This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json) Hash identifier: E4JtNciIbDZgjoQhQkWTGkPSb5mYHX8M4UwapvCbyBg= Subject key identifier: 87:95:DA:DF:5B:7A:9C:5F:B9:9D:B5:09:89:31:9C:A7:2B:6F:FC:47 Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18 Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018 Certificate serial: 019BF651820D467866DBBF8741AF6D275F0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft Manifest number: 0502 Signing time: Sun 25 Jan 2026 18:01:35 +0000 Manifest this update: Sun 25 Jan 2026 18:01:35 +0000 Manifest next update: Mon 26 Jan 2026 18:01:35 +0000 Files and hashes: 1: 2_fshuRoDR0I_NRp0VMlVT3wOD8.roa (hash: oqyyBd6HYSuKWOFREp/oTcA0W5Qo5aOsY4Cj1orj65g=) 2: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: IZqAEdYErbgDeUk9JauNyY5Q1D9K6BEXpAiA0CkdJ3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:82:0d:46:78:66:db:bf:87:41:af:6d:27:5f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018 Validity Not Before: Jan 25 18:01:35 2026 GMT Not After : Jan 26 18:01:35 2026 GMT Subject: CN=8795dadf5b7a9c5fb99db50989319ca72b6ffc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:8e:c6:7d:c0:6f:4b:42:4a:76:e2:ff:de: af:64:2f:16:71:ad:08:b1:eb:c4:bf:6d:92:29:2b: 48:f5:5a:08:c8:bc:cf:c2:43:21:04:76:20:51:9f: 81:91:fb:dc:d3:ef:81:c9:45:ef:df:fe:55:46:f2: b5:f4:57:75:5c:71:9e:1a:7e:f1:2b:3d:4f:a3:f0: 67:f3:4a:4d:51:64:10:e4:d1:25:5e:1f:76:06:a0: 90:c8:93:a9:6b:36:5b:ae:bb:de:14:39:1c:ed:d1: a9:93:b2:db:a9:d8:25:07:71:e5:b2:e3:b0:81:79: 8b:29:f7:1b:ca:2d:64:3c:00:dc:8a:37:4b:25:da: 92:a7:b7:ea:7f:95:0e:b1:32:f1:2c:39:f2:fd:46: 22:1f:54:25:2f:81:76:0b:81:61:d4:1a:78:6a:35: 68:92:78:d3:72:14:3b:ce:21:03:de:e5:c7:cf:a3: 11:7f:cb:65:8c:6a:62:c8:e5:51:98:c4:e6:1b:d2: 8a:05:71:0e:17:b6:5c:c6:91:d9:b5:6d:25:16:30: 1c:51:b9:5f:7d:b8:aa:82:ee:23:6f:68:06:17:24: 3e:59:a3:fc:f6:fe:71:e8:fb:07:2b:cb:82:13:47: 90:c3:f2:80:ff:55:89:fd:d7:6d:bc:6c:ee:91:40: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:95:DA:DF:5B:7A:9C:5F:B9:9D:B5:09:89:31:9C:A7:2B:6F:FC:47 X509v3 Authority Key Identifier: keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:09:7c:22:bf:5e:1c:7d:0f:98:d5:4d:65:6a:b7:3e:3e:a9: ba:7b:69:0d:c9:18:81:c3:5d:bc:81:eb:5e:bf:fa:76:c5:f5: 40:e8:0c:1a:71:f6:58:e3:c2:d2:06:97:87:7a:fe:22:7a:95: 0d:47:01:d7:9a:ca:31:c7:51:8a:e0:f9:9b:9b:3c:d3:3f:2d: 9c:76:ee:84:3c:f3:2c:fd:a3:c6:cb:1a:41:7b:bc:82:b3:50: 8a:27:95:57:42:da:a4:c4:46:27:96:07:ad:58:f4:e7:46:a7: 06:07:e0:3f:c4:ba:c8:ac:25:f5:c9:90:2f:df:d0:df:56:a1: e4:9e:cb:7d:a4:0d:41:e7:4a:31:c8:1f:33:09:2c:ba:51:0b: b7:d8:a0:e3:1d:7a:b4:4a:21:fb:45:1b:be:51:cf:ee:51:50: f8:9d:43:90:11:88:35:81:fe:93:7d:f9:ef:a7:0a:1a:09:76: d5:5f:dd:54:7f:2b:25:fb:0c:d6:90:98:a3:49:1a:a3:e9:18: d2:b7:c5:df:99:fe:b2:fe:f7:51:fc:99:fb:d6:50:26:6c:28: 8b:b7:0b:5f:fd:1f:b4:5a:58:63:22:96:41:06:6b:bf:cd:8f: 14:9f:d8:5e:5a:7c:60:80:e7:09:dc:36:ad:ad:de:9a:10:39: 84:bd:a7:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UYINRnhm27+HQa9tJ18LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YTFkYWVjZTFjNmU4Nzg1NDZkYmQxMzMzZGEwOWZlYjhi ZmYwMTgwHhcNMjYwMTI1MTgwMTM1WhcNMjYwMTI2MTgwMTM1WjAzMTEwLwYDVQQD Eyg4Nzk1ZGFkZjViN2E5YzVmYjk5ZGI1MDk4OTMxOWNhNzJiNmZmYzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKqOxn3Ab0tCSnbi/96vZC8Wca0I sevEv22SKStI9VoIyLzPwkMhBHYgUZ+Bkfvc0++ByUXv3/5VRvK19Fd1XHGeGn7x Kz1Po/Bn80pNUWQQ5NElXh92BqCQyJOpazZbrrveFDkc7dGpk7LbqdglB3HlsuOw gXmLKfcbyi1kPADcijdLJdqSp7fqf5UOsTLxLDny/UYiH1QlL4F2C4Fh1Bp4ajVo knjTchQ7ziED3uXHz6MRf8tljGpiyOVRmMTmG9KKBXEOF7ZcxpHZtW0lFjAcUblf fbiqgu4jb2gGFyQ+WaP89v5x6PsHK8uCE0eQw/KA/1WJ/ddtvGzukUCqjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeV2t9bepxfuZ21CYkxnKcrb/xHMB8GA1UdIwQY MBaAFDah2uzhxuh4VG29EzPaCf64v/AYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83NDVjNjUtYjg3Ny00NWYyLWI4OTgt YjMwYjBlNTI2NWE4LzEvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83NDVjNjUtYjg3Ny00NWYyLWI4OTgtYjMwYjBlNTI2NWE4 LzEvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwl8Ir9e HH0PmNVNZWq3Pj6puntpDckYgcNdvIHrXr/6dsX1QOgMGnH2WOPC0gaXh3r+InqV DUcB15rKMcdRiuD5m5s80z8tnHbuhDzzLP2jxssaQXu8grNQiieVV0LapMRGJ5YH rVj050anBgfgP8S6yKwl9cmQL9/Q31ah5J7LfaQNQedKMcgfMwksulELt9ig4x16 tEoh+0UbvlHP7lFQ+J1DkBGINYH+k33576cKGgl21V/dVH8rJfsM1pCYo0kao+kY 0rfF35n+sv73UfyZ+9ZQJmwoi7cLX/0ftFpYYyKWQQZrv82PFJ/YXlp8YIDnCdw2 ra3emhA5hL2nXw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:42 2026 by rpki-client