This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft File: NCaXqC8hT41Snij1tQA9K7ojbIY.mft (raw, json) Hash identifier: 74QmqjZjTbxwTyWSNDvVccQMOKgDBDFoJzE+/xXY5Gk= Subject key identifier: 05:ED:FB:5D:2A:AE:07:92:DD:F1:E3:66:21:32:DF:50:36:04:4F:75 Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86 Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86 Certificate serial: 019BDE4915AFB1DAF576B6B5CF5524B44A2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft Manifest number: 14 Signing time: Wed 21 Jan 2026 02:01:30 +0000 Manifest this update: Wed 21 Jan 2026 02:01:30 +0000 Manifest next update: Thu 22 Jan 2026 02:01:30 +0000 Files and hashes: 1: NCaXqC8hT41Snij1tQA9K7ojbIY.crl (hash: Nq4YKw3jxw2CTFJ1lnUXtEnTmAp7xHdbxAZc25P79gU=) 2: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (hash: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:49:15:af:b1:da:f5:76:b6:b5:cf:55:24:b4:4a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86 Validity Not Before: Jan 21 02:01:30 2026 GMT Not After : Jan 22 02:01:30 2026 GMT Subject: CN=05edfb5d2aae0792ddf1e3662132df5036044f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:43:dd:28:f4:b5:5e:e2:e0:97:b0:5a:e1: 0e:5a:cc:bf:19:06:57:00:36:f7:e6:c9:df:24:bc: df:0d:f5:b2:47:b1:6b:be:ad:6d:d4:19:01:cb:96: 0b:89:9e:d8:49:31:f2:05:84:a0:82:55:36:3e:e9: 8a:0c:98:0b:e5:5e:d3:a6:8a:21:46:b1:f6:76:76: b8:65:bc:96:6a:9d:d0:f9:9a:3f:17:2e:cc:68:61: f2:6b:5f:ce:1f:77:3c:bd:52:04:e6:ee:b0:bf:4f: 79:f9:16:a1:54:3a:44:9e:29:e3:f2:7b:17:0b:8c: 84:5e:3e:15:c1:43:86:81:c1:e7:f7:97:6e:72:47: 7e:f4:af:60:c2:b0:4e:ec:de:cb:ea:3b:ca:61:f9: 4d:88:58:2f:f7:55:1f:eb:74:f3:b2:52:c1:fb:4c: 4e:05:5e:d0:8c:93:52:6e:6a:f9:bf:07:f0:dd:48: b7:cc:4a:82:33:b2:a5:a2:9d:77:9c:86:a7:6a:2a: c8:39:da:07:12:9e:71:04:e9:23:f2:03:97:39:1d: 38:0e:53:9a:2e:98:83:63:98:3a:fd:1c:5c:0d:9f: cd:a9:50:b2:78:eb:da:9d:41:0b:be:ca:23:28:86: f8:07:c3:e1:ef:33:77:4a:51:74:f0:0b:7a:4a:0b: 3d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:ED:FB:5D:2A:AE:07:92:DD:F1:E3:66:21:32:DF:50:36:04:4F:75 X509v3 Authority Key Identifier: keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a4:16:fc:4b:4c:50:78:68:b9:7f:d2:71:c8:7a:9d:92:f0: f9:09:03:69:d2:f2:76:83:19:f5:07:36:4f:04:cf:d8:b8:cc: 01:08:58:67:71:63:80:d0:44:f9:2e:c7:29:33:5f:09:7b:69: 02:65:d0:a2:a2:5d:36:e8:f2:23:3a:99:67:3d:d9:86:fd:79: 85:eb:4a:ce:e2:e9:9c:b6:e5:48:1f:37:04:c5:6d:22:9f:94: d7:e9:6d:e2:da:b1:54:72:51:24:8c:bf:29:e8:79:84:4b:fd: 92:a8:6c:85:cb:e1:56:44:23:30:10:3f:e5:96:47:c7:85:d1: 95:be:f8:dd:4a:0b:56:4a:00:d9:e8:66:e7:36:8e:c5:53:95: 42:92:d3:cf:8c:c8:20:92:37:2b:bf:65:ee:2e:7c:5b:18:60: c4:77:9d:c4:a5:dd:42:4a:25:fc:50:c3:87:ca:4b:31:8b:d6: 4b:89:dc:56:35:c4:22:7c:7c:c6:73:f4:bc:6c:83:61:ae:9d: c5:c2:1f:d0:0c:6e:6d:0d:c6:54:d1:0f:f7:b2:46:53:4d:94: ac:9f:66:00:ec:86:a7:5e:1f:cb:a2:09:e4:19:8b:3e:80:d8: 5d:e9:27:d0:d0:78:84:9d:c0:8e:39:a0:98:ee:dd:8a:62:51: 4b:bf:22:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZveSRWvsdr1dra1z1UktEouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MjY5N2E4MmYyMTRmOGQ1MjllMjhmNWI1MDAzZDJiYmEy MzZjODYwHhcNMjYwMTIxMDIwMTMwWhcNMjYwMTIyMDIwMTMwWjAzMTEwLwYDVQQD EygwNWVkZmI1ZDJhYWUwNzkyZGRmMWUzNjYyMTMyZGY1MDM2MDQ0Zjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+BD3Sj0tV7i4JewWuEOWsy/GQZX ADb35snfJLzfDfWyR7Frvq1t1BkBy5YLiZ7YSTHyBYSgglU2PumKDJgL5V7Tpooh RrH2dna4ZbyWap3Q+Zo/Fy7MaGHya1/OH3c8vVIE5u6wv095+RahVDpEninj8nsX C4yEXj4VwUOGgcHn95duckd+9K9gwrBO7N7L6jvKYflNiFgv91Uf63TzslLB+0xO BV7QjJNSbmr5vwfw3Ui3zEqCM7Klop13nIanairIOdoHEp5xBOkj8gOXOR04DlOa LpiDY5g6/RxcDZ/NqVCyeOvanUELvsojKIb4B8Ph7zN3SlF08At6Sgs9iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXt+10qrgeS3fHjZiEy31A2BE91MB8GA1UdIwQY MBaAFDQml6gvIU+NUp4o9bUAPSu6I2yGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkNhWHFDOGhUNDFTbmlqMXRRQTlLN29qYklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNzU4YWMtZjU5MS00Njg5LTk4Zjkt NzkwNDZmOTBjNTQyLzEvTkNhWHFDOGhUNDFTbmlqMXRRQTlLN29qYklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jNzU4YWMtZjU5MS00Njg5LTk4ZjktNzkwNDZmOTBjNTQy LzEvTkNhWHFDOGhUNDFTbmlqMXRRQTlLN29qYklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKQW/EtM UHhouX/Scch6nZLw+QkDadLydoMZ9Qc2TwTP2LjMAQhYZ3FjgNBE+S7HKTNfCXtp AmXQoqJdNujyIzqZZz3Zhv15hetKzuLpnLblSB83BMVtIp+U1+lt4tqxVHJRJIy/ Keh5hEv9kqhshcvhVkQjMBA/5ZZHx4XRlb743UoLVkoA2ehm5zaOxVOVQpLTz4zI IJI3K79l7i58WxhgxHedxKXdQkol/FDDh8pLMYvWS4ncVjXEInx8xnP0vGyDYa6d xcIf0AxubQ3GVNEP97JGU02UrJ9mAOyGp14fy6IJ5BmLPoDYXekn0NB4hJ3Ajjmg mO7dimJRS78iTQ== -----END CERTIFICATE-----Generated at Wed Jan 21 04:41:52 2026 by rpki-client