This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft File: nSAoCNH5FFVeG9WcFncof_mztZA.mft (raw, json) Hash identifier: H2KqhuRky9ceOdIMg31WVephHlrEJ6jH226Uo3lQKqU= Subject key identifier: 14:DF:E3:4F:5F:74:01:92:BC:27:F5:E4:3C:7B:FC:77:F7:1A:B3:44 Authority key identifier: 9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90 Certificate issuer: /CN=9d202808d1f914555e1bd59c1677287ff9b3b590 Certificate serial: 019BF72CDC618DDEC66919F5053637FBA921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft Manifest number: 11F3 Signing time: Sun 25 Jan 2026 22:01:10 +0000 Manifest this update: Sun 25 Jan 2026 22:01:10 +0000 Manifest next update: Mon 26 Jan 2026 22:01:10 +0000 Files and hashes: 1: 8hQk0KTYs3g5ZR66-EC5Vv0X6G8.roa (hash: xP2My60JlMvvPw+zYTcbdyBWhfmdlTseIN2HIlpIMRY=) 2: nSAoCNH5FFVeG9WcFncof_mztZA.crl (hash: V48Hy86N1JPhHVn+PlfO1I7MAlzT07NJ3QGVAp2lNaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:dc:61:8d:de:c6:69:19:f5:05:36:37:fb:a9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d202808d1f914555e1bd59c1677287ff9b3b590 Validity Not Before: Jan 25 22:01:10 2026 GMT Not After : Jan 26 22:01:10 2026 GMT Subject: CN=14dfe34f5f740192bc27f5e43c7bfc77f71ab344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:db:ce:f0:24:1a:be:76:5c:78:a1:d6:51:64: 7e:c6:2c:8e:75:76:50:72:a1:44:38:f3:f2:83:79: cf:a4:9b:f4:a9:fe:ee:a9:a4:ee:e8:d4:17:b6:ce: a0:9a:e8:3c:bd:a0:25:18:b8:62:2b:2b:0a:90:a3: 69:18:a5:0f:fc:5a:ce:2e:a7:4f:26:69:18:59:dd: 82:de:e9:7a:34:f2:8b:94:33:93:2d:e0:02:2f:fb: 36:d7:f6:5e:25:90:32:20:44:ad:4f:01:aa:0c:4a: 82:18:7b:08:61:b6:94:09:80:34:9b:d6:ff:76:91: 6d:5c:16:0f:41:87:90:e9:b6:4c:05:b2:14:52:af: 76:fa:1c:38:86:84:2e:25:a1:be:6c:95:f9:3d:de: db:f2:49:e8:ea:67:c6:aa:0d:6c:3f:fa:bc:5d:ad: d2:18:80:de:51:21:d3:ba:ae:02:fc:b0:14:20:71: 29:af:b0:a8:45:a1:9c:9b:8e:79:de:8d:d9:68:4c: 91:78:e8:df:a1:b8:d2:10:df:48:45:cc:b2:17:7c: fd:65:d0:92:8f:24:a2:bb:18:b7:8d:ed:a8:65:2a: e3:87:48:b2:17:66:da:ef:64:49:94:ce:e5:00:dd: 0b:03:0e:e0:7c:24:5c:06:6c:9a:63:fe:a7:d2:55: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DF:E3:4F:5F:74:01:92:BC:27:F5:E4:3C:7B:FC:77:F7:1A:B3:44 X509v3 Authority Key Identifier: keyid:9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:13:46:72:1c:67:c4:2b:74:2f:f3:45:03:1a:73:70:37:a9: 8b:c7:c9:ae:4a:bf:24:a3:fc:8f:23:05:39:1c:9b:c3:1d:1f: 5d:63:65:60:20:86:2c:3a:77:7a:0f:3a:04:c4:44:8c:4a:4b: 20:83:59:8a:65:08:ae:41:e0:2f:a9:8b:f9:9a:01:a6:0d:be: e4:11:bf:68:b8:59:96:08:65:26:27:ef:2d:a4:be:f8:4b:7b: 0f:ec:b4:a4:b5:f1:fb:e5:42:c8:0f:c1:88:6c:bd:b4:c8:a4: 51:a3:40:1a:a0:b0:61:66:3e:1e:29:ee:4c:fb:6f:87:db:fb: be:76:00:97:34:8b:14:ad:08:16:a4:fa:bf:f0:74:75:7a:d6: b6:50:d2:76:1d:44:9a:82:cc:4d:77:11:f7:d5:af:3c:e7:c1: ee:18:14:66:02:50:1f:c6:49:8d:62:3d:00:e9:ce:99:87:d3: d9:d5:f0:2b:a3:96:5e:e9:e1:88:d6:ac:75:5f:ec:fb:7b:13: 28:cc:e8:de:be:5c:d3:6b:bf:76:9f:4e:fd:91:99:59:34:21: 49:69:59:46:1b:2c:bc:2a:5b:32:87:3a:4b:df:b6:88:09:b3: 0c:dd:d5:07:74:b3:34:6d:2d:05:b6:e0:3a:ef:b1:2f:56:88: e5:9e:8c:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LNxhjd7GaRn1BTY3+6khMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjAyODA4ZDFmOTE0NTU1ZTFiZDU5YzE2NzcyODdmZjli M2I1OTAwHhcNMjYwMTI1MjIwMTEwWhcNMjYwMTI2MjIwMTEwWjAzMTEwLwYDVQQD EygxNGRmZTM0ZjVmNzQwMTkyYmMyN2Y1ZTQzYzdiZmM3N2Y3MWFiMzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtvO8CQavnZceKHWUWR+xiyOdXZQ cqFEOPPyg3nPpJv0qf7uqaTu6NQXts6gmug8vaAlGLhiKysKkKNpGKUP/FrOLqdP JmkYWd2C3ul6NPKLlDOTLeACL/s21/ZeJZAyIEStTwGqDEqCGHsIYbaUCYA0m9b/ dpFtXBYPQYeQ6bZMBbIUUq92+hw4hoQuJaG+bJX5Pd7b8kno6mfGqg1sP/q8Xa3S GIDeUSHTuq4C/LAUIHEpr7CoRaGcm4553o3ZaEyReOjfobjSEN9IRcyyF3z9ZdCS jySiuxi3je2oZSrjh0iyF2ba72RJlM7lAN0LAw7gfCRcBmyaY/6n0lWWqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTf409fdAGSvCf15Dx7/Hf3GrNEMB8GA1UdIwQY MBaAFJ0gKAjR+RRVXhvVnBZ3KH/5s7WQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hNWMwNjktODA2MS00ZGVlLTk1Njgt ODgwYjJkZjU3ZjI1LzEvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9hNWMwNjktODA2MS00ZGVlLTk1NjgtODgwYjJkZjU3ZjI1 LzEvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChNGchxn xCt0L/NFAxpzcDepi8fJrkq/JKP8jyMFORybwx0fXWNlYCCGLDp3eg86BMREjEpL IINZimUIrkHgL6mL+ZoBpg2+5BG/aLhZlghlJifvLaS++Et7D+y0pLXx++VCyA/B iGy9tMikUaNAGqCwYWY+HinuTPtvh9v7vnYAlzSLFK0IFqT6v/B0dXrWtlDSdh1E moLMTXcR99WvPOfB7hgUZgJQH8ZJjWI9AOnOmYfT2dXwK6OWXunhiNasdV/s+3sT KMzo3r5c02u/dp9O/ZGZWTQhSWlZRhssvCpbMoc6S9+2iAmzDN3VB3SzNG0tBbbg Ou+xL1aI5Z6Mlw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:20 2026 by rpki-client