This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json) Hash identifier: X3U1fqH1ZrwAepqqKLwrqVg4aA0AEq7twi+kBnVEqHQ= Subject key identifier: CC:85:BE:15:CF:CB:CE:46:4D:9E:8D:14:4A:9D:03:A5:0E:FE:56:44 Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90 Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190 Certificate serial: 019BF68837D4FBA296043B4CA54C3AAFA0E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 19:01:20 +0000 Manifest this update: Sun 25 Jan 2026 19:01:20 +0000 Manifest next update: Mon 26 Jan 2026 19:01:20 +0000 Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=) 2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: XPIzaJBPqPSms2Kng1szcJTi0SzOVJaEvgNrODuQQIw=) 3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:37:d4:fb:a2:96:04:3b:4c:a5:4c:3a:af:a0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190 Validity Not Before: Jan 25 19:01:20 2026 GMT Not After : Jan 26 19:01:20 2026 GMT Subject: CN=cc85be15cfcbce464d9e8d144a9d03a50efe5644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:62:66:12:1a:f3:79:9f:09:aa:34:0e:b8:b5: 71:7a:65:a9:5a:d9:a7:f0:fd:3e:9e:da:e4:c2:47: 1e:32:fa:1a:ea:74:50:d6:12:83:16:ab:1e:85:c4: aa:3b:a2:10:ab:db:e2:bd:19:51:e2:25:85:c2:a3: 9d:aa:7f:40:d1:a3:2d:f6:2c:7e:21:9e:25:29:16: 55:da:ed:90:0f:e7:19:ec:33:0d:1e:74:a6:ec:3c: ee:f0:a9:54:c1:82:7b:56:f9:d1:64:54:35:47:12: d4:d3:2f:b2:e9:28:a4:32:bd:1f:cc:c7:25:81:0e: 9b:94:21:8a:c4:3e:99:3c:2e:4e:03:f0:d1:b3:fd: 32:c7:73:2c:73:5a:fa:35:32:7c:51:19:f2:47:14: 28:66:43:0d:e0:8a:f4:bb:4c:17:31:31:c3:80:63: f4:77:78:f4:62:30:46:f8:c9:7d:5e:1d:e5:05:91: 1e:28:c0:bf:52:5e:5b:4f:e3:d3:87:ef:ea:f2:78: cf:65:18:bb:b3:23:2d:b5:c1:75:05:ca:5b:23:af: 8f:57:1f:1e:96:b0:6a:65:43:38:62:6a:d5:27:7e: 67:0e:ea:50:92:32:d6:d8:5c:0a:c3:4c:e5:f3:39: bf:36:4e:b1:06:23:70:83:1b:16:36:1b:2b:a1:8d: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:85:BE:15:CF:CB:CE:46:4D:9E:8D:14:4A:9D:03:A5:0E:FE:56:44 X509v3 Authority Key Identifier: keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f5:10:73:e6:f0:b9:47:36:af:70:b9:47:2b:46:74:ba:9d: 9d:06:af:74:96:6a:cb:9e:76:46:cf:f6:c2:95:63:60:e7:ed: e2:7b:fc:f5:35:22:a7:c8:09:8b:9e:54:67:19:4e:59:73:34: 85:d1:ab:2a:b3:9e:6e:cc:bf:4f:8c:67:9d:59:1b:0c:9e:0d: 58:31:a9:a0:b2:4f:7d:3e:9e:e6:80:f7:ff:bf:07:4b:c4:a9: b3:ed:2a:9c:41:e9:b5:f0:5e:00:e8:f6:db:5f:52:76:3c:8e: 25:bf:73:65:9a:73:87:85:2c:7f:28:81:1d:b7:fb:b0:0f:08: 14:d8:2a:76:63:6a:e7:ed:65:d9:1a:3c:5b:c3:cd:bc:6b:b9: 0d:20:a0:98:f3:fe:b4:22:1d:17:52:12:0a:80:79:45:06:dd: 37:70:66:38:b7:85:39:59:86:30:d6:dd:52:ae:ea:9e:a8:0e: bc:01:20:68:90:b9:ff:3e:ff:ea:77:51:41:f9:ad:86:b4:a9: b9:e9:13:94:4a:02:65:ad:26:f8:7b:4a:fc:1b:42:af:91:8d: 28:3d:8a:a8:30:e8:72:ec:fd:ca:5d:ef:39:40:47:82:82:1f: 61:e0:e8:4a:8d:8c:8b:c4:77:9a:5b:62:68:76:7a:20:2d:f5: 42:ec:f5:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iDfU+6KWBDtMpUw6r6DlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj MDgxOTAwHhcNMjYwMTI1MTkwMTIwWhcNMjYwMTI2MTkwMTIwWjAzMTEwLwYDVQQD EyhjYzg1YmUxNWNmY2JjZTQ2NGQ5ZThkMTQ0YTlkMDNhNTBlZmU1NjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mJmEhrzeZ8JqjQOuLVxemWpWtmn 8P0+ntrkwkceMvoa6nRQ1hKDFqsehcSqO6IQq9vivRlR4iWFwqOdqn9A0aMt9ix+ IZ4lKRZV2u2QD+cZ7DMNHnSm7Dzu8KlUwYJ7VvnRZFQ1RxLU0y+y6SikMr0fzMcl gQ6blCGKxD6ZPC5OA/DRs/0yx3Msc1r6NTJ8URnyRxQoZkMN4Ir0u0wXMTHDgGP0 d3j0YjBG+Ml9Xh3lBZEeKMC/Ul5bT+PTh+/q8njPZRi7syMttcF1BcpbI6+PVx8e lrBqZUM4YmrVJ35nDupQkjLW2FwKw0zl8zm/Nk6xBiNwgxsWNhsroY3ocwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyFvhXPy85GTZ6NFEqdA6UO/lZEMB8GA1UdIwQY MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt MzkzNjk2ODlmMjdlLzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfUQc+bw uUc2r3C5RytGdLqdnQavdJZqy552Rs/2wpVjYOft4nv89TUip8gJi55UZxlOWXM0 hdGrKrOebsy/T4xnnVkbDJ4NWDGpoLJPfT6e5oD3/78HS8Sps+0qnEHptfBeAOj2 219SdjyOJb9zZZpzh4UsfyiBHbf7sA8IFNgqdmNq5+1l2Ro8W8PNvGu5DSCgmPP+ tCIdF1ISCoB5RQbdN3BmOLeFOVmGMNbdUq7qnqgOvAEgaJC5/z7/6ndRQfmthrSp uekTlEoCZa0m+HtK/BtCr5GNKD2KqDDocuz9yl3vOUBHgoIfYeDoSo2Mi8R3mlti aHZ6IC31Quz1PA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:22:25 2026 by rpki-client