This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json) Hash identifier: +3CzaluIfKfv4dv05KOe3VSlPGiFYEr4Ev01lcERPoQ= Subject key identifier: CF:3C:19:DC:0A:37:E0:DD:DB:C0:53:42:A5:3A:C7:81:14:CF:FB:AB Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a Certificate serial: 019BF42C2F5FF4C40B5BCC72C5FAF58D2B27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft Manifest number: 15F4 Signing time: Sun 25 Jan 2026 08:01:34 +0000 Manifest this update: Sun 25 Jan 2026 08:01:34 +0000 Manifest next update: Mon 26 Jan 2026 08:01:34 +0000 Files and hashes: 1: BZiuGChYteIV3-RFWRWSz2y3d3A.roa (hash: cNyCyKkwqm/596Q3tlgnaVI5Q+CFTR9OgN3nxKb0AOc=) 2: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: /Voged/7P2QRxzK8E9M6znJl87XuG9v1ZT02/JjExo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2c:2f:5f:f4:c4:0b:5b:cc:72:c5:fa:f5:8d:2b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a Validity Not Before: Jan 25 08:01:34 2026 GMT Not After : Jan 26 08:01:34 2026 GMT Subject: CN=cf3c19dc0a37e0dddbc05342a53ac78114cffbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:f8:8a:e8:6d:7e:96:74:b6:22:b2:c8:16: 3a:c7:3e:6d:75:64:8b:f4:09:c9:bb:84:cc:4e:2f: 1d:ad:5f:e7:6e:7c:cb:ba:1c:f8:c0:09:a8:1e:f9: 9f:33:03:66:50:75:19:29:c0:5e:c6:a5:e9:ef:48: ac:a6:6f:1a:cd:00:48:d8:70:61:00:7f:47:e2:e9: 68:49:49:ce:57:46:04:f6:10:85:de:e9:33:00:99: c0:31:52:ca:f1:a1:48:c4:72:41:d2:74:8c:c6:c7: 49:e3:02:2c:e6:ad:38:b6:a7:0e:a8:35:53:dc:a0: c7:6f:92:9f:8e:16:f5:7d:a9:5d:bb:cb:fa:61:0d: 28:c9:f1:48:29:49:7c:06:fe:ed:39:71:95:bf:c0: 74:65:38:ee:35:a0:40:e3:31:0a:86:27:40:6a:57: 0e:e5:6e:7e:9f:50:89:49:25:cb:06:e3:f9:89:cd: 27:e1:6d:ab:f1:11:2a:94:da:ef:0b:2a:39:d5:e1: a3:cf:bd:a1:60:12:2e:ba:1f:fb:33:9e:09:52:69: 13:57:be:ec:06:f0:f0:38:ed:0e:0b:35:c6:c4:fa: 38:46:09:4c:fb:38:97:22:74:5b:98:38:07:44:ca: 5f:aa:eb:52:ed:7f:2f:1d:05:c1:7c:e0:40:33:6c: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3C:19:DC:0A:37:E0:DD:DB:C0:53:42:A5:3A:C7:81:14:CF:FB:AB X509v3 Authority Key Identifier: keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:95:bb:0a:ae:c8:9f:e8:0e:4c:7c:c5:73:84:42:a0:e2:e5: 49:f4:e0:51:7b:5f:d7:ea:7a:b5:ae:c9:2c:62:7f:dd:4d:70: 5a:ee:68:be:fc:d8:a9:77:57:09:31:44:9f:81:9c:07:bb:58: da:dd:0c:5c:af:b9:95:e0:05:a6:b2:fc:ab:83:2a:c5:2b:48: fd:99:f1:db:2e:14:01:a2:37:7f:87:30:66:e3:77:fb:19:c1: 09:b1:cd:24:35:29:61:60:cf:6d:0e:5f:57:f7:37:21:77:51: 70:47:45:ee:22:61:87:fb:3d:4e:3a:23:6c:6f:f7:c2:7e:de: 95:df:9e:2d:10:84:37:d1:5a:28:03:b5:fd:79:05:af:f6:42: f1:d8:0a:41:f5:a7:ed:25:f8:a4:48:b3:2a:d8:a3:e1:8b:2b: fd:0d:ff:9d:5f:ec:61:58:34:b8:37:02:3c:7b:2a:2c:69:b3: 3d:4a:fa:8b:71:8e:ba:dd:89:cd:95:cf:c7:09:18:ad:1b:2f: 3e:5e:30:91:04:39:39:b7:dc:19:e3:87:a5:a7:79:b9:94:f0: cb:9b:a5:b9:99:c4:95:a6:4b:00:f8:aa:2e:f4:c0:b7:2b:b8: 0f:3b:fd:82:e5:dc:62:8f:34:25:d6:08:c8:80:5b:24:12:c7: 3d:95:33:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0LC9f9MQLW8xyxfr1jSsnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjYxYzI2MTc1NmZhMDNhYzU3ZDFiZmM0ZGI4NTZlZjgw ODk3NWEwHhcNMjYwMTI1MDgwMTM0WhcNMjYwMTI2MDgwMTM0WjAzMTEwLwYDVQQD EyhjZjNjMTlkYzBhMzdlMGRkZGJjMDUzNDJhNTNhYzc4MTE0Y2ZmYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneD4iuhtfpZ0tiKyyBY6xz5tdWSL 9AnJu4TMTi8drV/nbnzLuhz4wAmoHvmfMwNmUHUZKcBexqXp70ispm8azQBI2HBh AH9H4uloSUnOV0YE9hCF3ukzAJnAMVLK8aFIxHJB0nSMxsdJ4wIs5q04tqcOqDVT 3KDHb5Kfjhb1faldu8v6YQ0oyfFIKUl8Bv7tOXGVv8B0ZTjuNaBA4zEKhidAalcO 5W5+n1CJSSXLBuP5ic0n4W2r8REqlNrvCyo51eGjz72hYBIuuh/7M54JUmkTV77s BvDwOO0OCzXGxPo4RglM+ziXInRbmDgHRMpfqutS7X8vHQXBfOBAM2xY4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM88GdwKN+Dd28BTQqU6x4EUz/urMB8GA1UdIwQY MBaAFDYmHCYXVvoDrFfRv8TbhW74CJdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTIt NDQyYzA4MGFlNTQxLzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTItNDQyYzA4MGFlNTQx LzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZW7Cq7I n+gOTHzFc4RCoOLlSfTgUXtf1+p6ta7JLGJ/3U1wWu5ovvzYqXdXCTFEn4GcB7tY 2t0MXK+5leAFprL8q4MqxStI/Znx2y4UAaI3f4cwZuN3+xnBCbHNJDUpYWDPbQ5f V/c3IXdRcEdF7iJhh/s9TjojbG/3wn7eld+eLRCEN9FaKAO1/XkFr/ZC8dgKQfWn 7SX4pEizKtij4Ysr/Q3/nV/sYVg0uDcCPHsqLGmzPUr6i3GOut2JzZXPxwkYrRsv Pl4wkQQ5ObfcGeOHpad5uZTwy5uluZnElaZLAPiqLvTAtyu4Dzv9guXcYo80JdYI yIBbJBLHPZUz/A== -----END CERTIFICATE-----Generated at Sun Jan 25 19:05:29 2026 by rpki-client