This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft File: nU-b-Hr_AP1dshWFeBtG82-eNiY.mft (raw, json) Hash identifier: W3hRGCbRK2JsvQKNGbFtS65obXCqNYC/Iwv4wkuasKQ= Subject key identifier: 25:F5:FB:07:24:D2:CD:FF:03:3E:D9:E5:08:B3:7D:8E:4F:AC:47:8B Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26 Certificate issuer: /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626 Certificate serial: 019BF574FA130D2C9A7BD518ECAB07B55500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft Manifest number: 0484 Signing time: Sun 25 Jan 2026 14:00:42 +0000 Manifest this update: Sun 25 Jan 2026 14:00:42 +0000 Manifest next update: Mon 26 Jan 2026 14:00:42 +0000 Files and hashes: 1: aEdbH2gcMJrcI8LeEpWiiItu560.roa (hash: 2FbQgo/a/H9dMPsQCbyn1M5Rd/nKsnsa5CJ69qDU4Ds=) 2: nU-b-Hr_AP1dshWFeBtG82-eNiY.crl (hash: IfiEWbxOeP1ZMIjBywIbAI5cmgj6qNLG67Fn2NDWJJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:fa:13:0d:2c:9a:7b:d5:18:ec:ab:07:b5:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626 Validity Not Before: Jan 25 14:00:42 2026 GMT Not After : Jan 26 14:00:42 2026 GMT Subject: CN=25f5fb0724d2cdff033ed9e508b37d8e4fac478b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:92:aa:45:e9:2b:61:40:d7:9e:46:bc:d8:cc: 0b:74:88:41:47:4a:9b:84:07:af:e4:84:60:86:b1: 49:5c:a3:0c:f6:bb:f7:f9:40:bd:2f:a9:32:e2:e3: 6f:ac:7a:4f:f5:ff:6b:ec:8e:52:cf:78:1b:41:fe: d6:58:ac:2c:14:38:7d:af:35:5c:f3:51:15:65:59: 1e:13:1f:3d:c7:25:e2:86:8d:4e:6b:d1:c6:5a:df: 32:91:00:e2:05:62:5c:43:f7:e8:0a:3c:dd:a0:f1: 34:db:85:7b:d9:cb:80:22:2a:4b:84:c0:2a:2f:5e: 6b:90:29:79:2a:e2:f7:d5:06:d8:ad:09:9e:85:b1: 96:20:16:40:bf:50:9d:38:b6:87:25:e4:a4:b8:7e: e0:1f:42:f6:ee:49:f4:7f:a5:be:1f:d8:46:4d:8c: d5:6c:10:53:24:69:d9:a5:3c:0b:ac:b8:fa:4f:2c: fe:a2:96:40:9d:32:7d:07:fa:a5:b1:dc:51:d7:59: 40:0e:80:ed:73:1d:2b:d5:b4:0c:88:e0:88:4a:66: 0a:3c:0e:f7:03:08:a8:4a:de:22:1d:08:25:11:fa: 86:17:44:ba:9a:9d:ad:42:14:2d:cf:7e:0b:08:a4: 20:fb:3b:68:dd:1f:9b:d1:38:f4:d6:0a:2e:da:de: 03:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F5:FB:07:24:D2:CD:FF:03:3E:D9:E5:08:B3:7D:8E:4F:AC:47:8B X509v3 Authority Key Identifier: keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:08:c0:a9:82:0a:fe:a4:16:8e:00:d2:6a:4e:e2:58:a9:80: 35:a2:75:47:4e:a4:15:95:2e:b4:d6:29:b9:c2:77:bd:89:ac: 9e:6b:99:44:8c:57:41:72:8d:0b:5f:dc:75:4d:46:d4:43:e9: a6:1f:1b:e4:7f:de:c9:5e:6b:74:82:57:b3:b0:7e:64:6d:32: 0f:bf:aa:1c:73:4e:ec:0e:e1:67:57:65:0b:3a:2a:34:91:64: 8c:9b:64:fd:d9:11:83:0a:a9:61:c0:06:90:a6:ce:83:eb:f2: 87:2b:96:7a:a9:fc:13:85:c1:93:01:02:b3:1f:84:0b:3a:38: 01:e2:38:54:ad:5d:2b:70:74:30:bd:dd:38:a7:ea:0c:bb:b4: 86:49:53:fd:51:5e:8c:00:62:65:e2:38:71:57:31:61:be:da: dd:af:e2:72:74:01:61:b1:8c:93:70:6e:33:bf:05:42:5e:f2: 04:b5:6c:14:96:f9:2b:92:26:59:5c:12:05:e8:3d:fb:f2:54: 30:9b:24:73:15:32:e9:ea:8f:4c:22:23:e9:c6:38:f1:b8:95: dc:e6:e8:46:b1:ce:78:75:b2:07:03:b0:6c:c3:0a:5c:2b:6a: bf:d7:7c:7c:c6:ff:41:a8:16:d9:a7:9a:67:d6:4c:9e:15:a9: b5:11:7b:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dPoTDSyae9UY7KsHtVUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNGY5YmY4N2FmZjAwZmQ1ZGIyMTU4NTc4MWI0NmYzNmY5 ZTM2MjYwHhcNMjYwMTI1MTQwMDQyWhcNMjYwMTI2MTQwMDQyWjAzMTEwLwYDVQQD EygyNWY1ZmIwNzI0ZDJjZGZmMDMzZWQ5ZTUwOGIzN2Q4ZTRmYWM0NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pKqRekrYUDXnka82MwLdIhBR0qb hAev5IRghrFJXKMM9rv3+UC9L6ky4uNvrHpP9f9r7I5Sz3gbQf7WWKwsFDh9rzVc 81EVZVkeEx89xyXiho1Oa9HGWt8ykQDiBWJcQ/foCjzdoPE024V72cuAIipLhMAq L15rkCl5KuL31QbYrQmehbGWIBZAv1CdOLaHJeSkuH7gH0L27kn0f6W+H9hGTYzV bBBTJGnZpTwLrLj6Tyz+opZAnTJ9B/qlsdxR11lADoDtcx0r1bQMiOCISmYKPA73 AwioSt4iHQglEfqGF0S6mp2tQhQtz34LCKQg+zto3R+b0Tj01gou2t4DXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCX1+wck0s3/Az7Z5QizfY5PrEeLMB8GA1UdIwQY MBaAFJ1Pm/h6/wD9XbIVhXgbRvNvnjYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblUtYi1Icl9BUDFkc2hXRmVCdEc4Mi1lTmlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS83NDE4NzItYTQyNS00MzY3LTlhYzIt ZGNkOTM3ZmQwN2E3LzEvblUtYi1Icl9BUDFkc2hXRmVCdEc4Mi1lTmlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS83NDE4NzItYTQyNS00MzY3LTlhYzItZGNkOTM3ZmQwN2E3 LzEvblUtYi1Icl9BUDFkc2hXRmVCdEc4Mi1lTmlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuQjAqYIK /qQWjgDSak7iWKmANaJ1R06kFZUutNYpucJ3vYmsnmuZRIxXQXKNC1/cdU1G1EPp ph8b5H/eyV5rdIJXs7B+ZG0yD7+qHHNO7A7hZ1dlCzoqNJFkjJtk/dkRgwqpYcAG kKbOg+vyhyuWeqn8E4XBkwECsx+ECzo4AeI4VK1dK3B0ML3dOKfqDLu0hklT/VFe jABiZeI4cVcxYb7a3a/icnQBYbGMk3BuM78FQl7yBLVsFJb5K5ImWVwSBeg9+/JU MJskcxUy6eqPTCIj6cY48biV3OboRrHOeHWyBwOwbMMKXCtqv9d8fMb/QagW2aea Z9ZMnhWptRF7lQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:26 2026 by rpki-client