This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft File: nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json) Hash identifier: 21bU9FCtKb3F/AZ4K1GU7Oj0u97JOhXw+Y7o3Tnr00M= Subject key identifier: B8:24:23:A7:17:11:64:35:6B:9D:86:03:89:B0:A0:96:C2:A6:48:AD Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7 Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7 Certificate serial: 019BF7638004A60FE854FC6AA04B546B5D86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft Manifest number: 0DB5 Signing time: Sun 25 Jan 2026 23:00:51 +0000 Manifest this update: Sun 25 Jan 2026 23:00:51 +0000 Manifest next update: Mon 26 Jan 2026 23:00:51 +0000 Files and hashes: 1: 5RFARNnQP81iGTseWeUutxn3EXI.roa (hash: Nxourp9u5nBIWhDVwCVmI/AilNX0cSXhcM93qEhrhhU=) 2: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: tFSsb/7rdLssCyOiUpHkBLXHTdTX0AjZWigNio0FTb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:80:04:a6:0f:e8:54:fc:6a:a0:4b:54:6b:5d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7 Validity Not Before: Jan 25 23:00:51 2026 GMT Not After : Jan 26 23:00:51 2026 GMT Subject: CN=b82423a7171164356b9d860389b0a096c2a648ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:49:c8:f1:0c:ab:bc:91:4b:3a:30:dd:e6: b6:1e:71:14:86:41:82:bb:53:62:38:e1:b5:e2:c9: 81:46:54:01:ee:e9:8b:c7:3b:98:c9:ed:6d:92:45: dd:12:44:e9:f7:95:8b:77:f4:3a:20:b1:8f:2d:df: d7:44:8f:2f:ba:fc:0a:bb:c7:98:35:d4:a0:89:81: 96:47:2d:27:c1:2d:2c:85:cc:ae:42:29:e4:2a:ce: bf:4d:12:f9:f6:47:37:81:b7:55:5b:d6:7e:2b:e4: 50:2e:b7:85:ad:d1:1b:f9:d2:e4:ba:a5:7c:f1:1d: 50:a3:3e:82:34:77:4a:66:48:21:4f:e1:0b:ea:5c: ce:2d:b6:cf:c5:3d:96:6e:19:1e:de:75:e9:7d:fc: a6:f2:73:49:60:19:20:3a:54:07:5f:8b:f4:03:79: 4d:53:ae:11:92:3a:eb:4e:d6:df:63:9a:b0:4a:f7: d3:a5:15:de:84:c2:d1:40:8d:04:d8:84:24:fe:a0: 54:78:61:20:1d:a6:34:cf:53:b7:4f:f8:df:67:97: 0f:ff:35:ef:d3:20:18:78:fe:a0:ae:a0:0c:ea:ef: ea:a5:7b:48:fd:98:82:6d:5f:4e:8e:30:ff:74:2d: 4c:fa:d7:42:00:27:2a:9f:6e:48:f3:c9:2b:8f:6a: bb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:24:23:A7:17:11:64:35:6B:9D:86:03:89:B0:A0:96:C2:A6:48:AD X509v3 Authority Key Identifier: keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:df:a2:b7:48:26:2e:17:46:86:d7:99:1f:44:7e:41:87:27: a3:48:f8:d8:41:12:c9:bc:a9:ef:8e:f8:90:2d:c8:e5:9b:22: 08:9f:43:d1:9f:f6:f6:f7:82:56:8f:c7:ba:01:7e:b0:39:62: 19:fd:ab:48:43:bb:4a:9b:54:6e:5d:31:17:13:27:53:b3:99: 06:08:51:07:d6:2e:a7:34:67:bc:e7:f4:1b:46:20:04:ce:d1: 68:fb:9e:06:21:b3:7e:a4:fa:17:fc:b2:16:3c:2b:8c:51:38: e9:83:7c:ea:aa:46:35:7e:bd:91:ee:d5:fd:f5:1c:3f:31:17: ed:0c:07:0a:54:86:2c:be:82:ce:07:7a:c6:36:3a:21:7f:a0: 5b:95:37:3d:5e:2d:f2:ee:ea:63:f0:f6:fc:16:84:f6:e8:19: 94:10:ce:c8:c5:6d:bb:e1:2e:37:25:25:50:c1:3a:34:02:4a: 66:1a:27:31:0b:6f:66:d6:a7:60:e5:18:8b:71:d3:d9:11:a2: 22:6a:e8:20:56:ac:bc:14:5a:08:b2:80:e5:1a:2e:fe:93:8e: c9:57:25:a3:0e:01:fa:05:24:86:f1:91:e3:82:96:bb:93:2f: fb:eb:9f:7f:2c:5c:59:cd:53:b7:f9:70:83:4a:b0:e3:d1:b4: bf:67:16:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y4AEpg/oVPxqoEtUa12GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZWU0NjY5ZmMwOGE0ZDQzMzc1MDkxMTA2MTM4NjJiMzE0 ZjFhYzcwHhcNMjYwMTI1MjMwMDUxWhcNMjYwMTI2MjMwMDUxWjAzMTEwLwYDVQQD EyhiODI0MjNhNzE3MTE2NDM1NmI5ZDg2MDM4OWIwYTA5NmMyYTY0OGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmalJyPEMq7yRSzow3ea2HnEUhkGC u1NiOOG14smBRlQB7umLxzuYye1tkkXdEkTp95WLd/Q6ILGPLd/XRI8vuvwKu8eY NdSgiYGWRy0nwS0shcyuQinkKs6/TRL59kc3gbdVW9Z+K+RQLreFrdEb+dLkuqV8 8R1Qoz6CNHdKZkghT+EL6lzOLbbPxT2Wbhke3nXpffym8nNJYBkgOlQHX4v0A3lN U64RkjrrTtbfY5qwSvfTpRXehMLRQI0E2IQk/qBUeGEgHaY0z1O3T/jfZ5cP/zXv 0yAYeP6grqAM6u/qpXtI/ZiCbV9OjjD/dC1M+tdCACcqn25I88krj2q7DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgkI6cXEWQ1a52GA4mwoJbCpkitMB8GA1UdIwQY MBaAFJ7uRmn8CKTUM3UJEQYThisxTxrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnU1R2Fmd0lwTlF6ZFFrUkJoT0dLekZQR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iOTQ2N2MtODRhZi00OTNhLTlkYjkt NGRkNTljN2M2MzA1LzEvbnU1R2Fmd0lwTlF6ZFFrUkJoT0dLekZQR3NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iOTQ2N2MtODRhZi00OTNhLTlkYjktNGRkNTljN2M2MzA1 LzEvbnU1R2Fmd0lwTlF6ZFFrUkJoT0dLekZQR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMd+it0gm LhdGhteZH0R+QYcno0j42EESybyp7474kC3I5ZsiCJ9D0Z/29veCVo/HugF+sDli Gf2rSEO7SptUbl0xFxMnU7OZBghRB9YupzRnvOf0G0YgBM7RaPueBiGzfqT6F/yy FjwrjFE46YN86qpGNX69ke7V/fUcPzEX7QwHClSGLL6Czgd6xjY6IX+gW5U3PV4t 8u7qY/D2/BaE9ugZlBDOyMVtu+EuNyUlUME6NAJKZhonMQtvZtanYOUYi3HT2RGi ImroIFasvBRaCLKA5Rou/pOOyVclow4B+gUkhvGR44KWu5Mv++uffyxcWc1Tt/lw g0qw49G0v2cW4A== -----END CERTIFICATE-----Generated at Mon Jan 26 07:48:07 2026 by rpki-client