This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json) Hash identifier: sGgF1c/axoNGAsbQef1PnboTyKyrS6sxvstOcKIVrdA= Subject key identifier: 88:C8:19:B9:14:3B:A1:CE:8C:E5:91:BD:1B:50:D4:F5:A1:78:A1:D6 Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b Certificate serial: 019BF72CFD68BA29BA2380BD7D5A6B97A259 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft Manifest number: 0F60 Signing time: Sun 25 Jan 2026 22:01:19 +0000 Manifest this update: Sun 25 Jan 2026 22:01:19 +0000 Manifest next update: Mon 26 Jan 2026 22:01:19 +0000 Files and hashes: 1: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: RYaMeyVCGDo9xEur17dx5cYjGz6kR0yYy6fBA0sAG/M=) 2: r1jTlTOR57K4XjS1gHs66uNbmVQ.roa (hash: 9z/BkXXPVQB2pzHDQpJLjCalHkbxzSYovegO7Zp9jJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:fd:68:ba:29:ba:23:80:bd:7d:5a:6b:97:a2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b Validity Not Before: Jan 25 22:01:19 2026 GMT Not After : Jan 26 22:01:19 2026 GMT Subject: CN=88c819b9143ba1ce8ce591bd1b50d4f5a178a1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:80:77:09:e1:85:cc:99:d1:62:72:b1:f8:de: 82:b6:e2:5d:28:97:a6:84:d7:e5:37:b1:40:f5:fb: 02:38:e4:2e:22:5a:16:09:85:a0:79:a5:28:2a:51: c8:f4:36:ba:52:cc:82:6b:3a:b5:80:d7:89:df:56: 08:29:19:8f:51:70:2a:43:97:4a:52:a9:06:9e:01: 92:e5:94:8f:5b:1f:c6:2f:2d:bc:82:78:a9:2b:08: bb:0a:34:76:ad:c0:f8:7d:70:6d:74:a1:81:0a:42: f3:10:74:e2:9b:f3:8a:3e:9d:fe:2c:af:ce:d7:bf: 07:d2:1b:92:78:89:90:68:23:7c:19:f0:57:48:f7: b8:35:84:9a:76:07:c5:79:81:a5:38:d9:13:46:f4: 94:56:66:f9:a2:ea:ca:9e:97:0b:12:bf:f1:51:15: f8:fe:c7:13:6f:e6:6e:19:9e:47:b5:58:51:e0:e9: 23:0f:aa:2f:18:2a:b4:4b:cd:46:09:d3:92:43:ba: 2e:97:83:1c:3f:48:ad:5c:d6:4f:13:5c:07:c8:9f: d9:28:8f:4d:dc:17:ce:43:85:6d:45:6e:4c:f6:74: 79:e2:a9:6d:c7:45:71:c0:6c:a2:b8:e7:72:fb:18: c2:97:89:13:77:b1:93:af:f6:6a:5e:e0:0d:ab:c8: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C8:19:B9:14:3B:A1:CE:8C:E5:91:BD:1B:50:D4:F5:A1:78:A1:D6 X509v3 Authority Key Identifier: keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0b:ca:13:db:3f:22:76:90:d7:3b:c1:ec:39:9a:fc:3a:28: 6a:b7:b6:40:34:2c:92:e3:81:df:35:96:d3:10:ab:67:64:5e: 6e:10:33:28:96:5e:3c:12:ac:57:41:5d:b6:a5:dd:72:66:50: 94:b7:11:b5:60:19:57:5e:87:dc:5d:92:e6:4c:15:ec:13:4b: cc:96:70:62:f3:f4:ac:23:3b:11:34:38:82:e3:fd:69:e3:84: 45:a7:00:e5:84:ef:3f:01:39:85:6d:48:fd:18:2c:d1:41:95: 7d:8a:46:53:03:5b:91:5d:ff:9d:e7:0e:35:84:03:21:20:64: a0:95:af:04:fa:0e:8a:c2:67:45:68:f4:ae:9a:0d:ad:bf:b9: fa:fd:8d:98:ee:76:71:6b:58:64:89:7b:d1:24:b6:0e:70:ac: e2:b0:d6:1d:e8:39:32:b5:93:00:1b:9c:d1:6a:d4:9b:11:09: 7f:fe:6e:2b:e4:25:1d:9a:a6:4a:ff:6b:de:66:65:ec:ac:c4: 09:55:42:0f:11:75:b3:52:49:77:2b:59:ba:fb:79:de:1e:52: 04:23:58:e2:9d:ce:4c:66:62:a0:01:ad:a6:09:8e:f2:d5:70: 40:2a:51:32:b8:e4:39:e3:6c:43:5d:51:39:9d:66:52:b7:08: c7:00:ae:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LP1ouim6I4C9fVprl6JZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMjA5MTU3YmY3ODllNmJiYTM0ZTBkYmQzZWZlY2Q5YjIw ZGQwNmIwHhcNMjYwMTI1MjIwMTE5WhcNMjYwMTI2MjIwMTE5WjAzMTEwLwYDVQQD Eyg4OGM4MTliOTE0M2JhMWNlOGNlNTkxYmQxYjUwZDRmNWExNzhhMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IB3CeGFzJnRYnKx+N6CtuJdKJem hNflN7FA9fsCOOQuIloWCYWgeaUoKlHI9Da6UsyCazq1gNeJ31YIKRmPUXAqQ5dK UqkGngGS5ZSPWx/GLy28gnipKwi7CjR2rcD4fXBtdKGBCkLzEHTim/OKPp3+LK/O 178H0huSeImQaCN8GfBXSPe4NYSadgfFeYGlONkTRvSUVmb5ourKnpcLEr/xURX4 /scTb+ZuGZ5HtVhR4OkjD6ovGCq0S81GCdOSQ7oul4McP0itXNZPE1wHyJ/ZKI9N 3BfOQ4VtRW5M9nR54qltx0VxwGyiuOdy+xjCl4kTd7GTr/ZqXuANq8gnKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjIGbkUO6HOjOWRvRtQ1PWheKHWMB8GA1UdIwQY MBaAFJwgkVe/eJ5rujTg29Pv7NmyDdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgt MTE2OTA5ZTQzODI0LzEvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgtMTE2OTA5ZTQzODI0 LzEvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQvKE9s/ InaQ1zvB7Dma/Dooare2QDQskuOB3zWW0xCrZ2RebhAzKJZePBKsV0FdtqXdcmZQ lLcRtWAZV16H3F2S5kwV7BNLzJZwYvP0rCM7ETQ4guP9aeOERacA5YTvPwE5hW1I /Rgs0UGVfYpGUwNbkV3/necONYQDISBkoJWvBPoOisJnRWj0rpoNrb+5+v2NmO52 cWtYZIl70SS2DnCs4rDWHeg5MrWTABuc0WrUmxEJf/5uK+QlHZqmSv9r3mZl7KzE CVVCDxF1s1JJdytZuvt53h5SBCNY4p3OTGZioAGtpgmO8tVwQCpRMrjkOeNsQ11R OZ1mUrcIxwCufg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:56 2026 by rpki-client