This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json) Hash identifier: kPIWt9Qy0pbUWLulyKM35PadB6aVkjCsDh14TsTncWQ= Subject key identifier: 4C:39:D8:BF:2D:E2:3A:CA:AB:66:E6:47:88:15:B4:2C:75:36:73:B1 Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9 Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9 Certificate serial: 019BFC1C15A6C2D82E3DF0C99276E17122EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft Manifest number: 0346 Signing time: Mon 26 Jan 2026 21:00:57 +0000 Manifest this update: Mon 26 Jan 2026 21:00:57 +0000 Manifest next update: Tue 27 Jan 2026 21:00:57 +0000 Files and hashes: 1: Dr6F3L4xRt2i8RUfH4s0XX8o0U0.roa (hash: GCUyOT0XAk3FRNMCon8x2Cr9zKCfKsyTPv23kvE35X4=) 2: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: bzWtfn2hkm8jnFOpY0yVjpFReeQ6ayXsmbDBX7rzofU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:15:a6:c2:d8:2e:3d:f0:c9:92:76:e1:71:22:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9 Validity Not Before: Jan 26 21:00:57 2026 GMT Not After : Jan 27 21:00:57 2026 GMT Subject: CN=4c39d8bf2de23acaab66e6478815b42c753673b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:a9:6e:b8:0f:4d:0d:36:a5:d0:84:ff:41: f7:0b:1d:a9:fb:8e:04:4c:27:8c:0b:16:44:c7:d6: 61:1e:8d:65:23:fe:ce:71:fe:ed:53:22:cf:99:fc: 11:98:1c:64:c9:6b:85:69:a8:06:2b:8a:fa:20:ac: 26:78:cf:a7:3c:3f:d0:3a:af:c1:d7:96:db:35:98: 90:60:bc:d7:7d:97:b1:1a:a7:23:cf:98:ba:49:4c: fe:d0:23:24:af:2c:7d:b5:1a:15:a1:cd:f8:30:6b: 6c:a2:18:50:25:bf:73:dc:44:53:0a:d6:6e:70:ad: 40:0f:cd:e1:13:47:6a:6e:7a:b4:b2:56:d7:22:16: c3:d2:fd:6d:f2:6f:f7:c0:ef:63:98:6f:09:53:41: 25:0a:93:75:20:23:7f:2a:2c:f5:15:3b:c1:fe:18: 19:32:47:5b:36:1e:56:81:4f:e9:1c:8d:11:f2:71: ac:01:2f:02:d7:a9:ef:36:8d:ad:90:e6:9b:43:7e: 7c:8d:6f:6d:d6:9e:72:99:96:ba:86:ab:20:4d:60: ac:aa:58:a6:44:d2:f2:b7:06:dc:ed:19:12:18:0f: 51:de:82:1c:58:c6:2a:73:48:d7:ff:55:ab:ee:68: fd:b6:92:3d:3f:5b:cd:c8:e9:b0:06:34:61:01:fc: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:39:D8:BF:2D:E2:3A:CA:AB:66:E6:47:88:15:B4:2C:75:36:73:B1 X509v3 Authority Key Identifier: keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:da:10:c1:fe:eb:39:b1:34:f6:ad:d1:45:fb:88:b9:27:63: 64:ca:f2:f5:d4:89:32:cb:01:bd:54:f2:5e:c0:2d:76:19:27: d9:cc:a7:46:ee:42:d0:9c:99:c9:a3:16:4b:28:56:f0:18:5d: 96:4b:e7:e9:22:99:fb:0d:da:8b:08:ee:b2:c2:b7:e1:b7:42: f2:33:a1:28:c6:47:c9:62:23:d4:51:86:06:b4:3b:4a:05:41: f1:88:a8:d4:0f:d0:cc:37:8c:27:b0:8c:f8:ce:8c:57:e2:d2: 14:4b:04:82:07:3a:9d:98:ed:97:4c:ac:18:62:45:0b:6c:e9: d7:5f:2b:9e:4c:28:3a:7a:07:af:34:00:97:2c:be:3e:c9:4c: 4f:01:b1:04:78:7e:2b:6d:0a:f5:b2:38:35:a8:89:66:79:7a: 8d:4a:fc:db:9a:46:3c:c0:e5:e7:ab:14:8d:33:4a:fd:d5:9f: d7:3b:c7:8b:a5:bd:97:4a:94:de:65:52:95:03:32:78:ca:4d: 6e:6d:1f:2e:2c:b2:17:1b:20:d4:1e:66:19:59:bc:63:dc:3f: 26:21:b4:15:1a:99:1a:a2:e7:de:fc:a4:63:94:24:c0:b3:85: 44:97:de:b2:6d:6c:67:53:eb:2e:bb:8c:aa:59:d6:60:7d:ea: 1f:64:45:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HBWmwtguPfDJknbhcSLqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjQyMTQ4ZTNlNjM2YTkwMzQzZjNlOTUwNDRiOGRmZGI5 ZDFjZDkwHhcNMjYwMTI2MjEwMDU3WhcNMjYwMTI3MjEwMDU3WjAzMTEwLwYDVQQD Eyg0YzM5ZDhiZjJkZTIzYWNhYWI2NmU2NDc4ODE1YjQyYzc1MzY3M2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+2pbrgPTQ02pdCE/0H3Cx2p+44E TCeMCxZEx9ZhHo1lI/7Ocf7tUyLPmfwRmBxkyWuFaagGK4r6IKwmeM+nPD/QOq/B 15bbNZiQYLzXfZexGqcjz5i6SUz+0CMkryx9tRoVoc34MGtsohhQJb9z3ERTCtZu cK1AD83hE0dqbnq0slbXIhbD0v1t8m/3wO9jmG8JU0ElCpN1ICN/Kiz1FTvB/hgZ MkdbNh5WgU/pHI0R8nGsAS8C16nvNo2tkOabQ358jW9t1p5ymZa6hqsgTWCsqlim RNLytwbc7RkSGA9R3oIcWMYqc0jX/1Wr7mj9tpI9P1vNyOmwBjRhAfyaHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEw52L8t4jrKq2bmR4gVtCx1NnOxMB8GA1UdIwQY MBaAFDYkIUjj5japA0Pz6VBEuN/bnRzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQt MjZkNzU5MzY1NDAyLzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQtMjZkNzU5MzY1NDAy LzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStoQwf7r ObE09q3RRfuIuSdjZMry9dSJMssBvVTyXsAtdhkn2cynRu5C0JyZyaMWSyhW8Bhd lkvn6SKZ+w3aiwjussK34bdC8jOhKMZHyWIj1FGGBrQ7SgVB8Yio1A/QzDeMJ7CM +M6MV+LSFEsEggc6nZjtl0ysGGJFC2zp118rnkwoOnoHrzQAlyy+PslMTwGxBHh+ K20K9bI4NaiJZnl6jUr825pGPMDl56sUjTNK/dWf1zvHi6W9l0qU3mVSlQMyeMpN bm0fLiyyFxsg1B5mGVm8Y9w/JiG0FRqZGqLn3vykY5QkwLOFRJfesm1sZ1PrLruM qlnWYH3qH2RFPg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:45 2026 by rpki-client