This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json) Hash identifier: xsgP72567MSQMjizfNb/bYFu22l12o6/adI8PEDrPFw= Subject key identifier: 4A:74:D0:25:31:81:D5:4E:C2:7E:44:C0:46:6A:5F:26:47:F7:80:BB Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe Certificate serial: 019BF9F6E2A84E32235457282E01C69AA0E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft Manifest number: 04E4 Signing time: Mon 26 Jan 2026 11:01:05 +0000 Manifest this update: Mon 26 Jan 2026 11:01:05 +0000 Manifest next update: Tue 27 Jan 2026 11:01:05 +0000 Files and hashes: 1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=) 2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: 0sdqPFLLNDN0AGTF7sHoPWNatKdfH6l1tFZe9GlXEjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:e2:a8:4e:32:23:54:57:28:2e:01:c6:9a:a0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe Validity Not Before: Jan 26 11:01:05 2026 GMT Not After : Jan 27 11:01:05 2026 GMT Subject: CN=4a74d0253181d54ec27e44c0466a5f2647f780bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:63:00:41:c7:99:69:c2:0b:f0:13:0c:6b:25: 82:73:2d:d5:3c:f2:51:92:62:8b:62:9f:99:d5:c6: 2b:22:02:63:15:54:f2:b0:5d:82:ff:bf:7d:77:47: 67:bb:e9:0a:32:82:9b:4c:a9:51:07:38:07:b1:9b: a2:9f:eb:39:cf:32:a6:c0:00:ea:e9:d9:64:06:f8: 87:7a:11:32:ce:d0:00:b0:17:6c:dd:a9:92:74:c1: 10:8b:a2:e4:0e:2e:9f:fd:06:2e:59:6d:95:a9:d6: c4:ee:84:4f:40:83:ed:6d:4d:a5:6a:47:be:14:d1: 3a:b0:a6:70:9b:6b:a9:c2:97:86:c1:45:01:61:3f: f6:3e:cc:b8:bb:96:ee:65:47:6a:29:64:92:ec:77: c3:3d:2c:02:79:08:a0:a3:d0:0a:15:92:96:ab:1e: 3c:57:8f:3d:84:b1:ed:1d:fe:e4:99:3a:79:3e:5b: 43:37:76:51:c1:29:82:2a:51:5e:77:e7:32:d1:4c: 43:cd:5d:c1:f8:75:68:d7:67:77:9e:f2:fe:bb:be: e7:96:63:80:51:a0:ae:09:41:df:00:58:53:5e:86: 6a:1b:e3:1a:d4:9e:eb:81:11:63:59:07:6b:18:68: cd:69:79:c1:cc:eb:47:82:21:e2:3c:e8:1d:4b:5a: c8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:74:D0:25:31:81:D5:4E:C2:7E:44:C0:46:6A:5F:26:47:F7:80:BB X509v3 Authority Key Identifier: keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c5:f0:ce:76:fd:08:12:a5:31:4f:a6:27:c9:b5:36:49:7f: 2f:62:a9:24:b7:15:24:9f:05:85:23:69:d6:67:c4:1d:33:d2: db:6c:08:6b:8b:29:5b:2c:74:72:c7:c6:f5:b5:ec:45:84:f2: 4d:52:50:24:16:b2:05:95:19:50:49:80:2b:8e:3e:3a:c9:58: f5:8e:4d:4b:25:f1:53:02:90:81:d5:12:b5:74:94:11:45:38: 9d:77:ce:42:b0:43:d6:f9:a3:9f:7e:6f:51:ae:f0:15:7d:b6: da:ab:57:cd:c0:09:d7:fa:a5:96:81:ef:4c:ca:4f:d2:cc:1e: b9:e6:38:f5:8e:2a:85:c7:fa:32:9e:77:7d:61:e1:6c:02:77: 19:4a:bb:f0:77:af:e2:94:44:3a:d5:8b:82:ca:13:a4:4d:cf: e7:e0:13:1f:a0:32:48:6c:76:55:28:c7:35:a0:49:32:8b:13: 3b:9b:e1:b2:ee:f3:47:ca:30:68:53:92:28:cf:d3:eb:fc:36: 16:ac:2e:61:09:a0:86:3e:06:37:41:cc:40:af:4a:15:5b:38: a2:1a:0d:ef:30:12:94:f7:64:78:ca:04:99:e8:88:f7:60:f5: f9:0d:47:d1:5a:a3:fd:02:b4:ac:c0:35:01:2d:d5:1a:44:3e: 01:70:4d:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59uKoTjIjVFcoLgHGmqDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NjAzNDA2Y2YwZTFkN2RjNGE4Nzg0YTE4OGE2MjM4ZTNj MTNhYmUwHhcNMjYwMTI2MTEwMTA1WhcNMjYwMTI3MTEwMTA1WjAzMTEwLwYDVQQD Eyg0YTc0ZDAyNTMxODFkNTRlYzI3ZTQ0YzA0NjZhNWYyNjQ3Zjc4MGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+WMAQceZacIL8BMMayWCcy3VPPJR kmKLYp+Z1cYrIgJjFVTysF2C/799d0dnu+kKMoKbTKlRBzgHsZuin+s5zzKmwADq 6dlkBviHehEyztAAsBds3amSdMEQi6LkDi6f/QYuWW2VqdbE7oRPQIPtbU2lake+ FNE6sKZwm2upwpeGwUUBYT/2Psy4u5buZUdqKWSS7HfDPSwCeQigo9AKFZKWqx48 V489hLHtHf7kmTp5PltDN3ZRwSmCKlFed+cy0UxDzV3B+HVo12d3nvL+u77nlmOA UaCuCUHfAFhTXoZqG+Ma1J7rgRFjWQdrGGjNaXnBzOtHgiHiPOgdS1rIeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEp00CUxgdVOwn5EwEZqXyZH94C7MB8GA1UdIwQY MBaAFDRgNAbPDh19xKh4ShiKYjjjwTq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQt MWVlNTZjNWNmYmY1LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQtMWVlNTZjNWNmYmY1 LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMXwznb9 CBKlMU+mJ8m1Nkl/L2KpJLcVJJ8FhSNp1mfEHTPS22wIa4spWyx0csfG9bXsRYTy TVJQJBayBZUZUEmAK44+OslY9Y5NSyXxUwKQgdUStXSUEUU4nXfOQrBD1vmjn35v Ua7wFX222qtXzcAJ1/qlloHvTMpP0sweueY49Y4qhcf6Mp53fWHhbAJ3GUq78Hev 4pREOtWLgsoTpE3P5+ATH6AySGx2VSjHNaBJMosTO5vhsu7zR8owaFOSKM/T6/w2 FqwuYQmghj4GN0HMQK9KFVs4ohoN7zASlPdkeMoEmeiI92D1+Q1H0Vqj/QK0rMA1 AS3VGkQ+AXBNGQ== -----END CERTIFICATE-----Generated at Mon Jan 26 14:26:21 2026 by rpki-client