This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json) Hash identifier: 2yWHLtpn6VBpNC8WTO52N2sHYm/PNn9M9y6osSAMwGg= Subject key identifier: 99:39:D5:B7:15:69:BD:E1:5E:D2:EF:1C:51:C3:B5:8A:FC:9E:09:2F Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Certificate serial: 019BF61A4A6174033CA9010BD14781450401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft Manifest number: 1806 Signing time: Sun 25 Jan 2026 17:01:16 +0000 Manifest this update: Sun 25 Jan 2026 17:01:16 +0000 Manifest next update: Mon 26 Jan 2026 17:01:16 +0000 Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=) 2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=) 3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=) 4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: viJntdBLPi4IUtb9qEcQFJMYjuId7qZbwS9wceX6LIk=) 5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=) 6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=) 7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=) 8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=) 9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:4a:61:74:03:3c:a9:01:0b:d1:47:81:45:04:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Validity Not Before: Jan 25 17:01:16 2026 GMT Not After : Jan 26 17:01:16 2026 GMT Subject: CN=9939d5b71569bde15ed2ef1c51c3b58afc9e092f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:78:61:06:86:43:3d:e1:2b:86:f9:96:b2: bd:a7:92:1b:91:75:74:17:b4:bf:1d:7e:c0:61:70: 17:83:da:48:7f:42:3e:1b:24:a1:fb:e9:76:a8:df: a0:f2:1b:d8:29:e1:f5:b2:71:9a:28:0b:39:d3:80: 46:44:fe:34:84:15:d9:18:83:b1:4b:66:51:a0:4f: 10:b3:13:19:b1:68:b9:bf:c6:34:42:35:ab:48:f9: 1f:85:e0:2e:17:e3:27:9f:dc:a1:c4:6f:64:dc:98: f1:9e:66:69:a6:6c:91:4a:89:29:cd:99:66:ee:6a: 83:a7:46:07:a9:59:17:be:07:3c:35:79:bc:e9:e9: c5:70:8f:79:23:d2:06:27:4d:bc:a8:8f:44:e3:9e: cb:0a:67:a6:48:a9:e5:7e:82:29:ee:53:4d:1c:7d: 4f:a8:03:ad:8b:2f:66:f8:f7:ff:d7:e1:9c:8e:f7: a7:8f:44:7d:b6:80:0f:1f:40:7c:11:d8:f6:c6:8d: a9:46:89:c2:b2:eb:a8:09:f1:8c:fa:95:8f:a7:9e: 8e:c7:3b:0f:db:8b:ab:a6:78:a8:7d:cc:a6:78:73: 13:c5:18:6b:e0:5a:01:1a:90:db:a6:05:9c:5c:7d: bd:01:5d:07:c9:85:7b:ba:01:1f:05:d9:13:79:45: 04:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:39:D5:B7:15:69:BD:E1:5E:D2:EF:1C:51:C3:B5:8A:FC:9E:09:2F X509v3 Authority Key Identifier: keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:7f:b5:67:f3:19:0d:3d:97:66:ff:b6:db:b7:61:71:78:9d: da:23:ba:99:f7:22:79:b6:55:1a:e7:16:01:4c:8b:8d:dc:0d: d6:7b:0d:44:34:99:8e:cf:81:dd:83:71:dd:02:d4:23:78:13: db:10:53:58:9b:84:9a:bc:ee:f3:b2:e1:e9:53:63:4a:1c:f3: d1:2b:e4:1e:3c:e7:45:64:5c:33:d2:35:57:f4:e3:7f:39:2d: 43:fb:32:bf:b7:1a:2b:8d:ff:bd:2f:e6:e2:04:b1:54:c1:71: a8:a1:de:a6:de:bf:16:9d:16:2d:bd:ca:98:76:bb:c7:9b:36: 6f:7f:db:89:db:97:d9:0f:96:17:51:a2:44:49:cf:6d:e7:e2: b9:72:47:91:7c:d1:d6:bb:90:b5:dd:c3:20:90:15:12:4c:21: e5:cb:40:06:2d:c0:4b:d7:72:ca:df:43:0e:b6:2b:48:d5:09: d1:91:5c:40:a4:8f:46:c5:04:e8:37:4d:9c:48:81:f0:d3:2a: 08:ad:77:db:a2:aa:4f:34:69:d5:a4:60:b9:53:15:fd:f4:47: 8b:ea:ed:22:af:7d:af:db:1d:9e:06:a7:cf:3e:ea:6b:0b:66: 99:67:ad:84:3a:aa:1f:0f:98:27:6e:56:0a:02:bb:86:c7:bf: c6:2a:6c:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GkphdAM8qQEL0UeBRQQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4 NjJlNWYwHhcNMjYwMTI1MTcwMTE2WhcNMjYwMTI2MTcwMTE2WjAzMTEwLwYDVQQD Eyg5OTM5ZDViNzE1NjliZGUxNWVkMmVmMWM1MWMzYjU4YWZjOWUwOTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2Z4YQaGQz3hK4b5lrK9p5IbkXV0 F7S/HX7AYXAXg9pIf0I+GySh++l2qN+g8hvYKeH1snGaKAs504BGRP40hBXZGIOx S2ZRoE8QsxMZsWi5v8Y0QjWrSPkfheAuF+Mnn9yhxG9k3JjxnmZppmyRSokpzZlm 7mqDp0YHqVkXvgc8NXm86enFcI95I9IGJ028qI9E457LCmemSKnlfoIp7lNNHH1P qAOtiy9m+Pf/1+Gcjvenj0R9toAPH0B8Edj2xo2pRonCsuuoCfGM+pWPp56OxzsP 24urpniofcymeHMTxRhr4FoBGpDbpgWcXH29AV0HyYV7ugEfBdkTeUUEpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJk51bcVab3hXtLvHFHDtYr8ngkvMB8GA1UdIwQY MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt MGQzZmNlNDI5YmRlLzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3+1Z/MZ DT2XZv+227dhcXid2iO6mfciebZVGucWAUyLjdwN1nsNRDSZjs+B3YNx3QLUI3gT 2xBTWJuEmrzu87Lh6VNjShzz0SvkHjznRWRcM9I1V/TjfzktQ/syv7caK43/vS/m 4gSxVMFxqKHept6/Fp0WLb3KmHa7x5s2b3/biduX2Q+WF1GiREnPbefiuXJHkXzR 1ruQtd3DIJAVEkwh5ctABi3AS9dyyt9DDrYrSNUJ0ZFcQKSPRsUE6DdNnEiB8NMq CK1326KqTzRp1aRguVMV/fRHi+rtIq99r9sdnganzz7qawtmmWethDqqHw+YJ25W CgK7hse/xips/g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:40 2026 by rpki-client