This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json) Hash identifier: 9WNyqncyr0024YLjo+q2BMM9muN2A0yz2ALoCox17Yc= Subject key identifier: EC:04:7D:0C:9C:67:89:80:FA:42:3F:F8:A7:F1:73:6A:53:3A:F9:9A Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8 Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8 Certificate serial: 019BF72D53D85AF3AA4E53FE3095AEE62161 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft Manifest number: 11E8 Signing time: Sun 25 Jan 2026 22:01:41 +0000 Manifest this update: Sun 25 Jan 2026 22:01:41 +0000 Manifest next update: Mon 26 Jan 2026 22:01:41 +0000 Files and hashes: 1: HDHJKIBeJ8z6eZzJNfVJfRplMEY.roa (hash: WSBqT5EgDQanZYLsnHDLCaga6lrPpWZ3B9VRR/DtEdk=) 2: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: JRe1jF/OhBslrZrVS1EFzdSzRi7aKptF8vOMDJggNH4=) 3: rWOdIY7KF2aaCbYLRoO8X_9vhhg.roa (hash: jQixs/++LL/sG6xvvrF6Pjngf83WmCHA4M8ILu4RIXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:53:d8:5a:f3:aa:4e:53:fe:30:95:ae:e6:21:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8 Validity Not Before: Jan 25 22:01:41 2026 GMT Not After : Jan 26 22:01:41 2026 GMT Subject: CN=ec047d0c9c678980fa423ff8a7f1736a533af99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:08:a8:a9:21:be:a5:61:97:ae:8a:d5:6f: 40:44:5c:ca:f2:4b:f2:c4:c7:af:f1:76:e3:2d:e0: 1e:a4:be:95:99:56:db:81:42:6a:19:f9:6d:fa:76: 56:42:42:7f:81:a6:f6:bb:0c:53:5d:e2:0a:82:9c: 30:81:da:2f:3e:a4:b2:da:cd:bc:c2:25:4e:77:9b: b9:c1:19:f8:bc:c0:57:4f:2e:45:18:fc:f0:48:e9: 12:83:58:37:62:17:3d:0e:00:08:84:f5:14:a5:3e: c8:42:d0:2e:14:aa:d6:a7:d5:2f:cf:1c:44:44:05: 43:91:33:10:1e:24:94:5a:63:73:b7:1f:ac:77:39: f7:85:57:8a:02:9f:84:99:e9:af:73:b9:92:73:27: e4:71:e7:65:18:d9:08:b3:2c:b5:6f:49:de:fd:07: 58:f6:bd:64:c4:03:3d:c9:bc:a7:a2:1f:71:5b:55: a3:69:5e:c7:8f:3b:88:3e:b2:e3:b1:52:81:ef:f0: aa:b0:f3:29:6d:9f:15:10:f6:c4:11:cd:25:a6:a4: 94:14:d1:90:0e:a3:0a:13:72:0f:56:79:7f:b3:c7: 6c:b8:2f:63:27:dd:bb:36:1a:61:17:e6:d5:30:78: 23:ab:96:49:36:d5:36:a7:bb:34:89:65:51:8d:c9: 3f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:04:7D:0C:9C:67:89:80:FA:42:3F:F8:A7:F1:73:6A:53:3A:F9:9A X509v3 Authority Key Identifier: keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f0:17:1f:5c:88:8f:77:be:9d:5d:ec:f7:83:0c:a6:d4:b3: 91:e7:c2:c5:ef:79:c1:ef:48:cc:b3:f5:55:fb:02:c5:eb:47: 4b:c5:aa:e5:b1:9a:15:5a:18:06:a8:1f:0c:ee:2f:9f:52:67: 6c:a9:28:2d:92:af:84:07:ef:90:05:dc:4d:42:d8:0e:10:bd: 25:f0:68:dd:9d:c9:92:84:8e:b7:a3:6d:6c:d2:d8:dc:ab:7c: 3a:c1:9f:4b:73:b9:c5:8c:02:ae:3a:5c:7e:1b:09:e9:bd:97: 0a:cf:37:f4:26:1b:d7:3d:af:49:07:d2:d3:17:03:dc:ad:a6: 67:c5:53:84:ed:cc:0f:e3:a4:c1:1e:d7:a6:bc:48:52:5c:44: f0:56:0c:d8:e2:f3:44:09:62:f0:77:6c:25:0e:0c:f9:93:ef: 9f:12:0a:f6:93:a9:30:1d:3e:7d:30:61:91:d3:db:3d:87:a9: d2:1f:56:a4:8f:29:3b:6e:e5:d9:e6:a9:4f:d2:40:7d:75:53: 8f:61:02:d3:48:d5:7a:10:de:02:3e:19:a3:5e:71:72:ae:64: e8:1e:72:67:07:53:7b:48:ca:0d:43:91:cb:be:f4:a7:c6:04: 7d:b0:eb:70:f7:54:b0:20:0c:5d:2a:3b:84:e1:1e:cc:61:f7: 16:aa:5f:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LVPYWvOqTlP+MJWu5iFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYThhMTMyNTE5YTI0Mjk0OTQ5NzM2M2I4Y2FhMzNlNzJj NjczZjgwHhcNMjYwMTI1MjIwMTQxWhcNMjYwMTI2MjIwMTQxWjAzMTEwLwYDVQQD EyhlYzA0N2QwYzljNjc4OTgwZmE0MjNmZjhhN2YxNzM2YTUzM2FmOTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO4IqKkhvqVhl66K1W9ARFzK8kvy xMev8XbjLeAepL6VmVbbgUJqGflt+nZWQkJ/gab2uwxTXeIKgpwwgdovPqSy2s28 wiVOd5u5wRn4vMBXTy5FGPzwSOkSg1g3Yhc9DgAIhPUUpT7IQtAuFKrWp9UvzxxE RAVDkTMQHiSUWmNztx+sdzn3hVeKAp+Ememvc7mScyfkcedlGNkIsyy1b0ne/QdY 9r1kxAM9ybynoh9xW1WjaV7HjzuIPrLjsVKB7/CqsPMpbZ8VEPbEEc0lpqSUFNGQ DqMKE3IPVnl/s8dsuC9jJ927NhphF+bVMHgjq5ZJNtU2p7s0iWVRjck/nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwEfQycZ4mA+kI/+Kfxc2pTOvmaMB8GA1UdIwQY MBaAFJyooTJRmiQpSUlzY7jKoz5yxnP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWIt MDBjZDg2YWY4NDlkLzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWItMDBjZDg2YWY4NDlk LzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPAXH1yI j3e+nV3s94MMptSzkefCxe95we9IzLP1VfsCxetHS8Wq5bGaFVoYBqgfDO4vn1Jn bKkoLZKvhAfvkAXcTULYDhC9JfBo3Z3JkoSOt6NtbNLY3Kt8OsGfS3O5xYwCrjpc fhsJ6b2XCs839CYb1z2vSQfS0xcD3K2mZ8VThO3MD+OkwR7XprxIUlxE8FYM2OLz RAli8HdsJQ4M+ZPvnxIK9pOpMB0+fTBhkdPbPYep0h9WpI8pO27l2eapT9JAfXVT j2EC00jVehDeAj4Zo15xcq5k6B5yZwdTe0jKDUORy770p8YEfbDrcPdUsCAMXSo7 hOEezGH3Fqpf0g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:39 2026 by rpki-client