This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json) Hash identifier: Rneh0odpn3U83I5SFeHI7+Ay0NrLUaJRNI9u93mz1Ik= Subject key identifier: 76:53:4D:90:6F:D2:7C:29:41:7A:F2:8C:32:12:2E:DE:11:C5:5F:A4 Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94 Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94 Certificate serial: 019BF650C7EEA60436436FF0B595697AF82A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 18:00:47 +0000 Manifest this update: Sun 25 Jan 2026 18:00:47 +0000 Manifest next update: Mon 26 Jan 2026 18:00:47 +0000 Files and hashes: 1: JGC3hOQ65l3IVZSex1MpcfbZiyA.roa (hash: QObUgpT6rtusfHIb4HhFNGnIlZcsd+4RSYzLE+p//tY=) 2: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: KoJVByWJoc4YCoiLjykXyCaVoWNXCgwMGIyBYMMjIzg=) 3: lc9W2wBKoYqSI9KEszj4k6MVn6o.roa (hash: saKepJ0hHzAxA4OvfTff87GabrL2VL5zc0ZTtwa7RP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:c7:ee:a6:04:36:43:6f:f0:b5:95:69:7a:f8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94 Validity Not Before: Jan 25 18:00:47 2026 GMT Not After : Jan 26 18:00:47 2026 GMT Subject: CN=76534d906fd27c29417af28c32122ede11c55fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:e4:5e:4a:84:4d:c8:48:38:39:f9:ec:d3: ce:58:30:8e:86:74:22:ce:69:fb:10:ed:9d:0d:07: 6c:3f:6a:30:64:1d:60:ae:10:32:46:fc:96:d4:80: e5:da:c2:54:10:e8:2c:c9:75:16:73:23:55:a9:84: e2:a8:b0:ef:81:88:90:84:78:2e:12:50:32:3b:4e: d3:71:7c:c7:36:f1:fa:43:33:f1:2c:26:a6:8e:4e: 52:23:c5:df:e0:e5:6e:1c:ff:a3:a0:19:1a:9d:66: 3b:1b:78:c3:e2:91:cf:dc:10:1a:be:55:57:63:cb: 8d:e7:cc:7e:36:ff:23:8b:f6:fb:ec:86:05:d9:b8: ec:95:b9:85:5e:d0:3c:9e:19:40:0f:93:a9:1c:1c: 3e:97:9e:89:db:6c:7a:6f:d7:66:83:0a:bd:ab:73: 2b:e4:7a:1b:57:75:19:2e:33:9d:cd:3b:8d:1c:e0: 75:81:51:0d:f4:55:5a:8d:7a:78:97:88:df:7e:87: d7:39:48:1b:af:28:96:75:dc:34:3d:43:55:fb:fc: b2:a0:d9:81:bd:25:72:0a:b9:1c:05:89:66:68:74: be:75:41:b1:1f:78:a9:16:37:c4:e6:4e:a3:4b:28: 5f:b2:a3:fa:56:32:28:48:93:e6:9a:98:49:4a:53: 8c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:53:4D:90:6F:D2:7C:29:41:7A:F2:8C:32:12:2E:DE:11:C5:5F:A4 X509v3 Authority Key Identifier: keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6d:da:2e:ea:ac:2c:4b:22:96:52:b5:56:8a:e3:f1:c3:bb: 3d:8b:79:52:ee:67:b1:5e:b8:96:ab:96:4e:10:5a:15:dd:4c: 16:b6:24:69:de:19:d0:8f:89:80:da:55:24:70:db:28:58:4b: 86:49:8b:fd:a5:da:a0:d7:65:92:6e:61:32:ad:ec:96:ef:0f: e8:3f:ea:7d:2e:d4:54:58:63:ef:32:46:2d:b3:97:33:00:4a: c5:f5:67:66:f3:8f:d1:6f:2e:70:d4:af:71:8d:ec:a3:1e:ca: bf:f7:70:4e:62:21:d2:01:7e:b2:cd:dc:e8:c2:ca:d8:82:4b: e4:32:63:2e:3e:c2:de:1c:56:31:a4:46:47:49:f4:1d:eb:de: b6:e3:cf:4d:7e:b2:ad:cb:c4:a6:fa:31:41:fe:3c:f7:8b:bf: 09:c4:3f:e0:23:df:f7:b2:03:f1:2c:c1:3e:fd:41:3a:95:02: 33:3b:1e:c2:dc:6d:5d:06:3b:88:07:fd:43:2f:ad:ef:6b:41: 37:0c:06:ca:2d:92:63:da:97:41:85:62:71:c8:21:93:60:11: 9b:87:ee:b2:e6:bb:77:43:da:00:aa:5c:88:19:4d:64:74:3e: e3:a4:e3:a2:b5:3e:78:9c:28:d3:e9:a9:30:c6:f4:ac:b6:da: 24:63:87:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UMfupgQ2Q2/wtZVpevgqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZDdhNzIxZWRhNDU5ZWJkZjk4ZTAyOWY4N2M5MGE5ODBl ODFkOTQwHhcNMjYwMTI1MTgwMDQ3WhcNMjYwMTI2MTgwMDQ3WjAzMTEwLwYDVQQD Eyg3NjUzNGQ5MDZmZDI3YzI5NDE3YWYyOGMzMjEyMmVkZTExYzU1ZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7/kXkqETchIODn57NPOWDCOhnQi zmn7EO2dDQdsP2owZB1grhAyRvyW1IDl2sJUEOgsyXUWcyNVqYTiqLDvgYiQhHgu ElAyO07TcXzHNvH6QzPxLCamjk5SI8Xf4OVuHP+joBkanWY7G3jD4pHP3BAavlVX Y8uN58x+Nv8ji/b77IYF2bjslbmFXtA8nhlAD5OpHBw+l56J22x6b9dmgwq9q3Mr 5HobV3UZLjOdzTuNHOB1gVEN9FVajXp4l4jffofXOUgbryiWddw0PUNV+/yyoNmB vSVyCrkcBYlmaHS+dUGxH3ipFjfE5k6jSyhfsqP6VjIoSJPmmphJSlOMtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZTTZBv0nwpQXryjDISLt4RxV+kMB8GA1UdIwQY MBaAFPzXpyHtpFnr35jgKfh8kKmA6B2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jZjRhYjQtZTkxNC00MGUxLTgyZGYt MTRkYzdlYzA0OTVkLzEvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9jZjRhYjQtZTkxNC00MGUxLTgyZGYtMTRkYzdlYzA0OTVk LzEvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZm3aLuqs LEsillK1Vorj8cO7PYt5Uu5nsV64lquWThBaFd1MFrYkad4Z0I+JgNpVJHDbKFhL hkmL/aXaoNdlkm5hMq3slu8P6D/qfS7UVFhj7zJGLbOXMwBKxfVnZvOP0W8ucNSv cY3sox7Kv/dwTmIh0gF+ss3c6MLK2IJL5DJjLj7C3hxWMaRGR0n0HevetuPPTX6y rcvEpvoxQf4894u/CcQ/4CPf97ID8SzBPv1BOpUCMzsewtxtXQY7iAf9Qy+t72tB NwwGyi2SY9qXQYViccghk2ARm4fusua7d0PaAKpciBlNZHQ+46TjorU+eJwo0+mp MMb0rLbaJGOH2g== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:09 2026 by rpki-client