This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json) Hash identifier: ts4gw2ExHi2zhGAVQxEwoVSZUhqyO1rfpvRcUPVWi+o= Subject key identifier: 83:57:C8:E4:A0:6A:7E:6F:6C:F4:5E:69:1E:F2:8C:1B:C8:0B:DA:8D Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25 Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025 Certificate serial: 019BF4632B2157E41298B54A6C24FDBEFB78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft Manifest number: 06CB Signing time: Sun 25 Jan 2026 09:01:38 +0000 Manifest this update: Sun 25 Jan 2026 09:01:38 +0000 Manifest next update: Mon 26 Jan 2026 09:01:38 +0000 Files and hashes: 1: 3wCTKZJQPis0KQk9Utd2SXEOMQo.roa (hash: tAgV9CKvm/cmiM8EtlRfwVodU066LHap/WgiRXzET/w=) 2: C29RUK-qTDoRIZIVb7crIuPreWM.roa (hash: mdSn+zkOr0EwMF5gIU0hQilaSvKGXBzAoemCMvqxqC4=) 3: PAKafREmkHGfeg_qAOjMfzNKk8s.roa (hash: 0HHaXCqodqraRNsfrETju1ZWXLWLaPJS1a1DSuGXS3g=) 4: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: TDyvqZmGyNYidt3OS87etvCF89FMOb+6mwW4gmlFqI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:2b:21:57:e4:12:98:b5:4a:6c:24:fd:be:fb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e475c9202606e6667e94a779e903db697a59025 Validity Not Before: Jan 25 09:01:38 2026 GMT Not After : Jan 26 09:01:38 2026 GMT Subject: CN=8357c8e4a06a7e6f6cf45e691ef28c1bc80bda8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b3:a2:c8:6e:01:39:af:96:f8:27:62:ec:0a: e6:46:94:f6:e9:d6:12:86:16:ff:2a:85:60:49:38: f7:0e:b8:a6:a3:e9:89:11:9e:00:38:a0:5d:09:59: b6:79:fd:7e:7f:35:85:4a:61:1c:c2:56:b3:e5:d5: bb:e6:33:3d:e5:1c:58:98:86:0b:b1:4a:f3:00:f3: 7a:bf:aa:9b:38:cb:99:65:27:39:0b:39:20:ff:97: bc:ea:81:e8:6f:cc:72:75:a6:a3:45:18:01:42:a9: 97:39:2e:85:de:57:bc:62:ec:f3:76:e2:1f:d4:72: ee:0a:a3:ae:4c:4f:f6:0e:e6:85:84:c2:ba:ef:1a: 79:d9:2a:5b:fc:31:94:5d:5e:d4:2a:2b:e7:7f:52: d1:62:89:df:21:d9:70:85:d5:b4:18:08:35:5b:92: a3:ad:b9:c2:7d:26:65:88:e3:cc:e8:a8:29:ee:60: 69:0d:fd:90:08:27:3b:12:ed:3c:bc:62:a7:e0:74: 16:d4:f7:03:4e:9e:a7:cd:98:7a:00:23:a9:40:cf: 81:21:47:a0:5c:75:82:4d:2e:6d:3c:32:dd:4a:9a: 58:5d:a9:41:66:3b:5a:f4:39:82:cc:03:93:02:6b: 06:32:2e:4e:c2:7d:06:17:df:da:5b:97:13:05:19: ed:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:57:C8:E4:A0:6A:7E:6F:6C:F4:5E:69:1E:F2:8C:1B:C8:0B:DA:8D X509v3 Authority Key Identifier: keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:8f:5f:a1:c7:1b:94:3a:7c:8b:ff:be:b2:b6:a3:ea:61:fe: 97:47:67:04:d0:01:7b:a3:7c:a6:3f:9c:79:62:8c:1c:5a:bc: 3f:fc:18:59:b1:8e:82:47:6b:3a:25:ef:df:79:4f:b4:4f:dd: 96:34:ff:fb:80:a1:1b:35:9c:cf:ee:35:0a:60:62:1e:98:8e: 9e:7d:4d:d8:a7:53:ab:92:5f:99:cf:28:83:42:7f:f7:78:15: d5:2a:ff:92:ba:9c:b2:ef:13:05:ec:3b:a8:96:38:9c:81:31: 72:0f:80:94:e6:12:02:1b:70:4e:51:f2:20:07:3b:c4:97:4b: c6:c4:c0:0d:e7:82:e6:0c:b2:11:41:d7:e7:16:2f:86:1a:ae: 4a:06:b7:8f:1e:65:24:e3:70:67:c1:f6:5a:99:27:b2:60:80: 96:07:91:cd:fb:4b:6d:99:c6:7e:8b:c5:c3:35:aa:3c:a8:0f: 24:8d:72:18:5b:03:3d:4a:79:ec:a8:85:03:26:99:4d:72:18: 74:ec:5c:41:9b:8c:3d:64:3b:66:03:cf:80:d3:9f:b2:a8:f3: 61:28:4c:8d:c3:ef:42:c5:10:57:b8:bc:49:b0:e1:5b:3e:6b: 46:e7:84:d3:f8:a1:a8:78:9a:3a:8a:12:19:8f:72:c8:5b:82: b8:22:8f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YyshV+QSmLVKbCT9vvt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh NTkwMjUwHhcNMjYwMTI1MDkwMTM4WhcNMjYwMTI2MDkwMTM4WjAzMTEwLwYDVQQD Eyg4MzU3YzhlNGEwNmE3ZTZmNmNmNDVlNjkxZWYyOGMxYmM4MGJkYThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bOiyG4BOa+W+Cdi7ArmRpT26dYS hhb/KoVgSTj3Drimo+mJEZ4AOKBdCVm2ef1+fzWFSmEcwlaz5dW75jM95RxYmIYL sUrzAPN6v6qbOMuZZSc5Czkg/5e86oHob8xydaajRRgBQqmXOS6F3le8YuzzduIf 1HLuCqOuTE/2DuaFhMK67xp52Spb/DGUXV7UKivnf1LRYonfIdlwhdW0GAg1W5Kj rbnCfSZliOPM6Kgp7mBpDf2QCCc7Eu08vGKn4HQW1PcDTp6nzZh6ACOpQM+BIUeg XHWCTS5tPDLdSppYXalBZjta9DmCzAOTAmsGMi5Own0GF9/aW5cTBRntMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINXyOSgan5vbPReaR7yjBvIC9qNMB8GA1UdIwQY MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt Y2NiYjZlOTBhMTliLzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY49foccb lDp8i/++sraj6mH+l0dnBNABe6N8pj+ceWKMHFq8P/wYWbGOgkdrOiXv33lPtE/d ljT/+4ChGzWcz+41CmBiHpiOnn1N2KdTq5Jfmc8og0J/93gV1Sr/krqcsu8TBew7 qJY4nIExcg+AlOYSAhtwTlHyIAc7xJdLxsTADeeC5gyyEUHX5xYvhhquSga3jx5l JONwZ8H2WpknsmCAlgeRzftLbZnGfovFwzWqPKgPJI1yGFsDPUp57KiFAyaZTXIY dOxcQZuMPWQ7ZgPPgNOfsqjzYShMjcPvQsUQV7i8SbDhWz5rRueE0/ihqHiaOooS GY9yyFuCuCKPwg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:59 2026 by rpki-client