This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json) Hash identifier: EmtkAJe8BmdX9aWTgw25Y33FxobGZugNC1m0WH0TdCk= Subject key identifier: E8:A0:DA:E5:F3:E5:FC:BD:7B:14:D9:64:54:89:98:FC:BB:AD:06:4C Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35 Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35 Certificate serial: 019BF8ADD99252E51CE53DE84C2880A7066E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft Manifest number: 152A Signing time: Mon 26 Jan 2026 05:01:41 +0000 Manifest this update: Mon 26 Jan 2026 05:01:41 +0000 Manifest next update: Tue 27 Jan 2026 05:01:41 +0000 Files and hashes: 1: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (hash: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI=) 2: KQsm9K1heMHyaUWKbN-CsyFs5cg.roa (hash: 8XS5NufSMeXCYXx0KZUZXpCrXpgKWjPo5WW5nv+gqaM=) 3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: D4cYFMsI8fAafvDsjb9FpYIRRUO+RlRG9xO3VATkOgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:d9:92:52:e5:1c:e5:3d:e8:4c:28:80:a7:06:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35 Validity Not Before: Jan 26 05:01:41 2026 GMT Not After : Jan 27 05:01:41 2026 GMT Subject: CN=e8a0dae5f3e5fcbd7b14d964548998fcbbad064c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:91:c9:29:7c:67:f2:11:2e:ca:33:bd:03:12: 7a:65:2d:bc:e7:6c:27:5b:14:5c:3d:94:df:8a:a1: 9c:f9:c7:cf:99:a7:55:b3:3e:cb:1d:cd:21:3a:a5: c2:6d:f0:f1:00:16:9c:ac:4e:c2:ac:54:14:d6:9f: 79:fb:fd:48:f0:16:46:65:80:aa:1c:d3:55:a5:60: 8c:18:7a:a2:0f:7d:e4:05:6b:89:a5:34:b5:a5:18: 45:8d:98:83:6f:9c:71:7e:96:e0:2a:9e:34:e2:10: 97:49:fe:39:4f:bc:d0:8d:03:4e:e6:7a:97:b9:8f: cb:1b:41:87:71:74:61:b3:12:2f:e9:8f:5a:40:e8: 6e:6a:78:31:43:36:99:47:bf:55:4a:de:f3:1a:55: 79:42:ee:23:a5:71:3c:28:5e:94:14:96:5f:a3:3d: 7f:33:e4:da:18:d8:08:82:13:38:af:da:b0:19:e4: 96:ec:56:0a:bb:13:71:ac:b9:42:19:12:03:f7:09: a2:ef:cf:86:d0:45:d3:51:1d:f6:92:c6:3f:6a:3f: 98:62:41:bd:db:17:0e:c6:a3:4e:bb:d2:68:f0:d1: 4f:fa:6c:59:ab:7d:65:38:3a:1f:c8:be:1d:95:28: 8a:75:78:bb:6a:eb:f2:c7:9b:e0:95:d5:2f:52:6e: f5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A0:DA:E5:F3:E5:FC:BD:7B:14:D9:64:54:89:98:FC:BB:AD:06:4C X509v3 Authority Key Identifier: keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b1:e4:47:3a:e6:45:4a:31:53:d0:4e:52:c6:27:2c:e2:54: dc:8d:87:8d:00:10:5b:1e:c3:1c:34:b6:92:f3:3a:06:6d:73: 07:91:f2:7e:0a:f1:b5:ef:05:cf:35:e8:77:49:20:eb:db:10: 10:d8:97:44:7d:28:b0:8f:d7:6a:b4:f5:26:af:63:d7:dd:86: 76:5f:63:a8:81:82:7d:87:89:66:d7:9a:e9:74:b0:87:93:3a: cc:7b:b7:f5:f7:65:35:79:f5:42:7b:0c:1c:c1:31:32:3e:d0: 49:03:86:ad:56:dc:39:b7:b0:e1:83:a8:61:3b:68:6e:d7:de: 21:fe:c7:66:96:78:7b:33:8d:5c:c8:72:8d:34:c3:05:96:4a: f6:d9:6f:15:9f:a7:e8:65:eb:f5:68:ee:4b:cc:00:19:1d:46: 98:c2:89:2f:13:ee:b9:88:e3:43:e6:90:ea:aa:f1:d5:cc:d5: 1c:48:2e:01:94:ec:b9:42:80:75:45:d5:69:41:09:45:cb:82: a1:85:5b:61:8e:9e:b7:55:58:e2:26:ca:29:dc:d6:64:60:3e: 59:8a:12:16:45:de:98:77:7c:8f:ba:81:9b:58:32:93:f0:91: dd:69:30:31:0c:1b:08:52:1a:61:65:6c:c7:00:2d:34:e5:3a: 34:94:15:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rdmSUuUc5T3oTCiApwZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZDUwNDg2MGE3YzkyNGU3MjFjYmZhZWE1ZjQ5YTcyYzgy OTZjMzUwHhcNMjYwMTI2MDUwMTQxWhcNMjYwMTI3MDUwMTQxWjAzMTEwLwYDVQQD EyhlOGEwZGFlNWYzZTVmY2JkN2IxNGQ5NjQ1NDg5OThmY2JiYWQwNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJHJKXxn8hEuyjO9AxJ6ZS2852wn WxRcPZTfiqGc+cfPmadVsz7LHc0hOqXCbfDxABacrE7CrFQU1p95+/1I8BZGZYCq HNNVpWCMGHqiD33kBWuJpTS1pRhFjZiDb5xxfpbgKp404hCXSf45T7zQjQNO5nqX uY/LG0GHcXRhsxIv6Y9aQOhuangxQzaZR79VSt7zGlV5Qu4jpXE8KF6UFJZfoz1/ M+TaGNgIghM4r9qwGeSW7FYKuxNxrLlCGRID9wmi78+G0EXTUR32ksY/aj+YYkG9 2xcOxqNOu9Jo8NFP+mxZq31lODofyL4dlSiKdXi7auvyx5vgldUvUm71NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOig2uXz5fy9exTZZFSJmPy7rQZMMB8GA1UdIwQY MBaAFJ3VBIYKfJJOchy/rqX0mnLIKWw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMt NDMyZjVjMWY0MWY3LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMtNDMyZjVjMWY0MWY3 LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7HkRzrm RUoxU9BOUsYnLOJU3I2HjQAQWx7DHDS2kvM6Bm1zB5Hyfgrxte8FzzXod0kg69sQ ENiXRH0osI/XarT1Jq9j192Gdl9jqIGCfYeJZtea6XSwh5M6zHu39fdlNXn1QnsM HMExMj7QSQOGrVbcObew4YOoYTtobtfeIf7HZpZ4ezONXMhyjTTDBZZK9tlvFZ+n 6GXr9WjuS8wAGR1GmMKJLxPuuYjjQ+aQ6qrx1czVHEguAZTsuUKAdUXVaUEJRcuC oYVbYY6et1VY4ibKKdzWZGA+WYoSFkXemHd8j7qBm1gyk/CR3WkwMQwbCFIaYWVs xwAtNOU6NJQVTA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:36:40 2026 by rpki-client