This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json) Hash identifier: yD7gqlB8dqRuYQy3LzBjMmEfbX+L4fOk3i5auj9+Vo4= Subject key identifier: F4:C5:EB:0F:18:8F:50:A2:3E:47:EA:F8:99:6F:39:77:05:51:25:9F Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2 Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2 Certificate serial: 019BF95211734DE23F5C00E25C6293BACA8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft Manifest number: 0934 Signing time: Mon 26 Jan 2026 08:01:03 +0000 Manifest this update: Mon 26 Jan 2026 08:01:03 +0000 Manifest next update: Tue 27 Jan 2026 08:01:03 +0000 Files and hashes: 1: 325RzaiD-WW3-TdaxjCytde03ak.roa (hash: R/JjV4i4hHD1/fvj4o1wHYYq99CJM0edmtkuAKvuJqs=) 2: Aw_WDvIUJqmGy-PSYcF259mv71s.roa (hash: xg7XJ3flpNW5wBd+67pKh8I95xVeEANKdomltN8EKWk=) 3: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: UJgb8rX5Icg2V5k00zcKSNCTYrX0yQwwNDG005TSldk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:11:73:4d:e2:3f:5c:00:e2:5c:62:93:ba:ca:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2 Validity Not Before: Jan 26 08:01:03 2026 GMT Not After : Jan 27 08:01:03 2026 GMT Subject: CN=f4c5eb0f188f50a23e47eaf8996f39770551259f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:04:6a:49:36:d0:df:70:e8:99:14:df:8e:fe: 10:b0:a0:0b:a2:22:7a:d9:d5:ed:d8:90:f7:17:dc: 22:10:f6:64:cf:35:5c:10:04:19:e8:58:fc:92:fd: c2:cd:e7:68:02:2b:3f:04:95:da:dc:32:31:41:cb: 5d:70:ea:3c:e3:39:6c:70:4f:73:1a:cf:b2:1d:1d: e2:59:1c:a6:36:da:05:4d:c1:ed:5b:4b:a3:83:7f: 53:f3:57:6e:53:2d:38:68:8f:46:ea:43:9d:2e:56: 57:be:88:5c:33:e3:5f:85:e8:6c:7d:ba:ca:31:76: da:ee:9c:6f:6d:ce:8b:17:3b:13:1e:ab:e2:de:db: 9f:2a:5e:04:b9:12:32:60:5c:e2:cd:df:20:13:19: 60:7f:e1:f5:35:bf:88:0d:df:0a:83:01:2d:5e:ca: d5:f1:e0:ca:5c:47:22:a7:e5:7d:45:ee:58:15:7e: bd:ef:af:d8:86:ba:3e:65:35:ba:48:61:af:ea:59: 96:d7:56:41:d7:aa:bd:ed:ab:a1:91:ab:a6:23:14: e2:a8:2d:36:57:5c:30:00:30:e8:11:50:0c:5b:e9: e2:24:9e:11:be:1d:0a:dd:e7:89:af:bd:d5:3e:99: 18:09:4c:48:5a:65:bf:4b:ee:cd:fd:e7:a1:13:d7: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C5:EB:0F:18:8F:50:A2:3E:47:EA:F8:99:6F:39:77:05:51:25:9F X509v3 Authority Key Identifier: keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d8:eb:57:de:37:c1:1e:82:15:0a:dd:21:6b:0f:a1:a6:65: dd:17:b9:65:58:d8:f3:26:03:9b:75:0f:ac:62:b1:b8:88:96: 52:be:e6:45:05:a1:1b:5e:46:74:d1:7e:6d:5d:0e:75:b5:77: ce:bf:16:9f:b1:96:de:a2:7e:27:ae:88:8c:3c:45:25:d5:e5: bd:cd:a4:96:cd:8a:53:1a:d5:d2:86:42:9c:49:86:7d:8f:98: 7b:63:9c:ea:d1:da:96:39:b7:c2:00:37:76:7d:fe:8b:62:2b: c8:8d:f6:3c:d2:55:14:38:9c:a7:ea:68:09:ce:31:9e:5c:25: c7:4d:af:62:75:f1:9a:a0:77:9b:2f:6a:d7:c5:54:80:1f:05: b0:d7:3e:b5:88:08:b1:6c:ac:1c:b6:82:98:a1:b9:a5:f7:ba: 6b:68:02:eb:91:53:87:cf:aa:e5:fc:d2:60:38:8e:d9:22:f4: ab:5b:f1:ee:bb:18:b0:f0:56:b3:f7:37:1b:68:7d:a1:67:01: 39:56:00:b6:57:b6:d9:fb:5e:1f:09:90:c0:15:2c:3c:35:7d: 31:6d:6a:88:16:65:51:cf:74:52:a5:a8:ca:1f:44:ab:f6:aa: 79:73:03:be:5d:b0:cc:9b:ed:92:8d:c4:25:23:bd:8b:5e:0e: 73:d9:ee:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UhFzTeI/XADiXGKTusqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMWFjYTM0MTYzNTE2NmY4MDJmOThhOTdlMDAyODBjY2Vl NjRjZTIwHhcNMjYwMTI2MDgwMTAzWhcNMjYwMTI3MDgwMTAzWjAzMTEwLwYDVQQD EyhmNGM1ZWIwZjE4OGY1MGEyM2U0N2VhZjg5OTZmMzk3NzA1NTEyNTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgRqSTbQ33DomRTfjv4QsKALoiJ6 2dXt2JD3F9wiEPZkzzVcEAQZ6Fj8kv3CzedoAis/BJXa3DIxQctdcOo84zlscE9z Gs+yHR3iWRymNtoFTcHtW0ujg39T81duUy04aI9G6kOdLlZXvohcM+NfhehsfbrK MXba7pxvbc6LFzsTHqvi3tufKl4EuRIyYFzizd8gExlgf+H1Nb+IDd8KgwEtXsrV 8eDKXEcip+V9Re5YFX6976/Yhro+ZTW6SGGv6lmW11ZB16q97auhkaumIxTiqC02 V1wwADDoEVAMW+niJJ4Rvh0K3eeJr73VPpkYCUxIWmW/S+7N/eehE9fCYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTF6w8Yj1CiPkfq+JlvOXcFUSWfMB8GA1UdIwQY MBaAFJ4ayjQWNRZvgC+YqX4AKAzO5kziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmhyS05CWTFGbS1BTDVpcGZnQW9ETTdtVE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83OWZiYzAtMzM1MS00ZmZmLWI5ZDUt NzU1NjFjYmYxMDRkLzEvbmhyS05CWTFGbS1BTDVpcGZnQW9ETTdtVE9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS83OWZiYzAtMzM1MS00ZmZmLWI5ZDUtNzU1NjFjYmYxMDRk LzEvbmhyS05CWTFGbS1BTDVpcGZnQW9ETTdtVE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9jrV943 wR6CFQrdIWsPoaZl3Re5ZVjY8yYDm3UPrGKxuIiWUr7mRQWhG15GdNF+bV0OdbV3 zr8Wn7GW3qJ+J66IjDxFJdXlvc2kls2KUxrV0oZCnEmGfY+Ye2Oc6tHaljm3wgA3 dn3+i2IryI32PNJVFDicp+poCc4xnlwlx02vYnXxmqB3my9q18VUgB8FsNc+tYgI sWysHLaCmKG5pfe6a2gC65FTh8+q5fzSYDiO2SL0q1vx7rsYsPBWs/c3G2h9oWcB OVYAtle22fteHwmQwBUsPDV9MW1qiBZlUc90UqWoyh9Eq/aqeXMDvl2wzJvtko3E JSO9i14Oc9nujg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:11 2026 by rpki-client