This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: V6V4/7Hz+HXKcc0I8Yfe47i0sld6zWHjC2FRLtADfYk= Subject key identifier: CA:D9:48:49:9F:04:DB:E0:3F:60:2C:EA:E6:12:D0:4B:DC:1F:7B:65 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019BF507063AD13C699B03761D9A72649C1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 12:00:36 +0000 Manifest this update: Sun 25 Jan 2026 12:00:36 +0000 Manifest next update: Mon 26 Jan 2026 12:00:36 +0000 Files and hashes: 1: 1ms-U7GStIQWyhBvk39Pmz4mWvA.roa (hash: lEZsZW9Tv4rbrMsSytyM2px+I6/78sknyWxeRiHKwJM=) 2: 465Kcfdz-gCkfuGZh8doO_u-oWc.roa (hash: +omro3YFQE2sJ1eByZhKP6jW3x+UZ2ptJKtI+7UVFM8=) 3: FudhY_GW4msTOukhgnBFXzVYoiM.roa (hash: 7UgC+06y5UTQvkQ9UgPJMOjARzvFFXEio5n7Jvg4z+k=) 4: HK6BNNsWSLGubaZl3upPyutswvU.roa (hash: WzFjY3CdZWeDvACOL+XKBEMBzEj0lVc25php/SCslcU=) 5: IBvfpHlo0nhBmzHxQLjSRpI2BSY.roa (hash: DAVNHApbGflPu1pSl2KrRTguzWmq2zUGW0dSw+3gnZ8=) 6: LTfWXRthcASup-DyG7vEDraK0EY.roa (hash: whp6f+y/ya/1LAvlaxCVtUimjkVrV3wXO989ASjx2UI=) 7: RfF_v-9FmIipQG47sMLeSIwsCwA.roa (hash: CvFjyOB2OKSAf0EIN8oLCwNbtih0Yd+Yc2x40ZJ9uxE=) 8: XZ_A9oOFh615-GWf-jG9mLRl_BA.roa (hash: IjFd4KfJkkTKhVMOqjReLPHCLFxiAiN7OyTxurp0L6k=) 9: cqQ13TfAA2f3o1iYd5u_zHjR1og.roa (hash: PPVmtCcOrF5jhwXK7aADjsl4uaCgfyEm1Gbo+31zhCo=) 10: kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa (hash: S9J7ulFMDCXhT6uUyj2J+Qhp8QQOqTeuNdKWWsuYDSA=) 11: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: NaVWNzugRtPkeC7E9hKW5EG3D7XnN9htqDXs/MFYQ4U=) 12: rEIw8icF5JeHNJs8hiRgw1rRnR0.roa (hash: ZktjBhuI012cqumaMif+o0oMdONZdwewIFYAJ7bf8FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:06:3a:d1:3c:69:9b:03:76:1d:9a:72:64:9c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jan 25 12:00:36 2026 GMT Not After : Jan 26 12:00:36 2026 GMT Subject: CN=cad948499f04dbe03f602ceae612d04bdc1f7b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:23:f2:2a:a7:ab:62:c6:49:e3:6a:e9:fc: 3c:c9:45:7c:e4:51:ee:fc:1c:9a:fe:be:6b:32:6a: 00:76:9f:37:5e:0f:64:ad:e0:d7:d2:4a:71:80:d9: 79:f4:e2:b3:6b:5a:75:8d:f5:ad:af:37:f4:23:1f: f3:a1:83:70:a7:4c:7f:9d:78:66:79:2e:d3:d5:34: 84:ca:a9:f8:d8:9f:8d:d3:c8:76:42:e6:5f:69:07: 37:1a:eb:02:09:89:7a:8e:cc:01:f6:26:39:94:7b: 93:11:75:92:05:6b:b0:cb:20:2a:53:0d:53:24:4a: 3e:0a:d5:0c:99:06:a2:ac:62:23:e4:22:85:76:4c: b3:a7:f7:f5:5e:ea:49:7e:c5:85:ae:eb:05:1f:f8: dc:ea:65:fd:ad:9b:2f:02:ed:b6:c7:16:62:0c:dc: 88:b1:7e:fd:f4:ee:19:4b:d9:64:f0:56:c9:7e:be: 9f:d5:c4:2e:4c:59:7f:10:08:15:2a:fc:b7:07:24: 45:b2:6f:65:fa:56:f1:19:a0:31:26:97:2b:44:92: de:26:6b:26:9e:60:37:2c:14:81:97:ca:01:31:12: ba:e9:9e:c2:c4:cf:da:8a:4e:b7:ee:3b:aa:11:3b: 03:df:54:c7:27:e5:93:5d:6d:8c:7c:8b:ff:7b:3e: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D9:48:49:9F:04:DB:E0:3F:60:2C:EA:E6:12:D0:4B:DC:1F:7B:65 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:db:0a:2e:b4:9a:45:d8:38:db:d7:d7:91:e0:41:ed:ca:b1: ef:26:d5:25:2e:b4:ae:73:06:94:ba:0b:d8:2f:d6:ba:59:c6: 1b:19:fd:cd:37:1c:76:20:93:aa:6e:6b:51:55:1c:36:4c:a9: a4:5f:fb:d5:07:d8:c0:21:5d:fc:1a:e9:40:a9:cd:bd:6d:38: af:68:45:8c:e4:55:d2:35:ec:18:34:ac:34:c2:d6:91:87:72: e6:14:cf:fa:93:bb:89:df:3b:e1:b1:fb:66:a4:e0:24:49:92: fc:a8:15:8d:e4:ef:b1:db:de:88:02:d0:ab:94:69:2c:e7:f7: b8:5d:bd:d4:8a:c4:74:05:b9:34:e8:2e:01:04:c2:12:4a:bb: 89:0c:c6:91:c1:fb:82:7b:94:93:a4:c3:9b:7b:6a:ad:b3:fe: fe:4f:1e:38:44:3b:ef:a1:1b:2f:9b:92:e8:14:3f:57:e4:68: 00:6e:4a:5b:de:52:59:22:cf:02:a0:40:7e:ec:b5:ad:22:a1: 00:9c:b6:9b:2e:a6:bf:07:12:78:33:40:f3:6c:1f:f4:d0:0d: 0a:bf:6f:3b:bf:cc:55:70:35:1b:85:13:6a:66:a9:ff:24:54: a1:12:e1:ff:4a:8f:48:b3:b8:1a:ba:54:15:7d:fa:a9:f3:3d: 6f:66:ab:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BwY60TxpmwN2HZpyZJwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwMTI1MTIwMDM2WhcNMjYwMTI2MTIwMDM2WjAzMTEwLwYDVQQD EyhjYWQ5NDg0OTlmMDRkYmUwM2Y2MDJjZWFlNjEyZDA0YmRjMWY3YjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV8j8iqnq2LGSeNq6fw8yUV85FHu /Bya/r5rMmoAdp83Xg9kreDX0kpxgNl59OKza1p1jfWtrzf0Ix/zoYNwp0x/nXhm eS7T1TSEyqn42J+N08h2QuZfaQc3GusCCYl6jswB9iY5lHuTEXWSBWuwyyAqUw1T JEo+CtUMmQairGIj5CKFdkyzp/f1XupJfsWFrusFH/jc6mX9rZsvAu22xxZiDNyI sX799O4ZS9lk8FbJfr6f1cQuTFl/EAgVKvy3ByRFsm9l+lbxGaAxJpcrRJLeJmsm nmA3LBSBl8oBMRK66Z7CxM/aik637juqETsD31THJ+WTXW2MfIv/ez6Z/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrZSEmfBNvgP2As6uYS0EvcH3tlMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNsKLrSa Rdg429fXkeBB7cqx7ybVJS60rnMGlLoL2C/WulnGGxn9zTccdiCTqm5rUVUcNkyp pF/71QfYwCFd/BrpQKnNvW04r2hFjORV0jXsGDSsNMLWkYdy5hTP+pO7id874bH7 ZqTgJEmS/KgVjeTvsdveiALQq5RpLOf3uF291IrEdAW5NOguAQTCEkq7iQzGkcH7 gnuUk6TDm3tqrbP+/k8eOEQ776EbL5uS6BQ/V+RoAG5KW95SWSLPAqBAfuy1rSKh AJy2my6mvwcSeDNA82wf9NANCr9vO7/MVXA1G4UTamap/yRUoRLh/0qPSLO4GrpU FX36qfM9b2ar3w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:22:36 2026 by rpki-client