This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json) Hash identifier: UekXrdf3wDiJnGZYfT+f9NOErE3TFjTGw0CJ0VlN0YM= Subject key identifier: 9D:F6:FE:2E:F7:1E:B8:02:0F:F1:10:9B:EE:19:CE:EA:1D:99:F0:F4 Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab Certificate serial: 019BF688544038EDF987CB1F2D66376A13D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 19:01:28 +0000 Manifest this update: Sun 25 Jan 2026 19:01:28 +0000 Manifest next update: Mon 26 Jan 2026 19:01:28 +0000 Files and hashes: 1: DwjBds5b0bny3-dZb3jOPo6oE6o.roa (hash: Rkq+xz9kCRAZI1zfzUNT6Gu5M/oAmAXmbyM5y+/YH1I=) 2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: y2woPAjn5CYBen6AWWCj4yCmDKQBSlfqvS9IIEaSVPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:54:40:38:ed:f9:87:cb:1f:2d:66:37:6a:13:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab Validity Not Before: Jan 25 19:01:28 2026 GMT Not After : Jan 26 19:01:28 2026 GMT Subject: CN=9df6fe2ef71eb8020ff1109bee19ceea1d99f0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:03:b4:fb:d8:31:f4:dc:f3:4a:d5:be:29: 8b:27:80:d9:75:6d:45:c0:ff:ec:0d:b5:94:5f:6b: 41:e6:3d:a0:0e:b1:77:c5:82:ae:bd:48:b5:ef:91: e5:d4:db:94:a8:ef:3b:42:d8:c1:85:68:9e:81:17: 94:c5:17:e7:8f:de:67:ea:16:f4:bb:4c:aa:54:74: ce:78:7d:28:f4:b9:73:ee:47:87:3b:0c:33:e3:41: 78:09:26:37:48:a2:8d:a4:53:32:9e:18:23:57:1a: 28:f9:df:b0:3a:47:7f:84:33:9e:c3:05:9e:ab:d5: 8e:fa:42:6b:8a:07:eb:cc:47:ff:ed:4c:88:eb:0f: c7:f4:f3:23:a1:2d:5a:3c:eb:fd:36:4f:22:6d:59: 6c:9b:15:6a:78:cf:61:78:cf:0e:7e:e9:c4:11:ab: 3f:e3:26:bc:30:72:8c:b7:14:b5:90:6c:84:22:db: 78:18:d0:ad:4c:ee:05:57:7f:44:58:45:8a:a8:0c: fb:aa:40:ae:0b:65:60:4c:c5:e0:e5:1d:1a:09:97: 2d:5d:87:3d:26:36:25:97:69:53:8e:62:cf:8b:9d: a6:8d:de:53:e2:8f:a6:0a:1a:cb:53:31:39:df:40: 18:e4:a2:c7:7d:d4:6c:0a:d2:18:03:2c:0f:a5:4c: 38:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F6:FE:2E:F7:1E:B8:02:0F:F1:10:9B:EE:19:CE:EA:1D:99:F0:F4 X509v3 Authority Key Identifier: keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a2:2d:08:50:be:43:2d:3b:31:79:e0:de:a8:6f:53:b6:61: da:f6:6d:7c:f3:3d:33:16:e0:bf:da:1a:b0:bd:a5:84:fc:4e: fe:ba:d0:d3:a6:bf:ce:a9:8d:ee:9c:c0:d3:e1:e9:87:7b:1a: b1:fe:f8:83:7a:57:47:61:67:94:ba:eb:84:3c:4b:51:41:2c: aa:fa:78:84:34:99:74:ff:4d:56:2b:18:75:8f:e7:a8:0b:4a: 4f:2f:26:0a:02:d8:5e:9f:11:78:18:ed:9d:65:23:a5:dc:e9: d1:f5:6d:7e:73:c5:db:69:e8:b9:b3:ed:8d:5a:80:88:77:57: c8:5a:e8:25:2c:09:5e:78:2f:b9:f5:7e:b0:a9:0d:4d:a1:7a: 97:1c:a6:1f:ba:90:3c:b7:cd:0b:73:e7:0c:f7:d5:ed:ff:e9: d5:06:0d:0f:0a:de:47:06:10:9d:e6:8e:50:dc:1a:0d:bd:f8: 73:11:85:28:3f:83:ba:90:31:ac:20:52:49:ed:90:d6:2c:31: ae:e1:49:cb:75:ba:1f:fd:d7:a1:ad:bf:cd:44:e9:9b:ca:c3: 0b:f1:0f:8a:a0:d9:b0:88:57:83:aa:cd:41:0d:8e:9c:a4:5d: 04:e5:a4:4f:f0:62:65:2e:cf:27:16:26:c2:23:16:75:b3:a8: 61:1c:a0:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iFRAOO35h8sfLWY3ahPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzcyMGU5NzBmYWEwZTA3ZjUwYTYzODllN2FlNTNhZmE0 MzlkYWIwHhcNMjYwMTI1MTkwMTI4WhcNMjYwMTI2MTkwMTI4WjAzMTEwLwYDVQQD Eyg5ZGY2ZmUyZWY3MWViODAyMGZmMTEwOWJlZTE5Y2VlYTFkOTlmMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQADtPvYMfTc80rVvimLJ4DZdW1F wP/sDbWUX2tB5j2gDrF3xYKuvUi175Hl1NuUqO87QtjBhWiegReUxRfnj95n6hb0 u0yqVHTOeH0o9Llz7keHOwwz40F4CSY3SKKNpFMynhgjVxoo+d+wOkd/hDOewwWe q9WO+kJrigfrzEf/7UyI6w/H9PMjoS1aPOv9Nk8ibVlsmxVqeM9heM8OfunEEas/ 4ya8MHKMtxS1kGyEItt4GNCtTO4FV39EWEWKqAz7qkCuC2VgTMXg5R0aCZctXYc9 JjYll2lTjmLPi52mjd5T4o+mChrLUzE530AY5KLHfdRsCtIYAywPpUw40wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ32/i73HrgCD/EQm+4ZzuodmfD0MB8GA1UdIwQY MBaAFJ83IOlw+qDgf1CmOJ565Tr6Q52rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQt MTJlNmEwZDQzMThhLzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQtMTJlNmEwZDQzMThh LzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6ItCFC+ Qy07MXng3qhvU7Zh2vZtfPM9Mxbgv9oasL2lhPxO/rrQ06a/zqmN7pzA0+Hph3sa sf74g3pXR2FnlLrrhDxLUUEsqvp4hDSZdP9NVisYdY/nqAtKTy8mCgLYXp8ReBjt nWUjpdzp0fVtfnPF22noubPtjVqAiHdXyFroJSwJXngvufV+sKkNTaF6lxymH7qQ PLfNC3PnDPfV7f/p1QYNDwreRwYQneaOUNwaDb34cxGFKD+DupAxrCBSSe2Q1iwx ruFJy3W6H/3Xoa2/zUTpm8rDC/EPiqDZsIhXg6rNQQ2OnKRdBOWkT/BiZS7PJxYm wiMWdbOoYRygSw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:20 2026 by rpki-client