This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json) Hash identifier: 8/bXIppKBWO62aVul3+E7Zn3OF6gfE2KTZp4Rude/3E= Subject key identifier: 82:1B:03:61:7E:EC:A9:71:1F:2D:C1:70:49:08:10:3D:7A:42:26:36 Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd Certificate serial: 019BD95A16F5AB4E48FD349152B47E3F4399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft Manifest number: 17DB Signing time: Tue 20 Jan 2026 03:01:58 +0000 Manifest this update: Tue 20 Jan 2026 03:01:58 +0000 Manifest next update: Wed 21 Jan 2026 03:01:58 +0000 Files and hashes: 1: PduOZpjbTeguYPPjxKOu2HUXPEI.roa (hash: SoXp68gYkw1NyEZV0z5P/scUXUAiACXBu/NIFOs1SQM=) 2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: A6cT/MFixkTnwj1SA1F4nErvcPLSa1wWZJIltRByOdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:5a:16:f5:ab:4e:48:fd:34:91:52:b4:7e:3f:43:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd Validity Not Before: Jan 20 03:01:58 2026 GMT Not After : Jan 21 03:01:58 2026 GMT Subject: CN=821b03617eeca9711f2dc1704908103d7a422636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3f:a2:5d:ee:d7:01:61:09:7b:cc:33:43:b6: a1:65:8d:00:50:30:28:1f:e7:f9:3d:b3:0d:ef:e7: 23:6a:c9:a9:33:b6:cc:4e:54:49:23:c7:ab:ca:ad: 1e:d6:86:32:78:88:d5:c0:ea:70:d9:c3:32:63:83: 4a:8c:d7:51:a9:5b:35:54:dc:d4:dc:58:f8:cd:63: ec:04:71:9c:c7:10:d1:d9:bd:79:22:1b:af:dc:4b: 42:d6:ef:18:30:9f:5b:79:ea:97:1b:b1:ac:d7:8b: 82:f7:06:08:03:bf:1b:76:35:23:67:dc:70:f8:16: eb:af:7c:40:bf:02:a5:2f:54:3d:32:e2:1b:19:29: f5:fe:43:89:40:16:2c:13:d1:00:23:e4:bc:cc:f0: e2:9e:e4:92:c9:7a:7c:66:10:fa:1f:63:c8:4a:49: 46:c4:a6:0b:a2:ca:9f:85:6e:fc:eb:f6:e2:6f:66: ee:be:fe:d6:d7:1c:e1:1c:fa:f4:8c:b0:06:f0:11: 2a:d3:b3:95:d9:10:b8:bd:f7:8f:7b:0d:78:9d:ed: 05:23:48:42:b9:f0:90:93:71:a9:3d:fa:c5:25:b1: 2f:be:68:ff:ae:39:63:6c:3e:95:30:1e:11:be:e1: c0:8f:a8:1a:2a:c6:87:f8:12:2a:12:e5:8a:f0:83: f5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1B:03:61:7E:EC:A9:71:1F:2D:C1:70:49:08:10:3D:7A:42:26:36 X509v3 Authority Key Identifier: keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:26:f4:ef:eb:cb:cc:f6:02:fa:db:07:a6:ae:cf:6b:de:b5: b5:a3:cc:01:6c:d2:ab:a3:92:34:f1:73:7f:93:04:97:c6:b4: 07:8a:2d:4c:6c:9b:29:74:72:4a:31:31:51:10:c9:07:84:04: 76:fe:5e:ff:b3:ca:e8:59:64:b6:b7:3f:74:12:0c:09:26:e0: 33:48:c1:60:5e:ee:d9:2a:ce:7f:b9:ca:44:d0:6b:ca:5b:69: a2:db:5c:6b:44:d9:34:96:dc:69:6a:84:b6:66:1b:0b:d6:78: 2d:0e:62:c6:96:09:9c:cf:b2:90:06:04:2c:e1:ae:bd:d0:f5: 46:98:e2:3f:d5:c7:96:d7:75:89:1d:dd:d7:eb:64:0c:27:16: 80:f5:c4:63:8d:1a:8f:a8:19:8e:bf:7d:0a:b3:6e:21:d3:c5: 28:56:6e:ef:d2:83:40:4e:e9:6a:95:ec:d8:5f:c4:75:c3:c0: 82:80:67:b4:43:5f:bf:fc:87:97:9f:08:e5:35:cb:3f:e1:17: 54:3f:86:45:bf:b3:9b:8b:ca:f6:56:b6:c3:51:b3:77:71:e5: 2a:d1:39:1d:d7:a2:04:1c:84:5c:d2:1c:db:f6:51:46:84:62: 55:68:b3:a4:32:0e:32:ab:30:a6:bd:d6:43:7f:a6:e2:d1:9c: 0c:78:f4:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZWhb1q05I/TSRUrR+P0OZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDI3NGYxMzliZDY2OWFhZWY3NzRkNjUwM2IyOGQ5OTY2 MzdiYmQwHhcNMjYwMTIwMDMwMTU4WhcNMjYwMTIxMDMwMTU4WjAzMTEwLwYDVQQD Eyg4MjFiMDM2MTdlZWNhOTcxMWYyZGMxNzA0OTA4MTAzZDdhNDIyNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz+iXe7XAWEJe8wzQ7ahZY0AUDAo H+f5PbMN7+cjasmpM7bMTlRJI8eryq0e1oYyeIjVwOpw2cMyY4NKjNdRqVs1VNzU 3Fj4zWPsBHGcxxDR2b15Ihuv3EtC1u8YMJ9beeqXG7Gs14uC9wYIA78bdjUjZ9xw +Bbrr3xAvwKlL1Q9MuIbGSn1/kOJQBYsE9EAI+S8zPDinuSSyXp8ZhD6H2PISklG xKYLosqfhW786/bib2buvv7W1xzhHPr0jLAG8BEq07OV2RC4vfePew14ne0FI0hC ufCQk3GpPfrFJbEvvmj/rjljbD6VMB4RvuHAj6gaKsaH+BIqEuWK8IP1tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIbA2F+7KlxHy3BcEkIED16QiY2MB8GA1UdIwQY MBaAFJ5CdPE5vWaarvd01lA7KNmWY3u9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zMmI2MWMtY2U4Mi00NjNjLThmNjQt Mjc3NWRlNTIwMmZiLzEvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zMmI2MWMtY2U4Mi00NjNjLThmNjQtMjc3NWRlNTIwMmZi LzEvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCb07+vL zPYC+tsHpq7Pa961taPMAWzSq6OSNPFzf5MEl8a0B4otTGybKXRySjExURDJB4QE dv5e/7PK6Flktrc/dBIMCSbgM0jBYF7u2SrOf7nKRNBryltpottca0TZNJbcaWqE tmYbC9Z4LQ5ixpYJnM+ykAYELOGuvdD1RpjiP9XHltd1iR3d1+tkDCcWgPXEY40a j6gZjr99CrNuIdPFKFZu79KDQE7papXs2F/EdcPAgoBntENfv/yHl58I5TXLP+EX VD+GRb+zm4vK9la2w1Gzd3HlKtE5HdeiBByEXNIc2/ZRRoRiVWizpDIOMqswpr3W Q3+m4tGcDHj0AA== -----END CERTIFICATE-----Generated at Tue Jan 20 09:27:42 2026 by rpki-client