This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: ebSicRbrioc9YCqJP5vysUA/YAplbgKiwiisoF7LBwg= Subject key identifier: BA:35:24:36:D1:6A:6C:EF:B4:E1:0E:3A:F6:06:AF:CC:84:DC:27:35 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019BF3BDCB8230131D4BEF37F268275EBA51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 1111 Signing time: Sun 25 Jan 2026 06:01:00 +0000 Manifest this update: Sun 25 Jan 2026 06:01:00 +0000 Manifest next update: Mon 26 Jan 2026 06:01:00 +0000 Files and hashes: 1: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=) 2: TxNd5pJ27uJYq-599NEcjd3YSFE.roa (hash: MKliCQJ8R1hwAnZ4kj94ssCz7Pi63lFdJSsHyJKq8Ko=) 3: _K2f6DqGYftLvCgaU9NJUnwx5uI.roa (hash: +bNWQeR+tOZFOesz+uNPp44EnwcVKTlHLLbRiXOcV/w=) 4: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=) 5: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=) 6: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: o2ETbQS59fpseeljRdOmugZJoHsH9p+9Tqo/mVvBMdw=) 7: pVWucn62UZlUYEkLwtnRBuH29Ec.roa (hash: fEeXmrTbxDWYxdEIPNB+dmTYd1gfRV01N5PsV9sWN7U=) 8: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=) 9: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:cb:82:30:13:1d:4b:ef:37:f2:68:27:5e:ba:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jan 25 06:01:00 2026 GMT Not After : Jan 26 06:01:00 2026 GMT Subject: CN=ba352436d16a6cefb4e10e3af606afcc84dc2735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:4a:fd:bf:bb:97:57:fa:50:21:8a:44:d1: e6:9e:4a:db:a7:d7:48:52:a5:74:6c:a5:b5:de:ce: 6f:0d:0d:a5:e0:8e:a4:77:d8:ba:54:96:f5:98:a8: eb:3a:7b:d5:52:25:7e:22:fe:98:5b:a2:76:83:b8: 1e:87:52:44:1d:37:0c:93:eb:81:9f:fc:69:20:1a: 31:45:cc:2a:bc:5d:13:32:fe:33:35:99:ac:b4:8a: b3:7a:8f:9c:72:db:b4:c9:af:0e:de:2f:c5:77:65: 4d:09:62:5e:d0:2a:12:de:ad:9f:bf:cc:0e:59:65: 9f:20:7d:84:82:65:7d:32:ee:04:fa:5b:1e:7b:0a: ad:f4:49:ff:00:ff:7e:1d:09:03:b6:b3:d3:93:74: ee:b9:38:31:a7:de:d6:c7:f0:d3:45:0e:db:11:10: cd:b9:06:01:67:48:f6:9d:59:6c:11:19:ea:07:5e: b6:f6:08:7f:ff:99:b2:3a:12:8f:07:e6:c7:1d:83: a3:b5:1b:3d:bd:69:e3:7e:db:55:52:c0:f5:c1:de: fa:aa:f7:7c:2d:19:a7:0e:44:6a:f4:c4:55:ff:fe: 69:36:ae:4b:6b:20:86:db:d4:ed:d2:84:f2:47:36: be:10:f3:ef:16:67:7f:9c:cf:5d:87:e9:a5:a4:0d: 43:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:35:24:36:D1:6A:6C:EF:B4:E1:0E:3A:F6:06:AF:CC:84:DC:27:35 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:37:c5:4f:f9:78:03:d7:bf:33:31:bf:8c:47:c4:78:98:c4: 67:6e:e0:f4:5e:57:40:cd:c9:46:f1:b4:7c:89:a0:2f:0d:12: 1d:ac:ae:8b:53:d2:f7:f2:4c:32:0e:5c:10:62:3a:b6:9e:33: 28:45:ba:6b:51:9f:a5:6d:61:4a:46:2c:87:bf:bd:f8:6b:58: 98:7c:de:1a:5f:5e:67:52:dd:02:6d:05:aa:f8:47:a3:b6:44: 02:d4:83:74:c6:5c:33:36:e1:43:91:41:ca:91:cd:e9:cc:3a: 70:b6:36:9b:d8:11:68:83:d5:36:5a:9f:b2:42:9f:e5:c8:a8: 83:aa:64:27:74:fc:69:ea:73:a3:c6:01:34:fe:8e:8d:25:fd: 73:23:90:da:f9:05:af:7e:81:ba:92:8d:a7:f4:39:eb:fc:d8: f7:22:15:df:5f:d6:73:80:9a:95:11:4f:28:2d:77:13:1e:92: c8:43:64:63:08:90:db:a7:2b:a9:c2:46:2b:29:d5:77:ad:5f: 9a:27:ea:fd:8b:cd:2d:ab:12:f7:53:98:8c:c2:f2:08:ad:b4: d5:ab:af:29:d4:8d:2b:76:e7:e8:0a:23:e0:75:4e:96:31:ff: 0c:68:35:f5:20:03:88:72:76:fb:e0:e4:8c:06:94:d3:9b:e0: dc:f4:1b:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvcuCMBMdS+838mgnXrpRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwMTI1MDYwMTAwWhcNMjYwMTI2MDYwMTAwWjAzMTEwLwYDVQQD EyhiYTM1MjQzNmQxNmE2Y2VmYjRlMTBlM2FmNjA2YWZjYzg0ZGMyNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLdK/b+7l1f6UCGKRNHmnkrbp9dI UqV0bKW13s5vDQ2l4I6kd9i6VJb1mKjrOnvVUiV+Iv6YW6J2g7geh1JEHTcMk+uB n/xpIBoxRcwqvF0TMv4zNZmstIqzeo+cctu0ya8O3i/Fd2VNCWJe0CoS3q2fv8wO WWWfIH2EgmV9Mu4E+lseewqt9En/AP9+HQkDtrPTk3TuuTgxp97Wx/DTRQ7bERDN uQYBZ0j2nVlsERnqB1629gh//5myOhKPB+bHHYOjtRs9vWnjfttVUsD1wd76qvd8 LRmnDkRq9MRV//5pNq5LayCG29Tt0oTyRza+EPPvFmd/nM9dh+mlpA1DuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo1JDbRamzvtOEOOvYGr8yE3Cc1MB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTfFT/l4 A9e/MzG/jEfEeJjEZ27g9F5XQM3JRvG0fImgLw0SHayui1PS9/JMMg5cEGI6tp4z KEW6a1GfpW1hSkYsh7+9+GtYmHzeGl9eZ1LdAm0FqvhHo7ZEAtSDdMZcMzbhQ5FB ypHN6cw6cLY2m9gRaIPVNlqfskKf5ciog6pkJ3T8aepzo8YBNP6OjSX9cyOQ2vkF r36BupKNp/Q56/zY9yIV31/Wc4CalRFPKC13Ex6SyENkYwiQ26crqcJGKynVd61f mifq/YvNLasS91OYjMLyCK201auvKdSNK3bn6Aoj4HVOljH/DGg19SADiHJ2++Dk jAaU05vg3PQb/A== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:43 2026 by rpki-client