This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json) Hash identifier: KQImcML8zX41xyruR53G5F9LgYJI8WFNXOMqhnG8ctM= Subject key identifier: CF:E0:97:4F:52:F0:B8:D0:13:1E:4D:25:D2:84:B1:AF:57:CA:21:5A Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46 Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046 Certificate serial: 019BF65110289209D700928EF0222B364E7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 18:01:06 +0000 Manifest this update: Sun 25 Jan 2026 18:01:06 +0000 Manifest next update: Mon 26 Jan 2026 18:01:06 +0000 Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: yKX7rBkgS2HDaukn1t3nSQ00l1q6CcZJstpqdJJYPww=) 2: t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa (hash: a0O/Q/ykMMVF0x4s18Lt51/lK7kz7CmF4jPcpVsCuhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:10:28:92:09:d7:00:92:8e:f0:22:2b:36:4e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046 Validity Not Before: Jan 25 18:01:06 2026 GMT Not After : Jan 26 18:01:06 2026 GMT Subject: CN=cfe0974f52f0b8d0131e4d25d284b1af57ca215a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:ce:71:fb:40:a2:6c:5c:52:c3:a6:1c:fe: 3f:49:b8:c8:ea:46:ec:69:ec:2c:1f:f1:13:06:52: 58:26:51:cd:ac:51:0b:59:b2:37:22:08:f3:af:f0: cf:48:73:2e:f2:ff:9c:a4:77:6a:8a:7c:90:04:d6: f6:fe:37:30:e9:cd:40:fe:b5:ad:d0:b2:fd:aa:7e: 6b:1e:f2:bd:17:ee:60:16:fa:95:85:be:10:18:08: e0:bc:10:24:86:5b:61:7f:05:11:2d:bb:72:3b:89: 0a:6c:ba:75:63:47:38:12:ba:95:c3:80:3c:79:93: 21:41:a4:24:0c:95:7b:2a:90:34:de:41:ee:56:d1: af:1b:e1:d2:56:32:10:f5:a1:c1:d7:2c:cc:ef:0c: c0:87:90:54:7e:fe:bf:1b:0f:0e:79:20:d9:42:e9: fa:91:b4:f5:9a:69:e3:38:6b:56:51:38:a0:bd:aa: 42:d8:e1:09:33:a6:dd:fb:b2:af:3e:44:61:78:c5: 4c:ec:2d:4b:f7:b2:5d:e9:b0:d2:38:71:b1:0d:8b: cc:73:ce:ab:d0:c1:4c:60:0c:b7:29:d4:e2:b8:44: 02:03:05:41:28:17:7e:f6:cf:6f:94:d0:2a:95:d0: 33:10:72:8c:76:bb:4d:6c:f0:19:58:45:d2:31:ac: bb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E0:97:4F:52:F0:B8:D0:13:1E:4D:25:D2:84:B1:AF:57:CA:21:5A X509v3 Authority Key Identifier: keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ed:46:e6:d7:02:09:1d:aa:23:71:83:31:2d:f1:85:60:6a: f1:b2:fa:79:32:ae:ac:4d:1f:bb:46:62:af:d0:2b:fd:90:b0: 3a:8d:32:57:66:5b:d3:77:78:0f:6f:f2:a9:bd:b4:d5:ae:51: 9a:65:bd:e6:8f:8c:14:7d:34:9f:47:ac:23:6b:18:9d:2d:74: 75:19:dc:b5:b6:fc:c0:9d:61:e3:dd:e6:16:89:65:f2:79:4f: 0d:8a:e6:94:31:2f:be:c9:64:02:16:fe:8f:5a:b5:9f:f5:6a: 5a:8d:c2:bb:9c:cf:d4:cb:e5:1b:b8:62:7e:5c:47:a0:3a:4f: 09:74:f8:1c:b0:56:f0:45:dd:71:9f:2b:84:22:ba:c2:da:42: e6:b9:96:3f:1b:56:90:92:27:67:b1:24:c4:26:34:04:20:b7: 6d:ac:d5:93:a9:01:be:17:e9:a5:4b:41:b4:0f:a6:6e:89:0b: 62:8a:a8:5f:38:cd:27:d6:7d:29:b6:0e:f4:bc:89:73:0b:bf: fd:30:be:43:1a:94:9f:33:80:61:6f:70:80:ac:81:11:be:eb: ed:80:6a:29:f0:5b:f6:23:7a:9c:fb:59:c7:99:b2:26:97:79: e6:67:2c:df:ea:c3:0e:86:10:67:d5:47:ed:92:64:ea:7e:5b: 99:7d:c1:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2URAokgnXAJKO8CIrNk56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzJiYTFjNmQwYjAyYmVmZTY4Y2M5NGFlOWQyZGUzMTA3 YTYwNDYwHhcNMjYwMTI1MTgwMTA2WhcNMjYwMTI2MTgwMTA2WjAzMTEwLwYDVQQD EyhjZmUwOTc0ZjUyZjBiOGQwMTMxZTRkMjVkMjg0YjFhZjU3Y2EyMTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszTOcftAomxcUsOmHP4/SbjI6kbs aewsH/ETBlJYJlHNrFELWbI3Igjzr/DPSHMu8v+cpHdqinyQBNb2/jcw6c1A/rWt 0LL9qn5rHvK9F+5gFvqVhb4QGAjgvBAkhlthfwURLbtyO4kKbLp1Y0c4ErqVw4A8 eZMhQaQkDJV7KpA03kHuVtGvG+HSVjIQ9aHB1yzM7wzAh5BUfv6/Gw8OeSDZQun6 kbT1mmnjOGtWUTigvapC2OEJM6bd+7KvPkRheMVM7C1L97Jd6bDSOHGxDYvMc86r 0MFMYAy3KdTiuEQCAwVBKBd+9s9vlNAqldAzEHKMdrtNbPAZWEXSMay75wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/gl09S8LjQEx5NJdKEsa9XyiFaMB8GA1UdIwQY MBaAFDQyuhxtCwK+/mjMlK6dLeMQemBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgt MjdiODdiZmJlZTdiLzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgtMjdiODdiZmJlZTdi LzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuO1G5tcC CR2qI3GDMS3xhWBq8bL6eTKurE0fu0Zir9Ar/ZCwOo0yV2Zb03d4D2/yqb201a5R mmW95o+MFH00n0esI2sYnS10dRnctbb8wJ1h493mFoll8nlPDYrmlDEvvslkAhb+ j1q1n/VqWo3Cu5zP1MvlG7hiflxHoDpPCXT4HLBW8EXdcZ8rhCK6wtpC5rmWPxtW kJInZ7EkxCY0BCC3bazVk6kBvhfppUtBtA+mbokLYoqoXzjNJ9Z9KbYO9LyJcwu/ /TC+QxqUnzOAYW9wgKyBEb7r7YBqKfBb9iN6nPtZx5myJpd55mcs3+rDDoYQZ9VH 7ZJk6n5bmX3BjQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:31 2026 by rpki-client