This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json) Hash identifier: /A2Ey8DbTv5W4C/ffeEyD7+2hJoeY3Jwg1LAWRICypc= Subject key identifier: AC:F7:0A:89:92:BB:2C:97:BF:34:4A:82:AE:A9:E9:82:CA:FE:CF:CF Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e Certificate serial: 019BF53EBAB808E83BEECEAFEF77781E379D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft Manifest number: 1257 Signing time: Sun 25 Jan 2026 13:01:27 +0000 Manifest this update: Sun 25 Jan 2026 13:01:27 +0000 Manifest next update: Mon 26 Jan 2026 13:01:27 +0000 Files and hashes: 1: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: 6qfCWMPG9kDQT1mH6CaT89929gWrfn8xExtwu7ZpdJ0=) 2: rCaZ9Cy0alwfhMcrkhs7A3NYfB8.roa (hash: 7fg83l1F4WyPmXoTljaULo+YFLoO2z4vAMFAKMJkors=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:ba:b8:08:e8:3b:ee:ce:af:ef:77:78:1e:37:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e Validity Not Before: Jan 25 13:01:27 2026 GMT Not After : Jan 26 13:01:27 2026 GMT Subject: CN=acf70a8992bb2c97bf344a82aea9e982cafecfcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:35:34:d9:20:26:ac:1e:98:98:b6:87:ff:f3: e7:fc:56:c0:04:58:d7:99:ff:ea:a3:36:de:cd:ad: b2:e8:46:b1:64:15:48:cf:21:78:94:c9:0f:60:7a: 1f:35:19:ef:79:a4:4e:a6:b6:d2:2d:1c:f0:c6:42: 30:28:ba:bd:59:e8:0f:59:eb:eb:f7:67:07:bc:f0: 28:e8:b7:74:62:6c:6a:c9:66:7c:10:48:b1:39:e5: e5:d4:eb:f3:58:13:03:bb:25:ff:c1:80:dc:a3:0f: 6d:3a:56:66:d5:d0:53:c1:27:e6:07:33:65:01:3e: ca:d4:d2:01:7f:fe:93:44:c0:98:69:9a:98:d4:eb: 38:17:7f:d2:33:14:92:cc:0a:2d:25:39:30:d5:f7: 3a:d2:f6:3a:d3:50:be:a8:54:58:9a:34:31:6e:c2: 57:23:c6:a7:e6:85:30:3e:ec:52:17:15:68:4a:30: 9f:d4:42:82:25:99:a8:bb:96:14:e6:60:e1:79:d9: bf:5c:91:d6:41:eb:b5:35:fd:3f:90:5e:f5:d9:1d: d2:fb:67:cf:f4:3f:51:83:a0:19:bc:bd:19:1d:9c: 64:99:be:5a:d7:d4:50:fa:c1:a2:02:0f:51:20:b8: e5:49:4e:13:cf:72:53:b9:b1:a3:cd:6a:6a:72:8f: 7e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F7:0A:89:92:BB:2C:97:BF:34:4A:82:AE:A9:E9:82:CA:FE:CF:CF X509v3 Authority Key Identifier: keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:1d:f4:21:c2:6a:43:63:ea:6e:e7:47:f1:a7:4f:90:f5:bc: 3f:86:41:cc:09:1d:44:8c:fb:3c:14:54:cc:a3:c1:a3:2c:22: 5f:4d:54:b1:53:f5:40:5e:bc:2c:3a:5a:60:5e:d7:83:b9:83: 59:08:57:96:1e:b5:55:71:3f:85:41:3c:2e:9a:7e:11:35:97: 70:7d:c0:79:f1:62:b9:5f:a6:79:f1:c0:02:e6:58:d1:6b:b9: 3c:f9:78:0e:dd:69:fe:68:c3:51:c4:ea:8d:7d:66:99:56:e8: 3f:a4:95:54:f6:4a:a6:45:37:47:df:c4:9c:92:2b:81:b8:44: ad:4f:f1:5b:68:7e:79:4d:73:c8:a4:6e:87:a7:31:e7:5a:fc: 15:da:5f:b9:81:6c:3e:10:dc:f1:04:3c:c9:4f:25:9d:70:53: 79:68:b8:2e:17:35:a9:98:aa:4d:99:32:e9:da:75:8f:c5:be: e1:c6:62:0a:64:e3:af:bb:cd:58:6e:fc:0a:ca:61:99:04:4d: 8b:bf:4f:69:61:9d:96:b4:4c:5d:de:d2:ce:c5:51:0d:f1:ad: 96:7f:69:03:72:00:22:34:00:e3:37:42:db:21:42:ee:4c:3e: 55:16:f0:2c:3e:68:5b:97:6d:8d:da:54:2d:be:9d:dc:dd:d2: 0c:16:51:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Prq4COg77s6v73d4HjedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZDc2ODI5YmE2MzE0YTAzNWZkYTc5OWZjMDM3MDMzNjY1 NzA4M2UwHhcNMjYwMTI1MTMwMTI3WhcNMjYwMTI2MTMwMTI3WjAzMTEwLwYDVQQD EyhhY2Y3MGE4OTkyYmIyYzk3YmYzNDRhODJhZWE5ZTk4MmNhZmVjZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTU02SAmrB6YmLaH//Pn/FbABFjX mf/qozbeza2y6EaxZBVIzyF4lMkPYHofNRnveaROprbSLRzwxkIwKLq9WegPWevr 92cHvPAo6Ld0YmxqyWZ8EEixOeXl1OvzWBMDuyX/wYDcow9tOlZm1dBTwSfmBzNl AT7K1NIBf/6TRMCYaZqY1Os4F3/SMxSSzAotJTkw1fc60vY601C+qFRYmjQxbsJX I8an5oUwPuxSFxVoSjCf1EKCJZmou5YU5mDhedm/XJHWQeu1Nf0/kF712R3S+2fP 9D9Rg6AZvL0ZHZxkmb5a19RQ+sGiAg9RILjlSU4Tz3JTubGjzWpqco9+JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKz3ComSuyyXvzRKgq6p6YLK/s/PMB8GA1UdIwQY MBaAFJ7XaCm6YxSgNf2nmfwDcDNmVwg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEt YmYyNjRhMjE1YjMyLzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEtYmYyNjRhMjE1YjMy LzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcB30IcJq Q2PqbudH8adPkPW8P4ZBzAkdRIz7PBRUzKPBoywiX01UsVP1QF68LDpaYF7Xg7mD WQhXlh61VXE/hUE8Lpp+ETWXcH3AefFiuV+mefHAAuZY0Wu5PPl4Dt1p/mjDUcTq jX1mmVboP6SVVPZKpkU3R9/EnJIrgbhErU/xW2h+eU1zyKRuh6cx51r8FdpfuYFs PhDc8QQ8yU8lnXBTeWi4Lhc1qZiqTZky6dp1j8W+4cZiCmTjr7vNWG78CsphmQRN i79PaWGdlrRMXd7SzsVRDfGtln9pA3IAIjQA4zdC2yFC7kw+VRbwLD5oW5dtjdpU Lb6d3N3SDBZRcw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:49 2026 by rpki-client