This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json) Hash identifier: 61SaiWRPHLnG0nrBadCk3mAOOymIhiDM6bkTU8EdSL8= Subject key identifier: 25:22:AB:76:28:7F:0D:72:AC:9C:69:F0:C5:ED:BD:C3:41:B1:E6:E1 Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa Certificate serial: 019BF651CA43B1DB6F3817DF39E82AEB71F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft Manifest number: 060E Signing time: Sun 25 Jan 2026 18:01:53 +0000 Manifest this update: Sun 25 Jan 2026 18:01:53 +0000 Manifest next update: Mon 26 Jan 2026 18:01:53 +0000 Files and hashes: 1: 3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa (hash: ho5K0lj5JJPTZqPc5laRkOJ8PLSca4Q9mg+67aNhjzk=) 2: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: thq/VoJVjTbsaLpq8h0pBqL2AClzKkObw3HzNUY68sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:ca:43:b1:db:6f:38:17:df:39:e8:2a:eb:71:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa Validity Not Before: Jan 25 18:01:53 2026 GMT Not After : Jan 26 18:01:53 2026 GMT Subject: CN=2522ab76287f0d72ac9c69f0c5edbdc341b1e6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:a3:f8:26:e8:5c:f6:56:43:28:89:ad:30: 23:d0:dd:f8:f5:1d:ef:dd:c9:d2:46:cd:ec:f1:f5: f0:6b:74:20:39:68:8b:9f:05:40:74:4a:14:2e:cb: 7a:ab:d8:0c:3a:1c:ea:f5:bf:6c:b7:34:81:d0:0b: dc:ba:3b:4c:a1:fe:2f:c9:e8:07:db:b6:f0:ed:a9: d5:1f:c3:23:7f:bc:32:ac:c3:e3:bc:d8:d1:d3:a5: d9:37:f0:5f:ab:6d:86:52:08:ea:34:8a:74:7d:1b: 6a:f3:e9:1b:1a:4c:fd:86:cc:a4:68:5b:8f:92:85: 90:af:3e:a3:f7:62:d3:1d:ab:0d:ab:ac:5c:10:5d: 48:43:80:51:7f:33:07:ab:38:d0:02:b7:ac:e0:f7: 04:e7:eb:85:64:70:11:42:b9:f6:77:2b:10:68:7c: ea:58:d3:9c:06:eb:58:d8:59:3d:8c:72:33:43:3c: 91:d5:28:08:a6:74:69:67:d7:77:dd:e6:64:e6:09: fc:c1:74:fa:bf:9b:12:52:7b:2a:2b:1b:2c:4f:52: b4:34:ef:83:4a:52:5c:aa:57:79:79:61:f4:c6:f9: 74:66:9e:4f:ff:ea:c8:71:98:53:36:82:e1:dc:19: a3:81:41:b9:04:79:58:03:9e:26:42:29:6f:c2:65: 5e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:22:AB:76:28:7F:0D:72:AC:9C:69:F0:C5:ED:BD:C3:41:B1:E6:E1 X509v3 Authority Key Identifier: keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b3:05:bb:c5:e9:73:8f:49:ba:35:6f:d1:fd:f4:d8:7a:65: 6e:fe:65:c1:56:99:c3:62:57:28:13:bd:9b:fc:a0:a4:bd:89: 4f:7a:1b:7d:e0:09:ca:d7:b6:bc:4e:38:e7:d3:6c:73:3a:cf: 1c:08:84:04:19:8c:b4:b7:23:13:53:3b:94:3d:01:4b:f8:6d: 2f:13:65:de:f6:8d:2a:d8:22:eb:6f:4d:3d:1f:c7:1d:d7:c5: 43:4a:ed:3f:35:51:1e:bc:f0:c5:5e:bf:a1:ac:d7:df:86:6a: 8e:e7:55:c1:da:b3:15:2f:d9:c6:4e:48:c0:a0:a8:bd:5f:ff: 3f:83:33:d1:19:40:1f:d6:9e:29:56:9c:be:1d:13:f6:1c:c2: 44:56:87:b8:a1:f5:d5:8e:41:84:ce:79:59:27:ab:36:1d:ac: d2:e3:d2:67:c4:a6:5e:f2:b4:82:f0:f4:c9:b9:13:42:7e:ae: d3:1b:ca:9f:69:f9:bc:0f:29:ed:7b:6d:d1:1f:4b:59:4b:d3: 48:20:0d:08:fe:6c:63:22:85:c6:c8:03:66:46:d2:50:22:e9: 46:a2:20:91:48:16:7e:34:a4:5b:76:6a:cb:28:13:7d:d3:a6: a3:80:5c:2a:57:3f:6f:9a:f7:60:09:33:19:3f:f3:e2:fb:4b: a5:42:54:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UcpDsdtvOBffOegq63H5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTNkYmM1ODI5ZWM1MDBiMzM0MjZhMTg4ZDAzOTkzOTVi ODA2YWEwHhcNMjYwMTI1MTgwMTUzWhcNMjYwMTI2MTgwMTUzWjAzMTEwLwYDVQQD EygyNTIyYWI3NjI4N2YwZDcyYWM5YzY5ZjBjNWVkYmRjMzQxYjFlNmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35Wj+CboXPZWQyiJrTAj0N349R3v 3cnSRs3s8fXwa3QgOWiLnwVAdEoULst6q9gMOhzq9b9stzSB0AvcujtMof4vyegH 27bw7anVH8Mjf7wyrMPjvNjR06XZN/Bfq22GUgjqNIp0fRtq8+kbGkz9hsykaFuP koWQrz6j92LTHasNq6xcEF1IQ4BRfzMHqzjQAres4PcE5+uFZHARQrn2dysQaHzq WNOcButY2Fk9jHIzQzyR1SgIpnRpZ9d33eZk5gn8wXT6v5sSUnsqKxssT1K0NO+D SlJcqld5eWH0xvl0Zp5P/+rIcZhTNoLh3BmjgUG5BHlYA54mQilvwmVeLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUiq3Yofw1yrJxp8MXtvcNBsebhMB8GA1UdIwQY MBaAFDdT28WCnsUAszQmoYjQOZOVuAaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMt MDM3OTkzMGY4Mjg2LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMtMDM3OTkzMGY4Mjg2 LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbMFu8Xp c49JujVv0f302Hplbv5lwVaZw2JXKBO9m/ygpL2JT3obfeAJyte2vE4459NsczrP HAiEBBmMtLcjE1M7lD0BS/htLxNl3vaNKtgi629NPR/HHdfFQ0rtPzVRHrzwxV6/ oazX34ZqjudVwdqzFS/Zxk5IwKCovV//P4Mz0RlAH9aeKVacvh0T9hzCRFaHuKH1 1Y5BhM55WSerNh2s0uPSZ8SmXvK0gvD0ybkTQn6u0xvKn2n5vA8p7Xtt0R9LWUvT SCANCP5sYyKFxsgDZkbSUCLpRqIgkUgWfjSkW3ZqyygTfdOmo4BcKlc/b5r3YAkz GT/z4vtLpUJUkQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:52 2026 by rpki-client