This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft File: nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json) Hash identifier: DA2SV1x/Y9gkNwaWvfZwJtL7la+ghS1OCgHOteZSTag= Subject key identifier: 46:75:AD:BE:1B:12:21:5B:CA:7D:44:11:E4:70:4B:FB:F2:97:93:16 Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19 Certificate serial: 019BFD65A13180986310F66C7E32D1213D3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft Manifest number: 131C Signing time: Tue 27 Jan 2026 03:00:54 +0000 Manifest this update: Tue 27 Jan 2026 03:00:54 +0000 Manifest next update: Wed 28 Jan 2026 03:00:54 +0000 Files and hashes: 1: 62kCfgONuAvqW1NUbM9Iz08pfMI.roa (hash: fIRjeYSveZsnghNhWxl6roWSFefdl9H5Q1zHdhCDvwE=) 2: 6HVpZjDJK-JDd4JLU8A4rcuFHLs.roa (hash: kIuNG7jafmgHvYNR9Juw4bgFLOduPI1o7DgjWmXFliU=) 3: 9KvmlPKsY8w8aZTFNLv0zg38axY.roa (hash: E6UjIGV/KuRgFN4UQnHUeYYcpZAFdXo3JairE/1g8kE=) 4: ELUa2vRm_h_Z93KcCk-HcWekDRU.roa (hash: ZBi1wRd/swMpVPnmEQ6bKzd+xCPdQKaLoo/Wn1BWpb8=) 5: J5ItodHrRCheXviqPMZtDDHgoRU.roa (hash: fl0j9Uu7JS7V1n5kkbcRFj/Trr5iL8zrAWPpKhN3sGg=) 6: l2E6mY8aodciL7VfrJ-bG1Otz1g.roa (hash: ZXoZR75GCkL1AmnFi9uJWSekp2vtcd2NLeogSddDB88=) 7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: RvgBNRDRUbiz9c7L5pOSJ4BoPsoSeQh0TIXyRBL4mUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:a1:31:80:98:63:10:f6:6c:7e:32:d1:21:3d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19 Validity Not Before: Jan 27 03:00:54 2026 GMT Not After : Jan 28 03:00:54 2026 GMT Subject: CN=4675adbe1b12215bca7d4411e4704bfbf2979316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:b5:27:f6:4a:f9:3c:1c:3d:9c:a0:04:a2: 34:1e:41:20:7c:43:66:89:37:32:61:43:34:b6:d9: d2:87:41:87:9a:20:35:db:fb:d2:bb:15:0b:ae:4f: d7:8a:b1:65:3e:5a:43:57:ec:a2:b2:b2:15:7a:cb: df:a2:87:68:ae:40:07:10:37:11:2e:fe:14:51:7e: 78:f2:2c:c5:3d:be:30:2a:3b:96:df:5e:cf:de:cb: 01:03:bc:44:ae:19:11:40:54:d7:78:7e:36:1a:2a: e5:9c:26:05:a0:95:e4:ff:ea:66:bc:fb:00:1f:56: 2a:91:60:2c:99:9d:2a:7f:de:42:a2:a4:0d:68:5f: 6b:1e:02:88:8a:a0:45:ba:5d:23:d3:77:ef:59:42: 52:5f:65:a0:0f:c9:b3:78:fe:96:5a:37:1b:e6:86: 92:8d:24:98:43:64:0c:25:55:8e:9b:1f:3f:08:8c: c4:3b:44:87:7a:29:14:9a:60:9a:96:0d:1e:d0:ce: ad:7e:68:f5:e6:f5:6e:fa:df:a8:46:7f:f3:f0:d5: eb:b3:bc:b9:1c:04:0a:cd:6d:be:8c:53:41:ea:89: 0a:ee:dd:5d:15:c1:cc:6e:c5:1d:16:96:f6:2c:10: a7:3f:20:c8:8b:4d:cd:c1:00:11:f5:78:64:d6:c2: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:75:AD:BE:1B:12:21:5B:CA:7D:44:11:E4:70:4B:FB:F2:97:93:16 X509v3 Authority Key Identifier: keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:3f:be:a1:17:ac:29:e3:ef:39:56:f0:1f:b9:8c:0d:53:13: 7a:fd:dd:ca:c6:23:40:1b:aa:9c:8e:ec:f9:46:b5:6a:d0:44: 91:19:08:b6:db:4d:82:fe:eb:85:5a:40:16:22:24:67:ab:09: a9:28:ef:1d:b2:aa:b7:75:b2:0e:43:15:49:3d:8c:77:c8:4f: e7:da:95:79:17:77:f3:1a:cb:dc:2b:42:56:7a:14:a6:6b:73: cd:3d:a4:92:57:64:55:d7:61:54:d7:3c:61:18:36:a2:66:5e: 2d:5a:76:3f:43:6f:bc:cd:42:60:2f:fa:a0:75:35:ca:b2:6b: 86:43:64:ca:ef:78:14:38:3a:84:30:76:90:87:08:7d:7b:29: 0c:45:e2:6e:b7:6c:71:cc:93:6d:3a:a6:40:ac:41:0a:c5:ba: ed:5a:dc:5a:50:f7:97:10:d4:86:ec:78:f7:6f:8f:fd:8c:09: a6:e9:1a:95:ec:4a:95:55:a8:d1:6f:20:6d:7d:3d:48:0d:d2: 7d:02:e2:8f:1c:c7:55:f2:82:b1:2f:b4:36:71:81:5c:8e:56: c2:b8:1a:22:91:52:6c:90:4f:89:ca:26:c5:3e:29:f3:a2:68: 92:94:2f:52:3a:02:8f:72:d6:e4:eb:09:ef:e2:d4:c8:93:98: 00:77:8b:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZaExgJhjEPZsfjLRIT0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz NThkMTkwHhcNMjYwMTI3MDMwMDU0WhcNMjYwMTI4MDMwMDU0WjAzMTEwLwYDVQQD Eyg0Njc1YWRiZTFiMTIyMTViY2E3ZDQ0MTFlNDcwNGJmYmYyOTc5MzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxde1J/ZK+TwcPZygBKI0HkEgfENm iTcyYUM0ttnSh0GHmiA12/vSuxULrk/XirFlPlpDV+yisrIVesvfoodorkAHEDcR Lv4UUX548izFPb4wKjuW317P3ssBA7xErhkRQFTXeH42GirlnCYFoJXk/+pmvPsA H1YqkWAsmZ0qf95CoqQNaF9rHgKIiqBFul0j03fvWUJSX2WgD8mzeP6WWjcb5oaS jSSYQ2QMJVWOmx8/CIzEO0SHeikUmmCalg0e0M6tfmj15vVu+t+oRn/z8NXrs7y5 HAQKzW2+jFNB6okK7t1dFcHMbsUdFpb2LBCnPyDIi03NwQAR9Xhk1sLJ8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZ1rb4bEiFbyn1EEeRwS/vyl5MWMB8GA1UdIwQY MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt YTU2YmRmYWRiODFlLzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANz++oRes KePvOVbwH7mMDVMTev3dysYjQBuqnI7s+Ua1atBEkRkItttNgv7rhVpAFiIkZ6sJ qSjvHbKqt3WyDkMVST2Md8hP59qVeRd38xrL3CtCVnoUpmtzzT2kkldkVddhVNc8 YRg2omZeLVp2P0NvvM1CYC/6oHU1yrJrhkNkyu94FDg6hDB2kIcIfXspDEXibrds ccyTbTqmQKxBCsW67VrcWlD3lxDUhux492+P/YwJpukalexKlVWo0W8gbX09SA3S fQLijxzHVfKCsS+0NnGBXI5WwrgaIpFSbJBPicomxT4p86JokpQvUjoCj3LW5OsJ 7+LUyJOYAHeLxw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:42:38 2026 by rpki-client