This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json) Hash identifier: olHHLCrKwnvhJlo9bO7xFqB0+VfYXG6ZG+om0J0EgCM= Subject key identifier: 42:6D:39:D7:E9:2A:E5:EA:51:B3:7B:87:FA:CB:69:37:2F:9E:56:9A Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55 Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55 Certificate serial: 019BFA2D6D6A15A4F75CD346C5291EF5E0CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft Manifest number: 16B3 Signing time: Mon 26 Jan 2026 12:00:39 +0000 Manifest this update: Mon 26 Jan 2026 12:00:39 +0000 Manifest next update: Tue 27 Jan 2026 12:00:39 +0000 Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: SmhBjBsdR8luw83X/QyAG4WwNMuD5kSBz1Za6fWw4F8=) 2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:6d:6a:15:a4:f7:5c:d3:46:c5:29:1e:f5:e0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55 Validity Not Before: Jan 26 12:00:39 2026 GMT Not After : Jan 27 12:00:39 2026 GMT Subject: CN=426d39d7e92ae5ea51b37b87facb69372f9e569a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ac:72:e3:f1:bb:a3:ec:dd:76:82:17:82:9f: e8:0b:11:91:28:62:21:3d:b3:16:ba:30:f4:81:45: b2:9e:88:0c:3c:18:18:de:e9:12:68:e8:d8:90:82: d1:c3:0e:5b:5b:cd:1e:18:a2:22:f6:b5:d1:17:4a: 4d:5c:9a:a9:3d:3d:2a:13:b8:71:41:64:cd:f1:c1: 33:0b:8b:9e:ed:20:8b:ee:b4:2a:49:98:df:60:30: ce:f3:2c:34:27:ea:a5:7c:34:65:26:ee:eb:ad:68: 8c:8d:e4:13:6d:dd:46:c4:48:af:b2:01:a8:9d:fb: f1:35:f1:06:31:ba:0d:d1:61:3f:a4:a0:ce:cc:9b: 93:c5:97:c2:44:f2:5b:b7:a2:c7:35:d5:15:97:b1: 8b:63:c9:c8:46:f8:95:d8:2f:3b:04:ca:7f:95:35: b0:5c:2b:e2:51:df:09:d2:fb:6b:a8:72:b5:a0:0a: e9:5e:6d:b5:95:4b:83:db:6e:44:2c:c9:bd:6f:6a: 0c:1c:36:e9:e0:88:81:13:1d:30:60:65:a1:45:4d: e5:42:52:00:1a:58:44:a8:1c:35:60:42:52:64:77: d7:08:1e:9f:46:4f:b6:22:bb:c4:ff:79:9f:fb:31: 0c:d3:83:5d:db:04:f6:bf:96:4a:30:d9:66:e8:ac: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6D:39:D7:E9:2A:E5:EA:51:B3:7B:87:FA:CB:69:37:2F:9E:56:9A X509v3 Authority Key Identifier: keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:31:54:99:f1:b8:3d:62:ae:5f:d3:42:91:d6:f1:40:19:5d: 22:d4:bc:b4:a9:5c:60:28:bd:49:e0:25:82:1a:64:f4:95:20: 60:ca:e1:c0:40:de:69:55:da:75:93:20:fd:63:2f:05:ba:33: d6:72:4a:a1:27:bd:aa:30:57:b6:09:4d:a9:d2:35:45:4d:f1: 4e:a8:51:c9:d2:f6:16:2c:8b:ad:1c:29:d7:62:2c:95:b8:f4: da:41:c9:d9:1d:d3:1b:a1:ea:cb:32:08:dd:5f:d8:d2:3e:b5: d9:56:95:51:17:d3:14:31:b7:e9:a7:cb:64:82:d6:d4:47:9e: dd:f8:da:d1:4d:fc:cd:04:8b:cd:7b:a2:5f:98:6e:1d:35:46: f6:78:d9:6b:c3:59:39:e0:15:6c:65:5f:91:48:1d:0b:aa:ea: ef:27:1c:26:a2:54:94:19:9e:a7:b0:d0:4b:70:d7:76:7d:11: 65:2e:3d:b3:40:95:3f:79:c4:60:f3:f7:a1:5c:f9:ba:e4:18: 46:d7:88:95:36:92:f4:27:43:63:76:54:77:1c:9d:dd:02:db: ef:de:35:d5:3f:39:18:48:ad:36:62:84:a7:98:4c:a4:42:61: 02:85:57:59:f6:80:34:80:6c:fe:8a:41:ca:0c:b0:32:5d:cc: 29:97:85:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LW1qFaT3XNNGxSke9eDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MDA0NWY3ZDgzY2ViMTMwZDhkNjk1ZmZlN2Q0M2RiMzgx OWRlNTUwHhcNMjYwMTI2MTIwMDM5WhcNMjYwMTI3MTIwMDM5WjAzMTEwLwYDVQQD Eyg0MjZkMzlkN2U5MmFlNWVhNTFiMzdiODdmYWNiNjkzNzJmOWU1NjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06xy4/G7o+zddoIXgp/oCxGRKGIh PbMWujD0gUWynogMPBgY3ukSaOjYkILRww5bW80eGKIi9rXRF0pNXJqpPT0qE7hx QWTN8cEzC4ue7SCL7rQqSZjfYDDO8yw0J+qlfDRlJu7rrWiMjeQTbd1GxEivsgGo nfvxNfEGMboN0WE/pKDOzJuTxZfCRPJbt6LHNdUVl7GLY8nIRviV2C87BMp/lTWw XCviUd8J0vtrqHK1oArpXm21lUuD225ELMm9b2oMHDbp4IiBEx0wYGWhRU3lQlIA GlhEqBw1YEJSZHfXCB6fRk+2IrvE/3mf+zEM04Nd2wT2v5ZKMNlm6KwmkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJtOdfpKuXqUbN7h/rLaTcvnlaaMB8GA1UdIwQY MBaAFDUARffYPOsTDY1pX/59Q9s4Gd5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQt NDhlMzBlMmY3YzM2LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQtNDhlMzBlMmY3YzM2 LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjFUmfG4 PWKuX9NCkdbxQBldItS8tKlcYCi9SeAlghpk9JUgYMrhwEDeaVXadZMg/WMvBboz 1nJKoSe9qjBXtglNqdI1RU3xTqhRydL2FiyLrRwp12Islbj02kHJ2R3TG6HqyzII 3V/Y0j612VaVURfTFDG36afLZILW1Eee3fja0U38zQSLzXuiX5huHTVG9njZa8NZ OeAVbGVfkUgdC6rq7yccJqJUlBmep7DQS3DXdn0RZS49s0CVP3nEYPP3oVz5uuQY RteIlTaS9CdDY3ZUdxyd3QLb79411T85GEitNmKEp5hMpEJhAoVXWfaANIBs/opB ygywMl3MKZeFsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 21:02:12 2026 by rpki-client