This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json) Hash identifier: IeF81m6bXec7M/visqaz3NkT5y1JJznJxrX5bGQ+2EU= Subject key identifier: 62:2B:B6:76:2F:32:36:72:B4:6E:E0:8E:5A:D3:9C:6D:F5:C7:BC:36 Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20 Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220 Certificate serial: 019BF8E41597FA279970E067BE4900EC2B27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft Manifest number: 0B06 Signing time: Mon 26 Jan 2026 06:00:55 +0000 Manifest this update: Mon 26 Jan 2026 06:00:55 +0000 Manifest next update: Tue 27 Jan 2026 06:00:55 +0000 Files and hashes: 1: dweYmfOa8TTIR4-iBHNV8XmJt9A.roa (hash: tN8Qt6nqsV9vwt70G/tNoeGlwkK0G3mWlGOVDNyRfzk=) 2: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: oiERqVVPx8YiYe/KTRjvAGbfankcV1KZsTtGp7cKo6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:15:97:fa:27:99:70:e0:67:be:49:00:ec:2b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220 Validity Not Before: Jan 26 06:00:55 2026 GMT Not After : Jan 27 06:00:55 2026 GMT Subject: CN=622bb6762f323672b46ee08e5ad39c6df5c7bc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:13:f2:11:5f:a1:6c:e7:f8:ec:59:f7:06: d6:b5:1f:a1:31:fb:f7:d2:33:e5:c3:9f:f4:55:89: 1f:cd:b1:ed:a9:ab:3d:e8:4d:29:80:41:4e:76:8c: 7b:74:90:4b:40:cd:c9:a3:25:50:e3:9d:6f:b6:72: 86:32:61:2a:62:f6:c5:05:b3:5a:47:d5:5e:63:26: a8:79:26:f4:96:a3:39:65:4a:94:98:50:30:46:e3: 72:fe:ad:17:6f:40:b5:8a:49:b2:88:03:ad:5e:92: 47:c0:f3:43:d2:e8:53:d1:84:82:66:18:ee:79:5c: 0b:1a:55:58:ba:3b:6d:6e:cd:2f:72:01:9c:3d:82: 46:ff:36:ec:5e:f9:ce:dc:64:ea:7f:41:91:bb:df: 54:38:41:03:15:7b:5a:b5:6b:40:7b:ad:2e:06:3e: bf:71:dc:68:cb:65:df:48:38:cf:9a:d1:dd:5e:af: b9:12:18:77:07:d2:43:4d:87:31:3f:6e:c4:6a:d0: 77:ab:48:30:ea:b0:74:48:b2:b1:7f:6f:2d:5b:52: 34:28:93:b1:da:a7:c5:74:9b:1e:c5:64:03:a1:90: 29:70:d5:cf:97:16:4b:a1:51:18:62:af:1a:0b:42: 2a:2f:fc:2a:2b:a6:1d:8f:48:8f:ab:89:b7:cf:99: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2B:B6:76:2F:32:36:72:B4:6E:E0:8E:5A:D3:9C:6D:F5:C7:BC:36 X509v3 Authority Key Identifier: keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fb:02:e6:0a:bb:d0:0f:44:27:cf:70:db:3f:c9:5c:6a:32: 11:52:02:31:74:3e:04:24:cb:80:b5:8e:90:54:ee:57:9b:8a: 01:46:d7:57:11:ec:47:70:70:e9:45:05:67:7b:29:33:f2:7f: dd:8f:a0:ad:d5:38:ef:bb:c4:3c:32:b5:7f:f9:26:56:1f:70: 4c:75:51:4c:14:47:cc:e9:a8:0a:65:59:ba:60:68:31:ca:68: c6:c6:a8:a3:8f:fb:82:a5:07:01:c9:39:f9:e2:db:35:ec:15: 84:77:34:bc:35:f1:79:3a:ee:a7:f3:d7:74:0d:4d:8c:86:94: 91:0a:cb:17:87:f3:40:7d:fc:09:ca:58:cf:36:50:70:8d:8f: 02:33:c6:b3:40:c8:a9:9b:66:d8:ba:43:e3:33:aa:8e:8a:63: 33:9e:83:48:5e:ee:20:78:ae:cb:13:4f:28:9c:c5:95:60:69: 81:1f:4d:27:e9:4f:e8:03:e4:9b:37:48:63:eb:95:82:9a:80: 1d:df:e4:53:a4:48:4b:d6:4f:4f:85:13:3d:23:fd:25:31:5c: ef:8b:0c:84:dd:82:c4:4d:a4:86:51:ec:74:b4:47:7d:47:0d: 99:db:c1:1e:10:c6:e9:d6:d6:c6:29:01:06:ec:71:79:82:74: 61:1a:79:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45BWX+ieZcOBnvkkA7CsnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMGUzMDgwNzkyY2ZhOWYxNWYwM2ViM2ZkNzZjYTY4Yzhj ZGUyMjAwHhcNMjYwMTI2MDYwMDU1WhcNMjYwMTI3MDYwMDU1WjAzMTEwLwYDVQQD Eyg2MjJiYjY3NjJmMzIzNjcyYjQ2ZWUwOGU1YWQzOWM2ZGY1YzdiYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWkT8hFfoWzn+OxZ9wbWtR+hMfv3 0jPlw5/0VYkfzbHtqas96E0pgEFOdox7dJBLQM3JoyVQ451vtnKGMmEqYvbFBbNa R9VeYyaoeSb0lqM5ZUqUmFAwRuNy/q0Xb0C1ikmyiAOtXpJHwPND0uhT0YSCZhju eVwLGlVYujttbs0vcgGcPYJG/zbsXvnO3GTqf0GRu99UOEEDFXtatWtAe60uBj6/ cdxoy2XfSDjPmtHdXq+5Ehh3B9JDTYcxP27EatB3q0gw6rB0SLKxf28tW1I0KJOx 2qfFdJsexWQDoZApcNXPlxZLoVEYYq8aC0IqL/wqK6Ydj0iPq4m3z5neXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIrtnYvMjZytG7gjlrTnG31x7w2MB8GA1UdIwQY MBaAFJ0OMIB5LPqfFfA+s/12ymjIzeIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kOGFjNTgtOWE2MS00ODUyLTlmMmYt MjZmMzkzODQ4NzRmLzEvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9kOGFjNTgtOWE2MS00ODUyLTlmMmYtMjZmMzkzODQ4NzRm LzEvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfsC5gq7 0A9EJ89w2z/JXGoyEVICMXQ+BCTLgLWOkFTuV5uKAUbXVxHsR3Bw6UUFZ3spM/J/ 3Y+grdU477vEPDK1f/kmVh9wTHVRTBRHzOmoCmVZumBoMcpoxsaoo4/7gqUHAck5 +eLbNewVhHc0vDXxeTrup/PXdA1NjIaUkQrLF4fzQH38CcpYzzZQcI2PAjPGs0DI qZtm2LpD4zOqjopjM56DSF7uIHiuyxNPKJzFlWBpgR9NJ+lP6APkmzdIY+uVgpqA Hd/kU6RIS9ZPT4UTPSP9JTFc74sMhN2CxE2khlHsdLRHfUcNmdvBHhDG6dbWxikB BuxxeYJ0YRp5Pg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:12:00 2026 by rpki-client