This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json) Hash identifier: 278pIg2fyNp1I9eVxP5NwZvNGt6pokMLR1124T9p5Sk= Subject key identifier: A5:42:3C:AA:45:82:80:5F:C6:5A:C6:6C:C7:43:D0:95:99:55:8A:DE Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1 Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1 Certificate serial: 019BFD2EF733E426DF0F13CEE3890C968DA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft Manifest number: 17FE Signing time: Tue 27 Jan 2026 02:01:12 +0000 Manifest this update: Tue 27 Jan 2026 02:01:12 +0000 Manifest next update: Wed 28 Jan 2026 02:01:12 +0000 Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=) 2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=) 3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: JTq+sPrvYcNVqJSZ1PWxl+cAPewQjP+YZWVNW8M50+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:f7:33:e4:26:df:0f:13:ce:e3:89:0c:96:8d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1 Validity Not Before: Jan 27 02:01:12 2026 GMT Not After : Jan 28 02:01:12 2026 GMT Subject: CN=a5423caa4582805fc65ac66cc743d09599558ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e9:89:9f:3d:74:78:41:2e:77:f6:7d:20:fd: a3:65:81:a6:01:fd:d4:73:79:58:35:8a:8d:54:7a: 80:1b:b8:d8:a9:34:56:37:be:8e:8f:fe:82:0b:87: 69:21:d2:9b:3e:8e:29:ca:a2:0f:8c:16:6f:b9:ab: ec:9a:41:24:5c:16:fd:4e:bf:7d:03:cc:2d:a2:8b: a9:69:70:e8:16:0c:74:72:d4:dd:73:65:82:b8:f0: 20:f6:f2:b0:97:bc:9b:30:93:43:0a:d3:80:91:57: b2:ee:e6:fd:ea:1f:ac:f7:9e:4a:07:71:10:c1:44: 19:a5:19:f7:72:e2:98:54:0f:04:a2:bb:4e:df:df: f4:8a:07:ff:34:ef:b0:c1:6a:df:8d:fb:bc:9a:87: 32:c4:da:d5:7a:23:c1:03:9b:8e:df:f0:fd:5c:77: fa:df:59:87:c6:db:b4:d3:fe:22:cf:71:aa:cd:0f: bb:64:3f:10:2a:55:26:41:65:90:61:0e:f2:ab:33: 86:38:1e:2f:49:f7:5c:94:7c:2f:9b:ea:c2:cf:9a: 0d:ba:4d:9c:bb:79:9c:ab:53:96:6f:53:b3:dd:55: af:8d:65:ac:55:57:93:a1:e5:5d:ba:cc:56:60:42: 91:60:76:c3:9b:2d:78:d2:bd:d2:74:28:1e:00:f3: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:42:3C:AA:45:82:80:5F:C6:5A:C6:6C:C7:43:D0:95:99:55:8A:DE X509v3 Authority Key Identifier: keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:86:86:7e:32:68:f1:1e:1e:e4:ad:df:15:98:3f:b8:61:d1: 03:10:7b:33:7c:5f:dc:7f:46:ed:6b:9e:17:01:bd:c7:28:23: 88:62:64:c0:f2:96:9e:d6:04:c1:46:5d:99:82:c6:23:5a:94: 9d:2c:fa:54:b6:8d:2c:ea:2c:7a:31:15:56:25:9a:6d:9e:3e: 23:e5:0e:0c:58:44:f4:d1:42:34:47:33:75:df:5b:2c:d7:07: 18:9d:08:c0:e8:5a:95:7a:20:94:16:76:dd:5d:e0:3e:bd:74: 39:b8:0f:92:30:90:2a:27:9f:49:a2:e9:46:ca:9e:50:72:4a: b0:4a:62:fe:eb:7e:d9:0d:c5:ea:e4:f2:9a:b5:63:31:b5:6c: b7:60:9f:40:53:3c:71:d1:c3:a5:f6:db:d9:99:cb:40:1f:e7: 2a:55:46:a8:e5:b7:19:39:51:bd:10:eb:31:16:b7:8e:ec:2a: 74:17:8e:f9:c5:91:e2:f8:1d:c6:dd:7c:7f:bb:22:80:28:8c: a7:e7:5b:f0:01:c1:cd:b1:e4:ce:e5:70:ee:5d:53:43:38:a0: 3f:22:04:e7:16:78:59:aa:96:c9:50:fa:ff:f5:9c:03:e1:8b: af:a7:c8:10:2f:67:82:89:10:86:07:53:22:48:c6:16:b9:c7: 36:2b:ab:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9Lvcz5CbfDxPO44kMlo2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMDY2Y2I4NDg4ZGFlN2U0MjM0YWE3Yzg5MjQzMGRhZDEx ZmU1YjEwHhcNMjYwMTI3MDIwMTEyWhcNMjYwMTI4MDIwMTEyWjAzMTEwLwYDVQQD EyhhNTQyM2NhYTQ1ODI4MDVmYzY1YWM2NmNjNzQzZDA5NTk5NTU4YWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+mJnz10eEEud/Z9IP2jZYGmAf3U c3lYNYqNVHqAG7jYqTRWN76Oj/6CC4dpIdKbPo4pyqIPjBZvuavsmkEkXBb9Tr99 A8wtooupaXDoFgx0ctTdc2WCuPAg9vKwl7ybMJNDCtOAkVey7ub96h+s955KB3EQ wUQZpRn3cuKYVA8EortO39/0igf/NO+wwWrfjfu8mocyxNrVeiPBA5uO3/D9XHf6 31mHxtu00/4iz3GqzQ+7ZD8QKlUmQWWQYQ7yqzOGOB4vSfdclHwvm+rCz5oNuk2c u3mcq1OWb1Oz3VWvjWWsVVeToeVdusxWYEKRYHbDmy140r3SdCgeAPNASwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVCPKpFgoBfxlrGbMdD0JWZVYreMB8GA1UdIwQY MBaAFJ0GbLhIja5+QjSqfIkkMNrRH+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQt M2VmMDJkNTE0MGI3LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQtM2VmMDJkNTE0MGI3 LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4aGfjJo 8R4e5K3fFZg/uGHRAxB7M3xf3H9G7WueFwG9xygjiGJkwPKWntYEwUZdmYLGI1qU nSz6VLaNLOosejEVViWabZ4+I+UODFhE9NFCNEczdd9bLNcHGJ0IwOhalXoglBZ2 3V3gPr10ObgPkjCQKiefSaLpRsqeUHJKsEpi/ut+2Q3F6uTymrVjMbVst2CfQFM8 cdHDpfbb2ZnLQB/nKlVGqOW3GTlRvRDrMRa3juwqdBeO+cWR4vgdxt18f7sigCiM p+db8AHBzbHkzuVw7l1TQzigPyIE5xZ4WaqWyVD6//WcA+GLr6fIEC9ngokQhgdT IkjGFrnHNiurGg== -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:29 2026 by rpki-client