This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: y+Z65GtBeSSz5ucBX8oUusMp9cZiWm0Q43WSgZxpqKA= Subject key identifier: 81:22:C7:95:BF:7A:52:31:AE:92:F3:FB:99:B9:7F:5D:22:97:CF:F7 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019BF4997FB3F10AD94D062EB8B9208008C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 17FA Signing time: Sun 25 Jan 2026 10:00:58 +0000 Manifest this update: Sun 25 Jan 2026 10:00:58 +0000 Manifest next update: Mon 26 Jan 2026 10:00:58 +0000 Files and hashes: 1: EUJR4oK_-qO6YAPuLUzPIGrtiic.roa (hash: YME5zAJYIJBkBPG7Ysa6vw+XFQl03WoNdtgDEh2gs4U=) 2: M36ECwRcj0TFTMeuL6oi_DsEnkQ.roa (hash: E7Nxan43SS/Yo752esXJfNN3COQpoHbafmeAiyBk1XI=) 3: Q0Jdhd0Xijh5Qg2MMx6tv_NFg0Y.roa (hash: e8/UdF909D8bl8btP6fz+eUx2PtucIwHXcMCcE3Yfss=) 4: S3R-qErkzc-IjOFmeTi4xHy4LpE.roa (hash: SNvSagqffcHVObamPtGGn26yO20xNO70CwB/KL8UDeA=) 5: VBZM83CovnXWWNAoSTmLuwtkvPA.roa (hash: zlKxjFuoWufhSPZybSMNIrhlFC4xMtEzi2DT6Mq8R4E=) 6: exXkKYTtUDjde_sRikIrk050twk.roa (hash: wS6gest7TLN8j3W6GI2oKTVveIMP3Ho87+QuUUyIfgc=) 7: i8iYm_0FW8CEhhGEtap9i1HCpbU.roa (hash: S62F8bLmRb8I4/DcdbRM8zS7BP7h1o24+JuRtSpKmdc=) 8: lISEedj5Gkre55GwsZjKu8moowA.roa (hash: S+Yq3Z38Og7alrPrHO1nngmVCOUzwCqJwWrOwsktrtM=) 9: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: PNqmdqIYlyfcbN2Vd6XRu5SZk+i9KpKY4GpDWcFtd6U=) 10: rWY90c2-byEiqpH-pAXqLcTVBl8.roa (hash: /cBf700BNhkKxHBETlqRX/grSyvQegr8+YbQwI/BM70=) 11: xVa6hi9wu8XjSdEwYmXJAx85FhU.roa (hash: 8J48r7Dcw/u08bxZJven18+8CJuosinNuC5v6bFRP4U=) 12: yyRW46EoiEZakH8xmbaVNYZzT7Y.roa (hash: kZjQSsJWQX8APsUvcm4SD5nZIwt5ENQAkgP42qqBCtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:7f:b3:f1:0a:d9:4d:06:2e:b8:b9:20:80:08:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jan 25 10:00:58 2026 GMT Not After : Jan 26 10:00:58 2026 GMT Subject: CN=8122c795bf7a5231ae92f3fb99b97f5d2297cff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a5:fe:15:b6:50:ad:34:66:66:6d:36:49:0e: 69:a8:2b:03:3d:c0:06:1f:53:2a:9a:da:79:73:f0: 01:72:ba:e3:a4:cb:09:6c:7c:5b:07:7d:33:9c:f0: 09:6a:97:54:b3:a2:ff:ff:db:a3:45:a3:63:b0:dd: c4:7a:75:77:1a:40:50:58:5a:76:09:3a:60:f0:d6: 12:57:57:04:70:81:27:33:79:dc:21:89:84:cc:57: 6d:5a:6d:c0:0c:09:d6:bb:4b:b4:34:67:ba:0d:14: 24:5a:a6:23:81:d2:1f:63:a7:b4:44:72:d4:9d:25: 23:82:3c:08:3f:9f:1a:60:17:b0:28:f5:7f:6e:08: 29:2f:0b:40:8b:f8:b3:11:83:4d:e7:42:89:39:d6: 3c:a6:24:95:02:cb:28:88:a3:2e:8b:48:07:83:16: 18:c5:03:13:be:9f:59:78:f3:71:85:1c:e7:6a:c6: 22:ef:12:b6:8c:6a:0f:f8:c0:bc:aa:8f:34:8b:24: 91:2b:34:99:77:4f:66:8b:f8:53:d5:47:f1:12:ec: 6d:90:35:20:33:2e:36:8a:85:52:4d:a7:17:8f:0b: ff:18:f5:b4:c3:f4:f6:31:73:ef:2d:1d:8d:fb:de: 94:15:70:3b:08:f8:87:a6:cd:e6:9c:4d:5a:e6:63: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:22:C7:95:BF:7A:52:31:AE:92:F3:FB:99:B9:7F:5D:22:97:CF:F7 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:5a:43:36:cd:9d:ee:33:59:78:55:c7:f7:82:65:35:f6:a8: 8e:da:d7:58:f3:0f:6f:07:6e:24:ef:46:81:72:4d:be:08:33: b1:bd:81:27:80:be:23:c2:1f:e7:16:35:2d:d3:8e:37:1b:f3: 61:85:0e:dc:80:34:86:7c:fe:37:e8:77:5a:01:64:c3:9a:83: e6:89:ca:4e:29:e2:70:71:2c:0f:05:94:ed:5c:0d:80:e5:26: e7:6c:2d:68:dc:e9:af:b8:8b:4a:2f:db:61:81:f3:6d:6a:19: 5e:61:56:fd:c1:11:f3:9a:8e:fd:28:09:ec:81:0b:51:88:78: 9c:37:a8:f9:57:93:63:14:07:c8:74:da:e3:8b:fd:47:c4:3e: 8f:97:9e:74:cd:19:e6:9c:03:0d:1e:7c:31:3b:fd:ce:e8:42: 87:de:fb:e1:01:68:a2:7e:d4:10:1a:54:00:17:f8:9a:c3:c0: 88:fc:6e:e3:d7:04:f6:67:dc:52:f3:c6:a1:35:42:bf:7f:8f: fa:62:12:00:bf:44:7a:a8:0f:24:b7:d4:63:28:59:15:fb:54: c5:34:62:5b:1f:cc:40:ce:12:b2:54:a1:21:c4:c9:e0:a0:6b: db:d6:51:fb:cc:c2:d8:bc:3f:a0:fe:bc:2c:2f:07:6e:97:1c: 97:bf:f8:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mX+z8QrZTQYuuLkggAjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwMTI1MTAwMDU4WhcNMjYwMTI2MTAwMDU4WjAzMTEwLwYDVQQD Eyg4MTIyYzc5NWJmN2E1MjMxYWU5MmYzZmI5OWI5N2Y1ZDIyOTdjZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qX+FbZQrTRmZm02SQ5pqCsDPcAG H1Mqmtp5c/ABcrrjpMsJbHxbB30znPAJapdUs6L//9ujRaNjsN3EenV3GkBQWFp2 CTpg8NYSV1cEcIEnM3ncIYmEzFdtWm3ADAnWu0u0NGe6DRQkWqYjgdIfY6e0RHLU nSUjgjwIP58aYBewKPV/bggpLwtAi/izEYNN50KJOdY8piSVAssoiKMui0gHgxYY xQMTvp9ZePNxhRznasYi7xK2jGoP+MC8qo80iySRKzSZd09mi/hT1UfxEuxtkDUg My42ioVSTacXjwv/GPW0w/T2MXPvLR2N+96UFXA7CPiHps3mnE1a5mOT3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEix5W/elIxrpLz+5m5f10il8/3MB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFpDNs2d 7jNZeFXH94JlNfaojtrXWPMPbwduJO9GgXJNvggzsb2BJ4C+I8If5xY1LdOONxvz YYUO3IA0hnz+N+h3WgFkw5qD5onKTinicHEsDwWU7VwNgOUm52wtaNzpr7iLSi/b YYHzbWoZXmFW/cER85qO/SgJ7IELUYh4nDeo+VeTYxQHyHTa44v9R8Q+j5eedM0Z 5pwDDR58MTv9zuhCh9774QFoon7UEBpUABf4msPAiPxu49cE9mfcUvPGoTVCv3+P +mISAL9EeqgPJLfUYyhZFftUxTRiWx/MQM4SslShIcTJ4KBr29ZR+8zC2Lw/oP68 LC8Hbpccl7/4sg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:47:52 2026 by rpki-client