This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json) Hash identifier: oXoLUjktVzd5tTWPy8QHq7NDEKEWDlGfvbNtNbP+pz8= Subject key identifier: 40:AE:07:1E:55:7D:2C:D6:8B:D1:DD:D6:D5:DC:3B:E6:31:44:A7:43 Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80 Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080 Certificate serial: 019BFCF7E111F4E7D1C038A25511CAD2B49F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft Manifest number: 1151 Signing time: Tue 27 Jan 2026 01:01:01 +0000 Manifest this update: Tue 27 Jan 2026 01:01:01 +0000 Manifest next update: Wed 28 Jan 2026 01:01:01 +0000 Files and hashes: 1: 0KXcrZCfQQCMUJ-Oh6SKIaYBOxQ.roa (hash: gzxW7vQjQaL5VdH2MwBQ91tWqChVH7iFvHzc5ySCf74=) 2: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: YCeVMSsJcSQFV4EzfoGleZmZ/lW0g+5ql69h384kFAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f7:e1:11:f4:e7:d1:c0:38:a2:55:11:ca:d2:b4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080 Validity Not Before: Jan 27 01:01:01 2026 GMT Not After : Jan 28 01:01:01 2026 GMT Subject: CN=40ae071e557d2cd68bd1ddd6d5dc3be63144a743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a3:4d:ae:7d:ba:be:54:86:c0:1e:52:fc:4b: 72:82:4e:9c:2b:33:d6:35:6f:f0:04:02:1d:0f:c7: 6b:81:92:93:78:fe:c6:9e:a1:2f:4b:8c:4c:41:e8: b2:58:e7:11:f2:0e:8f:41:2c:a9:46:d9:e2:8c:68: c2:42:6c:32:53:3f:00:99:01:c0:76:eb:c9:43:dc: 41:14:d0:b5:6a:68:77:ca:5c:86:23:ad:46:56:47: 02:64:6f:c6:e9:cb:38:29:a6:6d:96:06:f9:dc:17: a8:4a:38:ea:26:e2:53:ad:73:89:7e:b3:1d:e4:84: 14:c8:75:e9:39:89:8d:3f:03:d5:a4:be:e2:6a:10: 42:ed:dc:a7:2f:28:a4:c6:ed:c5:3c:77:43:c1:24: 24:d9:96:19:25:f4:f6:5a:ac:bb:82:8a:af:fa:8a: 14:8c:f1:50:6a:58:48:29:a2:d8:8d:16:ff:e7:cf: 91:2b:4c:14:39:86:bc:a3:6a:4d:b4:83:1f:70:c7: 04:9f:50:39:fe:49:02:12:64:19:35:94:38:1d:72: da:ee:94:c3:2e:45:55:70:f1:88:a8:35:40:3e:93: 9f:df:35:fb:de:af:4c:20:f7:cc:7c:a1:7f:f3:c9: c6:b7:84:42:e2:de:99:91:61:6d:05:ee:46:66:2e: cf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AE:07:1E:55:7D:2C:D6:8B:D1:DD:D6:D5:DC:3B:E6:31:44:A7:43 X509v3 Authority Key Identifier: keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:aa:f2:ca:fe:e7:e2:27:a1:4e:c9:1a:94:73:12:0a:6a:b5: 12:07:ad:e5:9f:19:f2:0c:c9:1b:38:36:bb:85:c1:d0:72:2e: ac:76:8d:ed:bc:8c:36:cc:f7:90:16:79:6f:dd:36:fc:dd:7b: b2:cd:02:90:c7:43:90:f4:88:2f:ef:44:7f:e3:ac:f5:a6:ff: 47:f4:5d:4e:c0:14:ec:42:df:34:d0:9f:2a:85:8c:27:95:6e: 07:ba:5a:52:d2:3d:11:62:fb:ff:65:cb:3c:ba:93:80:c5:b5: aa:b3:bf:64:40:26:4a:47:e6:1d:8b:4d:76:e9:33:00:04:cc: f5:25:a4:10:cb:07:ca:ce:29:f0:85:a7:ac:85:3f:08:af:ee: d1:9f:ff:5b:b5:ca:6c:10:a6:7a:41:0b:03:0a:0f:19:8c:21: b3:28:75:36:89:d4:2f:01:1c:3e:6b:8f:be:8a:82:5b:96:45: 3e:aa:5d:06:e6:82:62:1b:c6:34:24:1a:9e:b3:4a:d8:5d:7b: 9e:4c:d4:12:fb:34:b2:98:73:17:65:c6:9c:49:f3:b1:77:3b: 94:a6:ef:cd:1e:cb:2a:5c:67:c1:d2:0f:7f:df:fb:b5:8a:80: 3f:4f:69:d9:65:a6:26:b2:7c:20:02:e7:75:11:7d:94:03:a5: fd:74:b7:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv89+ER9OfRwDiiVRHK0rSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTRmZjY3ZjNiOGQ0ZjZmNmJkYTIzZWNiYmM3YjBmMDlm ZTYwODAwHhcNMjYwMTI3MDEwMTAxWhcNMjYwMTI4MDEwMTAxWjAzMTEwLwYDVQQD Eyg0MGFlMDcxZTU1N2QyY2Q2OGJkMWRkZDZkNWRjM2JlNjMxNDRhNzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaNNrn26vlSGwB5S/Etygk6cKzPW NW/wBAIdD8drgZKTeP7GnqEvS4xMQeiyWOcR8g6PQSypRtnijGjCQmwyUz8AmQHA duvJQ9xBFNC1amh3ylyGI61GVkcCZG/G6cs4KaZtlgb53BeoSjjqJuJTrXOJfrMd 5IQUyHXpOYmNPwPVpL7iahBC7dynLyikxu3FPHdDwSQk2ZYZJfT2Wqy7goqv+ooU jPFQalhIKaLYjRb/58+RK0wUOYa8o2pNtIMfcMcEn1A5/kkCEmQZNZQ4HXLa7pTD LkVVcPGIqDVAPpOf3zX73q9MIPfMfKF/88nGt4RC4t6ZkWFtBe5GZi7PkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECuBx5VfSzWi9Hd1tXcO+YxRKdDMB8GA1UdIwQY MBaAFDUU/2fzuNT29r2iPsu8ew8J/mCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJUX1pfTzQxUGIydmFJLXk3eDdEd24tWUlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hODE1YjMtYzQ4Yy00ZmY5LTk4OWQt ODg1NGM5MmQ0N2IxLzEvTlJUX1pfTzQxUGIydmFJLXk3eDdEd24tWUlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hODE1YjMtYzQ4Yy00ZmY5LTk4OWQtODg1NGM5MmQ0N2Ix LzEvTlJUX1pfTzQxUGIydmFJLXk3eDdEd24tWUlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKryyv7n 4iehTskalHMSCmq1Eget5Z8Z8gzJGzg2u4XB0HIurHaN7byMNsz3kBZ5b902/N17 ss0CkMdDkPSIL+9Ef+Os9ab/R/RdTsAU7ELfNNCfKoWMJ5VuB7paUtI9EWL7/2XL PLqTgMW1qrO/ZEAmSkfmHYtNdukzAATM9SWkEMsHys4p8IWnrIU/CK/u0Z//W7XK bBCmekELAwoPGYwhsyh1NonULwEcPmuPvoqCW5ZFPqpdBuaCYhvGNCQanrNK2F17 nkzUEvs0sphzF2XGnEnzsXc7lKbvzR7LKlxnwdIPf9/7tYqAP09p2WWmJrJ8IALn dRF9lAOl/XS3Gg== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:55 2026 by rpki-client