This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json) Hash identifier: +UqekS2I9Evs1Onl+Bm/VyQc9jl+eUeM7wSPUw9NeWM= Subject key identifier: 16:31:7F:D9:60:0A:17:6D:67:BC:6A:1C:6A:89:27:6A:36:53:63:F3 Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1 Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1 Certificate serial: 019BFCC0EEF345BEF8F327413DE582EF9B07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft Manifest number: 04F5 Signing time: Tue 27 Jan 2026 00:01:01 +0000 Manifest this update: Tue 27 Jan 2026 00:01:01 +0000 Manifest next update: Wed 28 Jan 2026 00:01:01 +0000 Files and hashes: 1: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: tUbZiP1JN05llGtnAWh5thoCBpMeV0KqY6Fhrk21mbQ=) 2: nv6Ok4y2cOecEADCopzAJKhcBVU.roa (hash: XEHy/gDqmxVMrvWfOK19i99wzww9ghcaL/+3+tLJ7nY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:ee:f3:45:be:f8:f3:27:41:3d:e5:82:ef:9b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1 Validity Not Before: Jan 27 00:01:01 2026 GMT Not After : Jan 28 00:01:01 2026 GMT Subject: CN=16317fd9600a176d67bc6a1c6a89276a365363f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3d:b6:d2:38:d2:17:ff:cb:27:1f:42:cb:e0: f7:0a:f7:9f:50:6c:42:94:d5:2d:62:0a:2d:07:93: 4f:a2:b1:dc:61:72:93:c8:25:b6:c0:c0:79:67:ce: cd:72:c5:b5:49:82:85:7e:33:c9:26:59:61:6b:84: 9a:3b:6b:d7:d9:ea:81:86:b8:19:09:96:55:e2:7c: ae:8c:ad:0e:98:dd:60:4b:13:cd:5c:ed:e5:ac:65: 09:bb:ea:1e:93:83:45:9d:68:6d:e4:94:5e:22:e5: 65:b3:d1:d9:da:b0:a4:c2:8c:f7:41:d9:71:fe:65: 8a:1e:13:16:e6:43:8e:34:93:58:af:e2:8a:6a:05: 2a:5b:e5:a4:b4:d6:37:5c:f5:c7:2b:30:1c:37:89: 80:75:f3:cf:c5:ed:7d:4a:bc:f5:c5:3e:24:2e:a3: 55:bf:d9:a5:bc:39:f1:65:e6:b4:37:c2:d6:ef:b1: 59:59:2f:c4:03:20:65:01:ed:59:e1:6a:43:39:cc: 16:97:b3:ac:76:2e:c4:bc:3d:27:30:61:1a:99:7e: 21:03:f5:9c:ab:ec:49:e1:42:4a:5e:4a:c8:cb:53: 88:ff:bf:7a:15:ef:36:29:fe:54:9b:b2:c4:ac:da: 8b:7f:3d:8f:2b:6d:12:2c:28:6c:c9:fa:de:8a:3c: 48:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:31:7F:D9:60:0A:17:6D:67:BC:6A:1C:6A:89:27:6A:36:53:63:F3 X509v3 Authority Key Identifier: keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7f:3e:3e:4c:92:b0:59:f9:cf:08:d9:73:18:60:09:76:21: 61:e9:d2:7e:2f:08:ea:5d:5b:8e:ad:8e:ce:bb:52:23:02:16: 46:2f:65:f1:3a:e2:1e:a6:9f:69:f4:e0:62:ea:76:05:c3:a8: cc:be:ae:8f:1d:e6:3d:3d:d1:70:be:b0:e1:e9:03:f0:36:c5: 0a:98:b5:d5:01:05:05:b2:50:55:40:73:c8:cc:27:5d:7c:a0: 8e:46:97:e9:6d:f4:51:df:44:81:da:73:65:08:ab:ce:a0:64: 9a:9e:d8:54:7e:55:51:b3:b5:6d:33:ec:c8:67:5e:a4:84:e9: c7:56:48:3c:9a:7a:76:85:9f:9c:98:ed:20:5f:ef:6e:e5:ba: ca:93:42:8a:17:7c:71:e2:ac:f5:f0:f2:7e:15:f7:ec:db:2e: 7c:fa:23:8d:aa:6a:6e:f2:d3:b8:27:46:44:c2:92:db:26:b4: 42:21:49:d2:4e:21:39:09:fd:18:96:58:0a:f0:04:60:a1:b1: 12:5e:a3:51:20:ef:da:b3:46:ae:85:0f:89:78:75:30:8e:31: b9:a5:23:c5:7d:d3:0c:33:82:49:96:c7:eb:b1:2d:44:fc:a4: cf:35:8a:af:ae:4d:8b:49:5e:86:05:68:95:f8:67:df:7d:e3: 90:e4:e0:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wO7zRb748ydBPeWC75sHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYmI2MjVhYTU1YmQ4ZWYzNTQxMGFmZGRkMmEyYmMzNThh MjVlZDEwHhcNMjYwMTI3MDAwMTAxWhcNMjYwMTI4MDAwMTAxWjAzMTEwLwYDVQQD EygxNjMxN2ZkOTYwMGExNzZkNjdiYzZhMWM2YTg5Mjc2YTM2NTM2M2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT220jjSF//LJx9Cy+D3CvefUGxC lNUtYgotB5NPorHcYXKTyCW2wMB5Z87NcsW1SYKFfjPJJllha4SaO2vX2eqBhrgZ CZZV4nyujK0OmN1gSxPNXO3lrGUJu+oek4NFnWht5JReIuVls9HZ2rCkwoz3Qdlx /mWKHhMW5kOONJNYr+KKagUqW+WktNY3XPXHKzAcN4mAdfPPxe19Srz1xT4kLqNV v9mlvDnxZea0N8LW77FZWS/EAyBlAe1Z4WpDOcwWl7Osdi7EvD0nMGEamX4hA/Wc q+xJ4UJKXkrIy1OI/796Fe82Kf5Um7LErNqLfz2PK20SLChsyfreijxIVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYxf9lgChdtZ7xqHGqJJ2o2U2PzMB8GA1UdIwQY MBaAFJ27YlqlW9jvNUEK/d0qK8NYol7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQt YTQ5YjcyYTFjZmUyLzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQtYTQ5YjcyYTFjZmUy LzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI38+PkyS sFn5zwjZcxhgCXYhYenSfi8I6l1bjq2OzrtSIwIWRi9l8TriHqafafTgYup2BcOo zL6ujx3mPT3RcL6w4ekD8DbFCpi11QEFBbJQVUBzyMwnXXygjkaX6W30Ud9Egdpz ZQirzqBkmp7YVH5VUbO1bTPsyGdepITpx1ZIPJp6doWfnJjtIF/vbuW6ypNCihd8 ceKs9fDyfhX37NsufPojjapqbvLTuCdGRMKS2ya0QiFJ0k4hOQn9GJZYCvAEYKGx El6jUSDv2rNGroUPiXh1MI4xuaUjxX3TDDOCSZbH67EtRPykzzWKr65Ni0lehgVo lfhn333jkOTgcA== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:51 2026 by rpki-client