This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json) Hash identifier: NbB8Cd8mGSzApGY1aNM/iMgByv6ndA4eIPcWkuRFKhU= Subject key identifier: AD:BA:98:B4:A1:DF:61:43:A2:43:C6:DB:E1:FB:BB:9A:E1:9A:89:25 Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9 Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9 Certificate serial: 019BF4623F15EE2A009918594C8FA6437375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft Manifest number: 1727 Signing time: Sun 25 Jan 2026 09:00:37 +0000 Manifest this update: Sun 25 Jan 2026 09:00:37 +0000 Manifest next update: Mon 26 Jan 2026 09:00:37 +0000 Files and hashes: 1: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: Kv9bAPs/5BFLAtZ9RwSOzO3R7+tSV5Coxa2N/RmY84Y=) 2: jCabWwc4lrzZfud5oOw_j95TRxI.roa (hash: IlGH+P9+bkg65b5rGsYg3482ima8u2sdZU18E1WvtY8=) 3: vqGFDj0dJpEJ_K9mMZMY2Pb0u70.roa (hash: 6ZW28XbNWPt2onL+kOFHq5ID9QTnhKevRaeNbk8iaXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:3f:15:ee:2a:00:99:18:59:4c:8f:a6:43:73:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9 Validity Not Before: Jan 25 09:00:37 2026 GMT Not After : Jan 26 09:00:37 2026 GMT Subject: CN=adba98b4a1df6143a243c6dbe1fbbb9ae19a8925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:34:75:95:4a:2c:f3:ba:3e:91:39:d6:44: ef:37:6b:72:03:86:46:bb:a0:8e:a4:93:c6:8a:c5: 08:c4:64:0b:d7:9d:eb:ed:14:6b:4b:32:24:b0:4b: 3e:e9:d7:83:12:70:99:c9:fb:e3:72:01:aa:73:44: 89:9f:2e:35:93:e3:4c:2a:a4:94:c0:ab:69:0a:43: 11:28:e2:37:aa:fc:d1:3d:f0:04:20:10:8a:f9:36: d4:ad:6c:95:58:cd:97:4a:d3:3e:0e:1c:7a:f3:da: 6b:22:db:ea:83:1d:e8:45:4b:1c:23:9d:34:f2:90: 89:7f:e2:ca:9a:3d:f0:ba:9c:1c:91:eb:2b:00:f6: 4f:3e:6c:14:b8:9b:dc:ea:e8:f7:6c:83:bd:01:c8: 35:ee:ed:cd:80:c6:e0:eb:70:33:4a:f0:28:53:95: 85:c8:82:b5:62:a3:92:93:7e:85:c0:52:ab:12:e0: cd:41:63:95:fe:c2:ef:6d:9a:ca:10:6d:dc:34:29: 28:3b:54:9c:f0:f5:14:32:a8:9f:13:44:54:99:cc: fe:99:ce:8b:81:1a:7b:2f:6f:04:b3:d6:cf:26:3a: 2d:99:d9:9b:84:07:fe:39:07:4e:a5:0a:ca:0a:46: e6:73:e1:7c:35:18:73:f2:47:b7:ae:b6:18:4c:eb: 89:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BA:98:B4:A1:DF:61:43:A2:43:C6:DB:E1:FB:BB:9A:E1:9A:89:25 X509v3 Authority Key Identifier: keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:27:7c:92:bb:e5:d0:41:b3:c2:8f:e6:45:57:35:1e:5d:71: 19:ef:16:05:7a:12:69:9e:be:84:e1:13:c0:ad:ed:2c:7e:39: 2b:b1:fc:10:26:f6:41:0f:36:86:be:23:13:b5:89:ca:00:00: 1a:ec:57:f1:7c:6c:dd:8c:b0:01:bb:54:76:20:c7:72:7b:27: 34:03:97:15:52:ca:e6:68:62:3c:88:7b:33:aa:ea:99:62:20: cb:a9:bc:07:e2:6b:6d:97:2c:cf:30:21:21:ac:9e:85:84:b4: 60:bf:72:7a:0f:d6:e9:3c:21:42:7f:a4:30:e8:3e:fe:a8:df: ba:99:05:74:e2:fa:81:a8:23:88:31:18:7b:4f:26:f1:fd:87: 6d:83:1c:23:0f:76:c8:53:1d:3d:54:e5:22:69:19:ff:9a:16: 83:2b:88:43:4e:ab:f7:5a:d5:35:de:91:4a:c8:b2:5a:4c:5c: 99:9d:db:56:2b:ec:bb:ee:a7:62:09:71:4c:8b:69:5a:b0:6e: 3e:81:06:14:d7:d1:04:6e:f4:be:99:f0:df:84:bd:b1:5d:28: ad:4e:41:34:fa:7b:0c:d5:b3:7a:9f:10:2b:6f:b5:90:55:ff: a4:fb:d3:04:ca:33:93:51:07:4b:18:43:cd:d2:af:98:f0:15: 35:b4:8f:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yj8V7ioAmRhZTI+mQ3N1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTNkNGJmMWJjMGY4MTcyODIwNWU1MWRlMDk3Y2YzODNh MGNkYzkwHhcNMjYwMTI1MDkwMDM3WhcNMjYwMTI2MDkwMDM3WjAzMTEwLwYDVQQD EyhhZGJhOThiNGExZGY2MTQzYTI0M2M2ZGJlMWZiYmI5YWUxOWE4OTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyk0dZVKLPO6PpE51kTvN2tyA4ZG u6COpJPGisUIxGQL153r7RRrSzIksEs+6deDEnCZyfvjcgGqc0SJny41k+NMKqSU wKtpCkMRKOI3qvzRPfAEIBCK+TbUrWyVWM2XStM+Dhx689prItvqgx3oRUscI500 8pCJf+LKmj3wupwckesrAPZPPmwUuJvc6uj3bIO9Acg17u3NgMbg63AzSvAoU5WF yIK1YqOSk36FwFKrEuDNQWOV/sLvbZrKEG3cNCkoO1Sc8PUUMqifE0RUmcz+mc6L gRp7L28Es9bPJjotmdmbhAf+OQdOpQrKCkbmc+F8NRhz8ke3rrYYTOuJqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK26mLSh32FDokPG2+H7u5rhmoklMB8GA1UdIwQY MBaAFDXj1L8bwPgXKCBeUd4JfPODoM3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2Qt YTYzNDc5MTQ0MGNhLzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2QtYTYzNDc5MTQ0MGNh LzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCd8krvl 0EGzwo/mRVc1Hl1xGe8WBXoSaZ6+hOETwK3tLH45K7H8ECb2QQ82hr4jE7WJygAA GuxX8Xxs3YywAbtUdiDHcnsnNAOXFVLK5mhiPIh7M6rqmWIgy6m8B+JrbZcszzAh IayehYS0YL9yeg/W6TwhQn+kMOg+/qjfupkFdOL6gagjiDEYe08m8f2HbYMcIw92 yFMdPVTlImkZ/5oWgyuIQ06r91rVNd6RSsiyWkxcmZ3bVivsu+6nYglxTItpWrBu PoEGFNfRBG70vpnw34S9sV0orU5BNPp7DNWzep8QK2+1kFX/pPvTBMozk1EHSxhD zdKvmPAVNbSPtg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:11:56 2026 by rpki-client