This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json) Hash identifier: CwZActIKddiwH8gCwRdOTw2s7+9WEWiuPDCDyMr64KQ= Subject key identifier: 85:58:44:46:AA:1F:25:01:8C:26:D1:8A:F2:5E:BA:5E:80:0B:05:44 Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92 Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392 Certificate serial: 019BF499DF4F12823BE7D0DD17B4BC0FDB2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft Manifest number: 07BA Signing time: Sun 25 Jan 2026 10:01:23 +0000 Manifest this update: Sun 25 Jan 2026 10:01:23 +0000 Manifest next update: Mon 26 Jan 2026 10:01:23 +0000 Files and hashes: 1: 0UIBS5-yp_HgF3ul5V_8sUFbmJ8.roa (hash: X8gXM4Et7DwBL6n3MCxosMtMRa/fbXbSkj6ESSoWPTQ=) 2: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: Xq91OHYv+FHaVIRBIlBuEM6KVkmD7hU7KvIdLTM8ekc=) 3: RIniPxpajpUN5jZiEOQ6rHPG0BQ.roa (hash: SsfgyzQKdx0THkyWEG2SQtmE73Hp/r/I7miQEdE9ZkI=) 4: Z0h4r8Cw7__xchKsVvU8nksAU0w.roa (hash: eVMH7lIJbIBD17QayaS20VTBZM68VJbN4Trnh4+uUoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:df:4f:12:82:3b:e7:d0:dd:17:b4:bc:0f:db:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392 Validity Not Before: Jan 25 10:01:23 2026 GMT Not After : Jan 26 10:01:23 2026 GMT Subject: CN=85584446aa1f25018c26d18af25eba5e800b0544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:52:cf:4f:78:4a:e3:22:39:c5:49:75:9a:66: c5:05:e8:a3:2e:1a:75:76:d1:e0:de:7f:e3:d2:61: 4f:5a:59:ed:72:cb:ed:74:b1:42:1f:99:d2:a0:6b: f4:ac:04:09:64:ac:f1:33:89:ec:8d:3c:b2:5e:3a: 97:49:de:20:00:eb:10:3e:f8:f2:bc:3f:73:d3:0f: 57:9a:8b:00:c8:9f:87:80:75:5a:11:c7:19:8e:6d: f9:26:b9:94:f1:8f:6b:b2:8e:2d:c0:86:49:e8:31: 14:5e:79:d5:b5:ce:bd:d1:6a:9f:7d:db:44:4b:0f: cd:41:e5:77:00:80:d8:27:86:55:2e:e4:aa:0a:b4: 9a:e0:5a:f9:22:2e:3f:41:98:c3:60:0f:b3:2d:ee: e7:71:3b:f3:84:69:5c:4e:93:55:14:f2:65:eb:6b: b0:9e:ad:f1:4c:62:1d:2f:83:00:50:8e:cb:29:6f: 48:05:b3:4f:38:73:9a:ac:6f:ea:38:e8:f1:c5:32: 46:38:84:31:65:37:58:51:88:93:fe:5e:1c:f1:7a: 65:6e:07:1f:c2:bd:db:ff:ec:ac:a9:9c:6b:d8:d3: 11:38:52:48:49:d6:49:5a:97:44:40:9a:e1:d2:a8: fa:22:d7:55:47:ba:77:ca:86:77:b4:ee:04:97:4c: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:58:44:46:AA:1F:25:01:8C:26:D1:8A:F2:5E:BA:5E:80:0B:05:44 X509v3 Authority Key Identifier: keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:37:81:22:59:cd:4e:56:9d:db:2e:79:bf:dc:d6:5c:a2:c7: 6d:6f:42:cf:0d:d3:fe:81:c6:04:20:d3:0a:d3:d8:4c:34:6f: 48:1d:b6:0a:bc:de:60:d9:b1:75:6e:4a:b2:96:87:08:77:43: 41:86:bd:66:1b:de:cd:99:06:df:af:c0:90:21:4b:72:a3:6f: e6:a8:25:1c:ef:0d:39:54:ad:44:05:42:0a:59:30:fb:9a:80: 9e:87:c7:6d:d2:c3:41:69:2e:c6:ba:9a:ac:06:11:00:3d:65: 71:e5:48:a1:3a:21:6e:a3:a2:8c:9d:d3:d3:f1:6d:64:7e:c1: 35:8d:8c:40:39:95:c0:73:97:ed:0a:b7:ba:d7:66:dd:fc:4f: 73:d6:68:11:01:74:a7:25:b8:f9:be:69:98:be:e4:ae:43:f1: 8b:d4:31:15:d5:ed:87:46:5e:e8:f0:8c:b0:32:df:d0:88:35: a1:d4:19:3d:2f:19:ba:f7:93:36:5d:50:e9:18:16:5f:73:66: 2a:30:cd:ce:41:29:76:7b:de:10:24:4f:a4:6c:46:a8:94:c3: c6:eb:6e:bb:37:b1:e7:c7:7d:0f:4f:53:d5:c7:7e:8e:36:83: 89:62:b9:e2:3e:8e:5b:7a:13:39:c0:5b:a3:5c:fd:fd:e1:21: fc:2f:74:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0md9PEoI759DdF7S8D9ssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MTMwMjJkZWRjMWY4ZjAxM2FhNmUzOTBmYTIzYmQyMmYx ZmUzOTIwHhcNMjYwMTI1MTAwMTIzWhcNMjYwMTI2MTAwMTIzWjAzMTEwLwYDVQQD Eyg4NTU4NDQ0NmFhMWYyNTAxOGMyNmQxOGFmMjVlYmE1ZTgwMGIwNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1LPT3hK4yI5xUl1mmbFBeijLhp1 dtHg3n/j0mFPWlntcsvtdLFCH5nSoGv0rAQJZKzxM4nsjTyyXjqXSd4gAOsQPvjy vD9z0w9XmosAyJ+HgHVaEccZjm35JrmU8Y9rso4twIZJ6DEUXnnVtc690WqffdtE Sw/NQeV3AIDYJ4ZVLuSqCrSa4Fr5Ii4/QZjDYA+zLe7ncTvzhGlcTpNVFPJl62uw nq3xTGIdL4MAUI7LKW9IBbNPOHOarG/qOOjxxTJGOIQxZTdYUYiT/l4c8Xplbgcf wr3b/+ysqZxr2NMROFJISdZJWpdEQJrh0qj6ItdVR7p3yoZ3tO4El0xuqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVYREaqHyUBjCbRivJeul6ACwVEMB8GA1UdIwQY MBaAFDYTAi3twfjwE6puOQ+iO9IvH+OSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjIt NDA2NjlhZDE5ZmI5LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjItNDA2NjlhZDE5ZmI5 LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzeBIlnN Tlad2y55v9zWXKLHbW9Czw3T/oHGBCDTCtPYTDRvSB22CrzeYNmxdW5KspaHCHdD QYa9ZhvezZkG36/AkCFLcqNv5qglHO8NOVStRAVCClkw+5qAnofHbdLDQWkuxrqa rAYRAD1lceVIoTohbqOijJ3T0/FtZH7BNY2MQDmVwHOX7Qq3utdm3fxPc9ZoEQF0 pyW4+b5pmL7krkPxi9QxFdXth0Ze6PCMsDLf0Ig1odQZPS8ZuveTNl1Q6RgWX3Nm KjDNzkEpdnveECRPpGxGqJTDxutuuzex58d9D09T1cd+jjaDiWK54j6OW3oTOcBb o1z9/eEh/C90Ww== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:04 2026 by rpki-client