This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json) Hash identifier: W4/aubKM3LR7JHOXL5Yo0kvvOw2kD3bIWZcdKzNq3ZQ= Subject key identifier: AF:31:93:B8:9F:68:05:46:C5:61:25:80:F8:C1:52:E8:D2:D6:00:F1 Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef Certificate serial: 019BF6BE8B0027BA2A1934B6760C26F49C9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft Manifest number: 0B1C Signing time: Sun 25 Jan 2026 20:00:41 +0000 Manifest this update: Sun 25 Jan 2026 20:00:41 +0000 Manifest next update: Mon 26 Jan 2026 20:00:41 +0000 Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=) 2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: //DFAa2JjLkHjdGlMEUOjMc0PYWc3rYjH36X7FhzQIA=) 3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:8b:00:27:ba:2a:19:34:b6:76:0c:26:f4:9c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef Validity Not Before: Jan 25 20:00:41 2026 GMT Not After : Jan 26 20:00:41 2026 GMT Subject: CN=af3193b89f680546c5612580f8c152e8d2d600f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:85:c7:f9:b8:a5:dc:46:0a:75:4a:b1:86: 06:79:25:43:41:7a:a5:e7:03:af:95:7f:35:9c:83: 1c:10:ec:b5:d9:d4:3e:e9:19:82:4d:63:21:f2:59: 16:a2:1a:88:e8:80:a5:26:ce:b7:f2:ab:2a:a0:ee: 0b:74:84:40:37:7d:cb:05:53:55:c6:87:cf:05:3f: a1:78:a7:e4:ad:75:3c:10:e5:61:9a:55:1e:cc:66: 4d:c1:6f:e2:d8:1f:e3:cc:71:a9:59:77:5b:dd:30: 15:c3:13:db:6c:f7:e5:09:7a:e1:cb:90:9e:67:8b: a0:42:64:1e:41:b1:1b:18:f8:1a:d8:d1:08:e1:2e: 33:b0:5c:08:59:1b:2a:75:ec:2c:ec:0f:64:32:1a: 25:a2:82:fe:57:3d:15:c0:17:62:d7:22:85:8a:2e: e5:f6:43:20:25:95:b2:bc:a0:8b:c6:e8:88:2c:d9: 75:54:74:52:e7:08:33:c3:08:82:93:ab:8f:79:db: d4:22:c1:45:20:02:f6:91:7c:3c:27:39:e6:38:04: 61:13:40:2e:c9:74:93:36:0d:a7:65:f4:36:d4:29: 32:a9:b4:55:12:08:b6:1a:48:33:cd:86:d4:d3:77: 01:8c:35:a1:99:6f:d7:0c:01:6a:ef:97:7c:67:78: 35:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:31:93:B8:9F:68:05:46:C5:61:25:80:F8:C1:52:E8:D2:D6:00:F1 X509v3 Authority Key Identifier: keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:42:88:ea:f5:3e:8c:8e:a3:1a:03:bb:dc:06:1e:d6:42:bf: 2a:bd:77:b6:1d:ba:1a:e1:2f:89:51:51:3e:52:b4:dc:7a:8a: f4:a3:0a:5e:18:56:08:da:ce:3d:64:12:78:f0:c8:72:9c:77: 1b:5d:14:46:13:dc:8c:dc:92:7f:d7:d9:a6:3b:eb:df:52:8c: a7:72:b6:73:75:cf:11:39:f0:7f:cd:0f:25:e4:93:a9:b4:6c: 09:8e:8c:14:72:b2:54:5b:b4:4e:ad:25:1b:9d:f9:03:f9:16: 46:bc:d4:1f:90:a4:15:2b:54:0b:69:60:0e:f8:29:c5:fc:4c: 8c:e7:d8:84:54:0f:9f:a9:e7:99:bb:33:21:50:75:95:f8:92: d1:aa:b0:80:a4:37:d4:d8:92:65:66:c8:55:fd:5c:52:b9:2e: 78:ca:95:8e:e9:5a:7f:ef:73:ce:34:11:1b:f3:03:2a:ae:a8: c1:e4:14:f6:bf:5f:5d:bf:f3:7b:bc:e5:ef:e3:02:3a:d0:54: c0:72:4c:23:c8:7d:4c:d7:c1:fe:12:dd:09:ea:df:42:ed:a5: 31:81:70:20:00:8b:a1:dc:f1:a8:ef:c8:c9:06:51:eb:54:c5: b8:6a:c1:83:b9:9c:8d:a5:f6:d6:f0:9c:5b:4a:14:8e:01:f7: 81:06:03:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vosAJ7oqGTS2dgwm9JyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMjFhNWU0Y2Y2ZTllMmU3MDMzOGFlZWJmYTBkMTU4OGQ3 M2I2ZWYwHhcNMjYwMTI1MjAwMDQxWhcNMjYwMTI2MjAwMDQxWjAzMTEwLwYDVQQD EyhhZjMxOTNiODlmNjgwNTQ2YzU2MTI1ODBmOGMxNTJlOGQyZDYwMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo+Fx/m4pdxGCnVKsYYGeSVDQXql 5wOvlX81nIMcEOy12dQ+6RmCTWMh8lkWohqI6IClJs638qsqoO4LdIRAN33LBVNV xofPBT+heKfkrXU8EOVhmlUezGZNwW/i2B/jzHGpWXdb3TAVwxPbbPflCXrhy5Ce Z4ugQmQeQbEbGPga2NEI4S4zsFwIWRsqdews7A9kMholooL+Vz0VwBdi1yKFii7l 9kMgJZWyvKCLxuiILNl1VHRS5wgzwwiCk6uPedvUIsFFIAL2kXw8JznmOARhE0Au yXSTNg2nZfQ21CkyqbRVEgi2GkgzzYbU03cBjDWhmW/XDAFq75d8Z3g1dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8xk7ifaAVGxWElgPjBUujS1gDxMB8GA1UdIwQY MBaAFJwhpeTPbp4ucDOK7r+g0ViNc7bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDIt NTI4ZWZmNTJmZWJkLzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDItNTI4ZWZmNTJmZWJk LzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0KI6vU+ jI6jGgO73AYe1kK/Kr13th26GuEviVFRPlK03HqK9KMKXhhWCNrOPWQSePDIcpx3 G10URhPcjNySf9fZpjvr31KMp3K2c3XPETnwf80PJeSTqbRsCY6MFHKyVFu0Tq0l G535A/kWRrzUH5CkFStUC2lgDvgpxfxMjOfYhFQPn6nnmbszIVB1lfiS0aqwgKQ3 1NiSZWbIVf1cUrkueMqVjulaf+9zzjQRG/MDKq6oweQU9r9fXb/ze7zl7+MCOtBU wHJMI8h9TNfB/hLdCerfQu2lMYFwIACLodzxqO/IyQZR61TFuGrBg7mcjaX21vCc W0oUjgH3gQYDqA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:47 2026 by rpki-client