This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json) Hash identifier: NZM3TDTnIiudGTlMRrQwirmf3n2ILvP8UzLKJX6+CxA= Subject key identifier: 2B:DD:72:F7:9C:49:58:41:45:D2:0A:08:01:FF:9E:B0:75:52:34:F6 Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52 Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952 Certificate serial: 019BFA64DDF1F6D7C3FBCF0E0EA0D6884AAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 13:01:12 +0000 Manifest this update: Mon 26 Jan 2026 13:01:12 +0000 Manifest next update: Tue 27 Jan 2026 13:01:12 +0000 Files and hashes: 1: SQCsFnrjeuZiVY1_BfYgIg4qi-k.roa (hash: 5RBF/vlBHGxON2JarwGOKKIBZfcvo+qjnXq8BAVhPwI=) 2: dPW253uLNkMC6hq3xNGknvYUUCk.roa (hash: lFOPNOmhkr/l52mg27uVNBuUyHirwJeRRAr2NLCO680=) 3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: MCwHrjMfI94BMYRxbUxb/bdjJItQ2hmyUo7TxzFEegU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:dd:f1:f6:d7:c3:fb:cf:0e:0e:a0:d6:88:4a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952 Validity Not Before: Jan 26 13:01:12 2026 GMT Not After : Jan 27 13:01:12 2026 GMT Subject: CN=2bdd72f79c49584145d20a0801ff9eb0755234f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:33:bd:1d:6d:f9:ac:8c:7e:f6:19:f9:3c: 44:94:c8:f5:1b:4f:4a:38:fb:53:d9:cf:7f:96:44: ca:d2:79:75:db:91:6e:bf:ad:a0:48:79:25:4c:f4: 9d:86:dd:0b:bb:2c:98:1b:35:00:7d:a8:a0:4f:61: 22:7e:02:3f:c6:2a:fb:07:26:57:b9:59:49:5f:b7: 74:d8:59:a2:f9:12:18:43:b7:12:dc:93:64:a3:59: 1c:f5:d7:23:52:47:76:9c:8f:ea:f9:f3:a6:cd:93: 97:86:a5:2c:c2:da:c9:6a:b6:7d:30:ab:c9:b8:68: 79:ff:33:bb:8a:0c:61:12:6a:7a:82:93:83:53:ed: d0:aa:36:43:72:3c:aa:ac:d3:d6:13:9c:fb:ae:aa: 87:a3:d7:cb:4d:e2:a2:6b:3a:8e:0a:e6:77:9b:14: e5:f1:9e:74:3a:93:16:8f:40:6e:65:46:00:bf:72: 1d:66:40:e9:f1:de:2f:f9:66:85:9b:36:20:58:7f: 59:4c:32:15:3a:3d:09:82:f4:27:40:d4:df:90:b3: 89:3c:a1:6c:f0:0e:bc:96:0e:5b:c0:10:6f:cf:1b: a4:99:99:d7:60:20:a3:82:b1:92:75:b9:41:ad:11: d0:b2:58:ad:3d:98:5e:27:4e:68:64:5d:e1:d9:36: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DD:72:F7:9C:49:58:41:45:D2:0A:08:01:FF:9E:B0:75:52:34:F6 X509v3 Authority Key Identifier: keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:60:bc:2e:f1:e2:9e:2e:99:c4:db:0c:30:16:36:31:19:5a: 6c:e1:72:e1:22:4a:6c:a9:ab:94:fc:40:ad:81:24:4f:1c:32: f9:71:36:dd:90:64:1b:33:bf:d2:e9:a4:97:5a:f0:60:46:27: 2a:7c:c2:6c:66:56:45:f9:87:22:cc:e4:ee:1e:ff:74:bc:54: 20:c4:b8:2c:8b:ee:2b:6b:c1:ed:4b:56:d0:01:17:a4:b6:50: 43:a8:15:b5:25:f7:d9:ca:14:99:58:55:4b:5e:17:c4:bb:c4: 02:5f:6c:47:ca:f0:f5:19:b3:94:e4:51:57:62:82:83:93:d7: 1b:46:99:e7:5d:9b:57:12:e3:00:6d:6a:f0:7b:16:28:6d:19: ef:54:ba:14:d5:65:33:7e:bc:9d:77:60:45:af:70:a6:b5:44: 61:25:a2:46:02:23:94:e4:b1:25:af:e6:24:26:f8:f3:3a:03: 29:b8:87:17:35:65:32:6b:2e:fd:da:77:d3:61:61:ea:df:c4: 6f:e5:73:4c:0c:19:3c:32:1b:88:c3:04:2f:ff:df:0e:6f:e2: cc:61:46:97:98:b0:59:d8:08:b3:1b:a0:44:a9:9b:d3:4a:ef: fa:ad:6e:37:76:da:18:e8:25:3d:87:44:87:5a:e0:13:7b:02: fb:17:07:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZN3x9tfD+88ODqDWiEqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZGZhZmQzNjczMDM5NmZlMzM4ZTc3MmRhZGJlNGMzYzg1 Y2Q5NTIwHhcNMjYwMTI2MTMwMTEyWhcNMjYwMTI3MTMwMTEyWjAzMTEwLwYDVQQD EygyYmRkNzJmNzljNDk1ODQxNDVkMjBhMDgwMWZmOWViMDc1NTIzNGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdAzvR1t+ayMfvYZ+TxElMj1G09K OPtT2c9/lkTK0nl125Fuv62gSHklTPSdht0LuyyYGzUAfaigT2EifgI/xir7ByZX uVlJX7d02Fmi+RIYQ7cS3JNko1kc9dcjUkd2nI/q+fOmzZOXhqUswtrJarZ9MKvJ uGh5/zO7igxhEmp6gpODU+3QqjZDcjyqrNPWE5z7rqqHo9fLTeKiazqOCuZ3mxTl 8Z50OpMWj0BuZUYAv3IdZkDp8d4v+WaFmzYgWH9ZTDIVOj0JgvQnQNTfkLOJPKFs 8A68lg5bwBBvzxukmZnXYCCjgrGSdblBrRHQslitPZheJ05oZF3h2TbAWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvdcvecSVhBRdIKCAH/nrB1UjT2MB8GA1UdIwQY MBaAFLDfr9NnMDlv4zjnctrb5MPIXNlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc04tdjAyY3dPV19qT09keTJ0dmt3OGhjMlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNjk2ZmQtNGQ5ZC00ZTI4LTkyNmUt MGFhNWI0NmJmOGFhLzEvc04tdjAyY3dPV19qT09keTJ0dmt3OGhjMlZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mNjk2ZmQtNGQ5ZC00ZTI4LTkyNmUtMGFhNWI0NmJmOGFh LzEvc04tdjAyY3dPV19qT09keTJ0dmt3OGhjMlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWC8LvHi ni6ZxNsMMBY2MRlabOFy4SJKbKmrlPxArYEkTxwy+XE23ZBkGzO/0umkl1rwYEYn KnzCbGZWRfmHIszk7h7/dLxUIMS4LIvuK2vB7UtW0AEXpLZQQ6gVtSX32coUmVhV S14XxLvEAl9sR8rw9RmzlORRV2KCg5PXG0aZ512bVxLjAG1q8HsWKG0Z71S6FNVl M368nXdgRa9wprVEYSWiRgIjlOSxJa/mJCb48zoDKbiHFzVlMmsu/dp302Fh6t/E b+VzTAwZPDIbiMMEL//fDm/izGFGl5iwWdgIsxugRKmb00rv+q1uN3baGOglPYdE h1rgE3sC+xcHPw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:39:32 2026 by rpki-client