This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json) Hash identifier: bkF5rxTOjfNvxGg92i9OKh0MszBCmgseOQznz9/9S7g= Subject key identifier: A8:A7:AF:C9:73:80:47:93:E2:B1:9C:B7:3E:BB:AC:D1:1A:69:13:BD Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4 Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4 Certificate serial: 019BF4622C2E3F8ED882C868BBF4C79E8B8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 09:00:33 +0000 Manifest this update: Sun 25 Jan 2026 09:00:33 +0000 Manifest next update: Mon 26 Jan 2026 09:00:33 +0000 Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: N2TikQpzG+Lt4mSnKe0kmpmn7RxX8Ac62S3wLA9Kgj4=) 2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=) 3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:2c:2e:3f:8e:d8:82:c8:68:bb:f4:c7:9e:8b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4 Validity Not Before: Jan 25 09:00:33 2026 GMT Not After : Jan 26 09:00:33 2026 GMT Subject: CN=a8a7afc973804793e2b19cb73ebbacd11a6913bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6b:51:9e:8b:81:86:d6:c9:d3:24:ec:47:a2: 77:3c:73:73:36:c6:0b:1e:ff:38:ea:99:d9:3f:04: 5b:e9:c2:59:9d:f6:a0:e6:e1:5c:c9:ea:e2:94:95: a1:5d:3c:51:07:c7:45:c8:07:e5:47:80:5b:26:38: 2a:0e:d1:59:11:b5:f8:92:26:78:8c:ce:2b:34:b5: 94:4a:93:22:2d:7a:86:99:13:8e:0d:a0:0f:c5:a7: 10:db:9c:2a:de:ac:f9:45:82:3b:66:80:87:16:f9: 8b:2e:0b:d2:c4:f0:e2:c9:e5:ca:1a:d7:0d:75:fa: 18:b7:6a:c4:03:19:ad:c5:ce:23:b0:c5:31:e4:9d: ee:16:8c:0a:ed:c2:df:93:70:c3:b7:a9:71:cf:2c: 64:21:90:51:3b:63:2e:bc:c6:f1:4e:cb:ef:fa:80: b6:58:d2:6e:d8:6a:18:c7:40:b8:6d:a1:a4:78:24: 11:5c:9b:db:fb:fb:7e:8f:76:bd:2d:03:91:74:15: 5d:b6:d9:71:4f:74:79:76:4f:30:67:87:9c:07:83: a5:c3:19:1b:90:0c:7f:47:06:39:72:8d:cc:fd:5a: 17:88:f3:b6:b7:95:b8:ec:28:8d:50:1a:22:05:0a: 9d:3f:0f:68:2d:98:e2:63:1a:60:55:73:0a:52:b7: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A7:AF:C9:73:80:47:93:E2:B1:9C:B7:3E:BB:AC:D1:1A:69:13:BD X509v3 Authority Key Identifier: keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:27:43:91:fd:c0:2d:84:90:43:b8:b0:c5:61:77:51:af:a6: 72:0a:07:a1:f3:36:22:fa:78:12:40:bc:44:e5:b8:9f:fb:db: ed:da:df:ff:d4:56:b7:4d:67:ec:ac:ba:c2:38:c1:da:a9:77: f4:4c:ec:e7:65:f6:34:d8:e0:3e:54:0d:03:78:c4:6a:50:4f: a4:f1:2b:fd:bf:15:2a:e4:0f:41:32:4f:71:9c:c1:32:89:d5: 7a:df:1f:fe:a3:9b:a2:16:58:31:75:13:d6:3f:c5:91:a2:c9: 3d:33:00:d3:fe:00:6c:40:5c:2d:16:f1:7e:c1:5f:93:f5:ed: 4e:5e:79:9d:fc:0d:97:46:45:7c:97:2f:06:59:3c:a9:7d:50: 3c:c9:52:9d:75:42:30:d6:63:c0:34:df:57:6c:53:d7:c9:a5: 77:8b:ce:06:fb:c8:43:fa:98:8f:ec:9f:89:da:12:a7:b0:e4: 39:3a:c3:75:de:fb:a8:a9:a7:03:15:3c:78:0b:ae:bc:91:f2: 71:55:d9:80:ea:45:b8:0d:98:25:6d:5e:6d:83:79:b6:f1:a0: 06:9d:fe:14:33:85:6f:c6:1a:7f:ac:15:c2:ee:41:e0:cb:1b: 6e:2c:8f:48:24:bb:22:71:86:7f:e9:e6:ce:18:0d:17:41:cd: 6d:ee:08:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YiwuP47Ygshou/THnouMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MThiZTA0NDE3YTZiY2I5ZjMzOTQyYTYzMTUxOGJlNTMz ZmZhZjQwHhcNMjYwMTI1MDkwMDMzWhcNMjYwMTI2MDkwMDMzWjAzMTEwLwYDVQQD EyhhOGE3YWZjOTczODA0NzkzZTJiMTljYjczZWJiYWNkMTFhNjkxM2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWtRnouBhtbJ0yTsR6J3PHNzNsYL Hv846pnZPwRb6cJZnfag5uFcyerilJWhXTxRB8dFyAflR4BbJjgqDtFZEbX4kiZ4 jM4rNLWUSpMiLXqGmROODaAPxacQ25wq3qz5RYI7ZoCHFvmLLgvSxPDiyeXKGtcN dfoYt2rEAxmtxc4jsMUx5J3uFowK7cLfk3DDt6lxzyxkIZBRO2MuvMbxTsvv+oC2 WNJu2GoYx0C4baGkeCQRXJvb+/t+j3a9LQORdBVdttlxT3R5dk8wZ4ecB4Olwxkb kAx/RwY5co3M/VoXiPO2t5W47CiNUBoiBQqdPw9oLZjiYxpgVXMKUrehtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKinr8lzgEeT4rGctz67rNEaaRO9MB8GA1UdIwQY MBaAFDYYvgRBemvLnzOUKmMVGL5TP/r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMt MjI2OGU5N2E4YmMxLzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMtMjI2OGU5N2E4YmMx LzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQidDkf3A LYSQQ7iwxWF3Ua+mcgoHofM2Ivp4EkC8ROW4n/vb7drf/9RWt01n7Ky6wjjB2ql3 9Ezs52X2NNjgPlQNA3jEalBPpPEr/b8VKuQPQTJPcZzBMonVet8f/qObohZYMXUT 1j/FkaLJPTMA0/4AbEBcLRbxfsFfk/XtTl55nfwNl0ZFfJcvBlk8qX1QPMlSnXVC MNZjwDTfV2xT18mld4vOBvvIQ/qYj+yfidoSp7DkOTrDdd77qKmnAxU8eAuuvJHy cVXZgOpFuA2YJW1ebYN5tvGgBp3+FDOFb8Yaf6wVwu5B4MsbbiyPSCS7InGGf+nm zhgNF0HNbe4Ibg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:50:25 2026 by rpki-client