This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft File: N6MHIGgl2WIY507NCN0t2d3A-dc.mft (raw, json) Hash identifier: 7r2TXwkgSawV8MDtDYM2mwWMj4XnvqHFZl3BcDGMkk0= Subject key identifier: AD:7B:E7:E8:31:CD:3A:F8:73:CE:2A:E6:9B:B5:B4:B3:7B:85:81:67 Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7 Certificate issuer: /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7 Certificate serial: 019BDDA47CF3F690721A295E91584CED41E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft Manifest number: 0C Signing time: Tue 20 Jan 2026 23:01:43 +0000 Manifest this update: Tue 20 Jan 2026 23:01:43 +0000 Manifest next update: Wed 21 Jan 2026 23:01:43 +0000 Files and hashes: 1: N6MHIGgl2WIY507NCN0t2d3A-dc.crl (hash: TBYA/mOg9E023/O/h46vcxdcico1ubQQXV1Fg2X1whM=) 2: xelSWXpfJDe6boWv98tvaG7k9Pk.asa (hash: ONJj17M0jiWjVPo0TwV78223Q3WkimmKmsX8ilFZxDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:a4:7c:f3:f6:90:72:1a:29:5e:91:58:4c:ed:41:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7 Validity Not Before: Jan 20 23:01:43 2026 GMT Not After : Jan 21 23:01:43 2026 GMT Subject: CN=ad7be7e831cd3af873ce2ae69bb5b4b37b858167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:48:e6:13:3a:b0:e1:dc:13:fc:a4:43:e6:b1: 2a:4e:d1:bb:d2:66:10:65:23:43:32:e9:9e:76:5f: 03:32:90:cf:19:69:a2:73:b4:e3:84:c2:1e:fb:84: 20:73:b7:bd:98:50:50:52:36:e2:2f:6e:5b:b6:df: b9:44:e2:c9:1a:a1:13:28:16:d6:c0:02:27:33:6f: 68:14:ba:9c:48:23:de:ed:0e:73:9c:c8:48:c2:43: d9:89:64:e7:d7:c8:c4:dd:e4:e2:63:62:d2:a9:55: 19:16:6c:57:cb:c3:89:af:2c:c8:53:0e:1b:c0:fd: e0:cd:0e:19:d8:70:41:bd:65:12:92:d1:c8:d4:da: d7:11:86:68:1f:6d:cf:2a:57:e9:c5:1f:a9:ea:87: 65:a5:62:1f:ae:b1:f2:22:02:d7:00:25:0e:59:aa: e0:3c:55:85:e1:ee:c7:39:1d:1c:bf:d4:03:a1:ad: d2:fa:54:61:9b:73:e8:fb:9b:ea:30:4b:0e:fb:16: 6b:eb:e1:12:39:68:b5:23:a5:9f:40:72:bf:32:ce: 51:8d:a7:97:45:e9:42:4f:64:83:c5:77:c3:df:b9: 1b:e4:52:83:cf:82:8c:83:91:e6:40:ac:14:c8:8d: 0a:ad:57:b8:94:12:c1:e9:e1:1e:87:12:90:48:de: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7B:E7:E8:31:CD:3A:F8:73:CE:2A:E6:9B:B5:B4:B3:7B:85:81:67 X509v3 Authority Key Identifier: keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5d:9b:97:ba:7e:5c:00:4b:f2:b6:96:9b:94:38:04:e8:d2: b1:f5:26:5f:ea:e7:cf:8f:1e:b3:94:29:a3:1c:f5:d6:ce:0c: bf:ef:62:83:65:94:4e:ab:bc:27:00:62:21:cc:5f:d3:12:15: c9:4c:4d:72:76:12:90:6a:11:f9:e0:e1:0b:49:85:a1:34:dd: fa:20:59:49:d4:97:fb:ca:6a:d2:b3:2c:25:5d:33:6b:27:16: 74:e8:47:df:ca:d3:af:8d:6b:9e:60:0f:7c:23:20:18:94:d0: ea:54:60:1e:5f:a3:e9:2c:eb:c1:2a:c0:2a:7b:91:94:88:d8: 0a:57:3c:2b:2f:dc:4a:e7:40:7c:67:52:1d:32:8f:59:76:02: 02:17:4d:e3:7d:ef:02:89:c1:c6:cd:93:3c:a7:41:15:a8:a5: 7e:6c:f7:3a:d2:f0:91:9a:24:06:52:ff:b4:87:9f:e6:14:a2: 7e:bf:59:1a:05:f2:23:e7:d9:75:b9:70:3c:89:84:c9:ba:cc: b7:3c:4b:3b:d5:de:86:f3:de:1c:f4:75:d8:06:77:b1:49:97: de:64:2c:86:b9:6b:4f:fd:f4:38:27:47:23:ec:39:17:e9:2e: b3:6d:1b:38:35:51:98:a6:8c:39:fe:39:4d:3d:1a:0a:30:bb: 5b:4b:0c:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvdpHzz9pByGilekVhM7UHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTMwNzIwNjgyNWQ5NjIxOGU3NGVjZDA4ZGQyZGQ5ZGRj MGY5ZDcwHhcNMjYwMTIwMjMwMTQzWhcNMjYwMTIxMjMwMTQzWjAzMTEwLwYDVQQD EyhhZDdiZTdlODMxY2QzYWY4NzNjZTJhZTY5YmI1YjRiMzdiODU4MTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UjmEzqw4dwT/KRD5rEqTtG70mYQ ZSNDMumedl8DMpDPGWmic7TjhMIe+4Qgc7e9mFBQUjbiL25btt+5ROLJGqETKBbW wAInM29oFLqcSCPe7Q5znMhIwkPZiWTn18jE3eTiY2LSqVUZFmxXy8OJryzIUw4b wP3gzQ4Z2HBBvWUSktHI1NrXEYZoH23PKlfpxR+p6odlpWIfrrHyIgLXACUOWarg PFWF4e7HOR0cv9QDoa3S+lRhm3Po+5vqMEsO+xZr6+ESOWi1I6WfQHK/Ms5RjaeX RelCT2SDxXfD37kb5FKDz4KMg5HmQKwUyI0KrVe4lBLB6eEehxKQSN69mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK175+gxzTr4c84q5pu1tLN7hYFnMB8GA1UdIwQY MBaAFDejByBoJdliGOdOzQjdLdndwPnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQt NDI4YTUzMmFjZWYwLzEvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQtNDI4YTUzMmFjZWYw LzEvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXV2bl7p+ XABL8raWm5Q4BOjSsfUmX+rnz48es5Qpoxz11s4Mv+9ig2WUTqu8JwBiIcxf0xIV yUxNcnYSkGoR+eDhC0mFoTTd+iBZSdSX+8pq0rMsJV0zaycWdOhH38rTr41rnmAP fCMgGJTQ6lRgHl+j6SzrwSrAKnuRlIjYClc8Ky/cSudAfGdSHTKPWXYCAhdN433v AonBxs2TPKdBFailfmz3OtLwkZokBlL/tIef5hSifr9ZGgXyI+fZdblwPImEybrM tzxLO9XehvPeHPR12AZ3sUmX3mQshrlrT/30OCdHI+w5F+kus20bODVRmKaMOf45 TT0aCjC7W0sMRA== -----END CERTIFICATE-----Generated at Wed Jan 21 02:36:14 2026 by rpki-client