This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: C74fnzGR9Nco0nO0mkEI0YeCXdUBm7zJuYJBc5wTEOw= Subject key identifier: E0:AA:31:FB:C6:A6:BC:73:38:8F:30:27:D9:BA:32:5A:4E:FE:2D:93 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019BFCF85CCF22B504CA5765463F66B9470A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 1527 Signing time: Tue 27 Jan 2026 01:01:33 +0000 Manifest this update: Tue 27 Jan 2026 01:01:33 +0000 Manifest next update: Wed 28 Jan 2026 01:01:33 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: VK+B+VsTH0QR9V3Keeu9QB68en2ddEMI0i2zD9FVg0k=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 01:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:5c:cf:22:b5:04:ca:57:65:46:3f:66:b9:47:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Jan 27 01:01:33 2026 GMT Not After : Jan 28 01:01:33 2026 GMT Subject: CN=e0aa31fbc6a6bc73388f3027d9ba325a4efe2d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:cb:54:38:1a:4c:b1:4a:69:b9:5b:c4:ca: e4:bf:ba:a1:05:5c:81:97:fa:d3:ff:e5:60:d1:e6: 68:cd:3f:aa:af:65:0c:9f:a9:15:2b:f6:dd:a0:84: 7a:d7:d7:ab:15:21:c3:d4:6f:d1:a5:2b:cc:46:bd: 0c:b9:44:ec:a2:77:e1:b6:03:9b:13:53:b1:14:1b: 39:0e:22:07:8e:d9:f6:12:65:b9:29:0b:02:55:c2: 6e:49:4a:3a:9a:eb:7f:17:c9:0d:07:9f:c8:a2:b7: 52:bc:7b:38:09:a4:b8:c6:ee:5b:6b:76:47:05:7d: 9e:9c:82:a9:7a:24:66:88:61:d9:10:80:4c:83:cb: 74:59:89:df:c6:fe:37:22:a0:af:ef:ca:34:ca:39: f5:e3:bd:f8:a0:5b:e6:8d:fd:00:29:1f:4e:47:58: 72:a9:55:18:cc:73:d9:dd:a8:52:bd:ac:13:8a:3f: 34:ac:58:0b:5d:16:5d:4a:5e:6b:63:b7:37:06:83: 54:e8:9d:ad:e6:bd:21:85:ea:f0:76:f9:a2:c9:48: 28:0b:6c:24:40:1c:a8:71:63:c6:b1:ea:ef:20:6c: 26:e4:f8:81:93:a5:07:3f:a9:2f:d9:40:7a:27:a4: f3:93:d1:96:15:db:45:3a:72:71:2f:2b:2b:58:a1: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AA:31:FB:C6:A6:BC:73:38:8F:30:27:D9:BA:32:5A:4E:FE:2D:93 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2a:a5:78:df:b4:9d:f5:28:a4:96:9b:31:fb:58:77:89:87: 22:8f:88:0a:ab:9b:58:f0:f6:32:94:76:cb:25:e7:04:ce:f3: 22:d3:96:13:09:de:6c:d2:91:3f:8d:82:e9:d4:4e:7e:76:8e: a2:06:23:18:03:25:01:1b:91:83:9d:f8:90:11:06:2f:80:ea: 3b:f8:d4:2e:c0:81:65:26:f2:36:cc:bd:0f:90:4c:51:25:91: b1:33:79:2f:6e:ab:d2:7d:7f:37:c4:9b:63:bb:bc:30:c4:83: 2b:cf:78:5f:6e:66:f5:33:3a:89:3e:43:bc:05:34:3d:0d:af: 6f:da:28:49:88:9e:dd:dd:e7:9d:55:16:cf:49:26:21:60:5d: fb:1a:88:4e:c5:ec:4a:12:8a:57:33:0a:38:e2:5f:16:78:c8: dc:a1:12:05:1c:e5:0e:d9:e5:0c:08:b4:8f:b7:34:db:a5:b2: 9b:2d:e4:86:99:c2:5f:bb:d3:54:7e:7e:83:bb:d0:ec:c8:e2: f3:a1:7a:7a:7e:4b:fd:a2:40:44:be:a7:e8:64:99:cc:4c:bd: 2f:a1:96:b9:59:d1:eb:42:9a:32:5d:de:a9:ad:ee:4d:15:72: 92:b7:07:97:1b:ba:7e:0f:ce:0b:2e:f1:f2:3f:82:23:af:9b: b6:9e:e1:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+FzPIrUEyldlRj9muUcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwMTI3MDEwMTMzWhcNMjYwMTI4MDEwMTMzWjAzMTEwLwYDVQQD EyhlMGFhMzFmYmM2YTZiYzczMzg4ZjMwMjdkOWJhMzI1YTRlZmUyZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo3LVDgaTLFKablbxMrkv7qhBVyB l/rT/+Vg0eZozT+qr2UMn6kVK/bdoIR619erFSHD1G/RpSvMRr0MuUTsonfhtgOb E1OxFBs5DiIHjtn2EmW5KQsCVcJuSUo6mut/F8kNB5/IordSvHs4CaS4xu5ba3ZH BX2enIKpeiRmiGHZEIBMg8t0WYnfxv43IqCv78o0yjn14734oFvmjf0AKR9OR1hy qVUYzHPZ3ahSvawTij80rFgLXRZdSl5rY7c3BoNU6J2t5r0hherwdvmiyUgoC2wk QByocWPGservIGwm5PiBk6UHP6kv2UB6J6Tzk9GWFdtFOnJxLysrWKEUuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCqMfvGprxzOI8wJ9m6MlpO/i2TMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiqleN+0 nfUopJabMftYd4mHIo+ICqubWPD2MpR2yyXnBM7zItOWEwnebNKRP42C6dROfnaO ogYjGAMlARuRg534kBEGL4DqO/jULsCBZSbyNsy9D5BMUSWRsTN5L26r0n1/N8Sb Y7u8MMSDK894X25m9TM6iT5DvAU0PQ2vb9ooSYie3d3nnVUWz0kmIWBd+xqITsXs ShKKVzMKOOJfFnjI3KESBRzlDtnlDAi0j7c026Wymy3khpnCX7vTVH5+g7vQ7Mji 86F6en5L/aJARL6n6GSZzEy9L6GWuVnR60KaMl3eqa3uTRVykrcHlxu6fg/OCy7x 8j+CI6+btp7h7Q== -----END CERTIFICATE-----Generated at Tue Jan 27 11:15:55 2026 by rpki-client