This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json) Hash identifier: jC1R3tw7a0roMPMdovhHrrcvHHfBxGJu+lbLbkzYD3Y= Subject key identifier: 01:10:21:94:60:44:BB:ED:D4:30:AD:4B:8F:78:1E:58:6B:56:04:6B Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7 Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7 Certificate serial: 019BF7D1BB83B4D48D42BC499EB3AC6CE37F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft Manifest number: 102D Signing time: Mon 26 Jan 2026 01:01:15 +0000 Manifest this update: Mon 26 Jan 2026 01:01:15 +0000 Manifest next update: Tue 27 Jan 2026 01:01:15 +0000 Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: HwCewnPEXFqFXfyaBMNTAtHsi7XZU6U4Uj2CWaA+lcI=) 2: Nrh-Yc5_mByKR8_TIQlcdSyRCJs.roa (hash: +G9LwjpRWHwueIKlr62p05K5p0dJNYZacuNPYqJmmCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:bb:83:b4:d4:8d:42:bc:49:9e:b3:ac:6c:e3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7 Validity Not Before: Jan 26 01:01:15 2026 GMT Not After : Jan 27 01:01:15 2026 GMT Subject: CN=011021946044bbedd430ad4b8f781e586b56046b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:63:c6:91:e4:7b:c1:43:bc:bc:c9:f0:5c: 3d:9e:31:cd:1c:72:0e:2b:97:26:61:67:00:7c:19: 58:44:fc:15:14:81:32:59:2a:50:6c:fe:43:37:8e: e9:d8:d4:ef:6e:1a:78:68:e7:22:59:8c:92:79:43: 81:36:8c:7b:6b:bf:37:b6:8e:f1:7e:05:82:a7:49: b9:5d:fa:d1:2a:d5:9c:43:7f:06:3c:49:90:c8:f3: 29:be:e4:27:ee:10:a9:9b:d7:03:ce:a4:bb:94:71: fc:a3:34:93:55:53:1b:87:24:2b:a2:fe:77:d6:ff: 6a:70:95:58:4d:c0:36:1d:5a:d8:c6:89:bc:ce:3b: da:43:60:89:f9:fd:f2:e5:c7:b8:ee:4f:c8:62:7a: 0f:18:87:6e:da:b8:23:9b:32:37:4b:cd:b8:88:1a: 2b:e5:66:0b:ce:6c:a2:74:90:72:35:f7:ef:3b:0b: 9f:f1:e1:2b:f6:45:cc:24:39:86:95:c5:47:40:c0: a1:01:29:da:86:ea:e0:a0:04:96:b3:f5:40:0a:37: 83:6d:a5:c0:b6:0a:aa:0f:d3:ab:34:f7:3a:6c:6d: b1:8b:35:5e:f3:18:58:f7:7d:00:7a:47:fc:87:66: 06:54:f4:63:bc:78:ec:71:98:b3:03:98:b8:f4:1d: b8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:10:21:94:60:44:BB:ED:D4:30:AD:4B:8F:78:1E:58:6B:56:04:6B X509v3 Authority Key Identifier: keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:56:20:ff:99:9d:08:49:90:b2:d0:23:c6:c4:9f:4c:e3:d9: 6a:b9:fc:a9:eb:e2:28:d4:7d:5c:9c:91:55:f5:84:f1:7d:ee: 9d:22:81:4a:15:0f:c7:30:fd:aa:a0:51:20:b9:b4:4a:c1:1f: 5b:37:d1:2a:c4:73:ec:44:65:95:f2:01:02:35:3e:87:c0:21: ed:c3:2b:84:8a:e9:3f:53:fa:cb:e1:dc:af:a1:ca:b7:e1:af: c2:87:db:e5:f2:2a:4e:47:9b:a4:b7:d2:bf:47:11:5a:27:4e: 3b:95:72:db:62:31:5f:34:8e:d7:e2:31:6c:bf:73:35:da:09: 48:b4:c7:a0:68:94:9d:3a:55:27:6f:de:1e:6c:4d:d9:8c:31: 40:04:27:5c:a5:6a:36:97:6f:33:6d:16:0b:e0:f8:33:dc:6a: 8d:4e:55:ea:57:c4:99:84:e4:e2:dd:11:c5:9a:03:ab:e7:bc: 6d:f7:db:bc:bb:3c:69:07:b8:cb:36:1e:e1:84:eb:b7:ad:68: f1:b6:de:1f:ad:90:33:da:d7:21:b7:a2:e8:33:78:d1:7f:15: 20:5a:6c:39:f9:c8:f1:46:c7:a2:bc:33:96:9a:a8:ca:49:4b: 69:3a:8e:71:84:b9:55:56:68:89:dc:9b:e9:53:56:3f:fc:8d: 4a:11:68:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30buDtNSNQrxJnrOsbON/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTVmMGZiZjNkNmJmM2ExNmEyNGJlYzc4MGNiMGZkNmVk ZjMxZTcwHhcNMjYwMTI2MDEwMTE1WhcNMjYwMTI3MDEwMTE1WjAzMTEwLwYDVQQD EygwMTEwMjE5NDYwNDRiYmVkZDQzMGFkNGI4Zjc4MWU1ODZiNTYwNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf9jxpHke8FDvLzJ8Fw9njHNHHIO K5cmYWcAfBlYRPwVFIEyWSpQbP5DN47p2NTvbhp4aOciWYySeUOBNox7a783to7x fgWCp0m5XfrRKtWcQ38GPEmQyPMpvuQn7hCpm9cDzqS7lHH8ozSTVVMbhyQrov53 1v9qcJVYTcA2HVrYxom8zjvaQ2CJ+f3y5ce47k/IYnoPGIdu2rgjmzI3S824iBor 5WYLzmyidJByNffvOwuf8eEr9kXMJDmGlcVHQMChASnahurgoASWs/VACjeDbaXA tgqqD9OrNPc6bG2xizVe8xhY930Aekf8h2YGVPRjvHjscZizA5i49B24VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEQIZRgRLvt1DCtS494HlhrVgRrMB8GA1UdIwQY MBaAFDXl8Pvz1r86FqJL7HgMsP1u3zHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNmJhYTQtYzEzMS00MzBkLTgwNmEt MmU5NjdhNGNkZGUxLzEvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iNmJhYTQtYzEzMS00MzBkLTgwNmEtMmU5NjdhNGNkZGUx LzEvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVYg/5md CEmQstAjxsSfTOPZarn8qeviKNR9XJyRVfWE8X3unSKBShUPxzD9qqBRILm0SsEf WzfRKsRz7ERllfIBAjU+h8Ah7cMrhIrpP1P6y+Hcr6HKt+Gvwofb5fIqTkebpLfS v0cRWidOO5Vy22IxXzSO1+IxbL9zNdoJSLTHoGiUnTpVJ2/eHmxN2YwxQAQnXKVq NpdvM20WC+D4M9xqjU5V6lfEmYTk4t0RxZoDq+e8bffbvLs8aQe4yzYe4YTrt61o 8bbeH62QM9rXIbei6DN40X8VIFpsOfnI8UbHorwzlpqoyklLaTqOcYS5VVZoidyb 6VNWP/yNShFo2g== -----END CERTIFICATE-----Generated at Mon Jan 26 03:33:33 2026 by rpki-client