This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json) Hash identifier: 0WHj10W9JVouwHyxkKdnKDN33QPqO6kPvuW2AYCzph8= Subject key identifier: D5:97:DB:54:BE:35:B1:B2:2D:FF:58:18:D3:CB:D5:44:8B:EA:14:A8 Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Certificate serial: 019BF651D3D8A1AAB5C4A689305768D3784A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft Manifest number: 17F1 Signing time: Sun 25 Jan 2026 18:01:56 +0000 Manifest this update: Sun 25 Jan 2026 18:01:56 +0000 Manifest next update: Mon 26 Jan 2026 18:01:56 +0000 Files and hashes: 1: EatRVRBBWy_Eiw-BYatitoyprMs.roa (hash: iv+Kv1NfcsjQn7ciX3R3V9wqkwDXw2M471v/p/wN2I8=) 2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: GNZVpCLjMtzLtaLra/SkciQrCgyv0syNqUZi7MGNS7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:d3:d8:a1:aa:b5:c4:a6:89:30:57:68:d3:78:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Validity Not Before: Jan 25 18:01:56 2026 GMT Not After : Jan 26 18:01:56 2026 GMT Subject: CN=d597db54be35b1b22dff5818d3cbd5448bea14a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a1:1f:32:d6:67:99:d9:36:90:d6:e6:57:b3: ed:1d:a4:f8:bc:49:3e:ef:c8:a2:09:27:b4:74:80: d8:4a:ae:ec:44:1a:fe:f1:5e:a8:de:5e:f9:3c:bf: 96:3d:ff:37:9c:e5:6f:39:44:2f:64:70:47:c7:7c: 45:6d:b6:c9:b0:e0:fb:76:2c:8f:01:5b:1c:72:f9: 62:bc:8a:d5:27:c2:d1:76:69:d5:29:a9:61:98:f6: d8:b0:05:7f:0d:7e:1e:18:8d:36:1e:ae:3b:50:4d: 95:42:21:85:9b:22:28:fc:06:3d:33:9f:72:d8:94: ae:59:73:18:d6:2c:b7:27:2e:0e:6c:5c:2d:fa:6d: 20:93:e0:74:26:a5:f4:4c:63:d7:4c:c6:ab:d5:98: db:4a:5d:8e:a8:24:00:3b:5a:8b:fe:57:c6:bc:a7: 01:b5:09:a0:e0:c1:01:cc:ff:f0:c6:c5:9d:f2:3b: d5:3a:c0:4b:7c:c8:be:26:4d:d1:da:c0:31:4e:5c: a5:16:96:92:be:aa:b4:17:89:cd:48:f1:00:ff:21: 21:0f:e3:c7:d5:bd:a5:2c:ee:e3:82:4b:6b:e3:80: 74:17:5e:f1:92:cf:6a:b3:38:32:0d:dd:05:c8:9d: 09:9a:8e:62:53:8b:02:b0:e6:cb:65:4a:81:65:87: 16:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:97:DB:54:BE:35:B1:B2:2D:FF:58:18:D3:CB:D5:44:8B:EA:14:A8 X509v3 Authority Key Identifier: keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:42:3f:7b:f4:f9:65:01:dd:e3:6e:b1:42:b2:fe:5a:88:3e: 9e:2a:15:a4:cd:83:37:37:46:8a:38:e1:12:01:eb:4d:ee:31: e8:f8:8c:37:e4:2f:8d:7e:94:17:2a:16:32:0d:0f:f5:d3:ab: 6f:cf:8d:5f:66:f0:3d:0e:95:f8:1b:d7:02:74:b5:71:48:06: a8:1f:33:4a:c3:89:eb:a4:7e:c8:84:72:8c:35:2a:c4:e1:7f: 3e:55:98:98:cf:2e:6e:36:47:a7:b9:68:6e:08:d9:bb:2c:18: c1:18:47:47:4f:fc:d2:39:59:95:37:9b:52:c4:0f:84:b4:fa: 4b:e9:38:13:e6:91:e6:b2:b3:a6:17:7e:7e:5d:80:9c:a3:29: 25:9d:e1:be:f0:d0:25:dc:a2:d4:72:7d:8d:4d:a2:64:a9:92: a1:fd:be:bd:06:ec:69:b3:1c:5c:6a:80:41:82:ce:1d:1f:27: 94:f8:b4:3e:52:d9:f0:48:f9:d4:38:68:e7:f4:00:c8:c9:11: 55:0f:59:91:99:3d:e2:fd:d9:a7:23:e4:e2:c4:3b:f5:44:88: 9b:51:e3:d9:d3:53:2a:c4:45:52:33:79:19:ac:ee:6a:a3:57: 35:2e:18:48:66:c9:46:1a:06:85:85:7a:49:a0:55:a0:31:1b: 3e:18:b6:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UdPYoaq1xKaJMFdo03hKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0 OTBmMGUwHhcNMjYwMTI1MTgwMTU2WhcNMjYwMTI2MTgwMTU2WjAzMTEwLwYDVQQD EyhkNTk3ZGI1NGJlMzViMWIyMmRmZjU4MThkM2NiZDU0NDhiZWExNGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6EfMtZnmdk2kNbmV7PtHaT4vEk+ 78iiCSe0dIDYSq7sRBr+8V6o3l75PL+WPf83nOVvOUQvZHBHx3xFbbbJsOD7diyP AVsccvlivIrVJ8LRdmnVKalhmPbYsAV/DX4eGI02Hq47UE2VQiGFmyIo/AY9M59y 2JSuWXMY1iy3Jy4ObFwt+m0gk+B0JqX0TGPXTMar1ZjbSl2OqCQAO1qL/lfGvKcB tQmg4MEBzP/wxsWd8jvVOsBLfMi+Jk3R2sAxTlylFpaSvqq0F4nNSPEA/yEhD+PH 1b2lLO7jgktr44B0F17xks9qszgyDd0FyJ0Jmo5iU4sCsObLZUqBZYcWcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWX21S+NbGyLf9YGNPL1USL6hSoMB8GA1UdIwQY MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt YmRlMDI4YWQ1OTMwLzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEI/e/T5 ZQHd426xQrL+Wog+nioVpM2DNzdGijjhEgHrTe4x6PiMN+QvjX6UFyoWMg0P9dOr b8+NX2bwPQ6V+BvXAnS1cUgGqB8zSsOJ66R+yIRyjDUqxOF/PlWYmM8ubjZHp7lo bgjZuywYwRhHR0/80jlZlTebUsQPhLT6S+k4E+aR5rKzphd+fl2AnKMpJZ3hvvDQ Jdyi1HJ9jU2iZKmSof2+vQbsabMcXGqAQYLOHR8nlPi0PlLZ8Ej51Dho5/QAyMkR VQ9ZkZk94v3ZpyPk4sQ79USIm1Hj2dNTKsRFUjN5GazuaqNXNS4YSGbJRhoGhYV6 SaBVoDEbPhi2hA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:19 2026 by rpki-client