This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json) Hash identifier: sT/uoROzI7Y/5yAx20yv/VFT4KVBIDrtg4yCSy+m93k= Subject key identifier: C0:5D:AE:7F:59:EB:76:87:AF:4A:32:7B:5C:41:18:17:CA:2F:FC:A4 Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Certificate serial: 019BEA83A33933D3A9CA871CCCA799FBA9F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft Manifest number: 1800 Signing time: Fri 23 Jan 2026 11:00:54 +0000 Manifest this update: Fri 23 Jan 2026 11:00:54 +0000 Manifest next update: Sat 24 Jan 2026 11:00:54 +0000 Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=) 2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=) 3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=) 4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: pL0nW+X4GHi2n1/d+txUSUfOuhtRm6ibo5IqgVjO1OI=) 5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=) 6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=) 7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=) 8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=) 9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:83:a3:39:33:d3:a9:ca:87:1c:cc:a7:99:fb:a9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Validity Not Before: Jan 23 11:00:54 2026 GMT Not After : Jan 24 11:00:54 2026 GMT Subject: CN=c05dae7f59eb7687af4a327b5c411817ca2ffca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9e:b9:e9:2b:d6:64:ba:ed:bf:ae:d3:9a:09: 5f:76:ab:a6:13:51:b9:d1:34:68:32:88:d0:20:e8: 8a:c7:c8:6e:62:b6:80:c0:85:6e:0a:60:da:2c:fd: 28:d1:da:1a:c0:46:61:d9:f9:75:f2:ec:80:fa:41: 71:2d:81:95:bd:7c:3c:83:b2:d4:fe:ef:6a:4d:ce: 7b:15:ba:59:fd:62:d2:a9:8e:cd:b6:d2:5e:ad:a7: 46:23:10:a5:c1:f8:82:9f:a8:b6:e2:5f:d1:06:6d: 86:70:43:34:d9:0e:80:e8:42:23:e1:c0:ff:fe:e3: d4:fc:5c:87:ad:15:c5:10:07:fc:fb:80:3f:68:b7: 31:84:55:05:3c:c3:ee:16:bf:5f:dc:08:87:08:9a: a0:d6:d6:b8:98:ec:ef:11:27:6e:84:d0:c0:4a:97: 13:1c:f0:da:74:08:9b:3b:ff:de:73:0d:7f:56:d9: 1a:fe:82:f4:8c:c2:67:a3:98:f2:f4:33:29:0f:51: 05:a0:f3:20:70:c6:d5:b7:6c:6c:23:8e:10:26:aa: 62:af:86:c3:9e:6b:7a:dd:be:e8:94:ea:aa:aa:1d: 76:ed:04:33:52:1e:36:b9:25:b4:54:f2:49:98:b0: 5b:2f:63:d2:01:2d:6e:82:cc:0e:cf:54:c6:19:6f: d8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5D:AE:7F:59:EB:76:87:AF:4A:32:7B:5C:41:18:17:CA:2F:FC:A4 X509v3 Authority Key Identifier: keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:f8:67:78:b0:b3:9c:bf:16:69:d2:83:b3:d0:37:3f:8d:e0: 37:cc:22:ab:af:06:20:9b:f8:2d:de:21:95:2b:20:fa:13:f6: 58:a3:d8:67:a0:34:5f:bd:df:c2:90:ae:a6:6f:24:5b:8e:f6: 3e:c7:80:50:58:8f:24:14:c1:25:a9:63:db:4b:a5:42:14:5f: 60:22:e7:1d:ef:a8:13:30:9c:03:4d:25:f7:39:13:fc:22:00: 4f:04:76:59:0e:80:b4:b3:bb:72:d8:1b:61:36:e4:a7:60:cf: c7:ce:b2:04:e7:32:7b:5b:20:fd:ff:06:e3:a4:99:1e:9e:df: 4f:7a:0e:2e:ca:67:31:e4:0a:7a:ae:25:04:4d:84:ac:48:12: a4:3b:f5:84:f5:d8:39:67:9d:03:cf:cc:1d:aa:96:44:27:96: 61:e1:15:2a:b8:f1:64:47:fe:3e:97:f4:85:5f:2a:a9:22:e6: 55:36:13:82:9b:2d:18:46:ea:5e:47:73:19:4a:df:71:18:71: 7d:78:08:03:04:e5:02:ee:d4:a9:94:fa:5d:98:88:70:3a:34: b2:fe:c9:17:2e:49:9f:15:13:e0:1a:83:e5:8b:ff:29:01:92: 67:11:a7:de:46:28:29:c2:5e:41:5e:6a:f6:9d:21:77:bd:f9: bb:6e:3f:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvqg6M5M9OpyocczKeZ+6n0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4 NjJlNWYwHhcNMjYwMTIzMTEwMDU0WhcNMjYwMTI0MTEwMDU0WjAzMTEwLwYDVQQD EyhjMDVkYWU3ZjU5ZWI3Njg3YWY0YTMyN2I1YzQxMTgxN2NhMmZmY2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p656SvWZLrtv67TmglfdqumE1G5 0TRoMojQIOiKx8huYraAwIVuCmDaLP0o0doawEZh2fl18uyA+kFxLYGVvXw8g7LU /u9qTc57FbpZ/WLSqY7NttJeradGIxClwfiCn6i24l/RBm2GcEM02Q6A6EIj4cD/ /uPU/FyHrRXFEAf8+4A/aLcxhFUFPMPuFr9f3AiHCJqg1ta4mOzvESduhNDASpcT HPDadAibO//ecw1/Vtka/oL0jMJno5jy9DMpD1EFoPMgcMbVt2xsI44QJqpir4bD nmt63b7olOqqqh127QQzUh42uSW0VPJJmLBbL2PSAS1ugswOz1TGGW/YswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBdrn9Z63aHr0oye1xBGBfKL/ykMB8GA1UdIwQY MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt MGQzZmNlNDI5YmRlLzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyfhneLCz nL8WadKDs9A3P43gN8wiq68GIJv4Ld4hlSsg+hP2WKPYZ6A0X73fwpCupm8kW472 PseAUFiPJBTBJalj20ulQhRfYCLnHe+oEzCcA00l9zkT/CIATwR2WQ6AtLO7ctgb YTbkp2DPx86yBOcye1sg/f8G46SZHp7fT3oOLspnMeQKeq4lBE2ErEgSpDv1hPXY OWedA8/MHaqWRCeWYeEVKrjxZEf+Ppf0hV8qqSLmVTYTgpstGEbqXkdzGUrfcRhx fXgIAwTlAu7UqZT6XZiIcDo0sv7JFy5JnxUT4BqD5Yv/KQGSZxGn3kYoKcJeQV5q 9p0hd735u24/iQ== -----END CERTIFICATE-----Generated at Fri Jan 23 17:23:06 2026 by rpki-client