This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json) Hash identifier: SUUGgku250LFkJN/15w9bJ1hw/1PkBV2dyxseEkyXUQ= Subject key identifier: CF:64:C9:90:67:32:34:33:64:53:D6:60:FC:24:CC:12:29:AC:9E:8E Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74 Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574 Certificate serial: 019BF80844A7C686A312F7DCED61BED50820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft Manifest number: 08BD Signing time: Mon 26 Jan 2026 02:00:49 +0000 Manifest this update: Mon 26 Jan 2026 02:00:49 +0000 Manifest next update: Tue 27 Jan 2026 02:00:49 +0000 Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: 1NSfQfotLGsJGK2PLpk4AaLH+Rb5ZS7LMlQFJJfWpcM=) 2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:44:a7:c6:86:a3:12:f7:dc:ed:61:be:d5:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574 Validity Not Before: Jan 26 02:00:49 2026 GMT Not After : Jan 27 02:00:49 2026 GMT Subject: CN=cf64c990673234336453d660fc24cc1229ac9e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:0c:15:3f:98:07:f6:66:70:23:87:7b:7d: 2e:51:6c:4b:f5:bc:44:7e:14:8b:f5:73:a0:d9:f9: a5:f6:be:6d:c2:1d:5e:43:0a:66:13:94:a4:e4:57: 89:7c:50:40:41:52:7b:8a:37:de:65:b7:89:ae:f9: 36:cc:be:f6:cd:5c:3e:e4:87:d2:91:1e:99:35:1c: c4:52:84:b8:a4:f0:5d:bd:68:a3:3c:ed:bd:e6:9e: 90:09:ad:56:fb:60:59:e5:6d:46:90:b3:1f:ab:37: 81:51:0d:d2:ff:ae:56:f0:d3:d4:d7:b6:e0:ac:0f: d9:09:a3:30:8e:9f:fe:2d:88:b3:8d:a7:58:bb:b0: 8d:1b:11:7e:af:50:40:9d:5d:24:ea:07:f4:28:95: 41:68:dd:15:31:e5:4f:3a:8b:c6:a9:0d:c7:c3:67: 04:2e:d9:db:39:01:1e:91:78:67:e6:78:dd:88:e9: 17:49:8f:f0:22:4b:53:c1:82:db:d0:ba:b3:c6:91: 65:e4:01:6a:a0:f9:4f:2e:3f:2b:fd:e1:f8:90:a8: 49:28:83:ed:3b:89:15:da:7f:9e:d1:08:42:09:00: fc:e4:26:17:d9:5e:d8:16:5a:df:13:b3:60:ff:be: 88:a8:2b:29:b8:2d:2f:82:5b:3e:b4:72:4d:6f:f7: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:64:C9:90:67:32:34:33:64:53:D6:60:FC:24:CC:12:29:AC:9E:8E X509v3 Authority Key Identifier: keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a0:aa:56:74:3e:0c:35:ab:bd:4f:a4:33:59:c5:13:28:22: 0c:bc:e7:59:97:cf:f9:a0:e3:90:40:78:3a:b6:c1:63:d0:17: a7:f8:24:ef:aa:f2:21:38:5f:13:0a:64:aa:9c:20:58:35:1a: 25:ac:ac:68:f6:43:fb:3e:e5:86:ba:ac:5f:5f:4a:f2:95:21: 3c:ff:07:be:9c:33:a6:ab:57:64:1c:c2:ca:95:6f:09:6e:e0: a1:1e:b3:ed:8a:bb:83:22:98:6b:e0:fa:72:a8:7c:26:54:b5: a1:6f:8f:08:18:80:08:08:8d:c5:82:a1:fa:eb:88:6b:0f:ba: ef:c5:e7:6e:ba:d6:6c:af:cb:e3:b2:de:e5:93:64:39:1c:18: 32:c7:d6:ca:6e:bb:28:5a:8e:ff:79:f2:68:c7:58:23:93:5d: 76:76:35:f1:c6:31:b4:9c:23:ff:19:47:66:f1:17:27:33:23: 55:f6:9f:ac:a7:dd:61:a7:c1:ef:58:cf:17:85:e2:cd:1c:47: 13:78:54:33:e3:6e:c3:c8:ba:38:77:6b:c9:02:f0:b3:f7:fd: 89:8b:1a:64:75:65:e3:f3:68:a5:27:ec:b9:fd:41:f0:53:7c: cc:81:62:43:64:07:13:06:cf:21:35:fb:c9:fc:a2:b7:37:6d: 34:dc:76:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CESnxoajEvfc7WG+1QggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjM0MDM1MzA0OThkODI1ZjJlNzg4YTA3NjUwM2JjOWRj ZTE1NzQwHhcNMjYwMTI2MDIwMDQ5WhcNMjYwMTI3MDIwMDQ5WjAzMTEwLwYDVQQD EyhjZjY0Yzk5MDY3MzIzNDMzNjQ1M2Q2NjBmYzI0Y2MxMjI5YWM5ZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniUMFT+YB/ZmcCOHe30uUWxL9bxE fhSL9XOg2fml9r5twh1eQwpmE5Sk5FeJfFBAQVJ7ijfeZbeJrvk2zL72zVw+5IfS kR6ZNRzEUoS4pPBdvWijPO295p6QCa1W+2BZ5W1GkLMfqzeBUQ3S/65W8NPU17bg rA/ZCaMwjp/+LYizjadYu7CNGxF+r1BAnV0k6gf0KJVBaN0VMeVPOovGqQ3Hw2cE LtnbOQEekXhn5njdiOkXSY/wIktTwYLb0LqzxpFl5AFqoPlPLj8r/eH4kKhJKIPt O4kV2n+e0QhCCQD85CYX2V7YFlrfE7Ng/76IqCspuC0vgls+tHJNb/dYAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9kyZBnMjQzZFPWYPwkzBIprJ6OMB8GA1UdIwQY MBaAFPezQDUwSY2CXy54igdlA7ydzhV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NmU3MGMtNjQ3MS00NTkyLWExMzQt NDBkZDJjNzVmMWI3LzEvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NmU3MGMtNjQ3MS00NTkyLWExMzQtNDBkZDJjNzVmMWI3 LzEvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaCqVnQ+ DDWrvU+kM1nFEygiDLznWZfP+aDjkEB4OrbBY9AXp/gk76ryIThfEwpkqpwgWDUa JaysaPZD+z7lhrqsX19K8pUhPP8HvpwzpqtXZBzCypVvCW7goR6z7Yq7gyKYa+D6 cqh8JlS1oW+PCBiACAiNxYKh+uuIaw+678XnbrrWbK/L47Le5ZNkORwYMsfWym67 KFqO/3nyaMdYI5NddnY18cYxtJwj/xlHZvEXJzMjVfafrKfdYafB71jPF4XizRxH E3hUM+Nuw8i6OHdryQLws/f9iYsaZHVl4/NopSfsuf1B8FN8zIFiQ2QHEwbPITX7 yfyitzdtNNx2Hg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:42:49 2026 by rpki-client