This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json) Hash identifier: m+3MlQEs/IzsDzqOwotJtX6bd7gBd9ncO/hRBEtMy2Q= Subject key identifier: 64:4C:16:68:99:3B:A6:E3:01:1D:31:FF:E7:61:82:65:6C:C6:7B:B0 Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c Certificate serial: 019BF6F6148DF636D300C7C6EDC653D98274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 21:01:20 +0000 Manifest this update: Sun 25 Jan 2026 21:01:20 +0000 Manifest next update: Mon 26 Jan 2026 21:01:20 +0000 Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: V4MZl23GmxT8/JZnQ8p5rZSvlbyg46DLE1KHJx6xGtI=) 2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:14:8d:f6:36:d3:00:c7:c6:ed:c6:53:d9:82:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c Validity Not Before: Jan 25 21:01:20 2026 GMT Not After : Jan 26 21:01:20 2026 GMT Subject: CN=644c1668993ba6e3011d31ffe76182656cc67bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:1e:da:5a:f5:30:6b:8b:c4:2d:b7:e9:85: 2b:48:4d:01:61:f2:64:45:2e:5f:b9:f9:70:0b:47: 26:83:33:3b:91:31:38:46:9a:01:77:de:f6:9b:da: bb:21:19:2b:90:89:6d:9e:a2:95:86:96:75:96:94: 52:fb:e7:6d:a8:fe:5e:ce:05:fe:f8:8f:1e:57:72: 0e:54:22:66:27:92:39:70:e9:ab:93:53:4e:7d:c0: ef:a1:4f:e0:6a:dc:d6:4e:bd:d0:b1:eb:23:dc:ba: 34:57:76:ed:b4:fb:a1:f4:ea:9d:0a:99:2e:fe:8f: 36:90:1f:b8:9c:4d:85:8a:9d:ad:97:37:a1:40:b0: 05:fc:ed:a3:73:85:0a:cc:71:63:15:13:26:aa:18: b7:69:7e:38:d8:e2:c2:db:5c:a9:61:42:07:7f:04: 2c:21:68:90:4c:e7:09:63:f1:c0:80:ff:55:b0:ad: 11:5b:15:e4:54:47:91:4b:21:24:17:58:92:e6:ed: 55:47:24:a1:d4:13:73:1b:2a:00:f1:2a:c9:a2:47: d4:28:c1:3c:27:71:eb:10:56:7d:d0:1f:ae:b7:51: 39:f2:74:49:ee:3c:89:d8:58:c0:35:da:4f:30:b7: 36:b1:a0:2c:0c:39:91:4c:35:39:78:6c:12:7d:be: 28:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4C:16:68:99:3B:A6:E3:01:1D:31:FF:E7:61:82:65:6C:C6:7B:B0 X509v3 Authority Key Identifier: keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f2:94:ab:7a:3a:75:a5:86:a4:de:72:1a:15:09:73:d4:db: 51:92:53:39:a7:7c:38:53:e2:fe:cb:85:00:46:57:d1:b4:91: 9a:0a:db:86:ca:a7:bb:16:67:a8:eb:75:5a:c6:b9:51:96:f6: e8:27:2b:0c:22:b9:61:3b:b8:e7:35:6e:98:a1:12:7f:e3:d7: 6e:f1:f6:7d:88:3e:c1:c2:ca:b3:e8:41:2d:23:e2:19:99:2b: f2:80:41:66:29:0d:ba:50:48:46:42:7f:27:09:4d:c9:36:16: ab:7d:94:d1:bb:97:18:77:84:97:a7:d2:e6:87:65:ea:29:e2: a3:46:13:d5:70:71:bf:eb:c6:12:f3:6c:95:01:7a:42:35:ee: 83:06:67:fb:92:13:c3:ec:88:c8:12:a1:c1:39:8c:01:67:46: 72:5e:e5:07:b2:3f:8d:06:22:e0:5f:fc:70:3f:de:0b:66:cf: af:1b:e4:68:71:c0:03:9c:b2:96:d7:90:79:6f:63:e7:6e:6d: 46:82:dc:53:3a:1a:47:6e:33:21:eb:19:fd:2e:f4:d7:fa:54: d3:70:66:fa:0d:10:d2:94:95:eb:5a:20:d6:2d:27:68:5f:05: a9:b1:cc:06:af:a5:b8:c1:ec:e4:8d:dd:7a:f1:60:df:e2:a7: af:e5:fa:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29hSN9jbTAMfG7cZT2YJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDQ1ZjJhYzViY2UxNTY5ZGY2YjJhZDgwZDE2ZjFiOTJm YmQ4NWMwHhcNMjYwMTI1MjEwMTIwWhcNMjYwMTI2MjEwMTIwWjAzMTEwLwYDVQQD Eyg2NDRjMTY2ODk5M2JhNmUzMDExZDMxZmZlNzYxODI2NTZjYzY3YmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9Ye2lr1MGuLxC236YUrSE0BYfJk RS5fuflwC0cmgzM7kTE4RpoBd972m9q7IRkrkIltnqKVhpZ1lpRS++dtqP5ezgX+ +I8eV3IOVCJmJ5I5cOmrk1NOfcDvoU/gatzWTr3Qsesj3Lo0V3bttPuh9OqdCpku /o82kB+4nE2Fip2tlzehQLAF/O2jc4UKzHFjFRMmqhi3aX442OLC21ypYUIHfwQs IWiQTOcJY/HAgP9VsK0RWxXkVEeRSyEkF1iS5u1VRySh1BNzGyoA8SrJokfUKME8 J3HrEFZ90B+ut1E58nRJ7jyJ2FjANdpPMLc2saAsDDmRTDU5eGwSfb4o0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRMFmiZO6bjAR0x/+dhgmVsxnuwMB8GA1UdIwQY MBaAFDXUXyrFvOFWnfayrYDRbxuS+9hcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUt NmI3ZDdlNGVkNzAxLzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUtNmI3ZDdlNGVkNzAx LzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/KUq3o6 daWGpN5yGhUJc9TbUZJTOad8OFPi/suFAEZX0bSRmgrbhsqnuxZnqOt1Wsa5UZb2 6CcrDCK5YTu45zVumKESf+PXbvH2fYg+wcLKs+hBLSPiGZkr8oBBZikNulBIRkJ/ JwlNyTYWq32U0buXGHeEl6fS5odl6inio0YT1XBxv+vGEvNslQF6QjXugwZn+5IT w+yIyBKhwTmMAWdGcl7lB7I/jQYi4F/8cD/eC2bPrxvkaHHAA5yylteQeW9j525t RoLcUzoaR24zIesZ/S701/pU03Bm+g0Q0pSV61og1i0naF8FqbHMBq+luMHs5I3d evFg3+Knr+X65g== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:57 2026 by rpki-client