY4wk+Vd73wBXIZZGKEvHmn/1BHj1PDaYj/VElDAXHggRIA6AjcqmLZ CsAfaxqzsEjpSg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:16 2026 by rpki-client