This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft File: NpHSlQFF3OrADAyk61NtkoZ7ONM.mft (raw, json) Hash identifier: 2/k2fOC5QVuxR0j4tc5ZuHugTNE2BuOl+gS4sEE89Zs= Subject key identifier: 36:1C:EF:5F:53:62:77:16:18:D0:B3:29:12:2E:A8:EC:76:C7:16:40 Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3 Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3 Certificate serial: 019BF319198B53190F1CDF5EC32E4EA3FF8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft Manifest number: 0E3D Signing time: Sun 25 Jan 2026 03:01:06 +0000 Manifest this update: Sun 25 Jan 2026 03:01:06 +0000 Manifest next update: Mon 26 Jan 2026 03:01:06 +0000 Files and hashes: 1: 2PyuqrcS4OQKpzci0LGo9D6zLpQ.roa (hash: OGKUjswmzZjw4KdgNAE5t9KQez9FN3RvuvNNE8jf0ts=) 2: 2UOn5hLyRStz2AaXDff3yHdPj5Y.roa (hash: 5kRNvsBj9U69NfOc0jPJOLMDekNIrXIH85Fd7k/Y9GQ=) 3: Fo1ny7DTXP76w1PX26szVPdpKCo.roa (hash: V6HN3sYUhwyOEcWr4ACY8KukJRinqBdcwgZewm2AbG0=) 4: NpHSlQFF3OrADAyk61NtkoZ7ONM.crl (hash: jbOCUCxcjUrvHMDHLUxEXJVGlQFwBKMwg2Oi2cewEIE=) 5: oIAg7vuPHz6qJLpl6E1E3dWF3DA.roa (hash: u9VNSoGm7PJq+IpHQf2CQng/QjyehdC5G+RpHXRFXCY=) 6: tEjZ-uzo44NLPAS076hKMuReNzU.asa (hash: 48Hb8aEmbuJS71uhwJUr/NwsMXvw9LlHCMvZffWtx1o=) 7: zQGExbN8DTCCuFmXtuWo8eVTwQg.roa (hash: 1ZA8dUZPVA6w/KLwhKYVFXj1NZnomrC7+BPeOgJZCsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:19:8b:53:19:0f:1c:df:5e:c3:2e:4e:a3:ff:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3 Validity Not Before: Jan 25 03:01:06 2026 GMT Not After : Jan 26 03:01:06 2026 GMT Subject: CN=361cef5f5362771618d0b329122ea8ec76c71640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:eb:8f:8c:65:08:ce:e6:32:52:53:be:cb: 30:b6:b6:4f:88:fe:ed:23:12:f8:c1:94:7b:0c:be: ab:ea:20:f0:a4:02:ed:80:66:82:dc:c8:77:e1:6e: b5:5e:ee:aa:e9:1b:f3:fa:93:fb:44:ed:4d:2b:ed: a8:97:30:91:f5:33:61:f7:e5:27:8e:90:31:03:cb: d7:9c:66:08:e8:7c:b3:1f:8e:c7:23:8e:09:66:55: 20:7f:b2:20:4e:eb:9a:3e:25:28:c5:bb:98:19:fb: 95:49:f7:b6:d9:e7:6c:e5:9a:ca:6a:2e:84:8e:79: 34:73:1b:2d:b2:65:0e:66:cb:4d:34:65:18:37:31: e1:fd:3f:3c:1f:aa:2e:f3:e0:bf:67:a1:4b:61:d4: 43:81:53:29:0e:46:ec:cf:6d:17:b7:dd:47:d8:74: 13:ce:55:16:06:40:78:ca:b4:82:06:11:0f:7d:c3: 5d:26:6b:41:f3:bc:40:25:f6:e0:b2:01:67:6d:c4: 3b:a5:82:64:20:7a:65:6f:26:89:32:f4:1f:e9:75: 92:49:fd:fd:7e:6f:e7:28:ee:2c:64:8c:65:8a:8e: 6b:36:2f:b1:59:8c:1c:13:d3:f4:0f:ce:02:56:77: 20:41:26:70:55:00:83:f7:b8:24:5f:76:4a:3b:dc: 49:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1C:EF:5F:53:62:77:16:18:D0:B3:29:12:2E:A8:EC:76:C7:16:40 X509v3 Authority Key Identifier: keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:3b:f7:50:cc:4a:d5:2f:b4:2f:df:aa:c6:74:00:d5:e1:d3: 0e:7b:4c:28:9c:b4:48:e2:1e:1a:b3:6f:f0:40:b1:16:25:89: cb:51:ec:7a:38:5d:a6:a0:2c:0d:fe:11:a0:6b:31:a5:e2:a3: d4:3b:d7:16:96:b2:f7:74:fe:cd:cc:8b:0d:26:1f:41:07:d1: 99:58:19:a6:4c:93:2e:5a:5e:67:1b:f8:44:e4:b8:ba:c5:6c: a3:56:51:eb:e6:c8:b1:72:b1:9e:1a:e7:6a:de:d6:d9:8a:c2: d2:fc:c5:20:d2:a8:8a:22:fb:42:fb:8c:51:2f:bb:48:01:38: 55:1a:67:5f:d9:93:fc:a0:a2:12:35:da:4e:45:07:cd:5c:32: b8:0a:ad:1d:56:e0:40:af:ad:bc:c2:b3:e5:0b:b7:12:09:21: 37:2e:b6:16:9a:53:36:90:9c:84:70:c5:8a:26:eb:c4:12:75: ae:a8:d8:ee:d5:51:45:63:49:65:8b:57:07:bf:18:ab:14:d2: 8b:a8:b4:f7:9f:3e:bf:87:17:7f:4c:b9:1f:eb:5a:d6:ea:98: d6:5c:bb:4a:4a:ba:ab:b9:24:41:f9:67:7d:54:a6:c0:38:b6: 4d:16:56:e7:a0:69:f7:46:c4:89:44:5d:41:33:18:51:d5:d3: 57:95:11:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGRmLUxkPHN9ewy5Oo/+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTFkMjk1MDE0NWRjZWFjMDBjMGNhNGViNTM2ZDkyODY3 YjM4ZDMwHhcNMjYwMTI1MDMwMTA2WhcNMjYwMTI2MDMwMTA2WjAzMTEwLwYDVQQD EygzNjFjZWY1ZjUzNjI3NzE2MThkMGIzMjkxMjJlYThlYzc2YzcxNjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI/rj4xlCM7mMlJTvsswtrZPiP7t IxL4wZR7DL6r6iDwpALtgGaC3Mh34W61Xu6q6Rvz+pP7RO1NK+2olzCR9TNh9+Un jpAxA8vXnGYI6HyzH47HI44JZlUgf7IgTuuaPiUoxbuYGfuVSfe22eds5ZrKai6E jnk0cxstsmUOZstNNGUYNzHh/T88H6ou8+C/Z6FLYdRDgVMpDkbsz20Xt91H2HQT zlUWBkB4yrSCBhEPfcNdJmtB87xAJfbgsgFnbcQ7pYJkIHplbyaJMvQf6XWSSf39 fm/nKO4sZIxlio5rNi+xWYwcE9P0D84CVncgQSZwVQCD97gkX3ZKO9xJaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYc719TYncWGNCzKRIuqOx2xxZAMB8GA1UdIwQY MBaAFDaR0pUBRdzqwAwMpOtTbZKGezjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yYTk0MmEtZjFiZi00M2UyLWI5MmEt MWRlYzQwNTg0ODA2LzEvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yYTk0MmEtZjFiZi00M2UyLWI5MmEtMWRlYzQwNTg0ODA2 LzEvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTv3UMxK 1S+0L9+qxnQA1eHTDntMKJy0SOIeGrNv8ECxFiWJy1HsejhdpqAsDf4RoGsxpeKj 1DvXFpay93T+zcyLDSYfQQfRmVgZpkyTLlpeZxv4ROS4usVso1ZR6+bIsXKxnhrn at7W2YrC0vzFINKoiiL7QvuMUS+7SAE4VRpnX9mT/KCiEjXaTkUHzVwyuAqtHVbg QK+tvMKz5Qu3EgkhNy62FppTNpCchHDFiibrxBJ1rqjY7tVRRWNJZYtXB78YqxTS i6i0958+v4cXf0y5H+ta1uqY1ly7Skq6q7kkQflnfVSmwDi2TRZW56Bp90bEiURd QTMYUdXTV5URDw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:35:49 2026 by rpki-client