This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json) Hash identifier: 8C53OkT+UurgVM0+95NsQ5e4JpTd/FHWbELLe+VcdOE= Subject key identifier: 8A:BB:1C:A7:3B:24:47:35:F2:14:B2:68:5A:B0:9D:F1:4D:0D:E9:49 Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e Certificate serial: 019BF8083271493CC98DFDA0614671ADA127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft Manifest number: 0ECB Signing time: Mon 26 Jan 2026 02:00:45 +0000 Manifest this update: Mon 26 Jan 2026 02:00:45 +0000 Manifest next update: Tue 27 Jan 2026 02:00:45 +0000 Files and hashes: 1: DT2BesH620-Z5EInWh_qBAeAhFI.roa (hash: yWOOPu9qJtmGuaZJp8ftjrUIR8JbYQlWhmppICknRhE=) 2: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: 2cUsQXyNdaKqyl7Knw1xO/RrnffG/zAxfLLNpcwfuyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:32:71:49:3c:c9:8d:fd:a0:61:46:71:ad:a1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e Validity Not Before: Jan 26 02:00:45 2026 GMT Not After : Jan 27 02:00:45 2026 GMT Subject: CN=8abb1ca73b244735f214b2685ab09df14d0de949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:87:ad:76:0e:9c:d5:47:23:4f:38:c8:7f:3c: 61:0c:cd:b9:30:98:65:61:4f:b0:cf:0a:0f:e7:8c: 93:1b:df:63:a6:02:77:85:a3:79:35:c9:8b:46:05: 26:b3:37:64:3f:38:60:c9:e2:ac:ad:6d:ef:ab:b8: 55:96:7e:fe:af:3a:6d:f0:43:3c:89:20:bc:b3:8f: 95:6d:c0:8e:1b:6b:96:03:75:a2:ae:80:70:3d:da: d7:d3:e0:b8:0c:97:55:a2:c8:77:fb:78:b5:4f:d5: e4:d6:bf:f6:c2:da:52:7b:e2:09:e8:6e:4a:32:7e: b0:e5:67:e4:22:bb:c7:90:f4:ee:3b:c9:27:4c:1a: 3a:87:6b:9a:8c:99:9a:e5:16:51:93:fd:ac:54:3a: 36:9e:22:d9:16:db:81:91:5f:9e:9f:4c:1c:a2:9e: 76:ce:f9:0f:3c:56:fa:0c:6f:7b:0f:93:b6:29:c2: be:49:7c:6e:c7:59:6a:95:e3:9f:dd:94:d2:b3:5e: cd:00:f5:9c:06:ec:f7:14:ab:26:09:90:5b:1a:99: 73:3e:6f:4e:06:68:00:7e:05:6b:d8:48:cc:26:72: 0c:69:86:db:15:73:d9:05:c1:dc:c8:65:34:bd:56: c7:15:a9:48:0f:53:1b:33:f2:1d:9f:86:3e:45:d5: 44:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BB:1C:A7:3B:24:47:35:F2:14:B2:68:5A:B0:9D:F1:4D:0D:E9:49 X509v3 Authority Key Identifier: keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d1:21:49:b6:96:60:68:a1:0a:1f:cf:06:ef:c1:ce:0b:4f: 64:29:f5:87:37:d4:6c:02:3b:aa:bc:20:8e:4d:41:b0:1d:4d: 50:2a:d3:b6:cb:78:b3:5e:4f:99:04:35:5b:9b:fa:59:9b:81: f8:8d:b8:23:d2:08:13:79:23:3b:00:7a:24:b5:9d:e6:0d:11: 2f:ec:05:82:33:1d:fd:14:85:f0:bd:0d:42:98:8d:1b:09:5d: 98:c1:01:a0:1c:6b:de:5d:32:e3:98:cb:e8:2b:c6:14:ba:3d: 0b:82:fb:d0:ee:f2:2d:15:86:31:49:63:9b:ed:cc:6b:e1:fb: 67:ee:1c:4a:e7:68:fa:4f:92:42:a9:ce:1c:83:7f:07:dd:d9: b7:b3:22:ee:d3:ad:ed:fd:28:63:ff:9e:b3:85:f3:d0:08:18: f5:23:1d:dd:c3:6a:bc:df:9f:75:75:eb:7b:27:6c:f1:4f:ed: 22:94:69:6b:d4:7e:dd:17:61:71:0b:c8:34:12:c0:59:62:c9: 37:3c:c4:43:81:44:05:19:84:08:76:0e:9b:32:b0:be:73:1b: 43:12:c8:a1:8f:60:1a:f4:c8:a9:f3:46:66:ab:17:f9:8f:cf: c4:d6:48:5e:49:12:6b:fd:c6:2a:53:91:2d:c7:70:a2:e6:59: 79:d1:99:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CDJxSTzJjf2gYUZxraEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlN2NlOGZiZmI4NDc5Y2ZiOTc2YjQ0M2NjM2M3Y2UyZjcw M2FiN2UwHhcNMjYwMTI2MDIwMDQ1WhcNMjYwMTI3MDIwMDQ1WjAzMTEwLwYDVQQD Eyg4YWJiMWNhNzNiMjQ0NzM1ZjIxNGIyNjg1YWIwOWRmMTRkMGRlOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54etdg6c1UcjTzjIfzxhDM25MJhl YU+wzwoP54yTG99jpgJ3haN5NcmLRgUmszdkPzhgyeKsrW3vq7hVln7+rzpt8EM8 iSC8s4+VbcCOG2uWA3WiroBwPdrX0+C4DJdVosh3+3i1T9Xk1r/2wtpSe+IJ6G5K Mn6w5WfkIrvHkPTuO8knTBo6h2uajJma5RZRk/2sVDo2niLZFtuBkV+en0wcop52 zvkPPFb6DG97D5O2KcK+SXxux1lqleOf3ZTSs17NAPWcBuz3FKsmCZBbGplzPm9O BmgAfgVr2EjMJnIMaYbbFXPZBcHcyGU0vVbHFalID1MbM/Idn4Y+RdVEowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq7HKc7JEc18hSyaFqwnfFNDelJMB8GA1UdIwQY MBaAFP586Pv7hHnPuXa0Q8w8fOL3A6t+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX256by1fdUVlYy01ZHJSRHpEeDg0dmNEcTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi85Mjc2MzgtZmQ0Ny00ZTU2LWJiOWUt ZDc5MjBhZTQ0OTIwLzEvX256by1fdUVlYy01ZHJSRHpEeDg0dmNEcTM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi85Mjc2MzgtZmQ0Ny00ZTU2LWJiOWUtZDc5MjBhZTQ0OTIw LzEvX256by1fdUVlYy01ZHJSRHpEeDg0dmNEcTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtEhSbaW YGihCh/PBu/BzgtPZCn1hzfUbAI7qrwgjk1BsB1NUCrTtst4s15PmQQ1W5v6WZuB +I24I9IIE3kjOwB6JLWd5g0RL+wFgjMd/RSF8L0NQpiNGwldmMEBoBxr3l0y45jL 6CvGFLo9C4L70O7yLRWGMUljm+3Ma+H7Z+4cSudo+k+SQqnOHIN/B93Zt7Mi7tOt 7f0oY/+es4Xz0AgY9SMd3cNqvN+fdXXreyds8U/tIpRpa9R+3RdhcQvINBLAWWLJ NzzEQ4FEBRmECHYOmzKwvnMbQxLIoY9gGvTIqfNGZqsX+Y/PxNZIXkkSa/3GKlOR LcdwouZZedGZcg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:31 2026 by rpki-client