This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json) Hash identifier: PXUecUt0UbHM/kl9WMyyy/tFd7TpIdv0eo0jZlro1X8= Subject key identifier: 62:70:73:34:01:FC:72:53:25:1B:38:B4:A4:41:A2:15:C5:C2:92:C4 Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09 Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09 Certificate serial: 019BF6BEB322048ABE50222B56A35C86FC13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft Manifest number: 1180 Signing time: Sun 25 Jan 2026 20:00:51 +0000 Manifest this update: Sun 25 Jan 2026 20:00:51 +0000 Manifest next update: Mon 26 Jan 2026 20:00:51 +0000 Files and hashes: 1: PqQEtcU-9Dj9gvjDdqZbgNTioZU.roa (hash: IqN6OL+5nEUWmHYyOF1lygpuFBpPS3oI5vZnXBqF7kc=) 2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: 67hZXXomKbLP5EQx3bOV1z4YVIxGlIQzQ9QY8rHViFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:b3:22:04:8a:be:50:22:2b:56:a3:5c:86:fc:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09 Validity Not Before: Jan 25 20:00:51 2026 GMT Not After : Jan 26 20:00:51 2026 GMT Subject: CN=6270733401fc7253251b38b4a441a215c5c292c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3f:59:df:56:5a:81:9b:b3:a7:30:ce:59:47: d7:75:cf:de:9b:a3:8e:06:e0:5d:6a:eb:67:a6:50: 1b:e4:d6:de:27:af:f2:a6:ff:11:50:ea:e3:ba:a2: 10:cd:ad:96:89:49:fc:a3:1b:75:39:64:fa:16:60: 70:b9:d1:ca:03:7a:cf:f8:b0:23:31:de:ff:91:b8: 4e:f9:98:e7:a8:62:e9:01:58:fa:9b:15:42:d9:d5: 3a:d1:8d:29:6f:1e:49:8d:c1:33:df:b1:c5:d4:15: a9:ba:85:b9:5c:35:c9:d6:6c:89:89:9f:45:c6:df: f7:6c:08:32:d6:06:7b:24:67:69:8d:c5:16:c9:ec: fb:2d:59:8d:1f:c2:04:7b:28:41:3b:3d:27:8b:21: 6d:10:cc:e4:c3:3d:bb:57:75:20:0b:e6:bb:43:36: bd:f5:d1:3f:29:9a:91:4a:b3:f9:b7:32:2b:e7:cc: 0c:ea:d6:27:8a:5a:54:1d:f2:f8:b5:fc:06:59:5f: 37:9c:68:fa:35:02:2b:a5:d5:37:92:9e:9b:a7:4b: bd:23:13:53:16:22:ee:ab:9c:5b:43:30:e1:80:c1: 28:44:18:84:24:1c:4d:d6:1c:2f:bb:14:3b:5f:bc: 7a:04:e4:5a:5a:b4:32:4f:e2:57:49:b3:ed:36:45: 29:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:70:73:34:01:FC:72:53:25:1B:38:B4:A4:41:A2:15:C5:C2:92:C4 X509v3 Authority Key Identifier: keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f9:21:d9:6b:aa:53:c7:97:a7:5e:64:2b:3e:2a:7e:f2:0e: ee:3b:ca:6d:5b:c7:e3:0e:40:0b:84:03:fc:df:1b:db:34:17: 9d:45:fb:eb:9c:1a:0e:b8:67:24:02:97:5c:02:cc:bf:b2:5a: c9:e3:5a:02:41:84:10:35:87:43:76:24:bd:80:37:b0:93:02: a8:0b:98:48:71:e9:ab:25:d0:d4:3a:3c:5b:e7:7f:0c:19:0a: 16:98:17:0e:84:fe:bb:36:5b:ff:98:5d:09:3d:42:ce:e3:ae: 5a:17:8e:4e:a1:a0:53:e9:fa:26:63:e7:15:b6:33:fe:0d:3d: a7:67:f7:4c:23:71:d1:e1:52:9b:ff:b5:1f:ae:89:00:a4:ae: 43:76:ad:7c:89:e7:11:23:da:3c:1d:83:a6:ad:59:93:b1:08: 82:dd:ff:f7:99:8d:f6:23:7e:c9:8a:57:1f:c2:57:4c:31:f9: ff:79:a5:ec:d8:c0:6c:f6:46:fc:f4:98:b5:13:58:2a:24:c1: 5c:03:01:4c:fc:5b:12:0d:5b:6f:36:df:23:29:33:1d:98:cf: e0:8a:77:1d:48:c2:2e:c2:f2:29:c1:93:ef:fc:29:25:57:a6: 07:65:97:b8:e0:9b:be:ed:f7:d6:95:e6:ef:20:66:c8:14:d9: 40:84:af:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vrMiBIq+UCIrVqNchvwTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkODFjYjUwNDMyNjc0M2IxN2QzNjRhMjA0ODc1YzM5YzZl ZGJjMDkwHhcNMjYwMTI1MjAwMDUxWhcNMjYwMTI2MjAwMDUxWjAzMTEwLwYDVQQD Eyg2MjcwNzMzNDAxZmM3MjUzMjUxYjM4YjRhNDQxYTIxNWM1YzI5MmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D9Z31ZagZuzpzDOWUfXdc/em6OO BuBdautnplAb5NbeJ6/ypv8RUOrjuqIQza2WiUn8oxt1OWT6FmBwudHKA3rP+LAj Md7/kbhO+ZjnqGLpAVj6mxVC2dU60Y0pbx5JjcEz37HF1BWpuoW5XDXJ1myJiZ9F xt/3bAgy1gZ7JGdpjcUWyez7LVmNH8IEeyhBOz0niyFtEMzkwz27V3UgC+a7Qza9 9dE/KZqRSrP5tzIr58wM6tYnilpUHfL4tfwGWV83nGj6NQIrpdU3kp6bp0u9IxNT FiLuq5xbQzDhgMEoRBiEJBxN1hwvuxQ7X7x6BORaWrQyT+JXSbPtNkUppQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJwczQB/HJTJRs4tKRBohXFwpLEMB8GA1UdIwQY MBaAFJ2By1BDJnQ7F9NkogSHXDnG7bwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAt ZTRkNmJjZjMzNmI3LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAtZTRkNmJjZjMzNmI3 LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfkh2Wuq U8eXp15kKz4qfvIO7jvKbVvH4w5AC4QD/N8b2zQXnUX765waDrhnJAKXXALMv7Ja yeNaAkGEEDWHQ3YkvYA3sJMCqAuYSHHpqyXQ1Do8W+d/DBkKFpgXDoT+uzZb/5hd CT1CzuOuWheOTqGgU+n6JmPnFbYz/g09p2f3TCNx0eFSm/+1H66JAKSuQ3atfInn ESPaPB2Dpq1Zk7EIgt3/95mN9iN+yYpXH8JXTDH5/3ml7NjAbPZG/PSYtRNYKiTB XAMBTPxbEg1bbzbfIykzHZjP4Ip3HUjCLsLyKcGT7/wpJVemB2WXuOCbvu331pXm 7yBmyBTZQISvWA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:06 2026 by rpki-client