This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft File: NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft (raw, json) Hash identifier: MngKx6Z8F82ApR4DHQkq9c1pa5DGa2cs1FsYuNAjrG0= Subject key identifier: BB:92:5E:9E:87:E6:34:C2:FE:76:EF:24:A9:60:77:99:52:89:BB:CB Authority key identifier: 36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4 Certificate issuer: /CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4 Certificate serial: 019BF91BFE90BF2BC8F9C4200A323DFBE9C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft Manifest number: 0A26 Signing time: Mon 26 Jan 2026 07:01:59 +0000 Manifest this update: Mon 26 Jan 2026 07:01:59 +0000 Manifest next update: Tue 27 Jan 2026 07:01:59 +0000 Files and hashes: 1: Gcvg1TOFDjpajp7odbqwFDKpBAs.roa (hash: UMt5peYripqOkorgu+LitEPMKkctWUjnSWw9aPRzg/0=) 2: NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl (hash: HoTqed51v7P2g+F/8dzW/Cn7stnPQAw8UXh1KEKL5Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:fe:90:bf:2b:c8:f9:c4:20:0a:32:3d:fb:e9:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4 Validity Not Before: Jan 26 07:01:59 2026 GMT Not After : Jan 27 07:01:59 2026 GMT Subject: CN=bb925e9e87e634c2fe76ef24a96077995289bbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d3:bc:4a:78:67:a2:63:e6:48:65:47:4a:06: a7:2c:cd:9b:f5:a2:0b:1d:99:da:bf:39:87:75:48: cd:14:ae:d5:4e:7a:d5:98:9d:ab:8d:3f:f1:ec:4a: ea:7e:ee:f9:f3:52:37:43:44:f1:37:d0:e9:d9:fc: f7:16:f4:fe:7f:ed:2f:4e:24:7d:63:5a:be:dc:02: 90:a8:4b:b5:92:27:63:4c:d6:62:6e:5b:e7:4f:17: b5:92:ad:48:c0:07:d8:f3:05:9b:94:08:c7:a8:56: 20:02:c8:0c:3b:ba:7c:e1:44:11:a7:8a:03:6d:04: 66:3b:33:67:8b:8b:af:16:e6:42:a0:c0:38:e2:37: 8d:e7:eb:c0:d7:8d:ef:2b:d6:67:56:46:48:f0:b9: b4:3e:25:ad:05:67:48:f1:0b:f5:9e:81:69:f1:03: a1:1f:36:ef:78:a7:e9:8a:6d:61:cb:d2:2d:29:42: d2:cf:c4:a4:36:20:a2:b0:b7:84:91:da:27:10:a4: f8:b5:f4:de:eb:9a:78:08:d7:ff:00:c8:c2:10:97: 6f:ba:8f:db:fb:4b:53:b0:b0:90:98:04:67:dc:15: c7:15:c4:f9:f4:85:97:19:6d:4b:d7:84:27:ed:ab: 8d:8c:47:fd:dc:6d:56:4e:75:54:d0:66:b0:ad:4d: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:92:5E:9E:87:E6:34:C2:FE:76:EF:24:A9:60:77:99:52:89:BB:CB X509v3 Authority Key Identifier: keyid:36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c4:dd:9d:2d:56:53:0b:01:10:85:10:fb:07:21:de:6c:c4: ba:91:ce:2e:c2:bb:1b:ec:a3:f1:71:2c:f6:ff:e8:ec:a6:f7: 79:a3:10:7b:b2:86:58:17:d4:0a:95:6e:3c:8d:90:cf:54:e5: c2:a8:4c:f0:1d:24:b9:49:ae:b6:9d:61:4b:86:bc:97:b1:6b: 68:a9:2f:32:20:e1:e4:f9:96:b5:aa:11:6a:e0:f0:89:26:ac: 5a:ca:05:26:82:e2:79:89:80:b5:60:05:2b:01:b5:af:a9:16: c8:cc:43:af:08:1f:12:4b:8d:4a:2d:e5:75:59:e2:73:b4:e4: 4c:70:f2:5e:32:7c:a7:7f:63:ca:15:c7:37:f6:2d:aa:3e:a9: 93:7d:2a:b6:fc:77:3d:d3:5d:c6:4e:af:fa:72:34:a5:78:66: d0:fd:ca:d0:80:d8:b1:22:4b:49:4f:7d:21:38:29:4f:4f:db: d2:09:0c:00:00:e4:13:d7:c8:43:71:6e:15:7b:5f:03:38:42: a3:4b:52:62:80:70:d0:04:03:dc:d9:cc:da:cf:5e:32:71:bf: 89:a9:97:2b:34:06:ce:1c:3b:84:62:9c:ff:5c:7b:d3:e2:5c: 5d:04:00:a5:6b:5c:f8:54:bc:9b:a4:0e:89:19:46:97:30:45: 32:87:5d:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G/6QvyvI+cQgCjI9++nBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YTMyZTE0YTJmZmVjZTU2NzlmM2VkMTE3YzMwZmY3N2I0 NWIwZjQwHhcNMjYwMTI2MDcwMTU5WhcNMjYwMTI3MDcwMTU5WjAzMTEwLwYDVQQD EyhiYjkyNWU5ZTg3ZTYzNGMyZmU3NmVmMjRhOTYwNzc5OTUyODliYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtO8SnhnomPmSGVHSganLM2b9aIL HZnavzmHdUjNFK7VTnrVmJ2rjT/x7Erqfu7581I3Q0TxN9Dp2fz3FvT+f+0vTiR9 Y1q+3AKQqEu1kidjTNZiblvnTxe1kq1IwAfY8wWblAjHqFYgAsgMO7p84UQRp4oD bQRmOzNni4uvFuZCoMA44jeN5+vA143vK9ZnVkZI8Lm0PiWtBWdI8Qv1noFp8QOh HzbveKfpim1hy9ItKULSz8SkNiCisLeEkdonEKT4tfTe65p4CNf/AMjCEJdvuo/b +0tTsLCQmARn3BXHFcT59IWXGW1L14Qn7auNjEf93G1WTnVU0GawrU3ohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuSXp6H5jTC/nbvJKlgd5lSibvLMB8GA1UdIwQY MBaAFDajLhSi/+zlZ58+0RfDD/d7RbD0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFNdUZLTF83T1Zubno3UkY4TVA5M3RGc1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yZDYyMzctZTU4NC00YmVmLTljMzUt N2VmMjQwOTlkYjg1LzEvTnFNdUZLTF83T1Zubno3UkY4TVA5M3RGc1BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8yZDYyMzctZTU4NC00YmVmLTljMzUtN2VmMjQwOTlkYjg1 LzEvTnFNdUZLTF83T1Zubno3UkY4TVA5M3RGc1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcTdnS1W UwsBEIUQ+wch3mzEupHOLsK7G+yj8XEs9v/o7Kb3eaMQe7KGWBfUCpVuPI2Qz1Tl wqhM8B0kuUmutp1hS4a8l7FraKkvMiDh5PmWtaoRauDwiSasWsoFJoLieYmAtWAF KwG1r6kWyMxDrwgfEkuNSi3ldVnic7TkTHDyXjJ8p39jyhXHN/Ytqj6pk30qtvx3 PdNdxk6v+nI0pXhm0P3K0IDYsSJLSU99ITgpT0/b0gkMAADkE9fIQ3FuFXtfAzhC o0tSYoBw0AQD3NnM2s9eMnG/iamXKzQGzhw7hGKc/1x70+JcXQQApWtc+FS8m6QO iRlGlzBFModd2g== -----END CERTIFICATE-----Generated at Mon Jan 26 11:09:32 2026 by rpki-client