This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft File: kN_zHRsERNQgTeFYTQDd-WjQsBI.mft (raw, json) Hash identifier: wYw6Qsem83+jJE3ze2VdHndS5nU15N4PZ804Fd+aXWk= Subject key identifier: 47:E3:A0:53:16:09:60:6A:44:3A:E7:D7:94:D4:0F:0F:BC:BB:BA:74 Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12 Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012 Certificate serial: 019BF9888D13F4ADD476B34A515C5EBA5206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft Manifest number: 0C5F Signing time: Mon 26 Jan 2026 09:00:34 +0000 Manifest this update: Mon 26 Jan 2026 09:00:34 +0000 Manifest next update: Tue 27 Jan 2026 09:00:34 +0000 Files and hashes: 1: SwQK8a0RuGojFMRd-1GGkonnT-U.roa (hash: 7GJC22Eus5d8mAhvDyq0PoK19aG3z12w1E45uuUpyP4=) 2: kN_zHRsERNQgTeFYTQDd-WjQsBI.crl (hash: 5Wnx0Z/LWOssLUX/+FdHYcsGoDp/JAyA6vXEPl2GEWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:8d:13:f4:ad:d4:76:b3:4a:51:5c:5e:ba:52:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012 Validity Not Before: Jan 26 09:00:34 2026 GMT Not After : Jan 27 09:00:34 2026 GMT Subject: CN=47e3a0531609606a443ae7d794d40f0fbcbbba74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:46:28:c8:c0:14:04:df:09:ff:5d:b5:13: bf:ad:0a:bd:ed:a2:18:c4:48:e6:41:bd:22:17:06: 85:f8:50:23:5c:e7:9d:12:e5:d0:4e:65:2a:e4:14: 8d:91:6d:2b:ec:36:1b:e7:e8:2b:15:70:a6:58:5a: 17:57:9a:3c:4e:cb:13:50:f4:6a:a1:86:21:1d:52: a5:62:72:38:6f:13:04:ae:2c:a7:79:87:8a:f4:40: 64:01:5e:3c:2c:61:e4:d3:e4:79:6f:09:08:b8:1d: 44:05:13:e2:75:f4:61:9f:46:51:90:5a:0d:7a:e7: 4c:ce:9a:e6:ba:6c:70:7e:39:f1:63:75:ce:f6:ef: d5:98:69:6e:ec:68:7c:37:d0:ef:7e:6a:c7:7b:44: 3d:99:9d:3d:c6:f3:0f:6a:64:b4:de:e7:9c:b4:ff: 03:c9:d8:46:bb:7a:bb:00:b0:6e:f6:1c:fb:09:df: 30:6f:6d:eb:53:ad:20:59:b9:5c:be:a4:09:e3:02: 6a:0a:1c:a6:ff:c9:ba:58:9e:43:1f:ef:56:9b:7f: e2:b9:63:24:cf:ee:1b:d7:96:d4:23:29:16:fe:b6: 3c:9f:8f:5f:7d:40:c1:ab:92:83:2b:4f:8e:08:ee: 38:57:ee:ce:fe:21:1e:1b:bc:2b:80:aa:66:1f:a1: 54:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E3:A0:53:16:09:60:6A:44:3A:E7:D7:94:D4:0F:0F:BC:BB:BA:74 X509v3 Authority Key Identifier: keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:c5:ed:2b:74:d8:23:02:6c:7a:4e:80:36:1f:ed:7f:13:97: f6:01:40:5d:7f:01:0e:66:07:60:f7:b9:92:64:b6:8f:c9:b2: af:5e:08:e7:dc:dd:81:94:3e:10:ac:60:1f:1f:49:37:48:07: 76:52:1b:fc:ca:ab:e6:9e:79:5a:3c:c0:ef:e3:b3:17:92:03: 19:c4:a9:c4:a3:46:b3:30:13:29:dd:f2:d2:a7:72:b0:8a:04: 1a:45:7b:7c:5e:fd:99:a4:c1:20:76:c8:55:f0:e6:b7:e7:78: 0a:06:7a:09:3c:e2:83:dc:2c:03:45:f9:41:41:5e:28:c1:14: 7f:ac:43:b4:f2:0e:42:36:03:6e:05:ca:b2:4c:d6:38:59:9a: 66:15:95:fc:b8:1c:71:61:2b:53:96:a9:31:ef:bf:b9:27:af: c2:47:0f:eb:33:f3:50:70:6a:92:52:a7:38:91:a0:28:d5:35: 71:04:23:df:8b:3e:fe:63:40:b6:0d:c8:d9:de:99:1d:dc:22: af:7f:c4:6c:a8:63:56:a7:d5:e1:83:49:4d:11:90:54:fb:c7: 5d:71:4d:48:ec:f0:a8:b9:a8:7f:33:27:bf:4e:f8:f7:0f:d1: 2a:38:55:2d:0d:b1:f2:de:4c:54:a5:f5:21:32:0c:77:ae:b0: 6a:40:2a:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iI0T9K3UdrNKUVxeulIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZGZmMzFkMWIwNDQ0ZDQyMDRkZTE1ODRkMDBkZGY5Njhk MGIwMTIwHhcNMjYwMTI2MDkwMDM0WhcNMjYwMTI3MDkwMDM0WjAzMTEwLwYDVQQD Eyg0N2UzYTA1MzE2MDk2MDZhNDQzYWU3ZDc5NGQ0MGYwZmJjYmJiYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu9GKMjAFATfCf9dtRO/rQq97aIY xEjmQb0iFwaF+FAjXOedEuXQTmUq5BSNkW0r7DYb5+grFXCmWFoXV5o8TssTUPRq oYYhHVKlYnI4bxMEriyneYeK9EBkAV48LGHk0+R5bwkIuB1EBRPidfRhn0ZRkFoN eudMzprmumxwfjnxY3XO9u/VmGlu7Gh8N9DvfmrHe0Q9mZ09xvMPamS03uectP8D ydhGu3q7ALBu9hz7Cd8wb23rU60gWblcvqQJ4wJqChym/8m6WJ5DH+9Wm3/iuWMk z+4b15bUIykW/rY8n49ffUDBq5KDK0+OCO44V+7O/iEeG7wrgKpmH6FUzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfjoFMWCWBqRDrn15TUDw+8u7p0MB8GA1UdIwQY MBaAFJDf8x0bBETUIE3hWE0A3flo0LASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva05fekhSc0VSTlFnVGVGWVRRRGQtV2pRc0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85OWEzY2EtN2U1Yy00OGQ0LWI5NzUt OWYyMTRkMWJhOTM0LzEva05fekhSc0VSTlFnVGVGWVRRRGQtV2pRc0JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC85OWEzY2EtN2U1Yy00OGQ0LWI5NzUtOWYyMTRkMWJhOTM0 LzEva05fekhSc0VSTlFnVGVGWVRRRGQtV2pRc0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx8XtK3TY IwJsek6ANh/tfxOX9gFAXX8BDmYHYPe5kmS2j8myr14I59zdgZQ+EKxgHx9JN0gH dlIb/Mqr5p55WjzA7+OzF5IDGcSpxKNGszATKd3y0qdysIoEGkV7fF79maTBIHbI VfDmt+d4CgZ6CTzig9wsA0X5QUFeKMEUf6xDtPIOQjYDbgXKskzWOFmaZhWV/Lgc cWErU5apMe+/uSevwkcP6zPzUHBqklKnOJGgKNU1cQQj34s+/mNAtg3I2d6ZHdwi r3/EbKhjVqfV4YNJTRGQVPvHXXFNSOzwqLmofzMnv0749w/RKjhVLQ2x8t5MVKX1 ITIMd66wakAqcw== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:26 2026 by rpki-client