This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json) Hash identifier: c5aIO4xPFKJAZLpohKClbSWeGWZ0t4RsGYd5Ssj3umQ= Subject key identifier: 1D:8A:96:48:B5:F7:36:7A:F3:6E:4F:0B:91:BB:D1:84:8F:F0:CA:F9 Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83 Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183 Certificate serial: 019BFA2D6B07BC3D7764F58190171451B89A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft Manifest number: 0BC0 Signing time: Mon 26 Jan 2026 12:00:39 +0000 Manifest this update: Mon 26 Jan 2026 12:00:39 +0000 Manifest next update: Tue 27 Jan 2026 12:00:39 +0000 Files and hashes: 1: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: X7yVrCM8xTrPtKTR1wwwgCfX9z5f9vpFMLciIQtc92E=) 2: PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa (hash: zpbHMlu/w1HEUchKRFkwd6YcheD+dLbmS6kNnfJbB7M=) 3: evxnjaip1AzjgILBjbohckUsyak.roa (hash: Ozs5nmK24Gf/BVVlEGVqHEOfnLsepuEnPvJPXeET8oo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:6b:07:bc:3d:77:64:f5:81:90:17:14:51:b8:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183 Validity Not Before: Jan 26 12:00:39 2026 GMT Not After : Jan 27 12:00:39 2026 GMT Subject: CN=1d8a9648b5f7367af36e4f0b91bbd1848ff0caf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b2:c9:4e:51:e0:97:fb:6d:e2:c8:7c:55:99: 3d:00:2f:5b:b5:dd:e1:36:e8:ca:4d:aa:74:ac:28: f1:12:9a:cf:68:0b:13:e8:ed:59:bd:3c:64:32:71: f3:a1:33:77:b5:6e:9f:7a:84:8b:3f:c6:c5:59:ea: e1:12:d0:11:d2:bc:93:6b:91:8b:fc:21:8b:f7:2c: 47:72:07:9a:7c:04:67:f1:7f:8a:75:49:cc:2d:e3: 1d:61:4b:4a:c3:a8:89:84:cd:cf:b2:3f:28:90:11: ca:54:b4:86:9b:bf:f6:72:40:6f:26:57:bd:a1:0f: bc:0b:3b:e3:76:13:72:55:7e:1e:81:c6:8f:98:6c: c1:52:93:ea:92:df:dc:54:11:43:28:a9:6f:94:b5: ca:f1:c0:9a:11:cf:2a:08:8c:c8:a7:54:ab:19:78: 5f:7b:93:64:15:ec:68:98:c9:5e:dd:30:34:ae:63: 04:98:4a:f8:16:d7:15:4f:bf:6c:1a:84:3b:6d:80: 76:92:d7:b7:04:83:80:fe:27:e2:bb:ab:6c:b7:4a: 66:15:e4:3c:5c:33:df:c6:7a:ec:ad:0c:e7:ff:e1: 66:95:83:f0:2d:03:0d:c3:95:2a:36:41:30:f9:76: ed:33:8d:f7:58:05:06:e0:a6:ff:3f:bb:d0:39:82: e9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8A:96:48:B5:F7:36:7A:F3:6E:4F:0B:91:BB:D1:84:8F:F0:CA:F9 X509v3 Authority Key Identifier: keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6e:b8:1d:7f:45:4d:73:81:e6:d9:0a:a5:57:d8:7e:0e:b2: 18:3e:7e:46:b9:15:69:ce:21:d2:ca:93:cc:28:75:27:6d:64: 3a:2d:d2:32:6b:29:21:d6:c9:d3:91:44:38:21:03:ef:2d:f3: be:5a:95:42:a6:e9:a5:9c:ea:6c:86:8e:56:50:b3:ba:5d:72: 7f:b9:ac:d8:21:e0:31:45:aa:ed:37:5a:9b:3f:fa:cd:b1:1b: 80:a7:0e:d3:cd:96:1e:6f:05:8e:58:a3:9e:d2:ee:5e:68:fd: 24:95:e2:bc:be:15:53:f9:ca:38:e8:14:ad:bb:56:9a:22:68: 08:98:a8:e8:3f:e2:fa:2b:65:77:61:ee:9e:7f:04:36:3d:eb: 54:77:de:62:e7:49:1c:b5:0d:53:71:34:dc:72:5e:2f:14:8f: 95:b0:a4:0a:57:b8:b1:27:4e:ce:e5:f1:a5:47:c7:45:f5:19: e8:15:ca:08:03:76:ca:42:d5:6b:b5:25:1c:85:db:6d:06:5e: 57:c2:f7:06:d6:c4:0f:a3:af:11:45:8b:35:da:4e:32:3b:0e: 51:43:d1:be:eb:ce:9b:a8:bd:80:b8:4a:72:40:9c:2b:e3:9d: d3:f0:bc:3e:e2:72:81:18:af:73:e2:15:d4:fd:0b:d0:0f:6f: 23:67:57:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LWsHvD13ZPWBkBcUUbiaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTRmNjBiMGU1MDg3MjZkZGU2OGMxYzI1NWQwNGJkMjFh M2ExODMwHhcNMjYwMTI2MTIwMDM5WhcNMjYwMTI3MTIwMDM5WjAzMTEwLwYDVQQD EygxZDhhOTY0OGI1ZjczNjdhZjM2ZTRmMGI5MWJiZDE4NDhmZjBjYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7LJTlHgl/tt4sh8VZk9AC9btd3h NujKTap0rCjxEprPaAsT6O1ZvTxkMnHzoTN3tW6feoSLP8bFWerhEtAR0ryTa5GL /CGL9yxHcgeafARn8X+KdUnMLeMdYUtKw6iJhM3Psj8okBHKVLSGm7/2ckBvJle9 oQ+8CzvjdhNyVX4egcaPmGzBUpPqkt/cVBFDKKlvlLXK8cCaEc8qCIzIp1SrGXhf e5NkFexomMle3TA0rmMEmEr4FtcVT79sGoQ7bYB2kte3BIOA/ifiu6tst0pmFeQ8 XDPfxnrsrQzn/+FmlYPwLQMNw5UqNkEw+XbtM433WAUG4Kb/P7vQOYLpQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2Klki19zZ6825PC5G70YSP8Mr5MB8GA1UdIwQY MBaAFDTk9gsOUIcm3eaMHCVdBL0ho6GDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYt ZDU4YjA5NGRmMDZjLzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYtZDU4YjA5NGRmMDZj LzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHW64HX9F TXOB5tkKpVfYfg6yGD5+RrkVac4h0sqTzCh1J21kOi3SMmspIdbJ05FEOCED7y3z vlqVQqbppZzqbIaOVlCzul1yf7ms2CHgMUWq7Tdamz/6zbEbgKcO082WHm8Fjlij ntLuXmj9JJXivL4VU/nKOOgUrbtWmiJoCJio6D/i+itld2Hunn8ENj3rVHfeYudJ HLUNU3E03HJeLxSPlbCkCle4sSdOzuXxpUfHRfUZ6BXKCAN2ykLVa7UlHIXbbQZe V8L3BtbED6OvEUWLNdpOMjsOUUPRvuvOm6i9gLhKckCcK+Od0/C8PuJygRivc+IV 1P0L0A9vI2dXbQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:31 2026 by rpki-client