This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json) Hash identifier: xXxj9n4B9nsSfoyrU2FxgQ/QrdLfUvMscgR8GO7WKdM= Subject key identifier: 02:82:DB:E7:8B:0B:42:C4:2D:EB:3E:93:27:17:61:E1:6A:2E:EF:1D Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb Certificate serial: 019C2171C83DCB28BA319552B7AE029419C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft Manifest number: 1801 Signing time: Tue 03 Feb 2026 03:00:30 +0000 Manifest this update: Tue 03 Feb 2026 03:00:30 +0000 Manifest next update: Wed 04 Feb 2026 03:00:30 +0000 Files and hashes: 1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=) 2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: FgG0Ds1US3E6AVCh7u+FbqR1OSegHfgc3MTevTZW17A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:21:71:c8:3d:cb:28:ba:31:95:52:b7:ae:02:94:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb Validity Not Before: Feb 3 03:00:30 2026 GMT Not After : Feb 4 03:00:30 2026 GMT Subject: CN=0282dbe78b0b42c42deb3e93271761e16a2eef1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:fb:c1:e9:9e:0f:b1:0c:33:f8:6d:8d:09: 74:3b:7e:8e:37:16:cc:45:9e:00:23:a2:f2:68:69: b0:44:a7:f9:12:96:7b:18:4c:93:1a:51:35:a2:4e: e6:cb:dd:38:bb:a3:51:ce:92:18:a5:e9:dd:88:0e: ad:45:8d:2e:d8:f3:41:82:d2:f9:24:33:5f:5c:36: 7b:5a:e6:28:3f:6f:16:69:4d:55:57:3b:b8:9f:4a: 00:c5:68:84:ad:1b:53:cf:08:7a:1a:85:d6:cb:8b: 4b:5a:e8:13:51:41:73:cb:d2:9a:3c:e4:85:ae:6f: 50:00:d0:6e:4d:9c:9c:71:33:d5:a2:50:01:79:15: 89:c6:d2:e3:cd:20:03:04:1a:c5:3f:fa:a4:70:03: 64:d1:00:ca:ef:3b:71:f7:0c:03:0a:14:36:d1:7f: bb:35:cd:ce:85:41:1f:df:aa:4a:1a:d8:b2:86:dd: 7a:84:fc:2f:45:b9:2c:6e:a1:3b:f9:ac:39:7b:4c: 6a:e3:79:f7:fa:13:83:64:24:ee:08:11:df:fc:4e: 3d:be:c4:7f:61:41:f6:14:dd:ef:a3:bd:08:fe:05: 95:f0:e6:23:a5:02:78:b9:e4:30:43:a0:58:03:89: 86:30:7c:18:b2:57:32:1c:d2:9a:ac:c1:5a:61:94: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:82:DB:E7:8B:0B:42:C4:2D:EB:3E:93:27:17:61:E1:6A:2E:EF:1D X509v3 Authority Key Identifier: keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ea:65:e4:0a:08:c1:91:ba:1b:de:ee:fb:07:b3:6f:19:ae: e2:c3:a1:6d:31:d1:b1:21:d5:51:a7:a0:f2:a6:f7:cf:21:76: 9c:fb:ea:62:38:50:ab:be:3b:78:ed:e2:95:8c:7a:69:11:21: ba:5b:3d:dd:da:89:3b:ed:44:bc:cb:1f:34:82:50:fa:a2:dd: 75:9a:fa:5f:81:26:b3:f8:2c:22:6a:8f:12:73:67:4f:3a:d2: 3a:cf:2a:f5:c6:12:69:33:79:a1:75:87:4e:9f:16:2f:ff:cd: 59:c4:f4:4b:2a:0a:1b:a8:f3:f7:0a:4f:02:b2:70:6a:43:31: 1a:ff:de:ba:d9:58:03:49:0d:0f:e6:88:51:d2:b8:3b:92:d2: a7:ef:6a:d2:48:af:65:d6:ce:32:c0:3c:e3:8a:cd:76:dc:64: 86:a1:79:89:a4:5d:9a:3b:5d:c0:e8:76:03:61:93:2a:31:8d: 38:0f:31:94:aa:5c:6e:ea:8c:5f:6b:3b:73:c4:fa:2d:6b:ee: 54:d9:1b:4f:35:53:26:1f:98:5f:d0:ea:50:1f:d4:5e:7c:6a: 5a:9a:61:4d:62:ab:49:e9:79:b5:1c:f1:7c:a7:da:ce:86:78: bf:bf:cd:fb:e0:f8:e9:18:84:47:44:f2:52:7d:69:b4:e9:4f: 63:4d:7e:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwhccg9yyi6MZVSt64ClBnAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YWMzMDhjOTRmNTdiMTFjZWUxYmE4NGVmMTI3ODQ0N2M2 Nzg1ZWIwHhcNMjYwMjAzMDMwMDMwWhcNMjYwMjA0MDMwMDMwWjAzMTEwLwYDVQQD EygwMjgyZGJlNzhiMGI0MmM0MmRlYjNlOTMyNzE3NjFlMTZhMmVlZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBv7wemeD7EMM/htjQl0O36ONxbM RZ4AI6LyaGmwRKf5EpZ7GEyTGlE1ok7my904u6NRzpIYpendiA6tRY0u2PNBgtL5 JDNfXDZ7WuYoP28WaU1VVzu4n0oAxWiErRtTzwh6GoXWy4tLWugTUUFzy9KaPOSF rm9QANBuTZyccTPVolABeRWJxtLjzSADBBrFP/qkcANk0QDK7ztx9wwDChQ20X+7 Nc3OhUEf36pKGtiyht16hPwvRbksbqE7+aw5e0xq43n3+hODZCTuCBHf/E49vsR/ YUH2FN3vo70I/gWV8OYjpQJ4ueQwQ6BYA4mGMHwYslcyHNKarMFaYZR1CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKC2+eLC0LELes+kycXYeFqLu8dMB8GA1UdIwQY MBaAFDWsMIyU9XsRzuG6hO8SeER8Z4XrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDct NjBkMzU1NTRjZTY0LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDctNjBkMzU1NTRjZTY0 LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADepl5AoI wZG6G97u+wezbxmu4sOhbTHRsSHVUaeg8qb3zyF2nPvqYjhQq747eO3ilYx6aREh uls93dqJO+1EvMsfNIJQ+qLddZr6X4Ems/gsImqPEnNnTzrSOs8q9cYSaTN5oXWH Tp8WL//NWcT0SyoKG6jz9wpPArJwakMxGv/eutlYA0kND+aIUdK4O5LSp+9q0kiv ZdbOMsA844rNdtxkhqF5iaRdmjtdwOh2A2GTKjGNOA8xlKpcbuqMX2s7c8T6LWvu VNkbTzVTJh+YX9DqUB/UXnxqWpphTWKrSel5tRzxfKfazoZ4v7/N++D46RiER0Ty Un1ptOlPY01+XA== -----END CERTIFICATE-----Generated at Tue Feb 3 08:16:26 2026 by rpki-client