This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json) Hash identifier: 6UXRm/F21Y43HvwTkeJqXIuZC/IVTPzTgLscj+JVdNE= Subject key identifier: FC:4D:34:F0:C3:ED:20:91:35:A9:16:75:52:5A:1C:72:A8:97:87:D5 Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4 Certificate serial: 019BF5752583F531AAA25ADE74DF2AC7C0FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 14:00:53 +0000 Manifest this update: Sun 25 Jan 2026 14:00:53 +0000 Manifest next update: Mon 26 Jan 2026 14:00:53 +0000 Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=) 2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=) 3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=) 4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=) 5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=) 6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: kWW/0GUKVpZfdiLJ/C4sI9LQLJKDbhtSHLc13ePVJMQ=) 7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=) 8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=) 9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:25:83:f5:31:aa:a2:5a:de:74:df:2a:c7:c0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4 Validity Not Before: Jan 25 14:00:53 2026 GMT Not After : Jan 26 14:00:53 2026 GMT Subject: CN=fc4d34f0c3ed209135a91675525a1c72a89787d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:51:89:47:a6:ca:63:aa:1f:3e:f7:e3:30:0e: 40:f6:93:f4:5e:0b:92:94:af:91:98:f1:ea:7b:74: c4:22:9d:45:6e:e2:65:b6:34:be:94:c4:3c:df:8f: 74:9d:fd:f5:11:ed:7a:6b:99:df:66:09:db:62:42: 03:51:67:00:ea:f4:53:8b:77:80:7e:3a:27:0d:02: ae:db:1d:c2:e7:b0:05:d6:86:28:f8:9f:84:61:59: 48:0d:c7:93:4c:6b:df:d0:02:c5:b1:14:92:73:a4: b3:8d:1f:0e:39:63:88:b5:34:7e:0a:44:0e:fb:91: 93:ec:88:ad:88:bd:85:f9:28:10:52:ac:14:aa:8c: b4:69:38:2c:93:a0:27:ed:25:be:e1:c4:e8:4b:49: 22:78:56:26:e4:09:b8:9e:57:d8:a6:d2:46:9f:ea: 16:b9:bd:db:ef:51:c8:57:a2:a3:27:7c:f8:a7:5d: 54:b6:1f:51:40:6f:ce:bd:6d:85:81:9c:fb:c6:83: 21:d6:66:c1:82:eb:33:c0:ce:cd:6d:ae:fe:e4:cf: b7:70:45:78:4a:8d:ae:24:1b:b8:4d:e5:98:f4:d4: 11:62:76:fb:fa:3a:a6:9a:3e:02:63:62:39:bd:b5: 12:75:ac:02:15:ba:fd:c3:7b:6a:03:22:a7:81:e7: 46:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4D:34:F0:C3:ED:20:91:35:A9:16:75:52:5A:1C:72:A8:97:87:D5 X509v3 Authority Key Identifier: keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b9:36:7e:17:b1:68:26:b9:62:e9:98:42:2b:30:e9:23:f6: 4c:a7:4f:8f:aa:64:3a:60:f9:54:e0:6d:c2:22:aa:65:61:86: 85:73:ae:6e:b4:6a:34:ba:33:08:e1:e3:79:bf:e4:94:6b:09: c8:94:af:0d:9f:9a:1e:a2:ed:96:6f:75:04:ae:c9:b2:39:8a: 5f:49:1a:9b:93:7b:c4:e9:32:31:19:c4:17:27:26:4f:78:85: 6f:8b:e0:4e:9e:17:c7:4b:d2:39:63:12:a0:97:89:fc:2d:bc: 6a:7b:9d:9f:ea:db:5d:f2:39:f6:c1:3b:52:68:3b:f7:ab:30: ec:c3:ce:8b:4e:6e:ee:f6:82:68:55:87:2c:99:31:16:fc:82: 91:b6:0f:f2:76:c8:d3:fe:a2:c0:18:ef:26:db:65:b9:94:7a: 02:a9:ca:b5:a0:c3:2f:53:2b:74:59:62:2e:1c:fc:f7:34:61: 40:8f:d6:c2:00:11:74:0c:9b:33:5a:20:c6:88:26:92:47:57: f7:c4:b5:d5:98:59:30:b4:92:46:f8:1d:25:7f:76:ad:80:6b: c4:a3:df:cf:40:6c:b2:1f:8e:25:60:65:36:c0:cf:26:5e:81: 0e:17:a7:bd:ed:02:57:4f:ca:ef:af:6f:15:d5:c2:f0:11:dc: 4b:2c:9b:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dSWD9TGqolredN8qx8D7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWExNGNlOWQyNTIzOWI5MmZlNWFiY2U1MzI1MTUwNDRj MWFiYTQwHhcNMjYwMTI1MTQwMDUzWhcNMjYwMTI2MTQwMDUzWjAzMTEwLwYDVQQD EyhmYzRkMzRmMGMzZWQyMDkxMzVhOTE2NzU1MjVhMWM3MmE4OTc4N2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVGJR6bKY6ofPvfjMA5A9pP0XguS lK+RmPHqe3TEIp1FbuJltjS+lMQ83490nf31Ee16a5nfZgnbYkIDUWcA6vRTi3eA fjonDQKu2x3C57AF1oYo+J+EYVlIDceTTGvf0ALFsRSSc6SzjR8OOWOItTR+CkQO +5GT7IitiL2F+SgQUqwUqoy0aTgsk6An7SW+4cToS0kieFYm5Am4nlfYptJGn+oW ub3b71HIV6KjJ3z4p11Uth9RQG/OvW2FgZz7xoMh1mbBguszwM7Nba7+5M+3cEV4 So2uJBu4TeWY9NQRYnb7+jqmmj4CY2I5vbUSdawCFbr9w3tqAyKngedGdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxNNPDD7SCRNakWdVJaHHKol4fVMB8GA1UdIwQY MBaAFDUaFM6dJSObkv5avOUyUVBEwaukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEt Mjk1Mzg5NGIxZjZkLzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEtMjk1Mzg5NGIxZjZk LzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrk2fhex aCa5YumYQisw6SP2TKdPj6pkOmD5VOBtwiKqZWGGhXOubrRqNLozCOHjeb/klGsJ yJSvDZ+aHqLtlm91BK7JsjmKX0kam5N7xOkyMRnEFycmT3iFb4vgTp4Xx0vSOWMS oJeJ/C28anudn+rbXfI59sE7Umg796sw7MPOi05u7vaCaFWHLJkxFvyCkbYP8nbI 0/6iwBjvJttluZR6AqnKtaDDL1MrdFliLhz89zRhQI/WwgARdAybM1ogxogmkkdX 98S11ZhZMLSSRvgdJX92rYBrxKPfz0Bssh+OJWBlNsDPJl6BDhenve0CV0/K769v FdXC8BHcSyyb0g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:44 2026 by rpki-client