This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json) Hash identifier: yJiC5tmE8ncNhVHXoWJYcfHYUgYHveAaTdbdUFEEW6U= Subject key identifier: 53:6C:0D:11:CB:AA:AB:3B:1A:A0:A2:54:61:84:54:CF:F1:D7:55:D9 Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39 Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939 Certificate serial: 019C1DCCBF2D9B2ABD02BC894BC22809FA4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft Manifest number: 1800 Signing time: Mon 02 Feb 2026 10:01:23 +0000 Manifest this update: Mon 02 Feb 2026 10:01:23 +0000 Manifest next update: Tue 03 Feb 2026 10:01:23 +0000 Files and hashes: 1: Cu4pJx-r5WHHtQlLqPIl7Qbn6a8.roa (hash: nvdmwUw2DJYlyGm2Jpi5RTC+E3z4Xl1tYxTpqZlijT8=) 2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: 4JI2qSD//e1g/Ppp6OKHVHYU0QuITJwJQYftES3Q75o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:cc:bf:2d:9b:2a:bd:02:bc:89:4b:c2:28:09:fa:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939 Validity Not Before: Feb 2 10:01:23 2026 GMT Not After : Feb 3 10:01:23 2026 GMT Subject: CN=536c0d11cbaaab3b1aa0a254618454cff1d755d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:2a:ef:98:05:61:9d:11:e2:e9:39:20:44: 5f:36:ea:35:f7:da:47:68:40:8c:03:9c:d5:a4:f7: 53:be:4b:60:59:61:c1:a3:88:a8:2e:0a:e8:7a:83: 0d:66:ff:5c:b2:54:9e:f5:e8:b2:05:79:f2:99:84: ad:cf:a8:2c:00:b2:35:cd:0f:a7:9d:4c:62:a3:b8: 73:17:ff:86:a0:cd:1e:e1:4f:31:d8:93:b5:ab:49: f0:42:bd:60:00:de:30:71:35:47:ee:f4:6d:07:b3: f9:0c:ae:56:af:ab:9d:3c:c5:9d:61:24:f9:3c:3a: 76:7d:19:1d:43:cd:85:00:51:2b:06:cf:69:40:ae: 48:c7:3c:75:2d:ec:a9:c7:c3:b6:14:e7:28:a8:3a: 1b:9a:65:ae:26:fd:72:df:a6:90:92:06:20:a5:77: 28:a0:49:09:ef:47:54:95:c8:b0:58:cb:59:0a:18: ab:1f:c0:07:b3:cd:e8:92:da:69:99:96:a5:d1:04: ce:96:43:f1:73:91:1f:08:24:ad:9e:86:7a:d1:69: 8d:92:5b:bd:42:d5:82:1f:1f:8a:ee:e6:c7:10:b2: 1a:cc:f4:be:33:b9:fd:91:ec:fe:39:41:ef:c7:37: 51:eb:b0:3f:ee:32:2e:5a:c9:fe:e6:d6:45:8a:ae: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6C:0D:11:CB:AA:AB:3B:1A:A0:A2:54:61:84:54:CF:F1:D7:55:D9 X509v3 Authority Key Identifier: keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:de:23:29:0c:9c:5c:69:6d:6b:3d:22:09:53:b7:2c:de:bc: ad:78:ce:8d:f7:00:0a:ad:26:31:99:0f:86:0a:cd:71:ee:87: f5:70:3c:79:e8:e4:95:71:07:9c:37:3e:27:0c:4f:d6:62:41: 55:e0:0b:50:19:d5:1a:09:79:b1:83:90:c8:9e:28:97:95:ff: 9e:2c:98:4f:f5:0f:a6:4a:15:b6:3e:25:21:f6:fa:ec:1a:ac: eb:39:d1:aa:13:9a:47:96:b9:44:66:a8:31:17:99:3f:ed:90: 18:2c:3e:b2:b3:16:2d:9f:7e:34:0b:f8:9e:e6:e6:56:3d:32: d8:0a:7a:60:0e:2f:64:5b:2c:91:81:cd:64:40:98:3c:0d:1e: cc:29:a8:e2:ca:1a:e9:92:08:ef:ce:5b:fb:25:31:fe:59:29: 94:50:ee:33:91:6d:bc:f5:80:cc:15:08:1b:20:d8:eb:f7:78: 88:bb:25:3e:8e:ef:50:08:92:19:20:b1:a8:9d:fe:84:11:f7: cc:ac:20:fe:0c:58:94:5f:27:bc:5e:cc:54:1a:aa:a6:69:8a: 76:78:21:01:1f:00:94:a3:d0:a3:d2:46:90:88:71:46:fe:f1: fc:57:61:e6:80:30:90:79:95:df:58:ce:7a:30:f1:47:2c:2f: cc:df:94:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdzL8tmyq9AryJS8IoCfpLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNzQxMzViYjA3YzY1NDBjZDMwN2JkYTA4Y2EwNjc0YmM4 NGM5MzkwHhcNMjYwMjAyMTAwMTIzWhcNMjYwMjAzMTAwMTIzWjAzMTEwLwYDVQQD Eyg1MzZjMGQxMWNiYWFhYjNiMWFhMGEyNTQ2MTg0NTRjZmYxZDc1NWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j4q75gFYZ0R4uk5IERfNuo199pH aECMA5zVpPdTvktgWWHBo4ioLgroeoMNZv9cslSe9eiyBXnymYStz6gsALI1zQ+n nUxio7hzF/+GoM0e4U8x2JO1q0nwQr1gAN4wcTVH7vRtB7P5DK5Wr6udPMWdYST5 PDp2fRkdQ82FAFErBs9pQK5Ixzx1Leypx8O2FOcoqDobmmWuJv1y36aQkgYgpXco oEkJ70dUlciwWMtZChirH8AHs83oktppmZal0QTOlkPxc5EfCCStnoZ60WmNklu9 QtWCHx+K7ubHELIazPS+M7n9kez+OUHvxzdR67A/7jIuWsn+5tZFiq5GcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNsDRHLqqs7GqCiVGGEVM/x11XZMB8GA1UdIwQY MBaAFJ50E1uwfGVAzTB72gjKBnS8hMk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQt NWRjODBmYWVkMmRjLzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQtNWRjODBmYWVkMmRj LzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB94jKQyc XGltaz0iCVO3LN68rXjOjfcACq0mMZkPhgrNce6H9XA8eejklXEHnDc+JwxP1mJB VeALUBnVGgl5sYOQyJ4ol5X/niyYT/UPpkoVtj4lIfb67Bqs6znRqhOaR5a5RGao MReZP+2QGCw+srMWLZ9+NAv4nubmVj0y2Ap6YA4vZFsskYHNZECYPA0ezCmo4soa 6ZII785b+yUx/lkplFDuM5FtvPWAzBUIGyDY6/d4iLslPo7vUAiSGSCxqJ3+hBH3 zKwg/gxYlF8nvF7MVBqqpmmKdnghAR8AlKPQo9JGkIhxRv7x/Fdh5oAwkHmV31jO ejDxRywvzN+U0w== -----END CERTIFICATE-----Generated at Mon Feb 2 15:46:48 2026 by rpki-client