This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json) Hash identifier: WqLCtqTuNg6NNYuhYIfE7RruJVVhFlsDEzc+7QGyALc= Subject key identifier: BE:B9:CE:5D:04:1E:D3:46:94:DA:9F:34:36:F9:03:8F:B6:C1:78:D5 Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0 Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0 Certificate serial: 019BD65871948DDA3595A0BD4F9254BEF61C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft Manifest number: 0C1E Signing time: Mon 19 Jan 2026 13:01:18 +0000 Manifest this update: Mon 19 Jan 2026 13:01:18 +0000 Manifest next update: Tue 20 Jan 2026 13:01:18 +0000 Files and hashes: 1: LW_Y7EoDhmP24HEw6pTq_ypKuxA.roa (hash: dMTZ+onbRLoDPfo9xvgH1qIGCGHl9TZqheiKOL3A8vg=) 2: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: RFu04jaa3BIUB3vQ+G5LPkpJ3KBRpeZdifWe/3zFYMc=) 3: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=) 4: ybvBdzL7WOHo2RTEpKPBJDfbq0U.roa (hash: eJsgTWOdAhxNxeLst/bLBwWiWh2T18RO5lJ0bMj06p8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:58:71:94:8d:da:35:95:a0:bd:4f:92:54:be:f6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0 Validity Not Before: Jan 19 13:01:18 2026 GMT Not After : Jan 20 13:01:18 2026 GMT Subject: CN=beb9ce5d041ed34694da9f3436f9038fb6c178d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:91:87:e6:53:79:ce:8d:63:c4:e5:ed:90: 70:28:40:c2:bc:5b:04:0d:cf:32:b1:56:67:19:92: f6:a6:2a:f6:b9:2e:e1:46:da:49:89:2a:62:eb:b7: 06:8e:80:82:8a:de:fa:72:fd:16:53:0c:68:19:48: 3c:40:18:e9:c4:73:c8:24:15:1c:aa:58:18:0c:97: cf:cc:93:c8:78:79:79:ed:01:89:fe:43:54:8a:24: 2a:a6:7d:14:a8:4e:90:cd:fb:31:c6:36:a6:8e:b4: 5a:e7:5c:9e:b8:bd:a8:7c:7a:9b:da:1b:05:52:c1: b7:9f:73:c4:f7:12:9c:24:e7:b2:14:b0:e3:64:87: c2:80:c8:0c:8e:f6:00:4c:27:8a:01:7a:51:7a:84: 13:36:bb:57:1b:d9:a6:9e:f5:05:ea:33:fd:a7:41: 63:16:4a:d2:f2:49:14:46:2b:7f:8d:a3:f3:17:b5: bf:0a:fc:85:04:36:63:7f:3d:77:6a:c0:85:bc:a9: 6d:13:94:0a:27:31:1e:b4:db:df:99:dd:7c:3c:2d: 93:94:5a:92:69:de:91:f4:23:15:c4:f7:43:23:d5: fb:59:88:0d:a0:a2:6d:c0:53:87:39:22:30:1f:ac: aa:88:b4:a4:87:1c:50:24:69:32:d9:b4:ad:66:c0: ea:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B9:CE:5D:04:1E:D3:46:94:DA:9F:34:36:F9:03:8F:B6:C1:78:D5 X509v3 Authority Key Identifier: keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:d4:90:01:10:8e:cc:42:86:d0:32:51:7a:8a:a2:ba:b3:99: 25:27:e4:5e:63:03:48:2a:fe:a9:a2:68:b7:60:39:15:61:9a: c4:27:68:85:da:cc:14:5d:07:81:b7:41:d0:91:fd:a2:f8:07: 6f:eb:b3:ad:c9:5f:4c:5e:38:df:83:ed:6c:8b:fb:9b:aa:4a: a7:37:f6:c3:ed:69:91:4f:54:5c:29:53:df:88:35:08:fe:27: ca:42:2d:54:05:af:9d:d4:df:1a:eb:4c:3b:d6:cd:bd:57:68: d7:32:35:51:8b:41:d5:52:71:2d:17:c6:64:a6:d2:03:52:48: c2:7b:9d:4c:c1:aa:c1:18:5e:74:cd:39:b0:c8:76:77:75:e1: 9f:4a:5a:1b:eb:6b:de:56:58:3a:8f:f7:d9:f9:62:e2:94:b3: 1f:97:a5:4a:35:d3:40:ff:b1:0c:09:78:30:f6:34:2a:32:75: 97:b3:0c:79:7d:09:33:6d:4a:7d:7f:b5:99:8b:db:d6:94:bd: 27:7c:e3:f0:39:90:9d:07:d7:7b:5c:07:6b:7b:a7:f0:06:0c: 7e:e4:f5:f2:07:b1:0c:93:65:50:03:90:4d:58:d7:7a:49:de: cf:63:d8:e0:ad:50:62:95:e9:12:bf:1b:58:68:93:4d:ef:8c: f2:fb:88:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvWWHGUjdo1laC9T5JUvvYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1 MWRlZDAwHhcNMjYwMTE5MTMwMTE4WhcNMjYwMTIwMTMwMTE4WjAzMTEwLwYDVQQD EyhiZWI5Y2U1ZDA0MWVkMzQ2OTRkYTlmMzQzNmY5MDM4ZmI2YzE3OGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAORh+ZTec6NY8Tl7ZBwKEDCvFsE Dc8ysVZnGZL2pir2uS7hRtpJiSpi67cGjoCCit76cv0WUwxoGUg8QBjpxHPIJBUc qlgYDJfPzJPIeHl57QGJ/kNUiiQqpn0UqE6QzfsxxjamjrRa51yeuL2ofHqb2hsF UsG3n3PE9xKcJOeyFLDjZIfCgMgMjvYATCeKAXpReoQTNrtXG9mmnvUF6jP9p0Fj FkrS8kkURit/jaPzF7W/CvyFBDZjfz13asCFvKltE5QKJzEetNvfmd18PC2TlFqS ad6R9CMVxPdDI9X7WYgNoKJtwFOHOSIwH6yqiLSkhxxQJGky2bStZsDqgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL65zl0EHtNGlNqfNDb5A4+2wXjVMB8GA1UdIwQY MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt MWNhZGE2ZThiMWE5LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5 LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5dSQARCO zEKG0DJReoqiurOZJSfkXmMDSCr+qaJot2A5FWGaxCdohdrMFF0HgbdB0JH9ovgH b+uzrclfTF4434PtbIv7m6pKpzf2w+1pkU9UXClT34g1CP4nykItVAWvndTfGutM O9bNvVdo1zI1UYtB1VJxLRfGZKbSA1JIwnudTMGqwRhedM05sMh2d3Xhn0paG+tr 3lZYOo/32fli4pSzH5elSjXTQP+xDAl4MPY0KjJ1l7MMeX0JM21KfX+1mYvb1pS9 J3zj8DmQnQfXe1wHa3un8AYMfuT18gexDJNlUAOQTVjXeknez2PY4K1QYpXpEr8b WGiTTe+M8vuInQ== -----END CERTIFICATE-----Generated at Mon Jan 19 18:23:30 2026 by rpki-client