This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json) Hash identifier: L/07FrHNtrXFh5fpHlpN6GVFR6rw4GYfUdEPr57m8pk= Subject key identifier: E7:12:13:73:0B:E3:0A:2F:86:0D:D6:FF:E2:2F:7B:EC:3D:AC:3C:0A Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95 Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95 Certificate serial: 019BFD65F8F7D862C17B07C1F93DE018D4A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft Manifest number: 10B0 Signing time: Tue 27 Jan 2026 03:01:16 +0000 Manifest this update: Tue 27 Jan 2026 03:01:16 +0000 Manifest next update: Wed 28 Jan 2026 03:01:16 +0000 Files and hashes: 1: CXpfYBeROwqKk6wPP8obU4SkW0c.roa (hash: eH5Dz/cn97xfby/TCzcXeuSIcb3N3axo2YR3ovzvm14=) 2: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: DgSXNmyAGIWWZwjnv1f2826EuFG8H13434mSaqLq5lY=) 3: lwYSlpTcrkiQkDzeOQ8BoLNseFE.roa (hash: 5tgpdt7/xmiOrPEu2MALXWkNE2cqkUWOYBS+UkJ1nT0=) 4: sgMcau3D-EQEi1zB4j-31e-AG0g.roa (hash: feRutTx2W38pnuALKbaPopDGRLCZYDeeC1Z2bMCEyeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:f8:f7:d8:62:c1:7b:07:c1:f9:3d:e0:18:d4:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95 Validity Not Before: Jan 27 03:01:16 2026 GMT Not After : Jan 28 03:01:16 2026 GMT Subject: CN=e71213730be30a2f860dd6ffe22f7bec3dac3c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:66:8d:cd:4c:26:0e:c2:1c:37:2a:c0:40: 66:ea:67:ae:e8:92:3a:44:f1:a2:7d:93:ff:35:87: 89:32:ff:5d:3e:77:39:ed:7c:c9:8b:50:89:4a:6a: 07:71:51:ff:bc:10:31:49:ed:8e:7c:c5:37:1e:94: 52:24:12:e4:f6:cb:99:06:24:22:70:09:e6:aa:7a: c6:90:da:c3:c7:db:31:59:4b:92:01:f5:0a:9f:f2: 28:2a:62:b9:bf:38:83:57:49:5d:80:70:49:37:28: 16:b0:8b:c0:b6:3d:cf:e1:67:2f:4b:0b:10:a0:0a: c5:97:1f:8b:bd:bf:5b:6e:59:10:75:66:bd:e9:06: 30:36:8c:25:93:15:32:e0:90:be:00:80:1b:ca:76: 78:f0:c0:29:9c:e1:5d:40:17:d2:c0:30:f6:0a:d6: c2:fc:c1:bb:42:1c:c5:2f:f3:4e:29:5f:d0:37:61: bd:ad:28:8d:a8:64:f5:bb:a4:c3:a3:2d:50:42:40: 9c:44:25:a8:f1:97:4d:bc:ec:8c:17:11:d3:33:8e: 51:eb:58:20:79:e6:51:54:4f:dc:97:24:8c:eb:ac: 8d:ff:b8:43:ad:c1:2c:ee:15:11:54:23:27:c6:fd: 29:06:6b:f8:0c:ba:d6:61:32:e3:3c:94:0f:48:8e: 3b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:12:13:73:0B:E3:0A:2F:86:0D:D6:FF:E2:2F:7B:EC:3D:AC:3C:0A X509v3 Authority Key Identifier: keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:de:a1:6f:a1:63:c1:64:eb:3e:0c:2d:50:8f:7f:e3:93:78: 9b:0c:72:54:94:77:24:de:9f:33:75:52:bc:4c:d1:10:5a:0e: 8b:7f:c7:72:05:86:6d:ce:f1:66:a6:2f:a8:9b:c6:eb:d4:b9: dd:8e:2b:a7:62:84:7c:e7:c5:d4:05:fa:60:f0:a3:dc:b9:e8: 7d:a1:9a:de:f5:3b:c5:65:06:3a:47:78:c0:e2:06:91:9b:30: d3:0d:94:17:87:f1:5a:7b:c0:1a:46:ad:7c:6d:78:4a:44:d7: 02:47:66:46:bf:d9:13:36:2a:dd:7b:6d:44:00:53:78:67:76: 75:57:24:d0:fa:02:72:38:5b:dd:f1:54:cf:d8:12:e7:2d:bb: af:ce:d5:a1:95:55:13:2f:1c:9d:25:6d:11:f7:41:e5:29:ba: 7a:71:be:fc:a6:f9:c3:a4:a8:a3:77:8b:d7:d7:c1:5d:ac:fa: 32:20:f4:d1:6a:df:5f:e3:ee:c2:d3:6b:64:b6:07:a8:9f:99: aa:2a:5b:e1:e4:0e:5b:7b:f4:51:a7:bb:27:21:da:07:ce:c6: 90:a0:99:d2:e3:3e:a7:69:20:dc:91:12:01:7d:48:b3:10:ad: 63:c6:a8:22:63:8a:e8:da:ea:8a:1f:49:53:08:4f:fe:07:96: 2f:6e:fd:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9Zfj32GLBewfB+T3gGNSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YjQxOWZhNGEwYTE2MDUxODgzMThjZGY0YTIwNDQ5OTI4 NTNiOTUwHhcNMjYwMTI3MDMwMTE2WhcNMjYwMTI4MDMwMTE2WjAzMTEwLwYDVQQD EyhlNzEyMTM3MzBiZTMwYTJmODYwZGQ2ZmZlMjJmN2JlYzNkYWMzYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYZmjc1MJg7CHDcqwEBm6meu6JI6 RPGifZP/NYeJMv9dPnc57XzJi1CJSmoHcVH/vBAxSe2OfMU3HpRSJBLk9suZBiQi cAnmqnrGkNrDx9sxWUuSAfUKn/IoKmK5vziDV0ldgHBJNygWsIvAtj3P4WcvSwsQ oArFlx+Lvb9bblkQdWa96QYwNowlkxUy4JC+AIAbynZ48MApnOFdQBfSwDD2CtbC /MG7QhzFL/NOKV/QN2G9rSiNqGT1u6TDoy1QQkCcRCWo8ZdNvOyMFxHTM45R61gg eeZRVE/clySM66yN/7hDrcEs7hURVCMnxv0pBmv4DLrWYTLjPJQPSI47uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcSE3ML4wovhg3W/+Ive+w9rDwKMB8GA1UdIwQY MBaAFDS0GfpKChYFGIMYzfSiBEmShTuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMt ODc3NzU0NGM5Mjc1LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMtODc3NzU0NGM5Mjc1 LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOd6hb6Fj wWTrPgwtUI9/45N4mwxyVJR3JN6fM3VSvEzREFoOi3/HcgWGbc7xZqYvqJvG69S5 3Y4rp2KEfOfF1AX6YPCj3LnofaGa3vU7xWUGOkd4wOIGkZsw0w2UF4fxWnvAGkat fG14SkTXAkdmRr/ZEzYq3XttRABTeGd2dVck0PoCcjhb3fFUz9gS5y27r87VoZVV Ey8cnSVtEfdB5Sm6enG+/Kb5w6Soo3eL19fBXaz6MiD00WrfX+PuwtNrZLYHqJ+Z qipb4eQOW3v0Uae7JyHaB87GkKCZ0uM+p2kg3JESAX1IsxCtY8aoImOK6Nrqih9J UwhP/geWL279eg== -----END CERTIFICATE-----Generated at Tue Jan 27 06:09:53 2026 by rpki-client