This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json) Hash identifier: yHVEcsGsDuK1IToqNMy1mfDGz1UYBlPlF1N36zcQbSg= Subject key identifier: 28:06:5F:74:6E:9A:17:A2:08:B5:96:99:4A:A1:7F:29:6D:B6:16:B5 Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27 Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27 Certificate serial: 019BFC1CA5C1E78F16EA3292E9C574578684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft Manifest number: 057B Signing time: Mon 26 Jan 2026 21:01:34 +0000 Manifest this update: Mon 26 Jan 2026 21:01:34 +0000 Manifest next update: Tue 27 Jan 2026 21:01:34 +0000 Files and hashes: 1: 6DYQyU1SL1LMvaa65DMCw3z4hO8.roa (hash: JrefBnA8RHFlhcRliMFJw03ONHlUFhDp419thhgo8CE=) 2: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: xmYj6//gLYd0qQOG2sTZqf+m0ram6e83iWTqPkKZuEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:a5:c1:e7:8f:16:ea:32:92:e9:c5:74:57:86:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27 Validity Not Before: Jan 26 21:01:34 2026 GMT Not After : Jan 27 21:01:34 2026 GMT Subject: CN=28065f746e9a17a208b596994aa17f296db616b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:ff:20:9e:91:1e:d3:7f:54:78:f5:ad:74: 93:a8:49:8d:6c:5b:bf:9c:84:d5:9a:4d:b9:a2:ed: da:ca:2f:45:d2:8d:6e:65:ba:bf:96:81:11:c7:8f: 1c:66:62:e3:06:93:e8:1c:2b:3b:47:55:8f:21:20: 2c:0e:51:6b:4c:12:5a:e2:91:7f:aa:37:8a:e7:50: ca:6d:e9:32:f3:a3:2b:a8:89:f5:79:13:83:8c:ff: 73:e4:a4:ce:36:6b:18:dc:1b:04:65:61:09:f9:7d: ba:e0:f9:43:72:f1:1c:98:96:e1:2b:f0:ff:ff:7e: 24:4c:be:9b:6a:fb:98:35:f0:8d:d9:14:eb:fa:6c: 5d:16:a2:91:7b:de:63:47:22:65:f7:52:32:73:7f: 35:ee:59:43:e5:15:a4:2d:e9:82:71:32:0c:28:28: 3d:a2:55:eb:92:85:b0:8a:13:ff:96:d4:48:fd:69: dd:42:a6:ed:1f:64:fc:18:3d:2b:0a:76:15:b6:9f: 60:88:c0:a8:d8:4c:1b:7b:c1:ee:80:f8:f2:71:7b: 4e:ac:27:8a:0b:02:0b:26:97:85:e3:75:11:3e:01: 35:84:51:46:fc:54:96:39:cb:a1:24:be:17:a8:78: dc:45:52:6c:e8:9c:e2:e9:f4:5c:36:ff:f7:fc:cb: da:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:06:5F:74:6E:9A:17:A2:08:B5:96:99:4A:A1:7F:29:6D:B6:16:B5 X509v3 Authority Key Identifier: keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:41:27:d8:d6:53:95:9e:45:c6:d4:af:5d:3d:a4:b7:ed:68: c6:cb:36:3e:c4:a5:85:3e:aa:05:76:5d:b9:fd:6f:ef:be:06: fa:61:8b:eb:87:87:ed:db:fc:e9:ed:8e:56:db:c5:39:96:eb: a2:b8:3f:a5:b4:e9:32:9b:13:16:00:03:0b:78:01:d1:12:cb: e8:57:5b:83:b0:de:61:92:cc:86:c4:8b:82:3b:03:8f:ed:dc: 54:f9:8f:07:23:60:62:a9:b2:45:ef:e0:04:c6:33:9d:38:df: 8d:fc:9c:dd:86:bd:db:a6:15:b2:db:c0:22:9d:77:90:42:e9: 5f:2e:e5:34:2d:c8:86:49:1a:f3:8f:66:93:1a:07:06:60:7f: 4e:6e:d8:d3:2a:48:44:b4:79:dd:72:97:fb:59:ed:c9:45:3a: 5e:3a:c5:99:fa:44:eb:aa:20:d1:38:43:17:f1:ee:6e:6f:b0: 80:8c:a5:20:d4:67:dc:68:1a:46:8d:92:20:c8:ea:e8:31:7f: 6e:55:ec:6d:bb:9d:1f:42:c0:68:59:25:01:42:59:42:53:f6: e1:09:6e:26:af:ba:df:e8:be:50:4f:c7:d5:77:ff:d3:55:65: 3f:1d:a5:a0:60:f9:c3:2b:d8:6e:bb:b6:19:93:2e:d2:ab:e0: 58:b2:46:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HKXB548W6jKS6cV0V4aEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMDMxYThiNmEyODk0MGM3OTM2YmE2ZTc4MmI5NGEwOTYy YmZiMjcwHhcNMjYwMTI2MjEwMTM0WhcNMjYwMTI3MjEwMTM0WjAzMTEwLwYDVQQD EygyODA2NWY3NDZlOWExN2EyMDhiNTk2OTk0YWExN2YyOTZkYjYxNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQP/IJ6RHtN/VHj1rXSTqEmNbFu/ nITVmk25ou3ayi9F0o1uZbq/loERx48cZmLjBpPoHCs7R1WPISAsDlFrTBJa4pF/ qjeK51DKbeky86MrqIn1eRODjP9z5KTONmsY3BsEZWEJ+X264PlDcvEcmJbhK/D/ /34kTL6bavuYNfCN2RTr+mxdFqKRe95jRyJl91Iyc3817llD5RWkLemCcTIMKCg9 olXrkoWwihP/ltRI/WndQqbtH2T8GD0rCnYVtp9giMCo2Ewbe8HugPjycXtOrCeK CwILJpeF43URPgE1hFFG/FSWOcuhJL4XqHjcRVJs6Jzi6fRcNv/3/MvauwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgGX3RumheiCLWWmUqhfylttha1MB8GA1UdIwQY MBaAFJwDGotqKJQMeTa6bngrlKCWK/snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNDMzZmUtNjQwOC00NjhkLTgxZTQt ZjAzZWI4NzQwYzNlLzEvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNDMzZmUtNjQwOC00NjhkLTgxZTQtZjAzZWI4NzQwYzNl LzEvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEEn2NZT lZ5FxtSvXT2kt+1oxss2PsSlhT6qBXZduf1v774G+mGL64eH7dv86e2OVtvFOZbr org/pbTpMpsTFgADC3gB0RLL6Fdbg7DeYZLMhsSLgjsDj+3cVPmPByNgYqmyRe/g BMYznTjfjfyc3Ya926YVstvAIp13kELpXy7lNC3Ihkka849mkxoHBmB/Tm7Y0ypI RLR53XKX+1ntyUU6XjrFmfpE66og0ThDF/Hubm+wgIylINRn3GgaRo2SIMjq6DF/ blXsbbudH0LAaFklAUJZQlP24QluJq+63+i+UE/H1Xf/01VlPx2loGD5wyvYbru2 GZMu0qvgWLJGzA== -----END CERTIFICATE-----Generated at Tue Jan 27 06:08:17 2026 by rpki-client