This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json) Hash identifier: y7kTRJAO5qEhH/V2Es8XM+IbPD6L2sMO2thFfzZLF/A= Subject key identifier: 95:29:D6:F7:91:08:AB:81:87:B0:9D:BC:0E:5A:00:9A:DF:33:FA:D7 Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5 Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5 Certificate serial: 019BF507904C7A04309C22A7AB38B63E8EBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft Manifest number: 0E9F Signing time: Sun 25 Jan 2026 12:01:12 +0000 Manifest this update: Sun 25 Jan 2026 12:01:12 +0000 Manifest next update: Mon 26 Jan 2026 12:01:12 +0000 Files and hashes: 1: 7gnjXnI-ZTpVeuTinf1LnDXydf0.roa (hash: 8DVOv1AjDNoic42uVDeO1fW4tNhyh+GK5DnAzDK9vtU=) 2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: erjjbqn459IrdSKVVQcYGlIzHdkUOhHU0894IDb6rW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:90:4c:7a:04:30:9c:22:a7:ab:38:b6:3e:8e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5 Validity Not Before: Jan 25 12:01:12 2026 GMT Not After : Jan 26 12:01:12 2026 GMT Subject: CN=9529d6f79108ab8187b09dbc0e5a009adf33fad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e4:82:54:98:e3:f3:63:de:72:82:fb:98:8a: 82:c7:a4:86:25:03:20:e9:26:12:c0:96:4e:8f:db: 48:10:f4:d7:d0:bf:f5:8b:81:1f:02:82:d5:cb:3f: bc:11:65:e9:35:ab:b3:71:16:ad:4d:79:8c:6f:61: ef:9a:2f:74:1e:18:2e:87:29:13:cf:2a:89:ac:d1: a4:e3:c9:82:14:c3:eb:83:7c:97:fc:a6:dc:7d:a3: b0:29:ea:3f:9e:40:49:65:0b:cb:15:54:9f:48:35: ac:4a:3b:d1:b5:b8:50:47:50:e0:e9:f3:db:d1:cf: 0b:62:2c:9c:d6:f7:92:d2:2f:47:1b:58:fd:d1:e7: a8:83:44:95:fb:e6:5f:38:bb:6f:30:f9:1e:f0:c0: 16:36:93:ce:2e:66:f3:c0:53:48:74:db:fe:e6:6d: 74:db:a8:4c:61:a5:d1:6a:63:77:41:19:25:84:fc: 94:8d:39:bd:3a:43:48:b1:15:65:13:30:ea:11:22: 57:4b:5c:2d:ad:68:54:13:26:ce:2b:2a:2f:5d:d1: c2:c9:9d:58:7c:90:dd:4a:c5:d0:52:fa:92:d2:84: c0:30:9d:3c:77:d8:7b:dd:7d:ab:31:92:03:24:28: 92:32:c6:40:e1:17:82:87:51:f6:53:e3:7d:86:3a: 68:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:29:D6:F7:91:08:AB:81:87:B0:9D:BC:0E:5A:00:9A:DF:33:FA:D7 X509v3 Authority Key Identifier: keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:92:fa:c3:54:d3:10:90:bc:88:81:c5:4c:94:70:f9:95:d2: 9e:3f:e6:86:ae:2e:c3:a6:46:f9:91:d8:84:58:3c:87:fb:de: ee:fd:44:08:9a:66:e0:c3:7f:c9:51:62:dc:3d:83:a9:c6:f3: 46:d0:87:64:f0:83:c5:f4:15:e5:59:a6:8d:58:2f:e2:d7:02: aa:07:6e:4d:ee:62:b6:2f:5d:82:9f:31:02:bb:65:8f:d8:51: dc:7e:c3:02:ff:26:6d:e6:c5:07:22:54:6e:27:ef:a1:41:d1: 16:36:2f:a7:cd:01:b8:f9:7f:26:ee:69:4e:b0:c2:da:8f:38: d7:f6:5f:2a:49:0c:6d:c2:5c:92:66:4b:4c:9f:a0:79:ab:32: fe:e2:a7:c1:98:cc:32:46:7c:fb:90:17:89:ee:93:4c:12:37: 8d:11:ae:9c:67:69:86:76:fe:7f:e5:0d:15:62:45:15:ce:46: 27:a6:cf:ef:05:dc:04:bf:b5:a2:e4:3a:b2:cf:69:03:b7:63: 88:6e:88:a6:75:a5:b2:c9:39:5a:66:88:55:e5:a1:03:fb:e9: ac:d4:cc:61:26:75:5f:a0:2e:39:a0:70:60:36:20:c4:7a:ef: fb:58:48:a8:3d:74:cd:67:0d:11:dd:7b:e0:77:d8:5e:ec:bd: 37:27:5b:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B5BMegQwnCKnqzi2Po6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NjAyNTM5ZWMzMmMzOTE5ZmYxY2JjOTU5NGRkY2FiODE1 Njc0YzUwHhcNMjYwMTI1MTIwMTEyWhcNMjYwMTI2MTIwMTEyWjAzMTEwLwYDVQQD Eyg5NTI5ZDZmNzkxMDhhYjgxODdiMDlkYmMwZTVhMDA5YWRmMzNmYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluSCVJjj82PecoL7mIqCx6SGJQMg 6SYSwJZOj9tIEPTX0L/1i4EfAoLVyz+8EWXpNauzcRatTXmMb2Hvmi90HhguhykT zyqJrNGk48mCFMPrg3yX/KbcfaOwKeo/nkBJZQvLFVSfSDWsSjvRtbhQR1Dg6fPb 0c8LYiyc1veS0i9HG1j90eeog0SV++ZfOLtvMPke8MAWNpPOLmbzwFNIdNv+5m10 26hMYaXRamN3QRklhPyUjTm9OkNIsRVlEzDqESJXS1wtrWhUEybOKyovXdHCyZ1Y fJDdSsXQUvqS0oTAMJ08d9h73X2rMZIDJCiSMsZA4ReCh1H2U+N9hjpo0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUp1veRCKuBh7CdvA5aAJrfM/rXMB8GA1UdIwQY MBaAFDdgJTnsMsORn/HLyVlN3KuBVnTFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQt MDc2ZTFkNzdhZWJlLzEvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQtMDc2ZTFkNzdhZWJl LzEvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5L6w1TT EJC8iIHFTJRw+ZXSnj/mhq4uw6ZG+ZHYhFg8h/ve7v1ECJpm4MN/yVFi3D2Dqcbz RtCHZPCDxfQV5VmmjVgv4tcCqgduTe5iti9dgp8xArtlj9hR3H7DAv8mbebFByJU bifvoUHRFjYvp80BuPl/Ju5pTrDC2o841/ZfKkkMbcJckmZLTJ+geasy/uKnwZjM MkZ8+5AXie6TTBI3jRGunGdphnb+f+UNFWJFFc5GJ6bP7wXcBL+1ouQ6ss9pA7dj iG6IpnWlssk5WmaIVeWhA/vprNTMYSZ1X6AuOaBwYDYgxHrv+1hIqD10zWcNEd17 4HfYXuy9NydbWA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:49 2026 by rpki-client