This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json) Hash identifier: yfNRrn35a12772UrNeYsQHVxEebU+nGJSeQitVFrVmk= Subject key identifier: CC:69:40:80:A5:8A:A2:82:B2:54:94:91:C9:36:7B:2F:91:4B:32:D9 Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08 Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208 Certificate serial: 019BF79A81760E9E8990B8AC3709FD543D9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft Manifest number: 17F6 Signing time: Mon 26 Jan 2026 00:00:56 +0000 Manifest this update: Mon 26 Jan 2026 00:00:56 +0000 Manifest next update: Tue 27 Jan 2026 00:00:56 +0000 Files and hashes: 1: 07kKKUMgBwNlGH8ItBg5huXyjBo.roa (hash: 0Db0rW3HyxMoZLKg3qDXyoGcyEgSvoFlGL2izdT+lqA=) 2: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=) 3: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: //9Z7nekroLDC61G7pLJa4HJ9ZATKyjB+SM9MDTL67Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:81:76:0e:9e:89:90:b8:ac:37:09:fd:54:3d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208 Validity Not Before: Jan 26 00:00:56 2026 GMT Not After : Jan 27 00:00:56 2026 GMT Subject: CN=cc694080a58aa282b2549491c9367b2f914b32d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:24:3d:3a:6d:12:50:8e:3d:16:ab:e5:51: b0:5d:fe:9f:40:4b:72:b9:02:7f:b2:6b:9d:58:06: b3:7f:5b:2b:67:11:79:3a:c2:52:6f:c9:b7:7d:80: 6f:6c:72:84:fd:94:68:68:ae:8a:df:80:66:fa:0e: ab:8a:e1:41:a8:a8:78:79:f1:57:2e:42:d2:df:ea: 2a:f5:ff:fe:8e:fe:00:39:79:79:f0:22:ad:cc:fb: b5:72:4d:f5:0a:fe:74:92:70:40:4e:7c:30:92:18: 84:75:0e:45:42:60:ff:a1:44:ac:79:87:91:e4:21: d7:70:29:5f:d0:d8:fc:7c:ad:62:0b:11:07:6b:8f: 23:3a:eb:be:85:67:02:cd:05:cd:7e:93:4d:e4:99: 91:4a:a8:68:ce:24:0a:61:97:a1:5f:ae:b7:18:09: 75:59:4c:fd:fd:13:a5:19:22:dd:4e:c6:dc:30:93: c9:9f:70:b1:41:12:af:66:49:ac:2b:e0:d0:da:e6: d6:d8:a5:54:4f:a7:28:0a:c5:7d:8b:5f:7a:8e:e1: 73:fc:1c:de:95:1e:59:3e:f2:4a:1e:63:2f:43:20: 0e:98:9d:5c:42:db:4d:a3:0c:f3:15:cd:22:b3:e4: e8:4b:0b:21:e6:eb:ab:94:55:cd:c5:d8:74:05:a3: a2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:69:40:80:A5:8A:A2:82:B2:54:94:91:C9:36:7B:2F:91:4B:32:D9 X509v3 Authority Key Identifier: keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:11:b4:a0:cd:e1:25:d3:df:5c:69:3d:85:c4:50:56:ab:00: 59:f3:b4:93:59:df:7b:24:ff:cb:8b:a4:aa:a7:0e:c9:a1:65: fc:b6:57:18:36:81:a8:32:4d:48:92:2b:56:38:8b:a5:5f:25: b1:46:17:a6:47:d1:5a:a3:53:39:4a:20:04:a2:43:74:c9:e8: 2e:8c:33:ca:e1:d6:b4:8b:79:8a:3a:1a:70:45:21:b7:a8:e5: 38:aa:53:c9:57:9e:33:db:12:da:7d:e5:04:47:39:90:dc:aa: 87:ea:7a:00:90:5d:61:31:91:de:37:2e:f0:0c:9e:6d:41:a4: d2:42:1e:c3:b3:b4:78:23:8d:5a:7f:61:85:31:d1:db:11:6e: f3:29:a1:c9:5a:d0:d7:73:50:22:46:98:91:1a:d9:14:b7:f1: 4d:9a:e5:e3:cf:af:2d:06:ae:5d:9e:d7:a0:64:d7:36:e6:6a: 60:be:99:81:d8:d7:c7:e4:8a:d6:15:c7:0d:12:cf:fc:2c:e5: 2f:97:72:7f:bb:15:a7:55:ec:0c:5e:84:7a:7a:40:b4:8b:3d: b0:a4:48:8c:a9:6c:cb:29:26:32:b3:bb:a7:71:37:d1:81:3a: e1:a7:19:b5:a7:3e:9b:4e:5c:6e:4d:5f:45:83:08:c8:6d:42: d9:3c:2b:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3moF2Dp6JkLisNwn9VD2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWZiM2ZlYjE1YzAzYzRkMzRkOWZmNDQ0ZDlhZDdlMzAw NjcyMDgwHhcNMjYwMTI2MDAwMDU2WhcNMjYwMTI3MDAwMDU2WjAzMTEwLwYDVQQD EyhjYzY5NDA4MGE1OGFhMjgyYjI1NDk0OTFjOTM2N2IyZjkxNGIzMmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+QkPTptElCOPRar5VGwXf6fQEty uQJ/smudWAazf1srZxF5OsJSb8m3fYBvbHKE/ZRoaK6K34Bm+g6riuFBqKh4efFX LkLS3+oq9f/+jv4AOXl58CKtzPu1ck31Cv50knBATnwwkhiEdQ5FQmD/oUSseYeR 5CHXcClf0Nj8fK1iCxEHa48jOuu+hWcCzQXNfpNN5JmRSqhoziQKYZehX663GAl1 WUz9/ROlGSLdTsbcMJPJn3CxQRKvZkmsK+DQ2ubW2KVUT6coCsV9i196juFz/Bze lR5ZPvJKHmMvQyAOmJ1cQttNowzzFc0is+ToSwsh5uurlFXNxdh0BaOi3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxpQICliqKCslSUkck2ey+RSzLZMB8GA1UdIwQY MBaAFDRfs/6xXAPE002f9ETZrX4wBnIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUt YmM1NGIxMjExYjYwLzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUtYmM1NGIxMjExYjYw LzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhG0oM3h JdPfXGk9hcRQVqsAWfO0k1nfeyT/y4ukqqcOyaFl/LZXGDaBqDJNSJIrVjiLpV8l sUYXpkfRWqNTOUogBKJDdMnoLowzyuHWtIt5ijoacEUht6jlOKpTyVeeM9sS2n3l BEc5kNyqh+p6AJBdYTGR3jcu8AyebUGk0kIew7O0eCONWn9hhTHR2xFu8ymhyVrQ 13NQIkaYkRrZFLfxTZrl48+vLQauXZ7XoGTXNuZqYL6ZgdjXx+SK1hXHDRLP/Czl L5dyf7sVp1XsDF6EenpAtIs9sKRIjKlsyykmMrO7p3E30YE64acZtac+m05cbk1f RYMIyG1C2TwrIQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:49:43 2026 by rpki-client