This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft File: RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json) Hash identifier: JtWQIn135XRp5b8e+vUHxh1G1Y909TGJ9i8AlScSoxo= Subject key identifier: 84:BD:17:07:D4:B6:32:A3:00:94:B4:63:8B:7B:C8:AC:FB:87:9C:00 Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb Certificate serial: 019BF4994ECC4B2362B680E02CA44D9C7676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft Manifest number: 0812 Signing time: Sun 25 Jan 2026 10:00:46 +0000 Manifest this update: Sun 25 Jan 2026 10:00:46 +0000 Manifest next update: Mon 26 Jan 2026 10:00:46 +0000 Files and hashes: 1: QSPZWdBj02_wXIuy1IGBOnPdy1w.roa (hash: bUbRWWpDUh0QcX+CtlV8kusXAQJDODXxvoAaGuQVCaM=) 2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: DI5F62hvhU72UZocA/LC8scHgLOT70NKEZAfWufQV38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:4e:cc:4b:23:62:b6:80:e0:2c:a4:4d:9c:76:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb Validity Not Before: Jan 25 10:00:46 2026 GMT Not After : Jan 26 10:00:46 2026 GMT Subject: CN=84bd1707d4b632a30094b4638b7bc8acfb879c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:6a:b5:5a:3c:e2:68:6b:33:11:e8:b4:e4: f5:61:fc:05:17:4e:c6:4c:4a:8e:6b:0d:19:c9:d9: db:ac:1d:12:38:c4:5e:fd:f4:42:b9:03:3c:e0:84: e4:55:d6:3c:13:df:ba:27:81:13:e9:f7:12:a0:4d: 16:f3:0b:14:ff:da:cd:b3:79:17:af:11:75:65:3d: 15:cc:63:f0:ed:b1:31:b0:eb:07:1b:2c:e0:e3:47: 18:e8:79:9b:5c:bd:e3:a5:d6:04:57:2d:fb:a0:9d: 83:15:2e:e1:b7:08:0d:70:92:61:45:82:90:d3:54: ef:e9:b3:cb:8f:c8:b4:b9:31:9d:6f:4d:28:9f:f6: d8:93:8a:24:ba:1b:29:74:bd:7f:8a:3d:d7:68:91: a8:1f:a8:f4:51:25:1b:5e:d0:ec:6f:ef:3e:3c:23: 4f:a3:97:4a:4b:fe:11:d4:37:7f:40:d1:a7:61:b7: ba:fc:db:df:71:46:b2:ea:27:6d:5f:36:b8:d2:ee: 27:92:8b:0c:ab:e5:b0:80:03:de:c8:9d:f0:28:d9: ca:c7:a0:c4:42:25:ac:0d:4a:20:c8:bb:e7:f5:a5: 35:09:23:21:86:08:76:a2:27:af:6e:8e:dc:85:4c: 8d:ae:68:bf:ae:ce:1b:b1:c0:22:be:9e:a6:bf:1f: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BD:17:07:D4:B6:32:A3:00:94:B4:63:8B:7B:C8:AC:FB:87:9C:00 X509v3 Authority Key Identifier: keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:43:f6:4b:09:b3:56:d7:8c:82:61:25:7f:1e:19:55:6d:d6: ee:f6:46:52:82:6f:45:a2:f4:5b:2e:5a:df:26:6a:99:7a:89: 09:a8:67:7c:98:ed:8d:62:c9:eb:92:4b:88:d0:ed:94:7d:d1: 6c:43:6d:ab:65:b6:f5:36:33:d6:f7:be:1a:89:27:94:f5:19: 5f:4c:b3:b9:8b:c6:21:e2:00:49:02:5c:f9:0c:35:6b:42:5f: 59:73:a4:b0:5e:3f:60:31:43:00:9f:c9:87:d5:9e:ea:e5:e4: cc:ae:84:fd:7a:ea:62:98:8d:59:85:22:40:e4:68:ca:6d:b1: 35:e8:20:3b:ac:3d:bb:b5:2d:51:4a:3e:cd:13:79:1c:ce:46: 01:2b:57:2d:9d:96:0e:34:79:f6:a5:8e:50:fd:38:00:47:99: 31:33:77:23:67:25:03:0b:69:e5:98:6f:6a:67:a1:e9:7d:33: fe:03:d6:a9:19:47:6c:16:ac:b9:1a:dc:7c:97:3f:45:93:37: e6:66:36:37:5c:ab:3c:90:42:39:ae:a0:d5:80:c4:c0:16:78: c1:46:3f:38:93:39:b1:8f:a6:1e:d9:d0:65:91:2c:4e:d2:ac: 7e:01:7c:98:7c:e5:f5:81:6f:dd:82:3b:1f:df:36:ee:6f:21: a7:58:c4:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mU7MSyNitoDgLKRNnHZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZDNjYzU5MWNlYmEzODYxMzBmM2M5Zjc0MjY0NThiODg4 N2MyZWIwHhcNMjYwMTI1MTAwMDQ2WhcNMjYwMTI2MTAwMDQ2WjAzMTEwLwYDVQQD Eyg4NGJkMTcwN2Q0YjYzMmEzMDA5NGI0NjM4YjdiYzhhY2ZiODc5YzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa5qtVo84mhrMxHotOT1YfwFF07G TEqOaw0ZydnbrB0SOMRe/fRCuQM84ITkVdY8E9+6J4ET6fcSoE0W8wsU/9rNs3kX rxF1ZT0VzGPw7bExsOsHGyzg40cY6HmbXL3jpdYEVy37oJ2DFS7htwgNcJJhRYKQ 01Tv6bPLj8i0uTGdb00on/bYk4okuhspdL1/ij3XaJGoH6j0USUbXtDsb+8+PCNP o5dKS/4R1Dd/QNGnYbe6/NvfcUay6idtXza40u4nkosMq+WwgAPeyJ3wKNnKx6DE QiWsDUogyLvn9aU1CSMhhgh2oievbo7chUyNrmi/rs4bscAivp6mvx/aeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIS9FwfUtjKjAJS0Y4t7yKz7h5wAMB8GA1UdIwQY MBaAFETTzFkc66OGEw88n3QmRYuIh8LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80MzYyOWEtNWE0ZC00YmRmLTk5Zjgt MmJiNjU0MDhkZjc0LzEvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My80MzYyOWEtNWE0ZC00YmRmLTk5ZjgtMmJiNjU0MDhkZjc0 LzEvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUP2Swmz VteMgmElfx4ZVW3W7vZGUoJvRaL0Wy5a3yZqmXqJCahnfJjtjWLJ65JLiNDtlH3R bENtq2W29TYz1ve+GoknlPUZX0yzuYvGIeIASQJc+Qw1a0JfWXOksF4/YDFDAJ/J h9We6uXkzK6E/XrqYpiNWYUiQORoym2xNeggO6w9u7UtUUo+zRN5HM5GAStXLZ2W DjR59qWOUP04AEeZMTN3I2clAwtp5Zhvameh6X0z/gPWqRlHbBasuRrcfJc/RZM3 5mY2N1yrPJBCOa6g1YDEwBZ4wUY/OJM5sY+mHtnQZZEsTtKsfgF8mHzl9YFv3YI7 H9827m8hp1jEGQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:13 2026 by rpki-client