This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json) Hash identifier: 43oaNMcODm4VN3cUKKUd8CesoKEOM8gyC23YJy7xdUE= Subject key identifier: FF:76:E0:B7:F9:65:02:6E:69:BF:E1:5C:5E:F7:61:B2:CF:1D:70:61 Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78 Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378 Certificate serial: 019BAD5C388645853D1C9C182D4B8E2BBCAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft Manifest number: 17C1 Signing time: Sun 11 Jan 2026 14:01:00 +0000 Manifest this update: Sun 11 Jan 2026 14:01:00 +0000 Manifest next update: Mon 12 Jan 2026 14:01:00 +0000 Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: FXbKjMocACX+SegFvptO722jYztAuX88MrNxQtxwSDg=) 2: PJf1Yws8p6oR_mrdRHX4LnOh1Z8.roa (hash: ceWACnB+ERuEfKRbsAjVw1PIFxKKxglKGhcLEOukNs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5c:38:86:45:85:3d:1c:9c:18:2d:4b:8e:2b:bc:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378 Validity Not Before: Jan 11 14:01:00 2026 GMT Not After : Jan 12 14:01:00 2026 GMT Subject: CN=ff76e0b7f965026e69bfe15c5ef761b2cf1d7061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:fe:99:fe:53:7e:39:82:5a:82:5e:45:5c: 1a:60:bf:e9:e3:80:b1:83:20:a4:e0:a7:c1:d0:37: be:27:b7:74:fb:09:5f:8f:b5:f3:b3:71:04:10:ac: e8:3e:d3:61:ae:09:1d:1e:87:5c:1c:c3:db:5c:bd: 71:1e:c9:8e:cd:f4:a9:78:08:d6:93:c2:e8:67:e8: d6:eb:69:9d:c1:5c:12:85:36:8f:07:6a:d7:eb:ed: ce:64:9a:1b:ac:c7:cd:e5:27:11:f3:1b:9e:84:8e: ae:f5:33:e9:1c:36:a6:6f:5a:ea:47:34:f1:84:7c: 6c:82:2e:ec:bd:4b:5f:3d:f9:ff:ed:8f:51:50:67: 70:b4:ea:65:f9:59:5c:8d:91:ec:fe:8a:62:8c:04: 44:b0:a1:81:8b:d3:0e:52:31:3c:bf:47:36:9b:7b: 53:11:2a:0d:3c:6b:d9:5e:76:64:fb:69:74:c7:86: 38:34:d8:8c:da:2d:a6:e4:1c:62:f5:a4:0f:4c:ed: 92:db:28:f0:86:82:c8:82:ef:27:77:af:0d:e2:8b: 70:97:96:74:e8:27:01:31:d8:4d:9e:aa:a5:be:f1: bf:59:52:23:4b:b5:11:5d:f9:44:fd:84:f1:d5:83: e5:07:4c:98:e2:21:2b:15:39:a1:0c:8b:7c:d3:76: 4b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:76:E0:B7:F9:65:02:6E:69:BF:E1:5C:5E:F7:61:B2:CF:1D:70:61 X509v3 Authority Key Identifier: keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:18:b7:1a:3b:4b:82:99:8c:2b:6a:7f:32:6f:36:43:e8:4a: c0:05:d6:ae:9a:c4:bd:5c:0f:d3:e2:91:7d:e4:3e:fc:46:05: a6:8e:6a:d1:ed:f9:29:27:bd:61:a3:49:f7:e5:65:63:8a:99: 39:0f:6a:c2:72:85:15:bf:cb:ce:f3:e4:2a:50:2c:67:04:a6: a5:9e:05:c7:98:53:0d:bb:b5:43:c2:ef:fc:d6:24:a8:b2:33: bf:cd:e9:fe:f4:49:9b:54:ad:35:b7:e0:d7:b4:a8:d3:df:f3: 73:f3:03:3f:58:fa:01:f1:05:ab:f1:6f:10:39:50:7c:f7:90: df:bf:80:dd:c6:18:76:57:ef:8a:fa:58:55:32:d3:f6:1e:16: 44:e1:cf:9a:46:db:b1:73:be:2c:b6:09:65:ed:25:4b:30:15: 6d:3d:32:69:3d:e6:14:00:cb:9c:94:be:c7:23:9f:ca:1f:bc: 5d:fc:eb:ab:7c:68:85:e5:02:96:d8:23:de:32:4b:ba:ed:55: 1d:6d:9b:c5:cb:a7:c5:1b:1d:c4:eb:ef:3e:84:5a:16:86:91: 8f:bc:23:d3:a0:ba:b7:50:5c:e9:0f:92:54:0e:f7:0e:0b:d1: 38:6f:cd:aa:aa:13:01:98:e9:a5:97:9d:42:75:29:c2:01:81: 93:1d:fe:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXDiGRYU9HJwYLUuOK7yvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NmFjOWM3Njk5NzZmNmUyZTgyYWFjY2ZlMjM5YjZhYTE5 MjIzNzgwHhcNMjYwMTExMTQwMTAwWhcNMjYwMTEyMTQwMTAwWjAzMTEwLwYDVQQD EyhmZjc2ZTBiN2Y5NjUwMjZlNjliZmUxNWM1ZWY3NjFiMmNmMWQ3MDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfj+mf5TfjmCWoJeRVwaYL/p44Cx gyCk4KfB0De+J7d0+wlfj7Xzs3EEEKzoPtNhrgkdHodcHMPbXL1xHsmOzfSpeAjW k8LoZ+jW62mdwVwShTaPB2rX6+3OZJobrMfN5ScR8xuehI6u9TPpHDamb1rqRzTx hHxsgi7svUtfPfn/7Y9RUGdwtOpl+VlcjZHs/opijAREsKGBi9MOUjE8v0c2m3tT ESoNPGvZXnZk+2l0x4Y4NNiM2i2m5Bxi9aQPTO2S2yjwhoLIgu8nd68N4otwl5Z0 6CcBMdhNnqqlvvG/WVIjS7URXflE/YTx1YPlB0yY4iErFTmhDIt803ZLyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP924Lf5ZQJuab/hXF73YbLPHXBhMB8GA1UdIwQY MBaAFDVqycdpl29uLoKqzP4jm2qhkiN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldySngybVhiMjR1Z3FyTV9pT2JhcUdTSTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZWZlNjctM2ViZC00NmNiLWJjYzgt NmM2MWE5MDIzMTM5LzEvTldySngybVhiMjR1Z3FyTV9pT2JhcUdTSTNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lZWZlNjctM2ViZC00NmNiLWJjYzgtNmM2MWE5MDIzMTM5 LzEvTldySngybVhiMjR1Z3FyTV9pT2JhcUdTSTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRi3GjtL gpmMK2p/Mm82Q+hKwAXWrprEvVwP0+KRfeQ+/EYFpo5q0e35KSe9YaNJ9+VlY4qZ OQ9qwnKFFb/LzvPkKlAsZwSmpZ4Fx5hTDbu1Q8Lv/NYkqLIzv83p/vRJm1StNbfg 17So09/zc/MDP1j6AfEFq/FvEDlQfPeQ37+A3cYYdlfvivpYVTLT9h4WROHPmkbb sXO+LLYJZe0lSzAVbT0yaT3mFADLnJS+xyOfyh+8Xfzrq3xoheUCltgj3jJLuu1V HW2bxcunxRsdxOvvPoRaFoaRj7wj06C6t1Bc6Q+SVA73DgvROG/NqqoTAZjppZed QnUpwgGBkx3+ZA== -----END CERTIFICATE-----Generated at Mon Jan 12 00:34:51 2026 by rpki-client