This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json) Hash identifier: bmzmJ85QsqUDLY81lkp/1b1TkdHk/TyBCAU5qFfHKSA= Subject key identifier: 00:8F:39:20:EA:78:10:BB:A1:C9:35:EC:A9:42:4F:31:5D:99:51:0B Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33 Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733 Certificate serial: 019BF72C9AA11B7CB6FC8FAB7B9CF9754554 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft Manifest number: 040C Signing time: Sun 25 Jan 2026 22:00:54 +0000 Manifest this update: Sun 25 Jan 2026 22:00:54 +0000 Manifest next update: Mon 26 Jan 2026 22:00:54 +0000 Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=) 2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: U3uWsaCssOHEEr4/o9RRmTjTGjDSkxeEcQ5LT76ggZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:9a:a1:1b:7c:b6:fc:8f:ab:7b:9c:f9:75:45:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733 Validity Not Before: Jan 25 22:00:54 2026 GMT Not After : Jan 26 22:00:54 2026 GMT Subject: CN=008f3920ea7810bba1c935eca9424f315d99510b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:a9:a4:4e:b8:cc:af:cb:94:ab:f3:b9:bd: 01:96:f0:f3:c9:ef:04:93:8b:08:80:e9:cc:a4:a7: 13:1e:8c:51:b0:7b:5a:56:1a:bf:f9:e4:d6:2b:b2: 6a:55:46:cf:c4:94:03:2c:91:3a:ac:98:b8:f0:25: 2e:b2:af:b6:d6:65:06:aa:e3:00:ec:2f:1f:00:d3: cb:ed:95:4c:95:a0:4f:0d:50:47:77:55:79:fe:41: 19:5d:7d:3b:7e:64:cc:bf:5a:eb:e2:b5:f5:f9:62: ea:cd:36:76:fc:a5:6b:ba:83:00:69:24:58:6c:2f: 40:57:42:e8:40:4d:a5:c0:ce:5c:c1:d0:b2:97:74: 7b:bb:16:dd:ea:c2:f4:45:8c:05:4e:33:7b:0f:35: 77:3b:b3:e7:d0:54:56:c9:01:71:1b:7c:15:da:7e: 36:56:d4:cc:c8:05:dc:92:8c:6a:0b:8d:0b:b4:f5: 5b:d4:9f:a1:13:7c:88:9c:3e:75:ba:52:71:da:db: 3b:56:c5:ac:90:0d:6e:ee:01:ec:a1:c7:13:d8:3b: fc:cd:c3:0a:73:72:d6:07:e9:9e:8b:0f:26:f4:e5: 90:1f:8d:22:a7:74:e0:fc:5e:12:30:0b:4d:d1:ba: 0e:6b:3c:e1:66:c8:ca:46:bc:e1:08:44:c6:98:a7: 6d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8F:39:20:EA:78:10:BB:A1:C9:35:EC:A9:42:4F:31:5D:99:51:0B X509v3 Authority Key Identifier: keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:7d:56:f6:aa:9e:75:8b:8a:bf:c0:ae:98:20:da:3c:c6:f5: 5a:8b:a6:8e:d8:eb:29:36:73:ee:88:9d:b8:e1:92:dd:08:a6: 52:24:53:36:bb:2a:69:ea:26:89:07:92:33:05:b9:0c:f7:00: 8a:34:ff:4d:1e:25:03:35:f5:3a:58:30:ef:f0:9a:3a:79:38: 45:86:13:a3:29:db:e7:6a:3f:7c:ef:41:13:bc:aa:ad:1b:fd: d7:2d:48:dd:fc:3c:bc:7c:76:05:39:e2:22:a6:ab:c0:40:3e: 1c:c5:39:cd:c4:de:5a:19:c6:cd:81:a4:e7:7a:20:d3:5f:9e: af:8b:08:2c:2d:5d:e4:58:9e:2f:54:35:36:b8:86:38:00:46: f6:da:18:0e:21:10:36:d8:a7:3d:09:e2:16:83:cc:48:c4:13: 0d:e4:73:ef:58:e4:17:11:9e:b0:08:0f:9d:fd:c5:7f:98:87: 0b:df:1b:83:39:81:22:52:51:0e:54:91:cb:71:4e:81:2c:33: 82:d0:52:98:72:c1:f7:a9:13:8c:99:56:5c:db:25:02:ed:ed: de:ec:22:92:67:b9:78:9a:72:8b:74:c2:f7:51:21:35:7a:6d: 12:59:62:67:07:c8:0b:4b:2c:25:e7:6a:f4:84:91:b1:9b:28: c0:1c:17:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LJqhG3y2/I+re5z5dUVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl M2U3MzMwHhcNMjYwMTI1MjIwMDU0WhcNMjYwMTI2MjIwMDU0WjAzMTEwLwYDVQQD EygwMDhmMzkyMGVhNzgxMGJiYTFjOTM1ZWNhOTQyNGYzMTVkOTk1MTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BeppE64zK/LlKvzub0BlvDzye8E k4sIgOnMpKcTHoxRsHtaVhq/+eTWK7JqVUbPxJQDLJE6rJi48CUusq+21mUGquMA 7C8fANPL7ZVMlaBPDVBHd1V5/kEZXX07fmTMv1rr4rX1+WLqzTZ2/KVruoMAaSRY bC9AV0LoQE2lwM5cwdCyl3R7uxbd6sL0RYwFTjN7DzV3O7Pn0FRWyQFxG3wV2n42 VtTMyAXckoxqC40LtPVb1J+hE3yInD51ulJx2ts7VsWskA1u7gHsoccT2Dv8zcMK c3LWB+meiw8m9OWQH40ip3Tg/F4SMAtN0boOazzhZsjKRrzhCETGmKdtUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACPOSDqeBC7ock17KlCTzFdmVELMB8GA1UdIwQY MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMH1W9qqe dYuKv8CumCDaPMb1WoumjtjrKTZz7oiduOGS3QimUiRTNrsqaeomiQeSMwW5DPcA ijT/TR4lAzX1Olgw7/CaOnk4RYYToynb52o/fO9BE7yqrRv91y1I3fw8vHx2BTni IqarwEA+HMU5zcTeWhnGzYGk53og01+er4sILC1d5FieL1Q1NriGOABG9toYDiEQ NtinPQniFoPMSMQTDeRz71jkFxGesAgPnf3Ff5iHC98bgzmBIlJRDlSRy3FOgSwz gtBSmHLB96kTjJlWXNslAu3t3uwikme5eJpyi3TC91EhNXptElliZwfIC0ssJedq 9ISRsZsowBwXTg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:22 2026 by rpki-client