This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json) Hash identifier: RI1IUIStHEsvPiiJmZWDBktuqTS5GLb7B0P9lwyAi38= Subject key identifier: 89:99:A8:D0:14:D7:58:73:23:A7:1F:0E:30:C3:D2:C0:5A:FE:8C:83 Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b Certificate serial: 019BF83FA17CC606E93E3564B6E6DDA549EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft Manifest number: 02D3 Signing time: Mon 26 Jan 2026 03:01:18 +0000 Manifest this update: Mon 26 Jan 2026 03:01:18 +0000 Manifest next update: Tue 27 Jan 2026 03:01:18 +0000 Files and hashes: 1: DDkvvm20UwOj8A7Y_U-N1JKON2M.roa (hash: CztSHRDK9GU8Z8Q6g/s60OYynXKDEVEnijjY44XdV/w=) 2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: uinCA9xx1GQpoershreEHeTuoihGbtZUjRci6dBqIFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:a1:7c:c6:06:e9:3e:35:64:b6:e6:dd:a5:49:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b Validity Not Before: Jan 26 03:01:18 2026 GMT Not After : Jan 27 03:01:18 2026 GMT Subject: CN=8999a8d014d7587323a71f0e30c3d2c05afe8c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:ad:fd:bc:4b:a6:a5:73:93:28:92:0e:07: 69:c7:b5:da:de:8c:f7:23:b5:e7:a6:6e:ee:71:2b: 60:f1:96:bb:be:07:14:c2:e6:49:4d:25:fc:ea:5a: a0:b1:91:57:4f:2f:f2:0c:be:7e:7b:2e:88:78:d1: d3:ec:bd:0b:44:8c:b2:6e:b9:7c:da:8a:47:8b:a6: 5e:43:64:83:d6:4e:16:c8:d9:80:59:3d:93:34:70: a8:fe:d4:83:31:43:c0:2f:f6:48:47:2c:24:60:46: 47:90:ff:0f:6d:ce:c0:76:11:27:2a:77:9f:e5:10: d1:33:5d:cd:5c:8b:a7:aa:55:51:a4:7c:31:f6:2e: 44:3a:9c:92:1b:1d:e0:06:6f:75:eb:b7:dd:2b:28: 9d:12:26:0d:75:ca:a0:3c:2f:00:5d:8e:34:81:2d: 86:04:45:95:74:dc:6e:48:d0:a1:95:79:45:2d:67: 11:a4:70:03:85:fc:ec:b2:3e:cd:8f:dd:29:a8:79: c1:53:d1:48:c7:f1:b2:c5:8c:9c:e0:a3:3f:d0:d7: 88:c8:16:99:7d:73:06:20:a5:c2:fa:ff:3b:dd:ee: 89:a9:6b:a4:f3:5c:8e:27:4e:97:91:e6:86:0c:21: 5f:fd:c0:d9:e4:7d:c2:91:ef:5a:35:ff:f0:2a:ec: 5a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:99:A8:D0:14:D7:58:73:23:A7:1F:0E:30:C3:D2:C0:5A:FE:8C:83 X509v3 Authority Key Identifier: keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:af:ba:31:dc:af:30:31:ec:21:a1:a8:d2:b2:fe:34:dc:e9: 40:25:fa:48:ea:a2:6b:d9:6d:61:c9:b0:eb:80:ff:a5:2f:96: d6:15:15:11:2d:5a:6d:04:03:96:ab:d8:8a:85:b2:f3:08:57: ab:12:fe:e5:b0:d7:98:5f:b1:fc:42:4e:2b:27:46:9e:fb:97: 05:c9:b1:73:29:a3:9c:92:da:fb:c4:2d:c5:25:8a:c8:78:1e: dc:56:cd:f9:32:2d:c2:00:da:72:f2:b4:56:9f:b9:7e:71:54: 6d:c7:62:31:92:4d:4e:f6:81:b5:6f:44:a4:f0:0e:cb:8f:f1: 3c:11:15:fb:70:4c:56:2b:f2:1c:b9:90:51:5e:f2:7b:22:e8: 9f:c8:d7:e9:67:a5:6a:9f:69:ac:c2:9f:4a:39:7b:8c:b2:76: d8:eb:40:1f:f3:89:ca:ec:b5:0b:a0:03:82:4a:cc:a8:43:02: 7b:11:d3:39:48:b1:14:24:e8:14:ae:9e:85:dc:25:ee:72:d6: 6b:47:de:a6:d7:8f:57:a7:b2:5d:f6:82:f6:63:82:47:0c:c6: a3:a3:5e:70:2c:b2:37:af:0b:99:8e:a0:e4:0c:74:7d:f5:bf: 11:31:92:b2:a5:5c:97:13:7c:7e:ca:a4:f8:5f:7e:3e:de:07: 65:61:bb:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P6F8xgbpPjVktubdpUnuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDY3ZTUyYjRiNWIyNDEyZmVjMDE0OGRmYzZjYjFiMzRl OTI3NGIwHhcNMjYwMTI2MDMwMTE4WhcNMjYwMTI3MDMwMTE4WjAzMTEwLwYDVQQD Eyg4OTk5YThkMDE0ZDc1ODczMjNhNzFmMGUzMGMzZDJjMDVhZmU4YzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLyt/bxLpqVzkyiSDgdpx7Xa3oz3 I7Xnpm7ucStg8Za7vgcUwuZJTSX86lqgsZFXTy/yDL5+ey6IeNHT7L0LRIyybrl8 2opHi6ZeQ2SD1k4WyNmAWT2TNHCo/tSDMUPAL/ZIRywkYEZHkP8Pbc7AdhEnKnef 5RDRM13NXIunqlVRpHwx9i5EOpySGx3gBm9167fdKyidEiYNdcqgPC8AXY40gS2G BEWVdNxuSNChlXlFLWcRpHADhfzssj7Nj90pqHnBU9FIx/GyxYyc4KM/0NeIyBaZ fXMGIKXC+v873e6JqWuk81yOJ06XkeaGDCFf/cDZ5H3Cke9aNf/wKuxaMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImZqNAU11hzI6cfDjDD0sBa/oyDMB8GA1UdIwQY MBaAFJ8GflK0tbJBL+wBSN/Gyxs06SdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUt MDJhMDliN2E0ZWI3LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUtMDJhMDliN2E0ZWI3 LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOq+6Mdyv MDHsIaGo0rL+NNzpQCX6SOqia9ltYcmw64D/pS+W1hUVES1abQQDlqvYioWy8whX qxL+5bDXmF+x/EJOKydGnvuXBcmxcymjnJLa+8QtxSWKyHge3FbN+TItwgDacvK0 Vp+5fnFUbcdiMZJNTvaBtW9EpPAOy4/xPBEV+3BMVivyHLmQUV7yeyLon8jX6Wel ap9prMKfSjl7jLJ22OtAH/OJyuy1C6ADgkrMqEMCexHTOUixFCToFK6ehdwl7nLW a0feptePV6eyXfaC9mOCRwzGo6NecCyyN68LmY6g5Ax0ffW/ETGSsqVclxN8fsqk +F9+Pt4HZWG7YQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:38 2026 by rpki-client