This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json) Hash identifier: RDkZ8qFWZFAjYdyXw3XYInvAEvKHt3ioSZMUjXfoVzc= Subject key identifier: 8C:F5:E7:C6:B9:7E:02:F2:D0:0E:5C:21:0E:C0:F0:9A:5E:98:6F:A6 Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa Certificate serial: 019C0DEB936916D2D307371857BCEA80E7B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft Manifest number: 17F8 Signing time: Fri 30 Jan 2026 08:01:08 +0000 Manifest this update: Fri 30 Jan 2026 08:01:08 +0000 Manifest next update: Sat 31 Jan 2026 08:01:08 +0000 Files and hashes: 1: 08LcrSM5Tgh5WrAx78MCyBcUuUI.roa (hash: K9ZScW16pprknJqQJ4Lzi9WnkmX54pE86HFlLQ5ZeK0=) 2: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=) 3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=) 4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=) 5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: MfKk8n2xcEEYtZ8h4K68SDn4BJRpqyU1By0pkr6plSg=) 6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=) 7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=) 8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=) 9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0d:eb:93:69:16:d2:d3:07:37:18:57:bc:ea:80:e7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa Validity Not Before: Jan 30 08:01:08 2026 GMT Not After : Jan 31 08:01:08 2026 GMT Subject: CN=8cf5e7c6b97e02f2d00e5c210ec0f09a5e986fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:f8:b3:c8:cf:e2:4e:a2:ae:54:bf:a6:bd: 98:42:35:b8:4a:fb:27:ab:47:59:a9:49:1b:2a:0e: 90:be:a0:02:e6:e9:1c:31:9a:07:30:de:d8:82:ab: 1a:7d:6b:13:35:6b:4b:00:28:a8:12:7e:fb:e8:74: bd:e5:09:86:00:ca:0f:c0:da:0b:24:12:59:19:2f: f3:89:3a:ca:d1:dd:76:f1:84:12:38:a3:9e:40:eb: 2a:c4:21:01:b2:57:66:95:00:d8:b7:3c:df:74:1a: db:9b:34:c9:81:73:a2:fa:05:f4:34:0c:be:dd:f4: c9:c6:d0:70:5d:90:b2:0c:76:aa:a2:dd:0b:72:39: ea:68:e2:93:b7:52:ed:43:e5:82:20:45:8e:f5:03: ff:f4:fa:fc:07:fa:3c:d9:fe:e0:20:e7:70:c5:8b: 2a:72:45:53:d4:40:c4:6b:0f:b3:fa:b9:c9:bf:d0: bf:f9:97:7d:69:cf:47:ea:be:51:74:43:8f:96:bc: 6b:82:fc:9d:9d:ce:ab:be:83:ff:d0:55:66:98:72: 84:17:5a:de:87:54:58:9b:f3:23:83:e2:bd:3b:b1: 12:e8:6d:5a:d7:a2:6f:d0:1e:22:9a:41:3f:f0:04: 05:96:45:4b:20:25:0b:30:d6:1d:96:8f:1e:a2:42: a7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F5:E7:C6:B9:7E:02:F2:D0:0E:5C:21:0E:C0:F0:9A:5E:98:6F:A6 X509v3 Authority Key Identifier: keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:21:8b:2a:df:4f:e9:18:47:de:f5:8f:ef:66:e8:80:4a:de: fd:a2:e1:67:8d:ac:3a:f7:41:b8:75:58:33:52:e4:7a:91:1c: 82:32:bc:f5:47:9b:c3:b3:be:c3:e7:ff:58:51:63:3d:ec:74: cd:e9:72:36:ca:0f:af:34:17:47:b3:7f:0c:e3:d9:fe:82:00: a9:98:4f:a9:09:c7:3d:84:62:fc:6e:91:ef:9e:05:cf:e1:5c: 8b:af:b3:8d:16:bc:f9:6d:c7:fa:b3:d0:a4:be:55:39:14:e2: e5:10:6d:bf:f6:18:43:d9:53:18:4c:f1:4d:01:8f:50:58:fb: 4f:e5:75:4f:4e:ea:77:59:e4:b0:7a:ca:b1:05:d1:66:d1:a5: 82:08:20:48:df:0a:04:71:8e:05:73:c7:cb:bc:f4:f6:6b:2f: 75:cb:da:28:ea:b3:76:6e:4b:b6:0b:2b:41:4f:8c:d0:e2:6b: ed:d4:b0:01:f3:d1:14:de:bc:b1:f8:91:3f:4a:c3:8f:01:19: 9f:14:58:31:83:a2:f8:8b:60:65:c7:d9:64:7e:79:db:31:af: b5:62:bc:41:25:ef:72:19:f2:c6:93:5b:0a:4b:a0:36:37:d9: 49:b4:82:7a:88:b6:8d:0e:09:c5:09:a9:80:9c:e6:b4:24:c7: a1:f5:5c:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwN65NpFtLTBzcYV7zqgOe1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh YmE5ZmEwHhcNMjYwMTMwMDgwMTA4WhcNMjYwMTMxMDgwMTA4WjAzMTEwLwYDVQQD Eyg4Y2Y1ZTdjNmI5N2UwMmYyZDAwZTVjMjEwZWMwZjA5YTVlOTg2ZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqX4s8jP4k6irlS/pr2YQjW4Svsn q0dZqUkbKg6QvqAC5ukcMZoHMN7YgqsafWsTNWtLACioEn776HS95QmGAMoPwNoL JBJZGS/ziTrK0d128YQSOKOeQOsqxCEBsldmlQDYtzzfdBrbmzTJgXOi+gX0NAy+ 3fTJxtBwXZCyDHaqot0LcjnqaOKTt1LtQ+WCIEWO9QP/9Pr8B/o82f7gIOdwxYsq ckVT1EDEaw+z+rnJv9C/+Zd9ac9H6r5RdEOPlrxrgvydnc6rvoP/0FVmmHKEF1re h1RYm/Mjg+K9O7ES6G1a16Jv0B4imkE/8AQFlkVLICULMNYdlo8eokKn+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIz158a5fgLy0A5cIQ7A8JpemG+mMB8GA1UdIwQY MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt NDM4NDNjMmU5NDNiLzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSGLKt9P 6RhH3vWP72bogEre/aLhZ42sOvdBuHVYM1LkepEcgjK89Uebw7O+w+f/WFFjPex0 zelyNsoPrzQXR7N/DOPZ/oIAqZhPqQnHPYRi/G6R754Fz+Fci6+zjRa8+W3H+rPQ pL5VORTi5RBtv/YYQ9lTGEzxTQGPUFj7T+V1T07qd1nksHrKsQXRZtGlggggSN8K BHGOBXPHy7z09msvdcvaKOqzdm5LtgsrQU+M0OJr7dSwAfPRFN68sfiRP0rDjwEZ nxRYMYOi+ItgZcfZZH552zGvtWK8QSXvchnyxpNbCkugNjfZSbSCeoi2jQ4JxQmp gJzmtCTHofVckg== -----END CERTIFICATE-----Generated at Fri Jan 30 17:19:50 2026 by rpki-client