This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json) Hash identifier: bP1XKQwabx4AjhNh3fwYEEDEO7nqb1nqI9sYz89hDFo= Subject key identifier: 6A:71:58:14:48:11:F8:C9:92:C3:B7:BD:AF:2D:89:41:D4:4C:FE:78 Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7 Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7 Certificate serial: 019BF8E46D7B1360D4D970366D421F7004E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 06:01:18 +0000 Manifest this update: Mon 26 Jan 2026 06:01:18 +0000 Manifest next update: Tue 27 Jan 2026 06:01:18 +0000 Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: dAljc14i6F7kQdVK2DMNXwHlrueuB1CwYUbHP+fWjEU=) 2: k_IWfz24GtW9jdapb5SVoB4B2pg.roa (hash: kvz9RvlQv21JjRnE/6/IlWNUP5dNO7sg6mpvMuJ9Xec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:6d:7b:13:60:d4:d9:70:36:6d:42:1f:70:04:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7 Validity Not Before: Jan 26 06:01:18 2026 GMT Not After : Jan 27 06:01:18 2026 GMT Subject: CN=6a7158144811f8c992c3b7bdaf2d8941d44cfe78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:45:a2:c2:ff:6c:18:d1:12:e2:53:a9:99:f7: 8f:e7:97:64:e6:9c:27:43:65:7c:58:fd:fd:9d:8b: 0f:c5:59:75:2c:28:af:cb:48:4c:e1:b3:3c:cc:79: 61:d6:c0:e3:b9:f8:ee:ab:06:50:39:b2:c9:43:0b: 1d:34:3f:04:07:c0:83:9f:e1:4c:b6:89:7c:35:87: 8b:c0:b4:2f:b6:5d:64:e6:46:45:0c:3b:8d:60:0d: 3a:ee:4c:a4:b9:7c:12:0b:5e:e7:08:fb:6f:a7:6f: 38:d3:b4:47:cf:cf:2e:b5:b2:8a:14:fb:d6:57:9d: 0e:11:8e:32:fd:17:c8:72:07:7a:75:33:b5:2c:bb: 85:80:8b:31:36:19:91:88:91:5d:ef:6e:cc:3e:d3: 2c:68:4d:73:6b:08:31:fe:ba:df:2b:aa:2c:58:83: 30:78:95:3c:9a:d5:54:05:36:f1:7e:22:c6:a8:e7: 89:ac:3c:78:f1:d2:a8:db:a1:4d:3c:2f:56:f9:60: 1e:f3:b2:67:33:4d:31:ab:c0:ae:2b:aa:3e:5d:d9: bc:23:fb:0b:7f:f9:54:25:67:ce:81:70:45:1b:a8: 5c:6d:e4:ae:6b:15:45:ea:f7:c6:a1:46:76:38:c2: 76:4a:66:3d:8d:21:c8:e1:18:b6:80:d0:cd:ee:c5: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:71:58:14:48:11:F8:C9:92:C3:B7:BD:AF:2D:89:41:D4:4C:FE:78 X509v3 Authority Key Identifier: keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:48:a6:d5:b1:74:a6:0f:b7:61:80:87:2d:12:1b:f0:d6:7b: 3c:79:1e:87:f0:81:9d:18:a4:a1:88:d6:2b:b4:bb:dc:d6:f9: da:e7:4f:46:a6:d1:81:6a:95:1b:ed:17:71:6b:bb:8c:51:12: 27:1d:7e:79:1b:cd:30:bd:3f:3c:df:7f:a0:4a:69:7c:4e:50: 68:42:d7:46:07:3a:01:bc:e1:f1:2a:ed:87:be:fb:9b:72:e0: 2f:ae:ea:cf:95:b3:ea:e2:e5:40:33:b5:61:d2:e0:2c:10:eb: e0:a0:b1:f6:9b:bf:3f:f9:c1:9c:62:80:b0:b4:62:c7:d8:27: eb:e0:b9:c2:e7:06:64:5a:a5:04:7e:07:55:88:b0:8f:87:96: e9:8d:aa:4a:1c:2f:0c:08:93:57:83:10:15:67:fc:64:2b:12: 04:ea:12:43:12:6b:6a:78:c6:6c:e7:ab:8c:e0:6c:d5:3c:15: 66:9c:a8:85:68:1a:e5:6a:5d:d0:5c:c7:0e:23:db:9d:00:20: 00:32:cf:e9:72:4b:ac:a5:21:b6:cb:5a:48:1c:5f:67:b1:76: eb:b0:04:a1:54:9b:90:f6:04:ce:e3:51:4c:a8:07:fd:1a:d5: f7:4d:97:39:58:aa:65:3e:8a:c2:d3:30:01:78:c5:ad:95:9c: 34:a5:db:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45G17E2DU2XA2bUIfcATmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTJhOGE2ZGY5OTc4ZGU3MjI3MDAzYjFmZDNmMGUyYjll NTljYzcwHhcNMjYwMTI2MDYwMTE4WhcNMjYwMTI3MDYwMTE4WjAzMTEwLwYDVQQD Eyg2YTcxNTgxNDQ4MTFmOGM5OTJjM2I3YmRhZjJkODk0MWQ0NGNmZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEWiwv9sGNES4lOpmfeP55dk5pwn Q2V8WP39nYsPxVl1LCivy0hM4bM8zHlh1sDjufjuqwZQObLJQwsdND8EB8CDn+FM tol8NYeLwLQvtl1k5kZFDDuNYA067kykuXwSC17nCPtvp28407RHz88utbKKFPvW V50OEY4y/RfIcgd6dTO1LLuFgIsxNhmRiJFd727MPtMsaE1zawgx/rrfK6osWIMw eJU8mtVUBTbxfiLGqOeJrDx48dKo26FNPC9W+WAe87JnM00xq8CuK6o+Xdm8I/sL f/lUJWfOgXBFG6hcbeSuaxVF6vfGoUZ2OMJ2SmY9jSHI4Ri2gNDN7sVJmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpxWBRIEfjJksO3va8tiUHUTP54MB8GA1UdIwQY MBaAFDUSqKbfmXjecicAOx/T8OK55ZzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWIt NzQ3ZTc1ZTU1NDYxLzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWItNzQ3ZTc1ZTU1NDYx LzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEim1bF0 pg+3YYCHLRIb8NZ7PHkeh/CBnRikoYjWK7S73Nb52udPRqbRgWqVG+0XcWu7jFES Jx1+eRvNML0/PN9/oEppfE5QaELXRgc6Abzh8Srth777m3LgL67qz5Wz6uLlQDO1 YdLgLBDr4KCx9pu/P/nBnGKAsLRix9gn6+C5wucGZFqlBH4HVYiwj4eW6Y2qShwv DAiTV4MQFWf8ZCsSBOoSQxJranjGbOerjOBs1TwVZpyohWga5Wpd0FzHDiPbnQAg ADLP6XJLrKUhtstaSBxfZ7F267AEoVSbkPYEzuNRTKgH/RrV902XOViqZT6KwtMw AXjFrZWcNKXbpg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:36 2026 by rpki-client