This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json) Hash identifier: bItTOoBlgGcWLQhgZbfAqvHoYQ6SieLd08vpwpaX0QA= Subject key identifier: 91:93:77:C3:07:9E:FB:ED:8C:EE:3A:0D:AC:19:69:6D:36:04:1E:E3 Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16 Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916 Certificate serial: 019BFE41A63A9AF4C6BD8917CF18D5B9DCB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft Manifest number: 3C Signing time: Tue 27 Jan 2026 07:01:13 +0000 Manifest this update: Tue 27 Jan 2026 07:01:13 +0000 Manifest next update: Wed 28 Jan 2026 07:01:13 +0000 Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: zuebFoXc3I2S6XEerGmJF6JZUJUCN3Tfv67yW3DwhJY=) 2: W-HA5m7hemLDXdHbhWk4pSkmXKQ.roa (hash: DFd6jBuLZXEJn0Y04obFpmXz6rYUp0KbjFhguWyn34c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:41:a6:3a:9a:f4:c6:bd:89:17:cf:18:d5:b9:dc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36135f13abf02fa3fca505d568816afc59334916 Validity Not Before: Jan 27 07:01:13 2026 GMT Not After : Jan 28 07:01:13 2026 GMT Subject: CN=919377c3079efbed8cee3a0dac19696d36041ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:62:f5:a6:3d:50:20:e4:69:39:96:79:bf:de: 9d:98:ca:cd:ba:2b:9d:2f:28:f1:06:c9:63:95:de: 85:01:4a:da:f8:f5:26:9c:05:7c:14:c0:13:b6:99: 10:7b:86:f0:fd:48:66:f3:02:51:9c:cb:ee:53:c0: b0:08:2f:01:24:5b:4b:1b:89:f3:d0:8e:da:59:8d: c4:f3:72:f2:29:b1:9e:62:c1:c4:9f:30:87:65:79: 2a:d2:88:b1:77:e3:56:b1:2a:b1:1c:62:de:ab:38: ca:93:49:46:07:e3:77:e8:62:2c:54:d3:36:07:57: b5:bd:9e:e1:71:c6:db:c6:e1:44:ae:ec:37:48:e9: 89:57:dc:db:50:45:fd:7a:5b:c0:af:2c:61:51:48: 87:ee:07:fc:45:a1:51:c9:8b:4b:90:bb:f2:1f:f8: 45:35:f8:c0:23:eb:4c:12:5c:ed:9f:b6:d7:96:6d: 18:c2:04:32:ca:81:47:b8:4b:06:f8:50:a2:d8:e6: e7:7f:44:d2:6c:45:5e:e1:90:8e:08:50:1b:ac:74: 56:70:d8:79:1f:14:81:1a:76:f3:99:3d:76:07:bc: b1:30:7c:18:93:64:a6:1f:4a:4a:08:8c:1a:86:2e: 22:7d:a6:e4:d1:35:9e:3b:7f:df:19:df:0e:79:15: 1b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:93:77:C3:07:9E:FB:ED:8C:EE:3A:0D:AC:19:69:6D:36:04:1E:E3 X509v3 Authority Key Identifier: keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a8:a3:10:99:a6:d4:e6:da:ed:88:f4:d8:d7:2d:13:87:76: f4:25:4c:3d:76:4a:60:4a:f4:fa:05:a9:3b:24:09:43:d7:2a: c2:3d:6c:d0:83:83:31:9e:12:b6:0a:20:34:a1:17:1b:57:05: 65:c3:f2:24:1b:7a:8c:f3:ab:89:92:7e:f2:2c:01:af:2c:eb: 6c:a5:6f:43:21:f1:fd:cb:25:a3:cd:fe:d9:3b:7b:c6:a0:51: 0d:02:2a:51:6e:f6:77:97:ff:89:f5:55:10:2f:5b:c4:5a:af: 67:e6:3c:9d:21:c5:a8:14:6f:96:bb:8f:a1:7a:38:73:91:aa: 35:8e:dc:ee:98:04:c3:68:9e:c1:6f:5a:34:e3:a4:25:ac:83: 41:c3:59:7d:55:1f:82:a7:ec:96:1b:3b:a2:16:63:a9:75:7f: b4:ab:60:5b:ca:af:c8:e7:f5:b7:38:f6:1e:59:31:5b:64:06: ef:f8:d2:fe:f7:e1:65:ff:29:71:66:31:c9:c3:b8:df:69:0b: 3d:e2:39:54:60:23:46:f2:ae:52:18:55:cb:7d:c3:b2:32:9f: 35:bf:ba:fc:86:f0:03:7b:cf:6a:88:14:4c:41:f7:31:d9:c9: f0:a7:ae:90:e3:6b:75:33:eb:ed:61:ad:7f:96:d0:2e:d2:a3: a7:e4:0a:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+QaY6mvTGvYkXzxjVudy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MTM1ZjEzYWJmMDJmYTNmY2E1MDVkNTY4ODE2YWZjNTkz MzQ5MTYwHhcNMjYwMTI3MDcwMTEzWhcNMjYwMTI4MDcwMTEzWjAzMTEwLwYDVQQD Eyg5MTkzNzdjMzA3OWVmYmVkOGNlZTNhMGRhYzE5Njk2ZDM2MDQxZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92L1pj1QIORpOZZ5v96dmMrNuiud LyjxBsljld6FAUra+PUmnAV8FMATtpkQe4bw/Uhm8wJRnMvuU8CwCC8BJFtLG4nz 0I7aWY3E83LyKbGeYsHEnzCHZXkq0oixd+NWsSqxHGLeqzjKk0lGB+N36GIsVNM2 B1e1vZ7hccbbxuFEruw3SOmJV9zbUEX9elvAryxhUUiH7gf8RaFRyYtLkLvyH/hF NfjAI+tMElztn7bXlm0YwgQyyoFHuEsG+FCi2Obnf0TSbEVe4ZCOCFAbrHRWcNh5 HxSBGnbzmT12B7yxMHwYk2SmH0pKCIwahi4ifabk0TWeO3/fGd8OeRUbzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGTd8MHnvvtjO46DawZaW02BB7jMB8GA1UdIwQY MBaAFDYTXxOr8C+j/KUF1WiBavxZM0kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yODgzMzAtMGZlMy00MmFhLWIyNjQt OWRmZDc5NWE1YWRhLzEvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yODgzMzAtMGZlMy00MmFhLWIyNjQtOWRmZDc5NWE1YWRh LzEvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6ijEJmm 1Oba7Yj02NctE4d29CVMPXZKYEr0+gWpOyQJQ9cqwj1s0IODMZ4StgogNKEXG1cF ZcPyJBt6jPOriZJ+8iwBryzrbKVvQyHx/cslo83+2Tt7xqBRDQIqUW72d5f/ifVV EC9bxFqvZ+Y8nSHFqBRvlruPoXo4c5GqNY7c7pgEw2iewW9aNOOkJayDQcNZfVUf gqfslhs7ohZjqXV/tKtgW8qvyOf1tzj2HlkxW2QG7/jS/vfhZf8pcWYxycO432kL PeI5VGAjRvKuUhhVy33DsjKfNb+6/IbwA3vPaogUTEH3MdnJ8KeukONrdTPr7WGt f5bQLtKjp+QKFQ== -----END CERTIFICATE-----Generated at Tue Jan 27 09:08:35 2026 by rpki-client