This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft File: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json) Hash identifier: afS7Z+NQYZIDv+awQ2zII6uDI7YTMV4h8HXJkSj91ns= Subject key identifier: 31:C0:20:0B:AF:4E:13:05:9F:A8:21:C8:6A:2B:87:B7:55:D5:82:0A Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0 Certificate issuer: /CN=3546ff45ce50557edc4c0306e1f869482ad423e0 Certificate serial: 019BF6BE81F3C5D829045C6C25F2EB763896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft Manifest number: 09A4 Signing time: Sun 25 Jan 2026 20:00:38 +0000 Manifest this update: Sun 25 Jan 2026 20:00:38 +0000 Manifest next update: Mon 26 Jan 2026 20:00:38 +0000 Files and hashes: 1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: dYXxrQG5zfCVPdV1C14a1NartuFfV3rcQHnCemHhPyY=) 2: QeaLiE9j4ankS_phkxa_qrN9g1Q.roa (hash: aTNhEv7p3O+ErWEZXlpo2u9L43e8YHpY2vq29krIAK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:81:f3:c5:d8:29:04:5c:6c:25:f2:eb:76:38:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0 Validity Not Before: Jan 25 20:00:38 2026 GMT Not After : Jan 26 20:00:38 2026 GMT Subject: CN=31c0200baf4e13059fa821c86a2b87b755d5820a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:7b:ce:a9:03:78:f4:ec:67:de:09:04:9c: 3a:d0:55:70:76:66:57:6a:58:db:cf:d5:e8:cc:66: ba:31:aa:0d:f0:8e:0f:60:c6:5e:a5:4e:94:ec:c6: 72:8d:0f:bb:eb:47:d5:a2:30:e4:51:65:2d:a3:80: c8:9a:aa:54:0c:24:7f:d2:9e:e1:9b:74:5e:ec:8a: d0:d8:d8:74:3d:70:54:bf:1d:91:0a:b1:ab:cf:4b: ed:de:e5:14:30:24:85:bd:21:16:cf:a9:1e:80:87: 52:e9:f2:ad:82:e2:89:f6:1b:cb:f5:04:aa:2b:38: 8e:94:f9:8d:18:af:e2:76:ed:70:f5:10:69:03:7a: c9:fc:76:17:62:58:cf:8c:ca:59:59:8f:e3:11:27: fc:32:4f:0a:16:e0:64:43:6f:a8:cb:61:9b:e8:33: 83:84:7c:17:c4:b2:01:30:32:e4:5e:b2:8b:e4:74: 0d:71:f3:8d:93:58:7c:00:22:8b:db:6b:8b:00:85: 14:0e:6d:d4:29:bb:5a:7f:ae:e5:d2:48:ec:5d:f3: be:a2:f4:9b:c7:e2:64:08:fb:68:ee:7f:5f:c2:af: c8:43:92:03:7c:84:1b:ea:a4:4d:65:53:51:eb:f0: 0c:9e:c6:79:39:09:f0:c4:12:6f:c3:f6:45:a0:a1: 9f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C0:20:0B:AF:4E:13:05:9F:A8:21:C8:6A:2B:87:B7:55:D5:82:0A X509v3 Authority Key Identifier: keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f6:c2:c0:1b:28:36:cd:b8:fa:9b:6f:74:65:1d:7b:7f:e9: ad:ec:de:a0:e7:99:e4:a5:8f:31:01:81:6d:ae:c1:ba:eb:fb: 34:1d:9d:1f:10:93:26:9b:76:6e:16:3b:d8:42:33:b7:e2:05: 61:ef:85:9f:3b:10:c6:92:cc:e2:ac:f4:d0:c3:20:6b:1a:09: 76:4b:b5:d8:bd:53:ce:b5:fc:50:28:4b:6e:57:83:cd:08:d2: 69:1b:3b:8b:10:93:27:f4:3b:1a:c3:28:e0:3d:a9:4a:ae:52: a3:9a:43:2b:21:07:bd:5d:df:72:1b:b1:30:5e:e2:99:29:cd: fa:a3:02:19:9c:41:7c:58:d7:9f:35:68:f6:bd:1e:c3:01:80: 81:51:59:e2:b9:e0:46:36:eb:58:62:38:ce:3e:5f:f1:6b:4d: fd:8b:30:fc:9b:b3:bf:9d:1a:51:d0:e4:fa:50:4c:f8:22:3e: d3:ab:db:b6:09:e5:0e:d3:8f:37:b8:26:22:46:03:e5:c0:32: 76:ba:33:d0:1c:db:59:4b:3c:6c:43:ad:12:b6:ee:6c:c6:2d: 60:05:f9:d6:23:8e:a8:21:cd:26:40:e7:54:c9:cf:c8:90:03: 27:71:23:0f:13:e2:a5:12:f2:38:53:40:62:f9:f3:a7:f6:5b: c4:90:fc:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2voHzxdgpBFxsJfLrdjiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk NDIzZTAwHhcNMjYwMTI1MjAwMDM4WhcNMjYwMTI2MjAwMDM4WjAzMTEwLwYDVQQD EygzMWMwMjAwYmFmNGUxMzA1OWZhODIxYzg2YTJiODdiNzU1ZDU4MjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6p7zqkDePTsZ94JBJw60FVwdmZX aljbz9XozGa6MaoN8I4PYMZepU6U7MZyjQ+760fVojDkUWUto4DImqpUDCR/0p7h m3Re7IrQ2Nh0PXBUvx2RCrGrz0vt3uUUMCSFvSEWz6kegIdS6fKtguKJ9hvL9QSq KziOlPmNGK/idu1w9RBpA3rJ/HYXYljPjMpZWY/jESf8Mk8KFuBkQ2+oy2Gb6DOD hHwXxLIBMDLkXrKL5HQNcfONk1h8ACKL22uLAIUUDm3UKbtaf67l0kjsXfO+ovSb x+JkCPto7n9fwq/IQ5IDfIQb6qRNZVNR6/AMnsZ5OQnwxBJvw/ZFoKGfRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHAIAuvThMFn6ghyGorh7dV1YIKMB8GA1UdIwQY MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt NjQwYzc0YTk0Y2M2LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2 LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPbCwBso Ns24+ptvdGUde3/prezeoOeZ5KWPMQGBba7Buuv7NB2dHxCTJpt2bhY72EIzt+IF Ye+FnzsQxpLM4qz00MMgaxoJdku12L1TzrX8UChLbleDzQjSaRs7ixCTJ/Q7GsMo 4D2pSq5So5pDKyEHvV3fchuxMF7imSnN+qMCGZxBfFjXnzVo9r0ewwGAgVFZ4rng RjbrWGI4zj5f8WtN/Ysw/Juzv50aUdDk+lBM+CI+06vbtgnlDtOPN7gmIkYD5cAy droz0BzbWUs8bEOtErbubMYtYAX51iOOqCHNJkDnVMnPyJADJ3EjDxPipRLyOFNA Yvnzp/ZbxJD8Tg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:48 2026 by rpki-client