This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json) Hash identifier: d+fSDPSNIaxjlm9sYwCtrtYHwoVqaofanRMBQ0VDbww= Subject key identifier: 92:6A:3C:62:F8:8B:64:B4:F2:93:78:39:42:54:EF:29:94:CE:66:30 Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c Certificate serial: 019BF12A4CE82B0CF5B1984C873423E06E72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft Manifest number: 180B Signing time: Sat 24 Jan 2026 18:00:39 +0000 Manifest this update: Sat 24 Jan 2026 18:00:39 +0000 Manifest next update: Sun 25 Jan 2026 18:00:39 +0000 Files and hashes: 1: 59E_pBHuOOWdiE37ftfZgTACrjg.roa (hash: wZxavqeLHdj5qCOpHNZLKUOBtGFYxuAkYSqaSAQ643U=) 2: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: IQO1ECkqubt3PvTAojynZuf9NRyvbEQM2TSV4FpFyEY=) 3: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=) 4: gwfvHd9vGQ-YayDB4JMmJ6Zoy-k.roa (hash: JXFha1HpeDKqZ6dndv5E6MFGVWN5nIxgaGNdqYj6mdM=) 5: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=) 6: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=) 7: xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa (hash: LI07T8x4WOMtmCDk/CQyntDelPjiSN5ovqKx6m4pWV0=) 8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:2a:4c:e8:2b:0c:f5:b1:98:4c:87:34:23:e0:6e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c Validity Not Before: Jan 24 18:00:39 2026 GMT Not After : Jan 25 18:00:39 2026 GMT Subject: CN=926a3c62f88b64b4f29378394254ef2994ce6630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:2b:7c:54:a7:bc:1e:5b:5f:9b:16:be:c9: 22:8f:5c:d3:e3:03:ad:55:65:b9:d6:ea:dc:44:a8: 38:1b:05:82:57:99:3b:a4:d0:e5:35:79:a5:d1:e8: 4b:c7:51:ee:69:19:4c:13:88:fe:07:b6:2f:e2:5b: 9e:6b:0b:47:f1:f3:f6:89:08:aa:f4:63:a9:06:a4: 00:d2:90:a7:81:d5:9d:b6:9d:d6:23:6d:33:47:66: fa:97:21:fa:8c:91:9c:ab:44:98:89:09:a0:37:6b: 52:2d:58:ff:0e:ec:99:62:7b:ad:06:36:25:10:4f: 76:49:91:35:38:04:77:70:1e:7d:19:be:2e:30:dd: 0a:c5:a8:0b:56:6b:c4:fd:69:2e:e2:74:2c:cd:aa: 82:73:c9:0b:7f:00:7f:b2:bf:50:47:7f:0f:e5:30: a1:a9:6c:56:bc:03:3c:54:02:38:91:78:4d:eb:01: 14:74:3c:79:31:b8:d7:33:fc:d4:00:cf:33:d1:25: 6d:d6:09:36:73:43:a9:74:5d:b9:d1:d5:58:09:c8: aa:cb:1d:a8:51:4b:a1:0c:21:70:a2:89:2c:ef:0b: cf:a0:53:9e:82:8f:cc:3d:49:82:a2:e3:f7:45:a0: 04:a4:c9:9c:44:65:e0:9e:27:fd:3e:a9:d8:26:3b: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6A:3C:62:F8:8B:64:B4:F2:93:78:39:42:54:EF:29:94:CE:66:30 X509v3 Authority Key Identifier: keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:53:aa:8e:33:ea:87:a8:18:51:c8:e5:19:c6:84:9d:bd:e6: 27:12:bc:83:22:f0:2d:c9:3b:b4:2f:8d:5d:da:b3:e9:4a:2c: 98:e6:40:ee:1e:96:a2:0d:dd:ce:8a:fd:ed:8b:bd:60:6f:1a: c4:c9:4f:ce:20:aa:80:a4:1a:cd:c6:71:df:7d:08:71:ac:3f: 5a:5a:5f:c9:4b:70:ab:98:0d:d5:08:50:2b:96:4c:d1:a1:ac: 58:d3:c3:22:34:a1:f9:6c:88:a4:6f:7a:22:df:ad:93:de:27: e0:3a:5d:0d:ed:d4:13:da:ba:d5:1a:b8:26:58:bd:14:69:4b: 0a:ef:39:18:77:ba:40:c3:69:95:c1:3d:78:6e:15:ce:ea:ac: c3:6a:40:5b:7e:61:45:b2:ad:94:61:b3:a6:c5:bb:b3:1d:74: e0:59:0a:d9:75:15:44:d2:73:d0:73:9f:a5:5e:3c:47:e7:39: b0:20:9e:18:c4:c7:77:2e:57:34:be:d0:c1:86:a5:a5:68:ea: f8:2f:7f:83:4e:b3:a2:70:90:65:c9:09:c8:fe:c0:88:e3:7f: 8a:67:77:c4:c6:33:4f:f9:a1:c1:77:9a:76:38:70:c1:24:ad: 63:5d:96:70:a3:c2:83:d7:e1:39:a0:a2:61:d6:e2:27:f1:22: aa:0e:47:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxKkzoKwz1sZhMhzQj4G5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj MGYyNGMwHhcNMjYwMTI0MTgwMDM5WhcNMjYwMTI1MTgwMDM5WjAzMTEwLwYDVQQD Eyg5MjZhM2M2MmY4OGI2NGI0ZjI5Mzc4Mzk0MjU0ZWYyOTk0Y2U2NjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqErfFSnvB5bX5sWvskij1zT4wOt VWW51urcRKg4GwWCV5k7pNDlNXml0ehLx1HuaRlME4j+B7Yv4lueawtH8fP2iQiq 9GOpBqQA0pCngdWdtp3WI20zR2b6lyH6jJGcq0SYiQmgN2tSLVj/DuyZYnutBjYl EE92SZE1OAR3cB59Gb4uMN0KxagLVmvE/Wku4nQszaqCc8kLfwB/sr9QR38P5TCh qWxWvAM8VAI4kXhN6wEUdDx5MbjXM/zUAM8z0SVt1gk2c0OpdF250dVYCciqyx2o UUuhDCFwooks7wvPoFOego/MPUmCouP3RaAEpMmcRGXgnif9PqnYJjszUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJqPGL4i2S08pN4OUJU7ymUzmYwMB8GA1UdIwQY MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt ZTNmY2IyM2UzNDM4LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4 LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1OqjjPq h6gYUcjlGcaEnb3mJxK8gyLwLck7tC+NXdqz6UosmOZA7h6Wog3dzor97Yu9YG8a xMlPziCqgKQazcZx330Icaw/WlpfyUtwq5gN1QhQK5ZM0aGsWNPDIjSh+WyIpG96 It+tk94n4DpdDe3UE9q61Rq4Jli9FGlLCu85GHe6QMNplcE9eG4Vzuqsw2pAW35h RbKtlGGzpsW7sx104FkK2XUVRNJz0HOfpV48R+c5sCCeGMTHdy5XNL7QwYalpWjq +C9/g06zonCQZckJyP7AiON/imd3xMYzT/mhwXeadjhwwSStY12WcKPCg9fhOaCi YdbiJ/Eiqg5HxQ== -----END CERTIFICATE-----Generated at Sun Jan 25 05:40:46 2026 by rpki-client