This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json) Hash identifier: yO8urIjNXPvKy4nHu1x1sZY6F0PQ3lGcB2vA9Fad+Tg= Subject key identifier: 55:7C:20:34:56:B8:F7:83:72:A2:6D:AF:C3:96:BE:05:77:09:ED:B2 Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02 Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02 Certificate serial: 019BF42BD7251277901C84C7095B3B786A7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft Manifest number: 1355 Signing time: Sun 25 Jan 2026 08:01:12 +0000 Manifest this update: Sun 25 Jan 2026 08:01:12 +0000 Manifest next update: Mon 26 Jan 2026 08:01:12 +0000 Files and hashes: 1: BHf8SWUieWyp8CsFi-LkKjkwID0.roa (hash: r6mZHm7Sd1CEnMX4mNcO0XlOAIiIxrl1PQK5EqAyZj4=) 2: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: P7eg81eo+c9AWL+4m7alUVH9Z8PqZz429w3GiaHZ+Bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:d7:25:12:77:90:1c:84:c7:09:5b:3b:78:6a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02 Validity Not Before: Jan 25 08:01:12 2026 GMT Not After : Jan 26 08:01:12 2026 GMT Subject: CN=557c203456b8f78372a26dafc396be057709edb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:ed:6d:b1:a8:56:fc:0f:5b:cf:a2:86:77: f2:80:3d:f4:9a:88:5c:e7:0a:02:98:dc:c0:e8:a1: 19:9c:47:04:a6:91:55:60:59:fa:74:bf:a3:12:b9: 43:29:47:4d:68:ea:2a:65:36:29:18:e1:16:db:9a: ca:04:3b:a9:9f:c1:10:bb:e2:62:e1:16:89:e6:6b: 9b:38:b2:05:6a:88:c0:e1:63:c8:d9:7a:ad:40:35: 38:9f:28:e2:b9:d5:6f:93:23:5f:0d:8c:f3:08:5b: 1c:9c:42:f6:39:15:7a:2e:14:18:2f:0f:59:11:72: e4:a0:9e:12:49:85:c1:8b:16:97:33:d2:5f:6f:9a: 77:e7:25:df:7c:61:b5:1c:46:ab:29:54:27:1d:dd: 2e:96:32:12:3d:53:87:4a:fc:20:94:46:9c:35:5f: d2:4f:32:d1:6b:cc:12:9f:c5:35:a5:02:2e:da:3f: 2e:7c:ce:26:a5:43:8a:9f:f3:ee:95:61:7d:69:bd: db:09:d2:6c:ac:54:d9:1b:0d:c1:96:9d:5c:1c:63: bf:54:48:01:6b:97:ad:0c:e6:9a:51:57:e8:5b:84: 4a:fb:d0:98:cd:eb:77:b8:19:5f:d5:e4:6d:f9:aa: fd:24:c0:dd:47:3a:d5:55:71:7e:27:4b:ed:1a:08: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7C:20:34:56:B8:F7:83:72:A2:6D:AF:C3:96:BE:05:77:09:ED:B2 X509v3 Authority Key Identifier: keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ed:d5:6a:b7:15:ce:f0:60:2a:9d:2e:64:08:99:7a:5b:ec: cb:bf:2a:42:fd:3c:c5:6a:b8:28:ce:44:e5:80:1b:62:da:0e: cc:a1:a8:80:fc:39:7b:fd:bb:8b:57:9e:97:55:bd:2f:7f:53: 6d:67:af:d0:cc:8f:1f:c7:df:85:d2:a1:3e:c8:92:d9:38:0b: 11:25:a8:36:33:2d:82:56:ca:b6:8c:94:4c:07:be:a7:bb:c1: 1b:29:1b:e7:d1:bd:34:09:7f:0e:f2:46:5c:20:55:4b:db:e9: 77:c5:90:3a:ed:29:a4:c6:43:59:cb:c7:69:ff:00:0b:40:fa: e8:b9:0b:e1:1d:10:d4:1a:ce:ab:b4:38:fd:e7:f1:be:e7:0e: da:26:a7:9a:1d:42:e4:47:c6:f8:7b:25:f9:98:d4:b0:f3:eb: d4:1b:50:4f:92:9e:ad:6d:9d:26:4f:80:3f:57:ff:8b:55:f2: a2:a7:9c:1e:3e:00:8e:e7:23:a3:0e:e6:55:2e:c1:32:af:70: 90:e5:0e:2b:5f:05:e3:04:48:ed:b7:a4:5d:8d:b7:a6:a1:ca: 43:f2:ee:07:47:00:64:58:49:36:41:12:ce:48:b5:b8:e9:ba: 8f:dc:e3:a8:fe:08:26:8e:65:27:8d:90:31:9e:48:60:ac:5f: 93:be:b3:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K9clEneQHITHCVs7eGp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MDAwZWJlZWQyNDJiOTU2NGFkYzk1NDg1MzIzYjk2YmQ2 ZjVjMDIwHhcNMjYwMTI1MDgwMTEyWhcNMjYwMTI2MDgwMTEyWjAzMTEwLwYDVQQD Eyg1NTdjMjAzNDU2YjhmNzgzNzJhMjZkYWZjMzk2YmUwNTc3MDllZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo63tbbGoVvwPW8+ihnfygD30mohc 5woCmNzA6KEZnEcEppFVYFn6dL+jErlDKUdNaOoqZTYpGOEW25rKBDupn8EQu+Ji 4RaJ5mubOLIFaojA4WPI2XqtQDU4nyjiudVvkyNfDYzzCFscnEL2ORV6LhQYLw9Z EXLkoJ4SSYXBixaXM9Jfb5p35yXffGG1HEarKVQnHd0uljISPVOHSvwglEacNV/S TzLRa8wSn8U1pQIu2j8ufM4mpUOKn/PulWF9ab3bCdJsrFTZGw3Blp1cHGO/VEgB a5etDOaaUVfoW4RK+9CYzet3uBlf1eRt+ar9JMDdRzrVVXF+J0vtGggmAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFV8IDRWuPeDcqJtr8OWvgV3Ce2yMB8GA1UdIwQY MBaAFDYADr7tJCuVZK3JVIUyO5a9b1wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmdBT3Z1MGtLNVZrcmNsVWhUSTdscjF2WEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNzdlMWEtNjYzYS00NDViLThlNjEt MzcwMTUwYjY2OWU0LzEvTmdBT3Z1MGtLNVZrcmNsVWhUSTdscjF2WEFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iNzdlMWEtNjYzYS00NDViLThlNjEtMzcwMTUwYjY2OWU0 LzEvTmdBT3Z1MGtLNVZrcmNsVWhUSTdscjF2WEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGu3VarcV zvBgKp0uZAiZelvsy78qQv08xWq4KM5E5YAbYtoOzKGogPw5e/27i1eel1W9L39T bWev0MyPH8ffhdKhPsiS2TgLESWoNjMtglbKtoyUTAe+p7vBGykb59G9NAl/DvJG XCBVS9vpd8WQOu0ppMZDWcvHaf8AC0D66LkL4R0Q1BrOq7Q4/efxvucO2ianmh1C 5EfG+Hsl+ZjUsPPr1BtQT5KerW2dJk+AP1f/i1XyoqecHj4Ajucjow7mVS7BMq9w kOUOK18F4wRI7bekXY23pqHKQ/LuB0cAZFhJNkESzki1uOm6j9zjqP4IJo5lJ42Q MZ5IYKxfk76zag== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:01 2026 by rpki-client