This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json) Hash identifier: L/VV0F8mj4wqwr9Vijzk3VFP/vhjKA0NUoPTcPmiqRo= Subject key identifier: 43:08:74:BB:3B:88:2A:65:70:9E:C2:82:CA:B6:7A:D7:89:BF:98:37 Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8 Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8 Certificate serial: 019BF5ABE3309BF212E8D11DB23343E62CE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft Manifest number: 03EB Signing time: Sun 25 Jan 2026 15:00:41 +0000 Manifest this update: Sun 25 Jan 2026 15:00:41 +0000 Manifest next update: Mon 26 Jan 2026 15:00:41 +0000 Files and hashes: 1: OsHD-8Mh29wev3uW0LyQcxnz7vY.roa (hash: 5qHNuzCFg0VWcxLcG9huWE23v4lgV78sUuV4jVInwd8=) 2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: ZI5QLk3DMVx0LBKnvxLxkQg21LyecbLxoEpStrYYbDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:e3:30:9b:f2:12:e8:d1:1d:b2:33:43:e6:2c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8 Validity Not Before: Jan 25 15:00:41 2026 GMT Not After : Jan 26 15:00:41 2026 GMT Subject: CN=430874bb3b882a65709ec282cab67ad789bf9837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:fb:ec:6a:d3:4c:68:97:9d:db:11:b3:38: 9a:ee:24:27:80:ab:b9:d3:71:c8:f0:8c:fb:d1:e3: 57:3a:ca:1a:18:c6:b7:bb:17:b4:ee:4d:d4:71:5a: 83:e4:e7:77:ad:c3:16:bd:75:9f:02:82:95:c5:0c: df:01:27:6a:c8:a4:da:66:7a:36:a4:10:15:4d:3d: ba:e0:fb:7a:32:65:29:d7:4a:54:87:e8:e7:80:cb: ab:bc:5b:7c:9d:ca:e6:f7:16:d3:aa:43:ab:4d:85: b1:70:02:ee:8f:05:34:d2:4f:ae:e9:c6:00:6a:1a: 2f:85:75:a9:de:06:cf:23:a9:24:fc:af:ed:e8:a8: 0b:b3:48:56:0d:45:12:93:5b:1b:93:e1:19:5f:18: 01:3f:5b:b2:13:24:17:69:30:6f:0e:b3:a0:5b:25: c9:e9:63:37:1f:63:8c:35:f6:fb:58:c2:7e:14:80: 4d:74:1e:0d:61:dc:9f:8e:6a:4e:8d:d5:65:d0:d0: 92:00:eb:f9:51:f6:6f:c9:14:f5:0d:31:3b:6a:9a: 5a:73:85:81:2e:a9:08:25:1e:65:a1:29:92:ad:46: 79:dc:7f:c4:09:b2:2b:f6:3b:25:a8:d5:d1:2b:58: 59:08:ae:47:a9:03:26:d5:64:50:2a:d0:41:19:6d: 07:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:08:74:BB:3B:88:2A:65:70:9E:C2:82:CA:B6:7A:D7:89:BF:98:37 X509v3 Authority Key Identifier: keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f7:68:9d:79:ca:90:d4:8d:33:02:ff:f4:c4:9d:d7:70:99: 03:33:b8:dd:c0:3c:5c:c4:77:a8:1f:d2:ed:c1:8b:dc:3e:12: fb:c5:8e:44:af:03:ce:81:e7:85:74:fa:ea:dd:2b:ff:21:8c: 52:4f:49:c7:6c:21:5b:d3:c1:2d:3a:01:dd:84:5d:37:97:d1: 16:27:da:a6:ab:63:15:a7:db:3b:97:54:cb:37:0c:83:34:80: 12:eb:20:65:b3:56:b6:ff:79:b5:f0:cd:33:fb:50:1f:80:82: 9b:f1:a7:16:8e:ae:8d:26:fc:95:24:af:d7:b6:b8:05:83:b9: 76:53:5e:15:47:3a:76:04:6b:b0:e4:e1:ae:49:df:7d:fb:70: dc:27:f3:8c:50:b7:72:8b:d7:0a:dd:62:67:df:fc:70:15:b4: 79:71:82:06:65:4d:c7:67:88:c5:ca:9f:78:04:98:ca:5d:ba: 8e:3e:72:f7:8e:fe:c8:3b:12:f3:be:9b:91:a0:f7:f4:f6:a2: 81:c2:27:25:73:7c:8e:ac:d4:fd:35:45:a8:f9:1b:7a:d1:d3: af:45:0f:f6:8d:22:a6:d4:75:98:36:29:11:a0:73:5d:5d:f3: 71:05:ef:e7:74:33:0b:78:da:5d:eb:50:34:c8:6c:7d:2d:59: d8:95:02:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q+Mwm/IS6NEdsjND5izmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2UxNjAwZjUwNzM1OTYwZjg2ZDYyMWNkNGY1ZjU5Zjg3 OWEwZTgwHhcNMjYwMTI1MTUwMDQxWhcNMjYwMTI2MTUwMDQxWjAzMTEwLwYDVQQD Eyg0MzA4NzRiYjNiODgyYTY1NzA5ZWMyODJjYWI2N2FkNzg5YmY5ODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowX77GrTTGiXndsRszia7iQngKu5 03HI8Iz70eNXOsoaGMa3uxe07k3UcVqD5Od3rcMWvXWfAoKVxQzfASdqyKTaZno2 pBAVTT264Pt6MmUp10pUh+jngMurvFt8ncrm9xbTqkOrTYWxcALujwU00k+u6cYA ahovhXWp3gbPI6kk/K/t6KgLs0hWDUUSk1sbk+EZXxgBP1uyEyQXaTBvDrOgWyXJ 6WM3H2OMNfb7WMJ+FIBNdB4NYdyfjmpOjdVl0NCSAOv5UfZvyRT1DTE7appac4WB LqkIJR5loSmSrUZ53H/ECbIr9jslqNXRK1hZCK5HqQMm1WRQKtBBGW0HmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMIdLs7iCplcJ7Cgsq2eteJv5g3MB8GA1UdIwQY MBaAFJzOFgD1BzWWD4bWIc1PX1n4eaDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTIt ZGYzMmEyNWM1ZjJmLzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTItZGYzMmEyNWM1ZjJm LzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/donXnK kNSNMwL/9MSd13CZAzO43cA8XMR3qB/S7cGL3D4S+8WORK8DzoHnhXT66t0r/yGM Uk9Jx2whW9PBLToB3YRdN5fRFifapqtjFafbO5dUyzcMgzSAEusgZbNWtv95tfDN M/tQH4CCm/GnFo6ujSb8lSSv17a4BYO5dlNeFUc6dgRrsOThrknffftw3CfzjFC3 covXCt1iZ9/8cBW0eXGCBmVNx2eIxcqfeASYyl26jj5y947+yDsS876bkaD39Pai gcInJXN8jqzU/TVFqPkbetHTr0UP9o0iptR1mDYpEaBzXV3zcQXv53QzC3jaXetQ NMhsfS1Z2JUC/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:51 2026 by rpki-client