This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json) Hash identifier: 0qST8m6NlcYOV4MyIRymzR6wOdZ5P+2ghVmf2xGgKQo= Subject key identifier: 84:45:E6:5E:10:D4:66:FF:9C:67:E8:A2:90:B3:31:70:11:17:B2:A4 Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e Certificate serial: 019BFB77DA86325530EE4313F2B9FE7423D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft Manifest number: 0477 Signing time: Mon 26 Jan 2026 18:01:34 +0000 Manifest this update: Mon 26 Jan 2026 18:01:34 +0000 Manifest next update: Tue 27 Jan 2026 18:01:34 +0000 Files and hashes: 1: VPUxhPPZmQ_t2CIuXRULtvCIntQ.roa (hash: JY2qHw8weIuLNMEIKFHTYHWziuYJ8rjpGWgwgLDsJ48=) 2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: hF7RiAN9VtOF+yf3md9Ia+Nep5ItvY63UzCZmqvzRfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:da:86:32:55:30:ee:43:13:f2:b9:fe:74:23:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e Validity Not Before: Jan 26 18:01:34 2026 GMT Not After : Jan 27 18:01:34 2026 GMT Subject: CN=8445e65e10d466ff9c67e8a290b331701117b2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f7:ef:d2:3c:88:37:00:a6:e7:36:24:3f:6a: f9:10:59:b5:7b:a7:35:96:f5:26:3f:e5:83:25:70: 64:82:6a:92:ca:69:6a:f2:d2:93:94:c6:17:30:17: ae:2c:b3:18:41:ce:65:90:dd:e6:a7:1e:7f:ed:c3: 6c:27:50:22:ec:97:a5:33:a3:d8:66:8b:8c:77:c4: be:87:9f:f0:47:a1:38:4a:bb:bb:7b:fd:d1:8d:4a: 22:75:02:8e:2c:8d:9a:0f:43:a9:25:da:8f:a1:0a: 8f:cb:ed:db:dc:fd:16:55:37:21:01:69:7b:23:a3: 9b:fe:ea:c4:85:da:49:42:7e:c1:97:c5:12:ae:57: e0:2f:67:62:21:13:5b:f4:e7:3c:c4:5f:b3:b9:93: ac:9e:93:bb:ba:e3:b5:b3:98:a6:8e:67:45:da:a4: 89:da:8c:97:7f:89:92:97:ba:0b:d9:44:09:e8:97: 3c:80:d6:3e:65:20:3b:10:d1:68:09:db:0d:2f:d0: 1c:8f:cb:d4:f2:61:91:8d:8b:b9:0c:70:09:20:e5: 92:5a:89:52:60:3c:21:ac:1b:dd:96:04:ee:3a:1f: 50:b6:73:24:9e:6b:0d:fc:bd:22:ce:58:e9:16:d6: cc:79:91:62:f5:cc:18:50:39:8d:29:2b:33:ec:c8: 35:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:45:E6:5E:10:D4:66:FF:9C:67:E8:A2:90:B3:31:70:11:17:B2:A4 X509v3 Authority Key Identifier: keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:06:df:2c:81:36:19:a2:9c:45:76:d0:42:f0:29:d0:a3:f5: f2:57:be:4f:47:91:30:04:50:69:45:e7:17:76:38:83:be:ed: 58:d8:87:73:30:2c:39:6a:0b:4b:e2:ae:bf:0a:8a:78:e6:34: ef:69:be:c6:50:6c:e6:ef:52:5f:a1:db:9f:31:63:6e:cc:99: b4:25:0e:1f:01:a0:2a:38:85:59:8d:59:5f:ca:0a:3d:66:1d: 96:2b:8a:59:a5:da:ea:61:c8:28:c8:8c:d5:a8:88:5a:1b:5c: 7c:90:c7:10:97:7b:08:f9:de:a5:fb:91:ed:37:ce:20:ce:78: 99:e9:e5:cf:b6:26:5f:42:a7:bf:a2:70:71:c2:62:8c:c1:53: b8:5d:2b:31:44:01:34:5b:02:15:48:20:89:f5:64:4c:82:7f: 56:cc:f5:fa:66:7b:86:e7:86:8b:92:7c:8c:44:3e:94:f6:18: 61:76:27:38:bd:bd:fc:06:e8:41:96:f9:be:a6:6b:8b:d6:fa: e6:df:fe:6c:92:31:20:d4:ab:b0:de:c8:23:62:29:e2:43:1f: 5f:c0:c3:8a:7a:34:f9:81:bd:61:56:ce:52:41:b7:8a:85:e0: e1:62:eb:9f:3d:67:e0:2c:94:c6:eb:17:cf:1e:3f:8f:74:73: 18:e5:6a:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d9qGMlUw7kMT8rn+dCPSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMDcwNDFmZTU1NTkxZTRlMjIzNmE0MGY0MzkwMGVmMjZl ZjA0NWUwHhcNMjYwMTI2MTgwMTM0WhcNMjYwMTI3MTgwMTM0WjAzMTEwLwYDVQQD Eyg4NDQ1ZTY1ZTEwZDQ2NmZmOWM2N2U4YTI5MGIzMzE3MDExMTdiMmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/fv0jyINwCm5zYkP2r5EFm1e6c1 lvUmP+WDJXBkgmqSymlq8tKTlMYXMBeuLLMYQc5lkN3mpx5/7cNsJ1Ai7JelM6PY ZouMd8S+h5/wR6E4Sru7e/3RjUoidQKOLI2aD0OpJdqPoQqPy+3b3P0WVTchAWl7 I6Ob/urEhdpJQn7Bl8USrlfgL2diIRNb9Oc8xF+zuZOsnpO7uuO1s5imjmdF2qSJ 2oyXf4mSl7oL2UQJ6Jc8gNY+ZSA7ENFoCdsNL9Acj8vU8mGRjYu5DHAJIOWSWolS YDwhrBvdlgTuOh9QtnMknmsN/L0izljpFtbMeZFi9cwYUDmNKSsz7Mg1hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRF5l4Q1Gb/nGfoopCzMXARF7KkMB8GA1UdIwQY MBaAFJ0HBB/lVZHk4iNqQPQ5AO8m7wReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xMzU2YTgtODkxYy00ZWUxLWI2ZDkt NzQ3NDY5ODlhYzkyLzEvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xMzU2YTgtODkxYy00ZWUxLWI2ZDktNzQ3NDY5ODlhYzky LzEvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQbfLIE2 GaKcRXbQQvAp0KP18le+T0eRMARQaUXnF3Y4g77tWNiHczAsOWoLS+KuvwqKeOY0 72m+xlBs5u9SX6HbnzFjbsyZtCUOHwGgKjiFWY1ZX8oKPWYdliuKWaXa6mHIKMiM 1aiIWhtcfJDHEJd7CPnepfuR7TfOIM54menlz7YmX0Knv6JwccJijMFTuF0rMUQB NFsCFUggifVkTIJ/Vsz1+mZ7hueGi5J8jEQ+lPYYYXYnOL29/AboQZb5vqZri9b6 5t/+bJIxINSrsN7II2Ip4kMfX8DDino0+YG9YVbOUkG3ioXg4WLrnz1n4CyUxusX zx4/j3RzGOVqkQ== -----END CERTIFICATE-----Generated at Tue Jan 27 02:18:53 2026 by rpki-client