This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json) Hash identifier: ki6w4Yk871akYVMc4694TrxJIDa6M5qzRTJE0g5/IsQ= Subject key identifier: 79:D5:00:C5:B7:73:61:06:1C:3D:E8:A7:89:2E:8A:15:4A:A9:3D:7B Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019BF499B42C5BED7005D0F6753DB942D757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft Manifest number: 1803 Signing time: Sun 25 Jan 2026 10:01:12 +0000 Manifest this update: Sun 25 Jan 2026 10:01:12 +0000 Manifest next update: Mon 26 Jan 2026 10:01:12 +0000 Files and hashes: 1: 9pxyJ_5XKk1_rwWZ9yXVd0wiKTA.roa (hash: 9BXX00EqfHS9Z+w4cbgMB5Q/vF0Ya/E+TQ5+Mz+KYTQ=) 2: F2Hrf2ZO-e5Se-C1MVuiXNtFCts.roa (hash: z70EzbScXbGkEd63iR3gVuVrT2xNv1pFq/gzFaOfapw=) 3: Gk5m5qKg-uP4AW-hWg2d-cU394s.roa (hash: +p2ldW7F6tDvfJL/EzIU442xl//OmT69J/CQCZQMsqo=) 4: IdGgLSVePL4Ag35cTRp5zqyuBEc.roa (hash: D5yVGulGMze85HvjnmBTSvUEhpL48qjlTFI0cEv/IxU=) 5: MOVQFk6w5VTW1mTaAyM9XyFp3A4.roa (hash: CYemttRlGhgSSYTCSRhcvIusMWg/eXfKm4LjWS1ETGs=) 6: dWJfR3O78mdmRump4LfvKR4bPhk.roa (hash: QZkZflIPeyZVp29E1JD/NyFaBd5cvPYJz27bWSVn1CI=) 7: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: 8ar9tITBrwGROAP9WywlaQorp6QHmvn1N5DcR4X2/7o=) 8: otCB4X2SkZik_W7jF5YoKtNQVQo.roa (hash: ZJ6P0rtTXDrrXOKDDXJiQDSmAF8So5IfFur0h47zhmg=) 9: qt1TBrOjWH0sbh3ZKU2CyV1iMlA.roa (hash: tgi9V/X7llQ0PTMb7GnjdnF/SXuJX/+lesfnAqrS3vw=) 10: s3mKeHVM6Sc_Nu3cBa5CO3c_r2c.roa (hash: nQwJUaWrVg5To0r/HnpgbyQFvZOuiUSeGVW/zjSMAz4=) 11: u7XfC-hyoaL17lnaI1XY7ILk75Q.roa (hash: H5bJ6no8lSHCW4yEf6B9ReJaGHen5zLgZSX5lnUUKd0=) 12: yUsuWE75fvpVNDKi25yxDnSFgas.roa (hash: 0+NS8jozq3pY1+D5dQVaQbM4vVwYoFFHieJ2bcA/1lE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:b4:2c:5b:ed:70:05:d0:f6:75:3d:b9:42:d7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Jan 25 10:01:12 2026 GMT Not After : Jan 26 10:01:12 2026 GMT Subject: CN=79d500c5b77361061c3de8a7892e8a154aa93d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:b6:01:71:2e:fc:f1:24:65:0a:3e:3e:90: 03:ac:93:94:96:be:a6:04:08:b7:b1:f0:70:7d:81: 9c:a7:b3:1d:e6:58:e2:e0:ea:eb:63:15:6e:a4:32: 2a:1c:b8:1a:88:c8:b8:6a:5a:61:15:1f:7c:3b:eb: 26:ff:8c:c4:2b:d2:a8:fb:69:12:54:32:ac:e1:44: cd:6b:6e:6f:ea:3b:84:d9:86:60:db:c8:14:2f:da: 96:25:4b:1c:f6:73:e0:fd:9c:59:0b:43:7f:1d:d3: 4c:10:f2:28:98:10:fb:22:28:26:20:1b:44:e3:b9: 78:32:bf:ff:64:60:f0:81:9c:31:9b:7a:79:37:18: 3a:55:be:38:20:64:af:9f:8d:48:ac:23:ec:21:b6: 70:ce:2a:8e:75:4f:b1:23:4c:45:c4:a5:8d:36:4c: 46:f3:e3:e7:79:f9:79:96:51:7a:0b:cf:94:74:f5: 16:31:58:61:e0:fa:b9:bc:9b:8c:ce:cf:fd:46:f7: f0:c8:7d:e1:97:75:ad:ec:a0:1b:38:3f:75:28:95: a5:8c:50:af:d2:3c:f6:11:6d:80:72:7e:54:a8:73: 17:f5:dc:10:5c:cd:4f:be:29:5f:55:0b:7f:5b:93: 3b:78:b9:ed:90:25:28:ee:51:d7:4b:01:85:03:6c: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D5:00:C5:B7:73:61:06:1C:3D:E8:A7:89:2E:8A:15:4A:A9:3D:7B X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b6:2b:fc:7e:05:dd:c9:55:74:57:d1:e5:3b:42:d0:e0:19: 1e:26:9f:25:d9:79:72:0f:dc:38:28:ab:65:68:c0:4a:51:f5: d5:86:d4:d0:de:0d:0e:2d:b8:63:8d:ea:a6:4e:f8:ab:f7:9f: da:f1:4c:7e:10:89:38:3f:93:25:76:57:18:f6:d2:44:cb:52: 8e:79:66:74:2b:04:e6:56:20:ed:0a:94:20:c0:8f:15:a6:95: 0e:a5:8b:4a:25:86:69:2c:c4:cb:5e:fd:85:1f:16:63:ab:ba: 70:ae:9f:3e:7d:5d:80:5b:6e:4c:6a:6e:c6:65:fe:3a:10:a7: 08:ad:e6:dc:16:f8:fb:b9:b0:df:52:fb:40:90:48:6e:ad:63: 63:4c:0a:6e:aa:1b:3d:c0:3f:97:e5:ef:f8:9f:e8:d5:71:38: fb:96:8a:ce:9d:7d:3e:c2:6e:da:bb:c1:0f:7e:73:69:ed:8a: 04:90:2e:01:41:0d:cc:64:e4:bc:57:4f:68:3c:35:9a:2a:3d: fd:23:3a:43:16:71:51:1a:96:69:d5:97:6c:f1:30:39:ef:c1: 57:10:78:12:44:c7:7d:b0:6d:43:b6:16:af:85:2e:60:78:88: eb:a2:b6:4d:64:7b:21:f2:81:4f:b0:bb:cc:07:f1:15:04:ac: c2:2e:bc:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mbQsW+1wBdD2dT25QtdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwMTI1MTAwMTEyWhcNMjYwMTI2MTAwMTEyWjAzMTEwLwYDVQQD Eyg3OWQ1MDBjNWI3NzM2MTA2MWMzZGU4YTc4OTJlOGExNTRhYTkzZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkW2AXEu/PEkZQo+PpADrJOUlr6m BAi3sfBwfYGcp7Md5lji4OrrYxVupDIqHLgaiMi4alphFR98O+sm/4zEK9Ko+2kS VDKs4UTNa25v6juE2YZg28gUL9qWJUsc9nPg/ZxZC0N/HdNMEPIomBD7IigmIBtE 47l4Mr//ZGDwgZwxm3p5Nxg6Vb44IGSvn41IrCPsIbZwziqOdU+xI0xFxKWNNkxG 8+Pnefl5llF6C8+UdPUWMVhh4Pq5vJuMzs/9RvfwyH3hl3Wt7KAbOD91KJWljFCv 0jz2EW2Acn5UqHMX9dwQXM1PvilfVQt/W5M7eLntkCUo7lHXSwGFA2wU/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnVAMW3c2EGHD3op4kuihVKqT17MB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrYr/H4F 3clVdFfR5TtC0OAZHiafJdl5cg/cOCirZWjASlH11YbU0N4NDi24Y43qpk74q/ef 2vFMfhCJOD+TJXZXGPbSRMtSjnlmdCsE5lYg7QqUIMCPFaaVDqWLSiWGaSzEy179 hR8WY6u6cK6fPn1dgFtuTGpuxmX+OhCnCK3m3Bb4+7mw31L7QJBIbq1jY0wKbqob PcA/l+Xv+J/o1XE4+5aKzp19PsJu2rvBD35zae2KBJAuAUENzGTkvFdPaDw1mio9 /SM6QxZxURqWadWXbPEwOe/BVxB4EkTHfbBtQ7YWr4UuYHiI66K2TWR7IfKBT7C7 zAfxFQSswi68oQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:44 2026 by rpki-client