This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json) Hash identifier: 9gVeDaON+2W2Bi7DmqdREaiC7Lo3VJ0z7ws8IKwePZc= Subject key identifier: D2:E9:E8:0D:CA:AD:1D:FB:1F:78:73:4C:CF:A8:93:79:C6:66:27:1B Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa Certificate serial: 019BFC1C3345AD7E086DD1D972D85F1B24EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft Manifest number: 17F4 Signing time: Mon 26 Jan 2026 21:01:05 +0000 Manifest this update: Mon 26 Jan 2026 21:01:05 +0000 Manifest next update: Tue 27 Jan 2026 21:01:05 +0000 Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=) 2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=) 3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=) 4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: LV7Ls5K5au72TWXqG0rpufmf43XEFDKz8GKh1Q3uScg=) 5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=) 6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=) 7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=) 8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=) 9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:33:45:ad:7e:08:6d:d1:d9:72:d8:5f:1b:24:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa Validity Not Before: Jan 26 21:01:05 2026 GMT Not After : Jan 27 21:01:05 2026 GMT Subject: CN=d2e9e80dcaad1dfb1f78734ccfa89379c666271b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:53:25:07:d3:71:dc:37:57:a2:81:23:91:46: 44:87:79:0a:35:25:ea:11:9f:1f:7a:e0:ac:42:32: b0:8f:ad:ba:aa:7f:d7:b9:dd:8c:f6:14:65:ff:99: 0e:53:e0:8b:59:21:05:22:de:9b:12:21:2b:14:e7: 68:39:b2:a4:c5:16:11:72:36:62:bb:8c:16:7f:3f: a1:44:5d:28:1b:f9:73:49:81:7b:62:02:77:5e:ea: 3e:2c:9f:07:52:86:e7:8c:f5:71:78:4f:3d:f5:67: 21:ab:a8:2c:59:ba:b4:3b:0d:b3:05:55:fe:56:7e: c4:ae:fc:95:1a:15:31:93:7f:d9:3e:69:e8:22:92: 08:d9:3b:b0:30:e1:b1:c9:18:68:4e:15:03:59:6b: 8b:c0:c2:d9:77:9b:cf:ca:f7:a8:74:ad:dd:01:3d: 3e:3f:d2:91:04:a7:68:e6:48:99:78:75:9c:c7:59: ca:34:80:84:81:4f:39:eb:e0:87:59:b1:5c:a6:fc: 6d:4b:dd:45:27:73:f9:b2:4c:3c:39:8c:d9:84:ce: 94:f2:f5:a1:e7:8f:a5:ca:21:5a:fa:0e:58:35:1e: b9:96:e3:36:35:c4:2e:2a:46:c2:1e:f8:9e:7f:7f: db:9b:82:54:94:fe:b0:0c:72:9c:ed:ba:62:af:a5: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E9:E8:0D:CA:AD:1D:FB:1F:78:73:4C:CF:A8:93:79:C6:66:27:1B X509v3 Authority Key Identifier: keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:30:99:e8:81:aa:14:87:12:e0:b0:36:0a:8b:ce:68:e5:95: c5:35:88:4e:1e:df:d3:99:56:64:75:b5:90:11:fe:13:66:95: a6:bd:ec:45:14:5b:85:36:ae:ba:78:7b:10:e2:67:ff:6e:53: b6:d3:9b:64:3c:5d:b4:18:60:a7:08:3e:e3:99:f7:5d:97:67: dd:e7:5b:61:60:96:95:6e:0e:e8:e4:a4:57:7e:b3:24:2d:66: 0c:69:f3:27:25:8b:41:48:9b:fb:a9:f8:de:a9:a0:91:c3:be: 35:71:f4:19:12:8f:8f:2d:c8:fc:f8:56:76:0c:30:7f:ff:96: 36:9d:3b:5b:02:4b:86:c1:f2:84:b9:c6:57:6c:a5:5b:0e:61: 37:2e:cc:3f:44:f5:ec:16:6e:b6:16:36:64:36:8c:86:0d:e2: c9:dd:9a:30:33:ac:62:71:e1:1c:41:ed:71:47:0a:2f:21:4e: bb:d5:f3:df:3c:82:43:65:a4:d5:54:d7:1f:9d:53:a3:eb:3b: 42:c0:c6:46:9f:f3:b8:c1:01:41:16:8c:de:8d:06:d7:c4:e2: d2:e1:7a:78:6a:69:5d:a5:a7:b0:a7:4e:2c:61:1c:e0:42:21: 18:6b:79:1d:d4:5e:73:a4:23:a8:d1:aa:d1:ba:2c:83:c0:18: 31:e5:6c:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HDNFrX4IbdHZcthfGyTvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm NzY0ZmEwHhcNMjYwMTI2MjEwMTA1WhcNMjYwMTI3MjEwMTA1WjAzMTEwLwYDVQQD EyhkMmU5ZTgwZGNhYWQxZGZiMWY3ODczNGNjZmE4OTM3OWM2NjYyNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lMlB9Nx3DdXooEjkUZEh3kKNSXq EZ8feuCsQjKwj626qn/Xud2M9hRl/5kOU+CLWSEFIt6bEiErFOdoObKkxRYRcjZi u4wWfz+hRF0oG/lzSYF7YgJ3Xuo+LJ8HUobnjPVxeE899Wchq6gsWbq0Ow2zBVX+ Vn7ErvyVGhUxk3/ZPmnoIpII2TuwMOGxyRhoThUDWWuLwMLZd5vPyveodK3dAT0+ P9KRBKdo5kiZeHWcx1nKNICEgU856+CHWbFcpvxtS91FJ3P5skw8OYzZhM6U8vWh 54+lyiFa+g5YNR65luM2NcQuKkbCHvief3/bm4JUlP6wDHKc7bpir6VUEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLp6A3KrR37H3hzTM+ok3nGZicbMB8GA1UdIwQY MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt YjBjNzRiNzZlMTgyLzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzCZ6IGq FIcS4LA2CovOaOWVxTWITh7f05lWZHW1kBH+E2aVpr3sRRRbhTauunh7EOJn/25T ttObZDxdtBhgpwg+45n3XZdn3edbYWCWlW4O6OSkV36zJC1mDGnzJyWLQUib+6n4 3qmgkcO+NXH0GRKPjy3I/PhWdgwwf/+WNp07WwJLhsHyhLnGV2ylWw5hNy7MP0T1 7BZuthY2ZDaMhg3iyd2aMDOsYnHhHEHtcUcKLyFOu9Xz3zyCQ2Wk1VTXH51To+s7 QsDGRp/zuMEBQRaM3o0G18Ti0uF6eGppXaWnsKdOLGEc4EIhGGt5HdRec6QjqNGq 0bosg8AYMeVsxQ== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:41 2026 by rpki-client