This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: wKMY9q6NeNaGorTi7iPg8FMcOPbNMLEcYYygv4BTVp4= Subject key identifier: 48:2A:B1:6C:85:66:0D:0D:3C:00:56:8D:D4:EF:61:62:77:29:41:0F Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019BFB40B39201A51C9845418759E22E30E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0C07 Signing time: Mon 26 Jan 2026 17:01:19 +0000 Manifest this update: Mon 26 Jan 2026 17:01:19 +0000 Manifest next update: Tue 27 Jan 2026 17:01:19 +0000 Files and hashes: 1: 1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa (hash: vXugVxE98o8Z5wA/8D/Y9pi3M5AMGKyN8v2Sry/3Otg=) 2: 2j-9yNtktHt5v3A9Kl3uT69XxUQ.roa (hash: kN6K0JrXyJLwNWerB4QQmyVz1nrq+uVY4rleX2HuK30=) 3: 3thexKCs9mTJ-g3YYgHPDfOYcIc.roa (hash: Tadv/Gad986b9FjzLOZ4GUKa4pADLYS5J1VXhc5Jv3A=) 4: CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa (hash: omyqw+bz7nV39lBVXP33JrADRI4H4vosedUdoUfqv5Y=) 5: KcpEeJ8nphqsMHAWxtLdQf-SPD8.roa (hash: 6dGG4UMu3+4l5GE0LXyb/M9jtsTpoowfhHp1qayn3yo=) 6: NiGyen5sRKPPy9T8u3ygDrmXuQo.roa (hash: 8KqO2nLQjwwDARGlN3phFNsy1np9TqX6quA7+00LgFU=) 7: PnMPikrtO33Vh6NkdCxq2k4w26M.roa (hash: YMF2rN1VGNaxWyBvf9HrWuFu9uMYn/avu3bG9vwb7sc=) 8: SUphdQJw-Hg0tkCTHAxdssxM7WU.roa (hash: K6sCasus5CCnYwQblrVqAaOdSMRGrcdNZpoyM5tiQkY=) 9: VXPnJamYnp-2hfTErEBbK3WjJ8w.roa (hash: qfiGUULcvtQTBu8EUEep+iCfwW6E13oKl3US/kmkUJY=) 10: Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa (hash: LeeoUYduefs5gVVp9SgvEfhcjETEvrL0skum1dKRrfw=) 11: Y2s2825ga2ucY3EOWuDfFuc9iPI.roa (hash: cqZwOJdbELkT6j9xmowfaAmEQNAvGVbEZxGevSkkmDk=) 12: _7KTUyvraj0jLcJwWnYx49GI_Ws.roa (hash: uTbeQlp1sTHWF8RgjB3gPB+04hQuOuoqkYdDsifDeDQ=) 13: aXDclZHDVbTyfTZN939aF-svW60.roa (hash: /lQRpMwNPjkJnTsNV0aDEnWjG52zU26fI7Sp7mQlgUw=) 14: eta-cr0KHPJdXK1igAnSrrgYgKo.roa (hash: 46b7pv6tWdNF77DVmTz4RmmApLLdlfpeLeUB6iPbMJ8=) 15: jgrnqFUINh9yQSbIH4pj0x-gEk0.roa (hash: OpDUk5IpNIdyhSv3cFKH41Wn9xn35YaFqaFD71SLY3I=) 16: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: cJhLybGTaWFuDX7mcTJDLo6or3m4HaZE7ldxJsNFY9s=) 17: nl6qPWMAnZASlpsl7namy3rQd64.roa (hash: loXDXRO+mPOB9lEz0UNovXlA+ursO+WZZ8rEXRBAgN4=) 18: pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa (hash: bifJOe/IS/0GcT2Z9iDNC5IwmSgJXexqKx52FOV+q98=) 19: tMgRfPFkf85axNNxn8QEdnO-WoY.roa (hash: HZTvV0+hdxoPX0EpNO2j0lRcXYZHcQUwXhCQeH87SF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:b3:92:01:a5:1c:98:45:41:87:59:e2:2e:30:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 26 17:01:19 2026 GMT Not After : Jan 27 17:01:19 2026 GMT Subject: CN=482ab16c85660d0d3c00568dd4ef61627729410f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:e1:05:36:27:e5:20:ca:33:61:38:e0:49: d4:4b:22:2f:49:c3:1b:b0:c8:9b:a8:8f:67:5b:8c: c6:b5:34:73:00:6c:2d:79:5a:e2:de:23:fd:76:28: 1d:a4:45:c6:f4:e7:b2:53:ab:bc:34:80:b5:77:a8: 0f:5b:02:f7:4f:59:84:8e:1b:67:01:b5:fe:7c:30: e6:cc:f3:bd:99:4b:de:4b:38:71:3c:8f:c0:85:f0: 5b:70:6d:50:c3:07:5c:e9:36:eb:12:42:e2:cc:bf: c4:86:66:2b:a8:1b:79:9b:c9:b9:0b:f4:60:5e:ea: c2:c8:72:81:9f:57:a1:ed:bb:f2:4e:b6:80:31:87: 85:1f:a1:1a:8c:c2:cc:e3:96:5e:76:43:96:2c:4c: df:81:42:66:66:f7:a3:fb:ff:06:f6:6a:50:70:cb: 58:0a:1b:50:81:a0:80:58:63:ed:44:5c:0d:6b:bf: 40:9d:8c:45:72:3e:95:9a:6d:53:eb:30:38:bc:15: 16:b6:5c:96:fd:ef:8f:a8:26:42:c5:d8:23:e7:f6: 5b:dc:87:ef:b8:31:e9:ca:e2:2b:f4:25:03:9d:0b: d2:a6:86:25:a0:23:52:47:72:a1:d5:9f:48:97:b2: f1:c3:04:f6:bf:7f:09:aa:2f:89:c4:85:87:7c:ab: d3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2A:B1:6C:85:66:0D:0D:3C:00:56:8D:D4:EF:61:62:77:29:41:0F X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:85:16:47:66:52:6a:4a:5c:20:a0:e6:b9:ee:aa:38:31:58: 36:ed:6f:7a:18:6a:e0:19:b3:fe:78:cd:0c:e9:0f:48:d8:15: 22:2d:f5:a1:4d:90:1b:8c:36:87:a7:ac:61:cf:aa:49:e1:25: 71:10:f4:70:84:1b:d4:8e:0f:81:87:4e:6f:2b:8c:77:da:21: d1:94:3a:c8:7c:80:2c:55:63:43:78:35:c2:6b:7f:6e:21:a0: d1:1b:2a:bf:23:8e:24:32:91:c8:4f:23:d8:3d:50:91:a4:3d: 77:3e:2c:d7:99:2f:b5:f7:cb:ab:7d:38:dc:c7:c0:c6:02:4a: d8:d9:74:97:28:cf:f8:55:df:3a:0a:2b:89:1e:c7:d0:0f:77: 60:cf:59:7f:7e:f1:51:53:25:b0:dc:89:ec:d7:5a:8c:04:97: 20:fc:d9:29:97:ea:ce:c2:f8:7b:b9:47:81:1c:eb:94:ab:a1: 2b:bd:b4:72:31:62:32:a2:97:f3:9c:91:b7:b4:91:7f:c1:a3: 02:b7:54:99:c2:a9:52:e2:39:90:02:7b:d6:82:03:f5:23:91: 27:8d:92:d5:c2:ea:87:65:02:e3:5e:a6:03:f5:ec:f6:a0:3e: b2:d8:76:39:1a:0c:d6:8f:de:33:80:a1:60:a5:b0:b8:f3:92: 5c:78:ab:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QLOSAaUcmEVBh1niLjDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMTI2MTcwMTE5WhcNMjYwMTI3MTcwMTE5WjAzMTEwLwYDVQQD Eyg0ODJhYjE2Yzg1NjYwZDBkM2MwMDU2OGRkNGVmNjE2Mjc3Mjk0MTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxDhBTYn5SDKM2E44EnUSyIvScMb sMibqI9nW4zGtTRzAGwteVri3iP9digdpEXG9OeyU6u8NIC1d6gPWwL3T1mEjhtn AbX+fDDmzPO9mUveSzhxPI/AhfBbcG1Qwwdc6TbrEkLizL/EhmYrqBt5m8m5C/Rg XurCyHKBn1eh7bvyTraAMYeFH6EajMLM45ZedkOWLEzfgUJmZvej+/8G9mpQcMtY ChtQgaCAWGPtRFwNa79AnYxFcj6Vmm1T6zA4vBUWtlyW/e+PqCZCxdgj5/Zb3Ifv uDHpyuIr9CUDnQvSpoYloCNSR3Kh1Z9Il7LxwwT2v38Jqi+JxIWHfKvTPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgqsWyFZg0NPABWjdTvYWJ3KUEPMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIUWR2ZS akpcIKDmue6qODFYNu1vehhq4Bmz/njNDOkPSNgVIi31oU2QG4w2h6esYc+qSeEl cRD0cIQb1I4PgYdObyuMd9oh0ZQ6yHyALFVjQ3g1wmt/biGg0RsqvyOOJDKRyE8j 2D1QkaQ9dz4s15kvtffLq3043MfAxgJK2Nl0lyjP+FXfOgoriR7H0A93YM9Zf37x UVMlsNyJ7NdajASXIPzZKZfqzsL4e7lHgRzrlKuhK720cjFiMqKX85yRt7SRf8Gj ArdUmcKpUuI5kAJ71oID9SORJ42S1cLqh2UC416mA/Xs9qA+sth2ORoM1o/eM4Ch YKWwuPOSXHirWg== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:13 2026 by rpki-client