This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft File: nHEi8vf6UwvxqP_Plqkw9psw94Y.mft (raw, json) Hash identifier: Ow6EHxeP6XB/Y26WdBo/n3R3XLQtoEHjVeSC4j45laY= Subject key identifier: C3:11:B7:99:C5:EE:61:E6:18:8A:79:D9:A3:FE:88:2D:82:72:ED:7C Authority key identifier: 9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86 Certificate issuer: /CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786 Certificate serial: 019BF9F6BEE256DE06190BFEA1CFF804656D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft Manifest number: 04F2 Signing time: Mon 26 Jan 2026 11:00:56 +0000 Manifest this update: Mon 26 Jan 2026 11:00:56 +0000 Manifest next update: Tue 27 Jan 2026 11:00:56 +0000 Files and hashes: 1: JhF3GOLtCx8WeH-5uNg9S7FjsLc.roa (hash: Hkt3N4XjIsBhmx5Q0jNaJHb86kkU9pM6VSOMdFnRN1c=) 2: nHEi8vf6UwvxqP_Plqkw9psw94Y.crl (hash: V+Bjt+8DOshFLcCm4Yx8j3q49N/2sv2NGZyamBlprXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:be:e2:56:de:06:19:0b:fe:a1:cf:f8:04:65:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786 Validity Not Before: Jan 26 11:00:56 2026 GMT Not After : Jan 27 11:00:56 2026 GMT Subject: CN=c311b799c5ee61e6188a79d9a3fe882d8272ed7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:39:a2:f4:3a:06:61:90:3d:e4:d9:03:44:1d: 08:d3:65:80:4e:f5:32:f1:d2:58:00:54:d0:b8:bc: 12:75:96:87:25:b5:30:64:42:ab:dd:8a:38:b6:98: 71:88:b4:91:6b:60:29:a9:66:56:f1:01:f4:48:ff: 5b:4a:ae:e2:9a:b4:f5:6b:20:d8:11:0c:f6:05:43: cb:17:b8:04:de:3d:ff:10:07:27:de:56:78:df:fe: 63:11:8f:f1:55:9e:d5:33:8e:9b:b8:b5:31:40:03: 45:5e:0a:c2:b7:5f:61:6e:18:12:db:41:7e:d7:07: 0b:ab:e4:a3:ee:c8:e1:31:a6:d9:fb:16:ad:62:ec: a6:17:0a:b7:bb:46:4a:f6:b7:4b:96:ec:f4:3c:51: bb:6b:b2:18:39:5e:0a:7b:92:e9:5d:cc:2d:de:2d: d4:87:13:13:9f:3f:65:31:24:ca:b1:71:7d:c1:e9: 3c:68:4c:a4:e7:f5:d9:a6:a6:49:d0:83:be:a5:1a: 77:e8:0c:42:c7:5d:8d:84:78:45:29:2b:1c:ff:26: 20:a1:a5:f0:46:b1:ec:10:ec:c6:12:51:f7:dd:7b: 14:23:3e:c6:7b:3c:3a:af:47:eb:4d:aa:79:bf:3e: 4f:5e:f3:f9:8a:5c:bb:cd:22:d3:8e:f3:df:29:65: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:11:B7:99:C5:EE:61:E6:18:8A:79:D9:A3:FE:88:2D:82:72:ED:7C X509v3 Authority Key Identifier: keyid:9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:14:f9:c2:77:0d:f7:ef:a1:b6:95:74:c6:d0:26:fa:3a:b7: e6:83:5d:35:35:3a:22:b6:91:b0:53:92:2a:34:e3:af:69:30: 5e:eb:8b:e5:49:af:60:bb:27:ec:7f:d9:78:00:2a:a2:cc:6e: f7:51:01:5e:8a:c9:de:80:d0:9e:4f:d9:0b:52:8e:10:2e:25: ad:f4:23:8f:82:53:7b:e6:de:0c:0f:3a:a8:19:81:fc:ba:7b: ce:b3:2d:e8:16:39:df:61:a0:b6:f6:1d:e8:ac:44:ef:69:bd: 5b:6e:cf:32:20:91:45:b1:ef:53:4d:af:3b:20:f2:93:39:f0: f9:88:c7:c6:7c:7d:0c:a9:8c:ca:e4:68:90:e0:ed:ad:37:3b: f6:65:79:e1:51:1e:98:b1:3c:fc:0e:30:50:b0:e9:ae:fc:e1: 8d:8f:23:4c:17:34:b9:21:df:73:7d:f0:34:d6:81:4d:96:82: a5:dc:19:0e:8f:bb:89:c9:4e:94:b4:c9:8b:66:b7:03:b7:9e: 2b:4c:ed:db:ad:3e:1f:a0:9c:c4:fa:2b:2b:c7:d2:04:47:43: 3c:b0:14:a3:2a:37:b1:bf:51:18:31:be:6d:ec:df:99:05:7b: a9:e2:44:9c:46:39:d7:f0:8c:d1:d8:25:b9:e0:48:41:d8:3c: 45:21:b6:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59r7iVt4GGQv+oc/4BGVtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzEyMmYyZjdmYTUzMGJmMWE4ZmZjZjk2YTkzMGY2OWIz MGY3ODYwHhcNMjYwMTI2MTEwMDU2WhcNMjYwMTI3MTEwMDU2WjAzMTEwLwYDVQQD EyhjMzExYjc5OWM1ZWU2MWU2MTg4YTc5ZDlhM2ZlODgyZDgyNzJlZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzmi9DoGYZA95NkDRB0I02WATvUy 8dJYAFTQuLwSdZaHJbUwZEKr3Yo4tphxiLSRa2ApqWZW8QH0SP9bSq7imrT1ayDY EQz2BUPLF7gE3j3/EAcn3lZ43/5jEY/xVZ7VM46buLUxQANFXgrCt19hbhgS20F+ 1wcLq+Sj7sjhMabZ+xatYuymFwq3u0ZK9rdLluz0PFG7a7IYOV4Ke5LpXcwt3i3U hxMTnz9lMSTKsXF9wek8aEyk5/XZpqZJ0IO+pRp36AxCx12NhHhFKSsc/yYgoaXw RrHsEOzGElH33XsUIz7Gezw6r0frTap5vz5PXvP5ily7zSLTjvPfKWVVTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMRt5nF7mHmGIp52aP+iC2Ccu18MB8GA1UdIwQY MBaAFJxxIvL3+lML8aj/z5apMPabMPeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84M2UxZmUtM2Q0OC00Y2Q2LWE2MGIt NmIyNzMzNmQyNjllLzEvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS84M2UxZmUtM2Q0OC00Y2Q2LWE2MGItNmIyNzMzNmQyNjll LzEvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxT5wncN 9++htpV0xtAm+jq35oNdNTU6IraRsFOSKjTjr2kwXuuL5UmvYLsn7H/ZeAAqosxu 91EBXorJ3oDQnk/ZC1KOEC4lrfQjj4JTe+beDA86qBmB/Lp7zrMt6BY532GgtvYd 6KxE72m9W27PMiCRRbHvU02vOyDykznw+YjHxnx9DKmMyuRokODtrTc79mV54VEe mLE8/A4wULDprvzhjY8jTBc0uSHfc33wNNaBTZaCpdwZDo+7iclOlLTJi2a3A7ee K0zt260+H6CcxPorK8fSBEdDPLAUoyo3sb9RGDG+bezfmQV7qeJEnEY51/CM0dgl ueBIQdg8RSG2dQ== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:11 2026 by rpki-client