This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json) Hash identifier: WXkcyojYBddG/9CMr3Tw87yj0AlxtxALKQuicN8/GL8= Subject key identifier: D8:18:F1:12:52:D9:4A:71:A4:3E:E8:C8:3E:77:4B:A6:12:25:11:B4 Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef Certificate serial: 019BF8AD39D73A8059F465D5B500302232A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft Manifest number: 0B1D Signing time: Mon 26 Jan 2026 05:01:00 +0000 Manifest this update: Mon 26 Jan 2026 05:01:00 +0000 Manifest next update: Tue 27 Jan 2026 05:01:00 +0000 Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=) 2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: i90P9MwSUXp27Sum7y1KvxLLpnEOaT3jhYacMJMSLSc=) 3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:39:d7:3a:80:59:f4:65:d5:b5:00:30:22:32:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef Validity Not Before: Jan 26 05:01:00 2026 GMT Not After : Jan 27 05:01:00 2026 GMT Subject: CN=d818f11252d94a71a43ee8c83e774ba6122511b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5f:36:d5:15:9f:6e:8e:56:02:8a:04:41:fb: 98:ad:52:e2:bf:9c:7c:38:4e:df:3e:f4:ab:4b:d9: a0:39:81:08:38:52:15:c3:06:58:82:2a:95:36:1b: 0f:ee:ad:35:be:10:17:c8:9c:f5:d3:c6:88:6a:b9: 6b:ff:39:89:4e:42:0d:5e:ab:90:97:e1:98:30:cc: 00:55:59:03:0f:e3:b9:38:f4:58:ff:fe:49:4a:6e: 7a:12:25:fe:17:c2:28:01:0f:d8:d0:7e:f9:be:98: 72:9d:f1:16:1b:fd:81:d1:f4:8c:82:d5:39:59:76: 49:87:8a:80:59:2c:32:0a:7d:f9:89:58:c4:da:9b: 8d:d0:8e:95:af:5d:0c:83:f1:e4:de:4a:57:29:3f: 2a:78:6e:28:c4:79:f4:0e:6d:d9:3e:82:9d:b1:ee: b0:8a:be:0c:dc:97:b0:80:d4:53:45:c9:19:41:a3: ff:f9:8b:6a:cb:b2:f3:3e:17:03:1a:74:27:23:67: 65:a5:21:17:d0:d9:39:6f:ec:b1:49:c8:ce:5a:2e: 3a:a2:e4:99:e5:2a:21:1c:be:30:c0:87:b5:f4:be: 0a:06:17:a0:62:e7:ef:93:4e:18:fc:77:ed:60:73: c0:d2:6e:0c:76:df:44:63:8f:de:6b:54:a8:5e:58: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:18:F1:12:52:D9:4A:71:A4:3E:E8:C8:3E:77:4B:A6:12:25:11:B4 X509v3 Authority Key Identifier: keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:6d:c5:5d:eb:82:a3:89:0d:58:d9:24:0e:e0:f9:35:42:ea: fb:82:99:9a:e1:66:7e:49:d5:19:d6:78:24:da:2e:3d:46:56: f4:cd:8b:5e:21:bb:f1:bb:8c:3b:96:31:8b:a5:66:61:1e:f0: f5:7e:67:a4:8d:88:7e:af:63:67:3b:79:47:f7:1a:cd:f1:1b: 7c:18:2c:c6:2d:49:5f:ed:77:83:c8:05:cf:b1:4f:4f:7c:74: 5f:38:cf:f4:fa:2b:d2:b1:ea:b7:e7:a9:c4:d3:4a:21:ea:18: 9e:91:73:c3:39:ea:97:99:b2:f7:26:8b:f4:4c:e1:51:ff:56: 31:80:96:f6:02:d2:0a:7d:10:b9:5a:52:83:04:b1:2b:85:a4: f1:cc:f6:64:20:42:f4:4a:ba:c1:94:fa:7d:97:56:77:c3:cc: 2c:65:fe:18:e4:60:9c:5e:55:fd:23:5d:7e:4e:63:9e:7c:8c: fa:9b:09:b2:4b:88:da:b0:2e:96:fc:ab:80:17:a0:d2:5b:77: 35:2c:00:fa:e7:b2:f4:6b:53:5d:e9:d7:e3:1b:f0:a0:a8:61: 61:15:7d:41:a1:a8:96:e0:d0:2e:dc:5d:f2:1f:43:6e:d4:c9: 6a:bb:a5:ff:d5:e1:08:23:91:9e:da:94:23:d4:e6:f8:6a:15: ff:8f:35:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rTnXOoBZ9GXVtQAwIjKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMjFhNWU0Y2Y2ZTllMmU3MDMzOGFlZWJmYTBkMTU4OGQ3 M2I2ZWYwHhcNMjYwMTI2MDUwMTAwWhcNMjYwMTI3MDUwMTAwWjAzMTEwLwYDVQQD EyhkODE4ZjExMjUyZDk0YTcxYTQzZWU4YzgzZTc3NGJhNjEyMjUxMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l821RWfbo5WAooEQfuYrVLiv5x8 OE7fPvSrS9mgOYEIOFIVwwZYgiqVNhsP7q01vhAXyJz108aIarlr/zmJTkINXquQ l+GYMMwAVVkDD+O5OPRY//5JSm56EiX+F8IoAQ/Y0H75vphynfEWG/2B0fSMgtU5 WXZJh4qAWSwyCn35iVjE2puN0I6Vr10Mg/Hk3kpXKT8qeG4oxHn0Dm3ZPoKdse6w ir4M3JewgNRTRckZQaP/+Ytqy7LzPhcDGnQnI2dlpSEX0Nk5b+yxScjOWi46ouSZ 5SohHL4wwIe19L4KBhegYufvk04Y/HftYHPA0m4Mdt9EY4/ea1SoXliwxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgY8RJS2UpxpD7oyD53S6YSJRG0MB8GA1UdIwQY MBaAFJwhpeTPbp4ucDOK7r+g0ViNc7bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDIt NTI4ZWZmNTJmZWJkLzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDItNTI4ZWZmNTJmZWJk LzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJG3FXeuC o4kNWNkkDuD5NULq+4KZmuFmfknVGdZ4JNouPUZW9M2LXiG78buMO5Yxi6VmYR7w 9X5npI2Ifq9jZzt5R/cazfEbfBgsxi1JX+13g8gFz7FPT3x0XzjP9Por0rHqt+ep xNNKIeoYnpFzwznql5my9yaL9EzhUf9WMYCW9gLSCn0QuVpSgwSxK4Wk8cz2ZCBC 9Eq6wZT6fZdWd8PMLGX+GORgnF5V/SNdfk5jnnyM+psJskuI2rAulvyrgBeg0lt3 NSwA+uey9GtTXenX4xvwoKhhYRV9QaGoluDQLtxd8h9DbtTJarul/9XhCCORntqU I9Tm+GoV/481lg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:37:14 2026 by rpki-client