This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json) Hash identifier: UpZKXefLL7cjortrH2WBPP0QuTTr2kH3e2pfUOYcBx4= Subject key identifier: 01:B4:8C:BF:04:EA:A9:48:07:03:29:65:C4:C0:65:7B:4E:C8:5E:1E Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9 Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9 Certificate serial: 019BF650A461FF8157D465394372807BB640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft Manifest number: 1728 Signing time: Sun 25 Jan 2026 18:00:38 +0000 Manifest this update: Sun 25 Jan 2026 18:00:38 +0000 Manifest next update: Mon 26 Jan 2026 18:00:38 +0000 Files and hashes: 1: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: w1iLfi31khPCCwPsVxURuVewSIA6zu2cGjHMnWFmS74=) 2: jCabWwc4lrzZfud5oOw_j95TRxI.roa (hash: IlGH+P9+bkg65b5rGsYg3482ima8u2sdZU18E1WvtY8=) 3: vqGFDj0dJpEJ_K9mMZMY2Pb0u70.roa (hash: 6ZW28XbNWPt2onL+kOFHq5ID9QTnhKevRaeNbk8iaXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:a4:61:ff:81:57:d4:65:39:43:72:80:7b:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9 Validity Not Before: Jan 25 18:00:38 2026 GMT Not After : Jan 26 18:00:38 2026 GMT Subject: CN=01b48cbf04eaa94807032965c4c0657b4ec85e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a7:fc:65:b5:18:71:41:31:0e:94:66:96:6d: 37:96:50:af:cf:58:45:da:e0:5a:c1:92:92:56:04: 17:58:f3:c9:f9:5e:b3:65:d3:54:e4:97:25:24:d8: 16:d7:8f:3f:d4:23:f0:a0:90:67:bf:f5:e3:cd:9e: 95:32:66:47:64:3b:2d:a0:d3:69:e5:07:d3:5d:f4: a2:9d:09:98:44:99:e1:87:e2:28:2a:5e:55:32:a9: c9:d8:c7:dd:e1:ed:08:3e:13:20:db:fe:7e:48:b6: fc:f6:cb:b1:1a:68:46:17:88:b0:e1:20:83:2e:b4: 27:3d:2e:a1:0c:de:ad:80:3a:11:ae:97:61:29:1e: 08:86:25:a6:f1:f3:12:92:69:3f:87:8a:84:ea:05: 16:92:16:7d:d3:68:50:c0:d5:2e:58:79:f8:96:b9: 22:58:51:26:6e:8b:fd:1b:0c:f3:cd:3e:d7:92:cf: b7:c9:1f:9f:94:48:8b:5f:4c:34:a7:6d:86:09:e0: b8:f0:46:bb:f3:35:cd:70:96:a0:fb:09:60:86:b6: 83:82:25:3c:36:48:5f:5f:0b:72:22:57:fa:bd:39: 38:44:85:80:71:6f:c0:ab:bf:77:f5:da:2d:8f:4e: 8c:cb:8b:d7:53:14:2b:a6:6c:98:dc:d3:5b:36:2a: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B4:8C:BF:04:EA:A9:48:07:03:29:65:C4:C0:65:7B:4E:C8:5E:1E X509v3 Authority Key Identifier: keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:09:97:90:ac:d5:5f:63:da:e9:ac:ef:6f:82:b2:49:bf:ee: 71:7d:bf:d8:c2:cb:bb:40:74:44:3e:10:ef:2d:15:c0:c1:4b: 6a:61:6b:d3:81:24:0b:04:e6:2c:0e:dc:3a:17:65:f9:0f:d6: 2e:43:91:2a:87:43:a7:f3:63:95:08:f6:d0:77:16:6b:48:0b: 32:55:86:50:e0:e7:f1:8c:c0:6e:25:c6:5e:41:72:bf:7d:47: b5:f7:a7:2c:6f:c5:50:4a:56:02:67:67:05:61:bf:44:d3:14: 13:a9:bb:8e:b8:8e:42:a5:52:25:c8:a3:6b:47:a4:1a:9f:43: c6:b0:42:78:03:06:00:47:98:b6:78:f2:ef:7c:96:aa:b0:75: 78:f6:79:46:d0:31:45:a4:55:88:32:8c:54:6f:45:f2:4e:3f: 97:bd:be:5e:37:94:f0:63:0a:78:0c:11:1f:49:e8:0b:ca:b5: bf:d3:2b:55:74:97:18:40:bf:b9:10:f1:88:0d:c3:33:2c:b9: 07:93:e2:37:e3:30:3a:83:7a:48:90:d6:d9:eb:63:03:3e:98: 89:bf:14:e5:32:c9:ec:ca:20:7f:d9:a8:17:1a:0d:e6:9e:f6: 7a:38:af:79:de:3d:51:de:eb:cf:58:47:c6:ee:cb:0b:3a:93: 3d:24:e0:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UKRh/4FX1GU5Q3KAe7ZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTNkNGJmMWJjMGY4MTcyODIwNWU1MWRlMDk3Y2YzODNh MGNkYzkwHhcNMjYwMTI1MTgwMDM4WhcNMjYwMTI2MTgwMDM4WjAzMTEwLwYDVQQD EygwMWI0OGNiZjA0ZWFhOTQ4MDcwMzI5NjVjNGMwNjU3YjRlYzg1ZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6f8ZbUYcUExDpRmlm03llCvz1hF 2uBawZKSVgQXWPPJ+V6zZdNU5JclJNgW148/1CPwoJBnv/XjzZ6VMmZHZDstoNNp 5QfTXfSinQmYRJnhh+IoKl5VMqnJ2Mfd4e0IPhMg2/5+SLb89suxGmhGF4iw4SCD LrQnPS6hDN6tgDoRrpdhKR4IhiWm8fMSkmk/h4qE6gUWkhZ902hQwNUuWHn4lrki WFEmbov9GwzzzT7Xks+3yR+flEiLX0w0p22GCeC48Ea78zXNcJag+wlghraDgiU8 NkhfXwtyIlf6vTk4RIWAcW/Aq7939dotj06My4vXUxQrpmyY3NNbNiqtXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAG0jL8E6qlIBwMpZcTAZXtOyF4eMB8GA1UdIwQY MBaAFDXj1L8bwPgXKCBeUd4JfPODoM3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2Qt YTYzNDc5MTQ0MGNhLzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2QtYTYzNDc5MTQ0MGNh LzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQmXkKzV X2Pa6azvb4KySb/ucX2/2MLLu0B0RD4Q7y0VwMFLamFr04EkCwTmLA7cOhdl+Q/W LkORKodDp/NjlQj20HcWa0gLMlWGUODn8YzAbiXGXkFyv31HtfenLG/FUEpWAmdn BWG/RNMUE6m7jriOQqVSJcija0ekGp9DxrBCeAMGAEeYtnjy73yWqrB1ePZ5RtAx RaRViDKMVG9F8k4/l72+XjeU8GMKeAwRH0noC8q1v9MrVXSXGEC/uRDxiA3DMyy5 B5PiN+MwOoN6SJDW2etjAz6Yib8U5TLJ7Mogf9moFxoN5p72ejived49Ud7rz1hH xu7LCzqTPSTgCQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:22 2026 by rpki-client