This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json) Hash identifier: fPAM48YY6DfjTF2JvXAg27wqblveGcE4kK/hite/uMk= Subject key identifier: F8:72:4F:C2:8E:66:D5:A8:87:63:E5:AC:95:08:5C:95:D3:CA:EE:64 Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d Certificate serial: 019BF68818717AD8BB7756BA861FF8B07562 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft Manifest number: 106D Signing time: Sun 25 Jan 2026 19:01:12 +0000 Manifest this update: Sun 25 Jan 2026 19:01:12 +0000 Manifest next update: Mon 26 Jan 2026 19:01:12 +0000 Files and hashes: 1: LjhJq6z0EutkdYUDvjPf54YMQCY.roa (hash: UJ/E0MSAhlopMBAQ1Fn4sYzS7IPnJ8HsG+SPAcDqln8=) 2: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: GLl8lZuoRDnVnFpjjFgvxgeatFcWPlpoHEr1OAGG/+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:18:71:7a:d8:bb:77:56:ba:86:1f:f8:b0:75:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d Validity Not Before: Jan 25 19:01:12 2026 GMT Not After : Jan 26 19:01:12 2026 GMT Subject: CN=f8724fc28e66d5a88763e5ac95085c95d3caee64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:f2:48:6d:0f:02:1e:fc:4a:bf:cd:a5:c5: 3e:9b:ef:09:a5:b4:83:ab:26:88:1d:ea:51:23:11: bc:93:9c:d6:55:98:96:94:55:14:34:b5:9e:13:21: 82:57:61:77:db:8c:9a:d0:20:25:43:a9:c2:57:e7: 3a:fe:4d:d6:df:dc:63:43:1e:13:f1:c1:c9:85:83: 2b:f1:9d:ba:14:2b:4c:ce:cc:fe:3c:00:ca:30:14: 63:6f:80:86:50:03:28:18:8f:87:33:18:c8:38:de: c5:9c:90:d8:8b:82:66:72:5f:5a:fd:f5:6a:1f:0f: 69:1f:1c:a8:07:46:65:7f:54:96:a3:10:f1:37:2e: e0:a5:4a:a0:1f:0a:72:4c:c1:c5:aa:aa:69:ba:39: 60:af:ec:56:bc:b8:b2:eb:a4:ec:0f:95:fd:10:3f: 57:a4:f7:20:ab:24:a7:05:22:06:23:66:a0:93:31: 6c:03:15:54:5f:c9:45:90:02:99:87:50:27:77:b1: 56:9b:bd:c3:5d:5f:d1:54:16:45:47:16:11:7a:38: b0:a0:11:cd:71:3f:01:f6:73:4f:d3:52:63:da:ba: 33:00:03:17:f2:f0:d0:3f:69:fe:c9:39:dd:0f:68: 97:59:e7:bd:57:b3:36:34:20:f9:dc:a2:8d:11:6b: 97:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:72:4F:C2:8E:66:D5:A8:87:63:E5:AC:95:08:5C:95:D3:CA:EE:64 X509v3 Authority Key Identifier: keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2e:80:ae:51:a8:38:28:d7:85:e1:6d:ea:7b:4f:a7:62:93: 9d:8e:42:6a:b7:69:27:92:10:dd:a4:9a:8d:4b:77:80:f0:68: 57:d4:53:e7:19:61:40:36:ad:08:fb:ba:d5:c2:d5:51:95:38: ca:2c:57:e2:dd:d8:10:32:e5:53:48:a4:a4:89:38:f8:21:38: 94:08:10:09:78:75:3f:68:0d:e3:ac:a5:a6:b6:c8:f2:54:6d: 49:1b:8e:bb:38:40:54:67:69:45:ee:66:79:07:db:ca:da:e8: 18:df:da:5d:73:3b:18:5b:db:d3:22:f3:74:08:de:2b:30:1e: f5:3f:d5:af:f2:33:fb:60:9c:e7:5b:c7:9b:ef:d9:73:69:16: 13:30:6d:55:4f:54:6c:83:bb:01:ab:a7:fc:97:d7:0b:96:c6: a5:72:25:3e:7b:27:57:11:f0:5f:44:69:ee:93:3d:b3:b1:57: 32:08:b2:21:88:41:10:43:8c:1c:85:98:c8:1e:c4:8c:a7:44: 96:93:14:d9:b1:88:66:65:83:22:96:01:7b:b2:e4:8b:d2:f9: 56:13:70:90:20:4b:e7:89:65:66:49:3e:dd:22:26:de:66:a3: 68:3c:b3:9c:4c:26:2a:75:ac:d8:89:14:30:2e:01:c2:2e:56: 20:c0:72:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iBhxeti7d1a6hh/4sHViMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MTdjMDY1OTY2Njk4NWUxODVkODQxMjFlOGMyMGEzNjQ0 ZWE5OGQwHhcNMjYwMTI1MTkwMTEyWhcNMjYwMTI2MTkwMTEyWjAzMTEwLwYDVQQD EyhmODcyNGZjMjhlNjZkNWE4ODc2M2U1YWM5NTA4NWM5NWQzY2FlZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraHySG0PAh78Sr/NpcU+m+8JpbSD qyaIHepRIxG8k5zWVZiWlFUUNLWeEyGCV2F324ya0CAlQ6nCV+c6/k3W39xjQx4T 8cHJhYMr8Z26FCtMzsz+PADKMBRjb4CGUAMoGI+HMxjION7FnJDYi4Jmcl9a/fVq Hw9pHxyoB0Zlf1SWoxDxNy7gpUqgHwpyTMHFqqppujlgr+xWvLiy66TsD5X9ED9X pPcgqySnBSIGI2agkzFsAxVUX8lFkAKZh1And7FWm73DXV/RVBZFRxYRejiwoBHN cT8B9nNP01Jj2rozAAMX8vDQP2n+yTndD2iXWee9V7M2NCD53KKNEWuXewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhyT8KOZtWoh2PlrJUIXJXTyu5kMB8GA1UdIwQY MBaAFDYXwGWWZpheGF2EEh6MIKNkTqmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMTc5MWQtMWM5NC00MmU2LTllM2Mt NjdhY2QyYzg4MDUxLzEvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kMTc5MWQtMWM5NC00MmU2LTllM2MtNjdhY2QyYzg4MDUx LzEvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS6ArlGo OCjXheFt6ntPp2KTnY5CardpJ5IQ3aSajUt3gPBoV9RT5xlhQDatCPu61cLVUZU4 yixX4t3YEDLlU0ikpIk4+CE4lAgQCXh1P2gN46ylprbI8lRtSRuOuzhAVGdpRe5m eQfbytroGN/aXXM7GFvb0yLzdAjeKzAe9T/Vr/Iz+2Cc51vHm+/Zc2kWEzBtVU9U bIO7Aaun/JfXC5bGpXIlPnsnVxHwX0Rp7pM9s7FXMgiyIYhBEEOMHIWYyB7EjKdE lpMU2bGIZmWDIpYBe7Lki9L5VhNwkCBL54llZkk+3SIm3majaDyznEwmKnWs2IkU MC4Bwi5WIMBy5g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:25 2026 by rpki-client