This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json) Hash identifier: r+4+VpD+N1554sjqOCLAo8lHZR+RxQDpG1DYi60HpoU= Subject key identifier: 0D:1B:6B:D3:B3:E9:41:4B:6C:CD:D4:B2:74:14:43:DB:01:5A:67:AB Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52 Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152 Certificate serial: 019C051F60756360E6C955113676BA538818 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft Manifest number: 16FD Signing time: Wed 28 Jan 2026 15:01:08 +0000 Manifest this update: Wed 28 Jan 2026 15:01:08 +0000 Manifest next update: Thu 29 Jan 2026 15:01:08 +0000 Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=) 2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: 3o/Pgn9GRfpMgcCrH4drNbJD+LfROyooRR7R2Iw7cIY=) 3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:1f:60:75:63:60:e6:c9:55:11:36:76:ba:53:88:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152 Validity Not Before: Jan 28 15:01:08 2026 GMT Not After : Jan 29 15:01:08 2026 GMT Subject: CN=0d1b6bd3b3e9414b6ccdd4b2741443db015a67ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:dc:ba:1f:cf:fe:a8:40:26:0e:bb:6c:d0: 75:f2:f5:d5:94:ef:0a:e2:a2:c5:0d:ef:a7:0e:6e: 06:a6:95:2d:58:1c:4b:1a:ea:0e:76:17:f8:84:1e: 08:8c:04:87:fb:39:e1:73:02:33:75:92:b4:9f:44: 6d:a4:17:54:04:6b:c8:39:49:c2:b0:40:86:88:d0: 19:e0:17:c1:4a:79:d3:6b:f1:45:78:5c:2e:0a:1f: 15:c8:81:da:98:67:42:e1:d9:d8:c2:17:ae:5b:29: 34:8c:4d:70:dc:fe:a7:00:63:61:d8:5d:f5:e3:55: d6:6f:96:d6:96:2b:27:c7:2a:9b:8d:66:f0:b8:97: 19:f4:d1:3c:c3:b3:c9:4f:ee:3f:2a:a0:0e:ef:89: 72:58:7d:fd:92:19:09:57:8c:b1:2c:41:b8:a0:64: 83:1c:15:8b:66:dc:3c:96:ab:08:a2:82:c1:88:41: 01:29:12:b4:c5:a4:cd:f1:82:8b:93:58:bc:e4:b0: 65:a8:c5:ff:2f:7c:95:dc:a4:ff:11:4b:76:0b:31: 50:76:69:73:32:2a:77:3d:e4:98:a4:35:84:3c:75: 88:38:e3:bf:3e:e9:23:51:cd:2d:8d:f8:8e:22:9f: d6:cf:e7:0a:92:a8:a0:d1:13:bd:1c:a0:23:93:54: 9e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1B:6B:D3:B3:E9:41:4B:6C:CD:D4:B2:74:14:43:DB:01:5A:67:AB X509v3 Authority Key Identifier: keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3c:33:f4:0b:81:7d:f0:f2:50:5d:76:4d:58:26:76:8f:e9: cf:3b:6e:53:05:c7:e4:aa:09:53:09:cb:71:d6:07:9b:ea:e4: 17:7b:bf:97:19:97:7e:c4:e1:65:d6:c1:91:06:e2:66:cf:1c: c4:19:e2:f5:76:21:b0:5e:eb:94:53:03:ac:c0:2a:ce:72:e3: c0:13:3c:32:6c:22:34:33:07:95:2b:86:f7:d0:93:64:39:77: f2:eb:8e:9c:05:9f:02:75:c5:e0:ec:e8:6f:a4:26:b0:8a:28: 21:63:3c:1e:93:10:69:86:2e:e4:b4:4d:3c:e3:ca:5a:02:cf: c0:db:ea:be:d7:da:53:93:40:c0:1f:93:cd:ac:e2:a8:43:dd: 7a:b2:cb:a5:f6:91:d5:92:57:7a:01:1f:2d:69:65:54:50:e2: 9b:a5:37:1a:b5:4b:96:2e:56:3b:5c:55:aa:d4:d9:c0:44:b7: 81:c7:db:45:2b:81:ae:c2:f7:0c:ff:5d:e8:1a:da:df:21:50: f5:ea:9f:c8:ce:0c:3b:bb:65:13:c2:81:f5:8f:5b:31:99:87: 4d:55:0e:fc:fa:51:8e:83:a8:dc:65:68:0b:6b:81:f6:81:fb: 77:86:07:e2:77:0e:7d:16:f3:ec:cc:c1:ce:a6:5b:80:ba:56: 6f:31:62:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFH2B1Y2DmyVURNna6U4gYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTRlOTVkMmY0Y2MzNGE3Mzc2YjczYzBmMDM5YjNlMTU4 ZjUxNTIwHhcNMjYwMTI4MTUwMTA4WhcNMjYwMTI5MTUwMTA4WjAzMTEwLwYDVQQD EygwZDFiNmJkM2IzZTk0MTRiNmNjZGQ0YjI3NDE0NDNkYjAxNWE2N2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFjcuh/P/qhAJg67bNB18vXVlO8K 4qLFDe+nDm4GppUtWBxLGuoOdhf4hB4IjASH+znhcwIzdZK0n0RtpBdUBGvIOUnC sECGiNAZ4BfBSnnTa/FFeFwuCh8VyIHamGdC4dnYwheuWyk0jE1w3P6nAGNh2F31 41XWb5bWlisnxyqbjWbwuJcZ9NE8w7PJT+4/KqAO74lyWH39khkJV4yxLEG4oGSD HBWLZtw8lqsIooLBiEEBKRK0xaTN8YKLk1i85LBlqMX/L3yV3KT/EUt2CzFQdmlz Mip3PeSYpDWEPHWIOOO/PukjUc0tjfiOIp/Wz+cKkqig0RO9HKAjk1SeCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0ba9Oz6UFLbM3UsnQUQ9sBWmerMB8GA1UdIwQY MBaAFJ2k6V0vTMNKc3a3PA8Dmz4Vj1FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1Zjgt NTk1OTEzODllMjQyLzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1ZjgtNTk1OTEzODllMjQy LzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTwz9AuB ffDyUF12TVgmdo/pzztuUwXH5KoJUwnLcdYHm+rkF3u/lxmXfsThZdbBkQbiZs8c xBni9XYhsF7rlFMDrMAqznLjwBM8MmwiNDMHlSuG99CTZDl38uuOnAWfAnXF4Ozo b6QmsIooIWM8HpMQaYYu5LRNPOPKWgLPwNvqvtfaU5NAwB+TzaziqEPderLLpfaR 1ZJXegEfLWllVFDim6U3GrVLli5WO1xVqtTZwES3gcfbRSuBrsL3DP9d6Bra3yFQ 9eqfyM4MO7tlE8KB9Y9bMZmHTVUO/PpRjoOo3GVoC2uB9oH7d4YH4ncOfRbz7MzB zqZbgLpWbzFi1A== -----END CERTIFICATE-----Generated at Wed Jan 28 18:45:51 2026 by rpki-client