This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json) Hash identifier: YyWcdfPztmk95FvBNaPSKhfJ2lozz6DaSzwaCrPxtTg= Subject key identifier: F0:D9:C3:70:D5:A7:91:85:9D:A1:02:86:F3:AD:3C:EF:72:58:FA:C6 Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96 Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96 Certificate serial: 019BF42BCAB52209336C96E71CFC7AAAB5A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft Manifest number: 0427 Signing time: Sun 25 Jan 2026 08:01:09 +0000 Manifest this update: Sun 25 Jan 2026 08:01:09 +0000 Manifest next update: Mon 26 Jan 2026 08:01:09 +0000 Files and hashes: 1: 3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa (hash: VopVFdZw3ER/r0OJ1FIpefADgp91rKMDyFpDZmkW2g0=) 2: 8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa (hash: +hr7aCwMyU++eEfbB0MkOVyBHh1rbHvZF3Q4bAp/McY=) 3: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: xHO2G1Gk6UgFzgnmolidJytO1XKazzOcn4dqwPpblRE=) 4: gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa (hash: EdEmewULenr5hBiIM0aL0Nom8Wp5BQw1JYCWC8ExBCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:ca:b5:22:09:33:6c:96:e7:1c:fc:7a:aa:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96 Validity Not Before: Jan 25 08:01:09 2026 GMT Not After : Jan 26 08:01:09 2026 GMT Subject: CN=f0d9c370d5a791859da10286f3ad3cef7258fac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:99:02:d8:38:39:84:a1:cc:ca:84:5a:e2: c7:b0:28:aa:fd:fb:ab:38:bd:fc:1d:c7:ed:e3:eb: b0:d7:fc:3b:35:c9:88:d8:27:1d:e3:07:20:0b:6c: 5b:30:b5:c2:43:dd:99:a8:ca:cd:fa:ce:d7:ec:33: ae:1c:34:20:85:c0:61:6e:4a:61:8c:a1:41:a7:0d: 8e:78:64:8d:b3:4d:e6:6d:e2:95:84:61:d4:11:49: 6a:4a:5a:75:a3:12:45:d5:20:40:22:5d:b2:85:3f: 90:56:10:11:37:b7:94:7b:78:5c:ea:1b:0b:ec:79: 21:db:85:9d:d9:cf:c6:9e:02:86:1e:62:d6:9b:e0: 37:0e:c5:f5:83:57:30:ae:b7:95:6f:1b:9e:88:06: 21:5f:68:9a:81:5d:f4:e2:a4:a7:93:d3:33:32:c2: fb:24:20:87:80:12:32:1e:69:b1:f9:17:3f:f4:21: 46:8b:54:aa:cc:cb:91:32:5e:27:65:95:42:14:09: fd:6b:bf:87:33:f4:3a:31:c3:7e:da:a5:6a:32:ce: e7:be:02:9f:75:92:a2:ea:33:bf:46:fb:a1:1b:05: f9:77:ad:2d:3a:a6:a2:95:0e:75:04:a2:cf:56:74: be:51:9d:29:a1:13:89:07:f8:7a:0f:45:e6:21:30: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D9:C3:70:D5:A7:91:85:9D:A1:02:86:F3:AD:3C:EF:72:58:FA:C6 X509v3 Authority Key Identifier: keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:94:c7:8d:da:da:a4:9e:7e:05:21:e8:30:14:f0:8b:01:ef: bc:74:f5:70:38:ca:29:00:8f:3c:5f:53:77:a6:c6:54:09:9c: 94:49:63:32:05:9e:eb:d6:f0:e6:72:a9:64:68:be:c3:09:c5: 10:ec:06:3c:13:9e:98:e0:47:77:34:10:18:30:49:8f:05:a9: 36:00:f4:b9:15:39:a6:d7:2a:5b:dc:25:03:5d:58:86:08:fc: cb:c4:1a:fd:19:58:e3:55:e7:cd:e2:f4:e5:ae:f0:8e:f9:97: d1:cc:1e:3e:15:ee:bc:f1:dd:a4:57:f3:cc:a9:e5:cd:f5:9e: 48:95:31:b9:13:74:4a:40:19:06:4c:6e:dc:ef:2c:fb:d3:27: 09:ce:62:19:e1:6f:ab:ea:1e:d3:71:1c:8e:b4:98:45:ae:b7: 4c:93:a9:00:3e:20:b0:b0:35:39:c3:d9:f2:e8:86:53:60:6a: 0e:64:a9:69:63:d5:74:06:ec:c0:ea:c6:b4:1a:f0:f5:86:9b: dd:38:45:3f:c5:47:24:ba:24:ea:07:b8:a2:bf:96:54:c3:76: bb:70:0b:20:f1:58:be:91:d7:c7:1e:24:40:13:60:d0:6d:87: 6b:c7:06:5e:de:08:8b:9f:d3:4f:95:78:aa:53:3b:6f:f8:2c: ee:c6:fb:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K8q1IgkzbJbnHPx6qrWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1Y2VjYmY4NjUxYTU2MjRmMjI4MWRjMzU2YTc3Y2QzNGJk NWJhOTYwHhcNMjYwMTI1MDgwMTA5WhcNMjYwMTI2MDgwMTA5WjAzMTEwLwYDVQQD EyhmMGQ5YzM3MGQ1YTc5MTg1OWRhMTAyODZmM2FkM2NlZjcyNThmYWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/mZAtg4OYShzMqEWuLHsCiq/fur OL38Hcft4+uw1/w7NcmI2Ccd4wcgC2xbMLXCQ92ZqMrN+s7X7DOuHDQghcBhbkph jKFBpw2OeGSNs03mbeKVhGHUEUlqSlp1oxJF1SBAIl2yhT+QVhARN7eUe3hc6hsL 7Hkh24Wd2c/GngKGHmLWm+A3DsX1g1cwrreVbxueiAYhX2iagV304qSnk9MzMsL7 JCCHgBIyHmmx+Rc/9CFGi1SqzMuRMl4nZZVCFAn9a7+HM/Q6McN+2qVqMs7nvgKf dZKi6jO/RvuhGwX5d60tOqailQ51BKLPVnS+UZ0poROJB/h6D0XmITCQXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDZw3DVp5GFnaEChvOtPO9yWPrGMB8GA1UdIwQY MBaAFDXOy/hlGlYk8igdw1anfNNL1bqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEt NjFhNmQ3MmFjNDljLzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEtNjFhNmQ3MmFjNDlj LzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJTHjdra pJ5+BSHoMBTwiwHvvHT1cDjKKQCPPF9Td6bGVAmclEljMgWe69bw5nKpZGi+wwnF EOwGPBOemOBHdzQQGDBJjwWpNgD0uRU5ptcqW9wlA11Yhgj8y8Qa/RlY41XnzeL0 5a7wjvmX0cwePhXuvPHdpFfzzKnlzfWeSJUxuRN0SkAZBkxu3O8s+9MnCc5iGeFv q+oe03EcjrSYRa63TJOpAD4gsLA1OcPZ8uiGU2BqDmSpaWPVdAbswOrGtBrw9Yab 3ThFP8VHJLok6ge4or+WVMN2u3ALIPFYvpHXxx4kQBNg0G2Ha8cGXt4Ii5/TT5V4 qlM7b/gs7sb7gA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:13 2026 by rpki-client