This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft File: nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json) Hash identifier: Dkfb3SVkD1ACkYnO3W/I43YOWjSNpKX5EUIsZWv1E/E= Subject key identifier: 42:7C:81:6C:8E:50:3F:40:E8:54:5E:79:B4:A5:25:87:53:57:A6:5F Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Certificate serial: 019BD98FD9FF577150421D88B20A9CDDBB66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft Manifest number: 111D Signing time: Tue 20 Jan 2026 04:00:41 +0000 Manifest this update: Tue 20 Jan 2026 04:00:41 +0000 Manifest next update: Wed 21 Jan 2026 04:00:41 +0000 Files and hashes: 1: QXvdf-kfkCqDOGFDPxtMYLWrQHI.roa (hash: f3NerkrqCiw7WLEljVvu/M9+wfwW4SsFhdBrrw3Fl+8=) 2: U7oUIwqNkAcWng1AoQ2yRuNMwRo.roa (hash: jc+b8+PFodDUod3IoDVdMM++eET9wVKeCNE2IXdwBOs=) 3: UT82bVvbFZN0Klu1mqOTYQBNxWw.roa (hash: oyZ/B5zzSvaRc9Ctci5GyXXQUAialxundovqq61f2VY=) 4: Ujv5tUYWGeiVs_R4Bl0O6cV6CPU.roa (hash: T3NFEwCtciElA5xvLnKd1BMF5VD6hCHMxPdJ+yTHW8k=) 5: f3c-Bx8EM1DQdQw259Ys4FfCp1o.roa (hash: QWEHUEuCQFEx3Ifs/5uJ3ysgwmoEufGpwhglHF6YQdo=) 6: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: +2yQ/01AX33ClnYjWtASgWQtFf0QX6pno6jvcQkF+Yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:8f:d9:ff:57:71:50:42:1d:88:b2:0a:9c:dd:bb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Validity Not Before: Jan 20 04:00:41 2026 GMT Not After : Jan 21 04:00:41 2026 GMT Subject: CN=427c816c8e503f40e8545e79b4a525875357a65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:e8:af:68:e3:d7:8f:5a:62:26:6d:4b:5b: 4b:9e:bc:79:d9:7e:7c:11:62:3d:19:8e:d4:97:bc: 0c:75:9c:5a:19:49:48:24:4a:1a:08:0f:98:95:b8: 2d:ad:95:34:b3:f3:b4:a9:26:eb:11:07:36:18:54: 68:96:a3:14:2c:fe:07:31:e7:80:26:75:93:26:db: 5a:f2:73:a2:53:83:04:c2:a9:f4:9b:f9:3b:d6:66: 79:dd:e8:67:8f:8e:43:4f:53:38:01:4c:c2:66:92: 45:df:b0:d4:b9:3b:60:9d:0b:52:c6:21:9a:f1:76: bd:c3:00:36:4a:28:24:77:6b:c8:50:5a:04:86:c9: 95:43:95:29:4f:7c:61:5a:81:d9:86:6d:ac:2f:63: 0a:9b:9c:af:20:27:19:d5:d8:83:6b:6f:22:35:d0: 1e:ad:02:ba:d0:cd:ef:24:dc:a9:29:84:28:28:d6: c6:c4:95:42:39:c7:41:df:90:9c:a2:92:eb:ca:bc: 47:d0:c8:38:51:36:66:7a:3f:e6:2e:c8:06:59:2f: 3d:e5:49:f7:c1:32:ca:f7:2a:ae:07:2b:ee:30:d0: 4a:14:a4:d8:62:5d:25:8c:47:33:eb:2c:36:ab:d2: 55:47:22:55:65:0e:65:20:f1:bf:e5:11:1f:a8:2d: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7C:81:6C:8E:50:3F:40:E8:54:5E:79:B4:A5:25:87:53:57:A6:5F X509v3 Authority Key Identifier: keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:97:60:a1:88:84:6c:4f:54:a7:f2:14:80:ca:7d:9d:db:3f: 11:f1:0f:03:6c:0e:7b:06:90:f4:51:af:2d:5b:bd:24:e8:b7: 56:3e:8c:5e:64:bd:ba:ec:09:a9:a0:16:92:30:c4:90:8d:58: bd:9b:89:c3:33:42:03:69:02:2d:02:29:27:a7:df:5d:62:e3: a8:66:1b:f2:b9:03:da:57:9e:ea:0d:7d:44:d4:8e:53:8c:f5: 35:94:25:18:38:63:2e:4a:32:d0:6d:4c:88:e6:b4:e1:d5:1a: 8f:90:fb:3d:dc:0a:01:3e:c3:f3:65:04:b8:5e:e6:21:7a:22: ee:f6:0a:ce:64:6b:76:0a:ab:b5:f0:d8:a4:bd:bf:e7:45:29: 70:3b:3a:40:cc:b9:af:a2:ee:06:d0:41:3c:fe:71:82:88:23: a5:59:48:1b:39:28:77:97:43:bd:d4:b6:fc:b5:7b:4e:4c:68: 2f:b5:20:e4:b1:0a:8e:35:ce:35:fb:1b:ee:c3:d4:0b:d2:0f: 11:d3:db:3f:43:82:97:b9:7f:81:7c:73:bf:8a:3b:fc:be:27: db:ac:dd:37:49:a4:55:21:37:34:14:37:04:18:ec:59:67:84: 92:be:dc:4b:5d:4a:eb:46:0e:ba:a7:b3:b4:1c:b8:09:f2:c6: 2f:3a:bf:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZj9n/V3FQQh2Isgqc3btmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOGNkN2Q2YTQxMDU3NTBiZjg5NzVhN2QwYjk2Nzk0YzFl ZmU2MjIwHhcNMjYwMTIwMDQwMDQxWhcNMjYwMTIxMDQwMDQxWjAzMTEwLwYDVQQD Eyg0MjdjODE2YzhlNTAzZjQwZTg1NDVlNzliNGE1MjU4NzUzNTdhNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMvor2jj149aYiZtS1tLnrx52X58 EWI9GY7Ul7wMdZxaGUlIJEoaCA+YlbgtrZU0s/O0qSbrEQc2GFRolqMULP4HMeeA JnWTJtta8nOiU4MEwqn0m/k71mZ53ehnj45DT1M4AUzCZpJF37DUuTtgnQtSxiGa 8Xa9wwA2Sigkd2vIUFoEhsmVQ5UpT3xhWoHZhm2sL2MKm5yvICcZ1diDa28iNdAe rQK60M3vJNypKYQoKNbGxJVCOcdB35CcopLryrxH0Mg4UTZmej/mLsgGWS895Un3 wTLK9yquByvuMNBKFKTYYl0ljEcz6yw2q9JVRyJVZQ5lIPG/5REfqC1ckQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ8gWyOUD9A6FReebSlJYdTV6ZfMB8GA1UdIwQY MBaAFJ6M19akEFdQv4l1p9C5Z5TB7+YiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2Qt OGMyZGY1YTVjNmQ3LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2QtOGMyZGY1YTVjNmQ3 LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpdgoYiE bE9Up/IUgMp9nds/EfEPA2wOewaQ9FGvLVu9JOi3Vj6MXmS9uuwJqaAWkjDEkI1Y vZuJwzNCA2kCLQIpJ6ffXWLjqGYb8rkD2lee6g19RNSOU4z1NZQlGDhjLkoy0G1M iOa04dUaj5D7PdwKAT7D82UEuF7mIXoi7vYKzmRrdgqrtfDYpL2/50UpcDs6QMy5 r6LuBtBBPP5xgogjpVlIGzkod5dDvdS2/LV7TkxoL7Ug5LEKjjXONfsb7sPUC9IP EdPbP0OCl7l/gXxzv4o7/L4n26zdN0mkVSE3NBQ3BBjsWWeEkr7cS11K60YOuqez tBy4CfLGLzq/dA== -----END CERTIFICATE-----Generated at Tue Jan 20 07:36:51 2026 by rpki-client