This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft File: nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json) Hash identifier: 51U7zKZrMlSJLCvh5hPkfQ2r5ujkQnE0epWHRr7nXjE= Subject key identifier: 89:E1:61:AD:CE:95:49:9C:47:42:0D:2C:B9:11:1E:E9:8F:88:C2:2E Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F Certificate issuer: /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f Certificate serial: 019BF83FDC5854316CFEA19B760ADEBC9475 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft Manifest number: 04E2 Signing time: Mon 26 Jan 2026 03:01:33 +0000 Manifest this update: Mon 26 Jan 2026 03:01:33 +0000 Manifest next update: Tue 27 Jan 2026 03:01:33 +0000 Files and hashes: 1: EidzJCWNUyQpfWwfT7scfsDvqbQ.roa (hash: DXl1W2a36eg89T47v1wHSMBi3fnkBbmg5I1x8xEjCCU=) 2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: DbES7CdTqdIafpVQpWYl6NyvP8BLD4NiAwjMPkszQck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:dc:58:54:31:6c:fe:a1:9b:76:0a:de:bc:94:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f Validity Not Before: Jan 26 03:01:33 2026 GMT Not After : Jan 27 03:01:33 2026 GMT Subject: CN=89e161adce95499c47420d2cb9111ee98f88c22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:36:b8:ff:9e:89:dd:0c:63:77:33:60:17: 77:2a:54:e6:92:aa:b2:7e:e0:50:55:ec:de:f3:0f: a6:53:63:3a:36:2c:83:60:90:8e:99:2a:76:04:4d: 2f:24:2f:f7:38:63:41:37:71:96:4e:34:16:fa:11: cc:f7:bf:e5:5d:03:8b:c6:9c:32:26:5c:c8:ed:3e: 4b:d9:9b:a7:f2:46:68:29:c8:fa:64:a5:59:99:73: eb:51:6c:8c:17:23:0e:87:c1:5f:c1:f0:3d:d6:51: 20:71:f3:23:23:14:a3:9f:7e:c1:9c:fb:de:52:8d: 98:0b:63:73:50:0d:1a:c0:f8:60:71:bc:d7:a8:b6: 4a:8b:76:e2:51:dc:27:98:79:75:58:f0:48:4e:fe: 64:ed:6f:ce:20:92:d9:0c:56:83:3e:bf:54:0d:25: 68:8c:59:27:1a:18:d1:3b:0e:1c:d7:a6:18:9a:d2: b2:a4:8e:fd:72:05:4c:0d:5b:2b:0e:cb:9b:7c:a1: 1d:9e:6f:61:90:f8:74:b1:3e:00:b8:a3:3f:62:f0: 3a:7c:3c:9c:7f:b7:2c:bd:57:1b:eb:0e:29:43:60: 87:b8:c3:0c:88:bf:1a:b9:5e:3b:7d:2e:2a:9d:19: df:15:85:21:95:57:12:d8:b8:d2:2d:88:74:5e:cb: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E1:61:AD:CE:95:49:9C:47:42:0D:2C:B9:11:1E:E9:8F:88:C2:2E X509v3 Authority Key Identifier: keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:25:82:ae:8b:ea:f4:3e:6c:83:1d:1a:b9:ae:fa:d9:f7:3c: 26:9d:75:3a:0c:a7:55:01:8e:3b:1e:3c:f6:fd:a8:d4:b9:e5: ef:94:e8:bb:cf:90:2e:b0:df:aa:21:2f:40:2e:c8:44:61:ba: dd:f5:8e:4c:38:06:67:24:8d:47:e3:01:ec:2b:81:24:0a:b5: 42:de:9a:ab:6c:da:23:2a:0b:91:ae:01:dc:84:e1:2c:de:77: f0:cc:0e:c6:ed:c4:94:bc:a6:af:23:08:87:e2:5d:2a:b4:06: 6c:be:c4:48:10:05:19:b5:54:c9:49:ce:ac:34:d9:c8:4a:fc: ee:02:8b:1b:9d:99:7b:9d:13:cc:bd:f2:5b:de:9a:df:7e:56: 14:fb:fc:16:43:86:96:a0:78:2d:ca:f7:c0:01:e4:9a:c2:9d: c8:ae:b1:8b:cf:2a:d9:6b:a9:0b:28:d4:b2:b2:fc:ba:08:52: 7a:ce:93:3c:27:6c:54:e8:59:60:a5:63:2e:14:e0:62:6b:13: cb:b5:a4:79:f7:24:4e:f2:02:69:82:67:b2:e5:c6:95:54:cb: 99:3b:08:b0:ca:e5:fa:92:fb:69:b2:39:65:f9:03:28:e9:69: 4f:9e:51:db:07:2f:86:66:2a:c9:48:c8:fb:31:f2:95:9b:f3: c9:50:b0:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P9xYVDFs/qGbdgrevJR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTJiODNiMTJmYThhMDcxMzJjYzgwODMzYTEwM2UwOWQ4 YmQwNGYwHhcNMjYwMTI2MDMwMTMzWhcNMjYwMTI3MDMwMTMzWjAzMTEwLwYDVQQD Eyg4OWUxNjFhZGNlOTU0OTljNDc0MjBkMmNiOTExMWVlOThmODhjMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5A2uP+eid0MY3czYBd3KlTmkqqy fuBQVeze8w+mU2M6NiyDYJCOmSp2BE0vJC/3OGNBN3GWTjQW+hHM97/lXQOLxpwy JlzI7T5L2Zun8kZoKcj6ZKVZmXPrUWyMFyMOh8FfwfA91lEgcfMjIxSjn37BnPve Uo2YC2NzUA0awPhgcbzXqLZKi3biUdwnmHl1WPBITv5k7W/OIJLZDFaDPr9UDSVo jFknGhjROw4c16YYmtKypI79cgVMDVsrDsubfKEdnm9hkPh0sT4AuKM/YvA6fDyc f7csvVcb6w4pQ2CHuMMMiL8auV47fS4qnRnfFYUhlVcS2LjSLYh0XsuOIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInhYa3OlUmcR0INLLkRHumPiMIuMB8GA1UdIwQY MBaAFJ1SuDsS+ooHEyzICDOhA+Cdi9BPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQt ZTRiNmE5ZGY5YTM0LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQtZTRiNmE5ZGY5YTM0 LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISWCrovq 9D5sgx0aua762fc8Jp11OgynVQGOOx489v2o1Lnl75Tou8+QLrDfqiEvQC7IRGG6 3fWOTDgGZySNR+MB7CuBJAq1Qt6aq2zaIyoLka4B3IThLN538MwOxu3ElLymryMI h+JdKrQGbL7ESBAFGbVUyUnOrDTZyEr87gKLG52Ze50TzL3yW96a335WFPv8FkOG lqB4Lcr3wAHkmsKdyK6xi88q2WupCyjUsrL8ughSes6TPCdsVOhZYKVjLhTgYmsT y7WkefckTvICaYJnsuXGlVTLmTsIsMrl+pL7abI5ZfkDKOlpT55R2wcvhmYqyUjI +zHylZvzyVCw/A== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:46 2026 by rpki-client