This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json) Hash identifier: oiDX+XkOYkIXj9UucK0NcsOnQcig4VOsSFsysm2qYTw= Subject key identifier: E3:66:9E:9C:2B:E7:9E:BC:ED:02:FF:DA:41:93:46:3F:50:F0:89:FC Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e Certificate serial: 019B9F6A46ACE7D2B7FC0289F2D13B89D971 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft Manifest number: 145B Signing time: Thu 08 Jan 2026 21:01:40 +0000 Manifest this update: Thu 08 Jan 2026 21:01:40 +0000 Manifest next update: Fri 09 Jan 2026 21:01:40 +0000 Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: 0PTeVIjr9U4WKJUBLqNXQben4/LKDhQK4l/T/3oFkp8=) 2: iX9f-EzSBZVahm_eBu7qNdeTIv0.roa (hash: c2QhZ9r34Kk9CIhAjt/NPLFP2q8FB8VeWJ8RWP+MAD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:6a:46:ac:e7:d2:b7:fc:02:89:f2:d1:3b:89:d9:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e Validity Not Before: Jan 8 21:01:40 2026 GMT Not After : Jan 9 21:01:40 2026 GMT Subject: CN=e3669e9c2be79ebced02ffda4193463f50f089fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:6f:19:61:cf:93:b7:cf:49:c7:d7:f9:b8: 03:41:8f:cc:44:30:18:7a:9f:67:a3:ab:af:96:1f: 2b:ed:c1:32:9f:10:ad:eb:57:74:f3:f4:fe:d6:d8: 1e:27:3b:89:c2:be:6f:63:f4:aa:24:d9:f1:c1:09: 19:11:c7:35:a9:b7:44:14:66:e5:9b:db:cf:5c:bd: 71:38:56:1d:a3:be:50:1d:23:08:aa:6e:76:9d:09: 07:d9:12:79:de:8b:d0:28:ce:22:83:db:71:49:37: 8c:91:7c:72:fb:56:75:05:d6:04:01:d6:11:02:84: 09:7f:b2:d5:66:e8:ec:01:6b:ed:e3:0a:4b:20:c6: e8:b5:15:7f:16:06:84:ca:85:a7:61:81:e3:66:d8: 12:df:74:65:b3:4b:f5:d2:ea:e3:0a:c4:be:7d:5e: 57:9d:08:82:f9:83:85:63:89:f9:87:b9:9e:dc:c6: f4:56:7d:81:ca:d3:5d:ad:85:75:1a:7d:59:0d:cc: 43:4d:16:db:88:1d:a9:b2:30:03:1e:e8:5d:7e:12: be:fd:c3:ed:91:5e:07:85:5d:c3:99:2d:c9:0c:6c: dc:08:a9:e4:be:90:28:9d:f0:ae:ca:d0:aa:e0:67: 5b:cc:12:f8:2b:d9:70:ca:ad:95:3b:c3:ed:71:45: 40:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:66:9E:9C:2B:E7:9E:BC:ED:02:FF:DA:41:93:46:3F:50:F0:89:FC X509v3 Authority Key Identifier: keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b5:21:74:ac:f3:32:e9:12:6c:29:5d:b5:cd:e1:d9:94:da: 7c:49:0e:b9:4a:39:13:87:9d:18:76:8f:d4:48:15:b3:0a:01: a2:e4:f9:ae:4f:ba:af:b9:02:7c:5a:30:40:f7:ce:44:2a:5a: dd:09:ba:2a:cb:73:e8:c2:ed:3b:df:9a:41:dd:6e:8a:e0:13: a1:08:95:32:4d:3e:79:7d:23:89:63:70:4d:30:87:5c:89:bb: 1b:cf:fe:2d:28:82:48:d2:90:ed:19:5a:3b:81:66:96:ab:3e: 51:f7:68:e2:11:02:28:af:bb:89:b4:3d:95:56:35:05:4f:a7: 15:e6:a7:4f:52:00:82:ec:b0:1c:ac:bc:a7:e0:cc:37:2c:fd: 5e:c6:b1:8d:e3:46:c2:02:0b:e6:af:58:d2:6f:20:6e:fd:17: 69:b5:0d:d6:3c:c8:41:7d:5b:ad:eb:5a:38:a0:73:5c:ba:57: 5b:62:d7:d5:08:f4:9a:d8:98:48:ad:c6:63:f4:55:4d:64:67: ad:b3:15:f3:62:3a:04:70:06:fe:e5:7f:75:5d:1c:e9:4d:51: ff:ea:16:04:18:d8:0e:09:94:4a:be:ab:eb:e5:20:c1:9e:46: 93:56:74:39:fd:58:28:8a:b0:c1:18:d6:3b:0c:22:d4:6b:1e: 54:7d:f3:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZufakas59K3/AKJ8tE7idlxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDFmMzI1YmY4YWU2OTRhMTlmMjhmZDQwN2NkNWJiNTAw ZTFiM2UwHhcNMjYwMTA4MjEwMTQwWhcNMjYwMTA5MjEwMTQwWjAzMTEwLwYDVQQD EyhlMzY2OWU5YzJiZTc5ZWJjZWQwMmZmZGE0MTkzNDYzZjUwZjA4OWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolBvGWHPk7fPScfX+bgDQY/MRDAY ep9no6uvlh8r7cEynxCt61d08/T+1tgeJzuJwr5vY/SqJNnxwQkZEcc1qbdEFGbl m9vPXL1xOFYdo75QHSMIqm52nQkH2RJ53ovQKM4ig9txSTeMkXxy+1Z1BdYEAdYR AoQJf7LVZujsAWvt4wpLIMbotRV/FgaEyoWnYYHjZtgS33Rls0v10urjCsS+fV5X nQiC+YOFY4n5h7me3Mb0Vn2BytNdrYV1Gn1ZDcxDTRbbiB2psjADHuhdfhK+/cPt kV4HhV3DmS3JDGzcCKnkvpAonfCuytCq4GdbzBL4K9lwyq2VO8PtcUVA1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONmnpwr55687QL/2kGTRj9Q8In8MB8GA1UdIwQY MBaAFNTR8yW/iuaUoZ8o/UB81btQDhs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85NzcwYTEtNTliZC00MTVhLWJhZGUt YjI4MmRkNjc0ODIzLzEvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi85NzcwYTEtNTliZC00MTVhLWJhZGUtYjI4MmRkNjc0ODIz LzEvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLUhdKzz MukSbCldtc3h2ZTafEkOuUo5E4edGHaP1EgVswoBouT5rk+6r7kCfFowQPfORCpa 3Qm6Kstz6MLtO9+aQd1uiuAToQiVMk0+eX0jiWNwTTCHXIm7G8/+LSiCSNKQ7Rla O4Fmlqs+Ufdo4hECKK+7ibQ9lVY1BU+nFeanT1IAguywHKy8p+DMNyz9XsaxjeNG wgIL5q9Y0m8gbv0XabUN1jzIQX1bretaOKBzXLpXW2LX1Qj0mtiYSK3GY/RVTWRn rbMV82I6BHAG/uV/dV0c6U1R/+oWBBjYDgmUSr6r6+UgwZ5Gk1Z0Of1YKIqwwRjW Owwi1GseVH3zKA== -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:29 2026 by rpki-client