This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft File: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json) Hash identifier: YxFJYtyACfUxouCRwXt0J+F91I8IyCLUpMGUNbLNOlU= Subject key identifier: D6:37:00:AB:46:72:0F:1A:7F:CC:57:A1:4A:E0:EA:7A:58:DC:29:1C Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73 Certificate issuer: /CN=37a352e17af87ee2e5dc173d15543da63be55473 Certificate serial: 019BF5AC8748F7EE49E9C536BCF6BA9E6D2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft Manifest number: 0E9F Signing time: Sun 25 Jan 2026 15:01:23 +0000 Manifest this update: Sun 25 Jan 2026 15:01:23 +0000 Manifest next update: Mon 26 Jan 2026 15:01:23 +0000 Files and hashes: 1: Ltqr6spk6stgdejzEgmXDGQPXxU.roa (hash: /l66BwyFJAusu0nV1bBo2WvqQQiV2viPooH60Q/+I2o=) 2: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: UxJYDqtz+WqjVW6HydRT0UhSjE76OZmaStt7SpmsIf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:87:48:f7:ee:49:e9:c5:36:bc:f6:ba:9e:6d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473 Validity Not Before: Jan 25 15:01:23 2026 GMT Not After : Jan 26 15:01:23 2026 GMT Subject: CN=d63700ab46720f1a7fcc57a14ae0ea7a58dc291c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:23:bc:93:13:58:d8:e1:00:c0:a8:fc:2b: 82:9e:91:22:47:a6:90:90:27:b1:7a:ca:85:77:48: e4:e5:4b:50:e3:7f:fb:26:9c:27:7d:f4:60:59:ac: 86:5d:c6:07:89:36:d9:52:62:56:9c:4a:70:5e:4d: be:20:7d:e0:0f:f6:7d:c0:8e:3f:f8:b9:5a:82:11: 97:07:2b:e1:6b:ca:66:80:63:4e:fe:27:a1:17:46: 95:bc:e4:5b:28:a1:61:c2:08:f2:0a:4e:7a:77:70: 57:3c:68:a5:61:17:65:8d:46:7d:5b:ba:17:59:17: 0e:96:f6:48:d8:48:50:ad:2e:29:f4:5c:49:bb:4e: 5d:a3:a3:c0:7c:18:e7:0b:6c:0e:59:f3:93:7f:a8: 33:3c:e6:97:a6:e9:ce:93:3a:ee:1e:c1:68:74:1f: a8:ff:9b:5b:79:a8:70:2b:7a:b8:1d:9e:60:7c:c5: 8b:10:18:15:db:c6:34:be:24:d0:f7:5f:5c:ca:83: d0:91:6b:eb:d7:9c:39:af:1c:71:37:5a:dd:1b:e7: 38:4c:40:b2:38:78:08:3b:60:89:10:c6:3c:eb:92: 53:a8:50:fc:df:6e:57:0c:4e:62:7b:aa:09:97:c1: 87:a5:75:4e:3f:04:2b:7c:c6:3d:57:d9:d9:91:3d: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:37:00:AB:46:72:0F:1A:7F:CC:57:A1:4A:E0:EA:7A:58:DC:29:1C X509v3 Authority Key Identifier: keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f3:df:28:1f:a2:ab:3a:c7:9b:6b:a0:f8:8d:79:9c:5f:ad: a6:9a:7b:bf:33:00:66:6d:22:e8:2d:8f:95:70:3a:8f:ff:58: 0b:15:6a:59:3c:66:5e:10:11:08:8b:c1:5f:c0:fb:dd:c7:49: 08:fa:cf:0b:52:a4:0d:9f:d3:d3:5a:d7:c5:c3:65:8c:6c:31: 03:b2:da:4c:59:4c:b6:b2:87:c1:70:63:fc:bb:ab:cf:51:11: 2d:ae:09:40:d3:5c:8b:b3:31:f3:92:bb:26:79:b5:a7:69:79: 16:b9:76:b7:1c:98:bc:72:11:7f:06:6d:12:1d:0a:1b:a4:24: 59:99:9d:f7:8a:e1:16:1e:e5:fb:e9:3e:70:30:49:37:c0:ec: 53:15:f8:31:77:c2:cb:2a:16:a9:42:3d:06:84:88:38:9e:c7: f3:47:42:c8:7f:34:c0:cc:bf:6f:8a:c6:51:34:cd:0d:26:54: 7d:28:f8:54:56:90:23:ef:50:ab:e3:b9:e8:e4:8e:3b:8a:60: fe:cd:47:87:71:a8:97:c2:aa:3a:5b:15:e3:d4:9b:70:8b:88: 91:03:7f:ec:bc:9b:ae:87:0e:ca:5e:c5:b6:d6:87:e6:d3:d1: 50:fd:49:89:c7:e0:f4:9c:2f:b1:2a:95:78:e8:16:77:3f:67: 4a:27:29:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rIdI9+5J6cU2vPa6nm0qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTM1MmUxN2FmODdlZTJlNWRjMTczZDE1NTQzZGE2M2Jl NTU0NzMwHhcNMjYwMTI1MTUwMTIzWhcNMjYwMTI2MTUwMTIzWjAzMTEwLwYDVQQD EyhkNjM3MDBhYjQ2NzIwZjFhN2ZjYzU3YTE0YWUwZWE3YTU4ZGMyOTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlUjvJMTWNjhAMCo/CuCnpEiR6aQ kCexesqFd0jk5UtQ43/7JpwnffRgWayGXcYHiTbZUmJWnEpwXk2+IH3gD/Z9wI4/ +LlaghGXByvha8pmgGNO/iehF0aVvORbKKFhwgjyCk56d3BXPGilYRdljUZ9W7oX WRcOlvZI2EhQrS4p9FxJu05do6PAfBjnC2wOWfOTf6gzPOaXpunOkzruHsFodB+o /5tbeahwK3q4HZ5gfMWLEBgV28Y0viTQ919cyoPQkWvr15w5rxxxN1rdG+c4TECy OHgIO2CJEMY865JTqFD8325XDE5ie6oJl8GHpXVOPwQrfMY9V9nZkT2xxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNY3AKtGcg8af8xXoUrg6npY3CkcMB8GA1UdIwQY MBaAFDejUuF6+H7i5dwXPRVUPaY75VRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYt MzViMjFiZmZhZDRkLzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYtMzViMjFiZmZhZDRk LzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvPfKB+i qzrHm2ug+I15nF+tppp7vzMAZm0i6C2PlXA6j/9YCxVqWTxmXhARCIvBX8D73cdJ CPrPC1KkDZ/T01rXxcNljGwxA7LaTFlMtrKHwXBj/Lurz1ERLa4JQNNci7Mx85K7 Jnm1p2l5Frl2txyYvHIRfwZtEh0KG6QkWZmd94rhFh7l++k+cDBJN8DsUxX4MXfC yyoWqUI9BoSIOJ7H80dCyH80wMy/b4rGUTTNDSZUfSj4VFaQI+9Qq+O56OSOO4pg /s1Hh3Gol8KqOlsV49SbcIuIkQN/7LybrocOyl7FttaH5tPRUP1Jicfg9JwvsSqV eOgWdz9nSicpmw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:57 2026 by rpki-client