This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json) Hash identifier: 1RvszvqO+56g0b4skYIJa6CithNewoSGo3ADru2wa0k= Subject key identifier: 66:09:40:DB:D1:60:47:FD:6B:91:1C:45:74:AA:61:DD:44:BA:D6:9C Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03 Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603 Certificate serial: 019C05C4B8F32C10BAA476F62A205AFFFA8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft Manifest number: 17EF Signing time: Wed 28 Jan 2026 18:01:44 +0000 Manifest this update: Wed 28 Jan 2026 18:01:44 +0000 Manifest next update: Thu 29 Jan 2026 18:01:44 +0000 Files and hashes: 1: WUA-8043AhVJq3-rCBC1_Z6ym2Q.roa (hash: uFmweGUa9mThJ5dM41jk0vxxDTuGE59oPYV9R1R2bgQ=) 2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: hwnpQwJ60AZj6pY1nCYkEALaTwa3NSkdYHp/3wo+H3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:c4:b8:f3:2c:10:ba:a4:76:f6:2a:20:5a:ff:fa:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603 Validity Not Before: Jan 28 18:01:44 2026 GMT Not After : Jan 29 18:01:44 2026 GMT Subject: CN=660940dbd16047fd6b911c4574aa61dd44bad69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:95:b5:06:21:d6:c3:18:7d:2b:f5:03:43:f7: e4:85:7b:b7:f1:c1:c9:65:a1:f4:c7:e7:f0:5b:3a: 6f:4f:de:b4:70:5c:b5:ba:28:89:d9:ac:8d:f7:ee: db:ba:1d:3e:67:9c:af:2b:91:8a:11:46:8b:e0:82: 01:1d:45:d5:52:a9:7b:8b:cf:46:9b:d8:ac:0b:6a: 66:55:89:f1:80:b6:21:08:35:55:84:ba:46:79:d7: 56:23:09:8f:0f:11:ba:5c:a8:08:56:9f:70:00:c4: 42:43:7e:c9:1b:03:27:97:da:02:e4:0b:f1:55:10: 53:91:b8:f0:3c:79:4f:65:90:3c:fe:dd:49:1e:6e: d9:df:46:d4:70:7b:32:aa:b4:4d:9a:5b:4f:b7:3e: 38:e3:b2:98:d7:cc:0e:6b:fb:e6:4e:1e:e4:25:23: df:f9:31:48:6f:68:6a:f2:98:5a:4d:2d:7d:33:df: 91:69:42:69:c1:4a:76:07:16:9f:ab:f9:6b:0b:45: 9c:59:d3:bf:8b:9e:74:29:3c:24:67:af:9e:aa:ba: 3b:0d:1e:bb:6e:56:60:d7:68:bb:2d:02:c0:a2:77: bc:4d:8e:ac:3b:d5:b6:26:11:a8:06:4f:8a:36:68: 3d:a1:da:33:a5:14:fa:05:96:35:9d:55:ab:57:7e: a1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:09:40:DB:D1:60:47:FD:6B:91:1C:45:74:AA:61:DD:44:BA:D6:9C X509v3 Authority Key Identifier: keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e5:61:a0:03:dc:b9:73:87:bf:7e:9d:80:8c:f1:31:8c:52: 37:d4:63:cb:97:5b:1f:54:5c:f6:a6:53:ea:41:55:18:1d:48: 49:61:4a:36:3f:d7:2a:71:a5:2f:89:cf:0f:b0:cf:27:fe:8d: 45:0d:b1:6b:62:cf:b1:4a:67:1b:02:2b:86:23:21:fa:d9:62: 5e:2c:ca:24:ed:51:76:c3:3d:06:61:81:32:6e:d0:0f:c8:d6: d3:4b:8e:a2:cf:32:c5:4d:2b:54:9e:35:db:bb:7a:23:35:2e: 36:34:85:c3:ac:be:35:95:3e:26:ef:46:cd:99:2e:6f:b2:b8: b2:dd:4c:ab:53:19:4d:2b:4b:d0:bc:25:57:60:dd:3c:97:e0: 71:d3:72:13:ba:3a:7f:8f:e4:66:4a:2b:62:00:4d:94:ff:4b: 13:78:44:b1:f7:15:91:58:2d:53:6d:e1:0e:b8:fb:3f:f2:f4: 5a:c4:0d:73:9c:d5:37:97:26:77:96:70:de:0f:82:4a:74:5f: 5e:57:14:fd:74:78:cb:9c:81:ee:f9:5f:fa:2c:9f:86:87:5c: b6:c9:7b:1c:e7:37:f2:2c:9b:31:7e:de:fa:45:da:3f:9e:10: da:da:4a:b5:65:59:4a:78:1e:a9:9d:a2:0c:83:59:68:b4:5b: 5f:fd:d3:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFxLjzLBC6pHb2KiBa//qPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGNmNTEyNDdhYjU3ZjUyNmYzODA3MjU5YTc4ZDJiMDI1 OTA2MDMwHhcNMjYwMTI4MTgwMTQ0WhcNMjYwMTI5MTgwMTQ0WjAzMTEwLwYDVQQD Eyg2NjA5NDBkYmQxNjA0N2ZkNmI5MTFjNDU3NGFhNjFkZDQ0YmFkNjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5W1BiHWwxh9K/UDQ/fkhXu38cHJ ZaH0x+fwWzpvT960cFy1uiiJ2ayN9+7buh0+Z5yvK5GKEUaL4IIBHUXVUql7i89G m9isC2pmVYnxgLYhCDVVhLpGeddWIwmPDxG6XKgIVp9wAMRCQ37JGwMnl9oC5Avx VRBTkbjwPHlPZZA8/t1JHm7Z30bUcHsyqrRNmltPtz4447KY18wOa/vmTh7kJSPf +TFIb2hq8phaTS19M9+RaUJpwUp2Bxafq/lrC0WcWdO/i550KTwkZ6+eqro7DR67 blZg12i7LQLAone8TY6sO9W2JhGoBk+KNmg9odozpRT6BZY1nVWrV36hWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYJQNvRYEf9a5EcRXSqYd1EutacMB8GA1UdIwQY MBaAFJ5M9RJHq1f1JvOAclmnjSsCWQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMt M2NmMzA2ODA3YTdlLzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMtM2NmMzA2ODA3YTdl LzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeVhoAPc uXOHv36dgIzxMYxSN9Rjy5dbH1Rc9qZT6kFVGB1ISWFKNj/XKnGlL4nPD7DPJ/6N RQ2xa2LPsUpnGwIrhiMh+tliXizKJO1RdsM9BmGBMm7QD8jW00uOos8yxU0rVJ41 27t6IzUuNjSFw6y+NZU+Ju9GzZkub7K4st1Mq1MZTStL0LwlV2DdPJfgcdNyE7o6 f4/kZkorYgBNlP9LE3hEsfcVkVgtU23hDrj7P/L0WsQNc5zVN5cmd5Zw3g+CSnRf XlcU/XR4y5yB7vlf+iyfhodctsl7HOc38iybMX7e+kXaP54Q2tpKtWVZSngeqZ2i DINZaLRbX/3T4A== -----END CERTIFICATE-----Generated at Thu Jan 29 03:35:08 2026 by rpki-client