This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json) Hash identifier: qbQAE8sm7zB4eISX5MUCbO55jlzUrI9XdHNF8wsXyes= Subject key identifier: 05:1C:5D:89:BC:D0:BA:F8:F1:9F:BB:60:95:5D:A6:6A:AE:2A:D7:CA Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25 Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025 Certificate serial: 019BFA2D6573A55B98248AC22196FBD181A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft Manifest number: 06CE Signing time: Mon 26 Jan 2026 12:00:37 +0000 Manifest this update: Mon 26 Jan 2026 12:00:37 +0000 Manifest next update: Tue 27 Jan 2026 12:00:37 +0000 Files and hashes: 1: 3wCTKZJQPis0KQk9Utd2SXEOMQo.roa (hash: tAgV9CKvm/cmiM8EtlRfwVodU066LHap/WgiRXzET/w=) 2: C29RUK-qTDoRIZIVb7crIuPreWM.roa (hash: mdSn+zkOr0EwMF5gIU0hQilaSvKGXBzAoemCMvqxqC4=) 3: PAKafREmkHGfeg_qAOjMfzNKk8s.roa (hash: 0HHaXCqodqraRNsfrETju1ZWXLWLaPJS1a1DSuGXS3g=) 4: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: kO0NjoepN9g9m+fk3ox/KOXIcipnfaO4urJQtVijUyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:65:73:a5:5b:98:24:8a:c2:21:96:fb:d1:81:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e475c9202606e6667e94a779e903db697a59025 Validity Not Before: Jan 26 12:00:37 2026 GMT Not After : Jan 27 12:00:37 2026 GMT Subject: CN=051c5d89bcd0baf8f19fbb60955da66aae2ad7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:17:19:3c:6f:64:e3:af:e2:6d:a5:2a:42: 46:52:b9:bd:4d:f5:b7:53:78:ea:8c:34:30:9d:86: 3b:78:69:25:68:59:34:8a:94:36:14:7b:7f:f0:1c: 80:85:d4:25:8b:26:c8:19:74:b9:52:40:48:b8:8f: 90:91:bb:ff:ca:b1:0b:d6:c1:bc:57:7f:49:40:d1: 4f:4e:2e:6f:b3:1b:f4:7f:c5:9c:6e:05:2b:7e:34: cc:52:71:2b:7c:17:14:c7:b9:09:62:ac:07:f8:e8: 53:21:0d:62:4f:2f:4d:56:b3:ea:58:8f:69:b9:0a: 8d:10:ec:3d:7c:1b:0b:0e:70:84:b7:ba:40:4c:7f: e7:a8:ef:05:67:4c:1a:52:2b:6a:89:96:29:70:24: c1:f4:20:4b:89:e3:ad:38:07:e1:38:a2:8d:00:5f: 39:68:a5:c9:da:82:99:37:bd:7e:53:41:0d:4b:94: 4c:77:33:fc:fd:30:5a:03:a7:d8:0d:5b:ac:b9:81: cd:90:1c:e0:b1:a1:27:66:b9:4c:2e:e9:21:1d:86: e4:2f:57:4c:af:58:97:5f:11:30:42:df:6b:37:9c: a3:97:ec:77:38:c1:b8:60:72:53:73:f6:ae:34:c8: 18:72:9d:5a:a8:76:90:a8:f0:bf:06:48:bd:5a:07: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1C:5D:89:BC:D0:BA:F8:F1:9F:BB:60:95:5D:A6:6A:AE:2A:D7:CA X509v3 Authority Key Identifier: keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3d:9f:a8:aa:37:ee:7f:68:58:94:df:a9:12:28:f8:f3:ca: ac:66:70:cb:90:c7:f4:53:2b:32:57:1e:5a:c9:ad:db:86:ad: 49:0f:92:ba:06:bc:80:a6:d7:e4:ee:5f:82:55:fd:0f:1b:19: f6:ff:66:49:3c:6f:63:92:07:d0:82:f0:32:c0:e7:0f:df:2e: 48:60:d8:86:3f:32:2c:b8:c2:13:82:a0:67:ef:0a:04:96:71: 49:73:44:3d:4d:df:e9:a8:7d:72:f4:c6:0a:33:dc:dd:a9:85: a4:98:b1:cf:4e:d8:24:00:81:6a:cf:09:a6:0e:54:3f:8d:ae: 92:2c:47:46:ee:1d:cf:8e:e1:89:e0:0b:19:7a:2f:89:c5:d0: f3:a6:ed:75:ea:80:20:f6:7a:39:ac:db:a9:08:ce:ff:9c:d7: 02:99:61:f7:50:3c:72:e3:ee:b5:41:fa:6c:ad:e7:56:10:ad: 0d:db:ad:29:41:9a:d9:22:43:fb:05:24:dc:7c:c0:f9:06:c9: 94:3a:ec:58:71:7e:a7:b4:dc:a8:fd:ca:08:6b:64:d8:75:e4: 0e:7f:75:ed:67:ab:f8:da:6d:ca:8c:e3:fc:2d:29:68:76:ea: dc:d1:ee:07:99:76:a0:d7:40:75:f6:44:a3:c0:9b:de:39:04: 35:e1:40:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LWVzpVuYJIrCIZb70YGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh NTkwMjUwHhcNMjYwMTI2MTIwMDM3WhcNMjYwMTI3MTIwMDM3WjAzMTEwLwYDVQQD EygwNTFjNWQ4OWJjZDBiYWY4ZjE5ZmJiNjA5NTVkYTY2YWFlMmFkN2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY8XGTxvZOOv4m2lKkJGUrm9TfW3 U3jqjDQwnYY7eGklaFk0ipQ2FHt/8ByAhdQliybIGXS5UkBIuI+Qkbv/yrEL1sG8 V39JQNFPTi5vsxv0f8WcbgUrfjTMUnErfBcUx7kJYqwH+OhTIQ1iTy9NVrPqWI9p uQqNEOw9fBsLDnCEt7pATH/nqO8FZ0waUitqiZYpcCTB9CBLieOtOAfhOKKNAF85 aKXJ2oKZN71+U0ENS5RMdzP8/TBaA6fYDVusuYHNkBzgsaEnZrlMLukhHYbkL1dM r1iXXxEwQt9rN5yjl+x3OMG4YHJTc/auNMgYcp1aqHaQqPC/Bki9WgdTpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUcXYm80Lr48Z+7YJVdpmquKtfKMB8GA1UdIwQY MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt Y2NiYjZlOTBhMTliLzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjj2fqKo3 7n9oWJTfqRIo+PPKrGZwy5DH9FMrMlceWsmt24atSQ+Suga8gKbX5O5fglX9DxsZ 9v9mSTxvY5IH0ILwMsDnD98uSGDYhj8yLLjCE4KgZ+8KBJZxSXNEPU3f6ah9cvTG CjPc3amFpJixz07YJACBas8Jpg5UP42ukixHRu4dz47hieALGXovicXQ86btdeqA IPZ6OazbqQjO/5zXAplh91A8cuPutUH6bK3nVhCtDdutKUGa2SJD+wUk3HzA+QbJ lDrsWHF+p7TcqP3KCGtk2HXkDn917Wer+Nptyozj/C0paHbq3NHuB5l2oNdAdfZE o8Cb3jkENeFA2g== -----END CERTIFICATE-----Generated at Mon Jan 26 15:21:14 2026 by rpki-client