This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json) Hash identifier: XmEuanEK3WNHNBnc1B50DZs9uZJe7nxOczO64xEIuzY= Subject key identifier: 70:A7:4A:B2:28:71:1C:3C:4B:22:86:16:9F:60:3D:DA:9C:61:0E:1B Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4 Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4 Certificate serial: 019BDF2421BED617E4B1646AFD3EA0A45A65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft Manifest number: 17E5 Signing time: Wed 21 Jan 2026 06:00:45 +0000 Manifest this update: Wed 21 Jan 2026 06:00:45 +0000 Manifest next update: Thu 22 Jan 2026 06:00:45 +0000 Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: Web8Xx1gdKFbSXrBG4bVJ8kIXd99JdnOk690tY/ZjK8=) 2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=) 3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:24:21:be:d6:17:e4:b1:64:6a:fd:3e:a0:a4:5a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4 Validity Not Before: Jan 21 06:00:45 2026 GMT Not After : Jan 22 06:00:45 2026 GMT Subject: CN=70a74ab228711c3c4b2286169f603dda9c610e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:74:85:40:2d:49:ec:e9:ab:b0:52:eb:c2:3f: 4e:1d:49:63:13:27:16:69:44:25:c6:a1:72:45:9d: da:f1:9a:c2:65:c0:b1:cd:b9:d9:7d:7a:95:ea:da: 40:09:6b:b9:ba:ff:a3:11:d8:91:81:a2:7b:84:67: 99:83:c5:57:e4:90:61:89:00:4d:f4:82:85:6a:6e: 8c:c7:6e:6d:23:f8:8a:f2:83:19:13:0e:e5:e5:da: b3:a9:e2:08:d1:5a:56:2c:c0:80:d5:34:ae:0e:d4: 21:0b:9b:eb:be:21:cd:0d:9d:40:a0:90:d1:56:44: a1:94:09:02:2b:7e:00:0c:24:df:dd:76:e5:39:89: 66:d0:de:c4:40:76:e6:f0:eb:7f:10:cd:25:71:84: 1c:f5:1b:de:1c:49:9e:e1:f2:9b:24:76:18:5b:1d: 61:29:19:eb:69:47:d5:95:5f:d7:ab:bc:36:67:31: 8b:95:28:92:98:f8:f0:aa:f8:90:c6:78:d4:76:6b: 72:79:95:93:67:cb:08:8d:d9:1d:ca:5b:44:dc:a5: be:4b:66:eb:fe:be:65:5f:a3:4c:bd:8e:8e:34:8e: 0c:f4:f9:d7:4b:c1:73:50:ab:7e:d3:75:2f:a4:ae: 7b:99:f9:e1:ed:ca:80:4e:77:4e:29:ae:cf:c0:a6: 6c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A7:4A:B2:28:71:1C:3C:4B:22:86:16:9F:60:3D:DA:9C:61:0E:1B X509v3 Authority Key Identifier: keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:4d:10:13:38:c1:b9:d7:c3:e6:9d:93:be:70:5f:90:fa:f4: 8b:d6:e3:3d:81:77:5e:4d:d4:05:68:b4:ba:6f:6c:16:db:52: b1:ae:62:ae:58:a2:b1:08:ac:81:8d:77:5f:50:72:fe:8c:3a: cb:f0:fc:ba:40:44:d4:d2:3c:78:cc:68:2a:cd:7f:19:b0:2e: 78:7b:0b:95:c3:99:83:42:f9:6c:00:cf:95:12:d9:94:7d:7d: 09:f5:c7:57:90:88:03:27:56:14:bd:6e:62:38:5f:04:de:e5: b4:ef:ae:31:93:be:9a:ca:90:6b:93:b6:72:2f:8b:87:78:48: 28:93:0e:47:a4:64:a8:e9:eb:b5:40:19:c8:76:71:83:41:e6: 65:99:13:43:d3:59:1c:a8:88:58:44:61:1d:92:dc:52:dc:fa: 43:1f:d9:ac:d9:5b:b9:87:4c:5a:04:ac:5c:e1:83:a0:f2:12: 89:d4:29:3c:02:23:0d:67:8a:17:ef:05:48:33:fc:8c:45:16: 38:c8:6d:73:f2:14:05:bb:8a:ef:a3:f1:81:17:27:72:09:bb: a2:b2:31:25:d7:ca:a3:92:b3:98:17:32:ba:0e:5e:11:fa:2e: 6c:99:f8:1c:ed:e5:02:6f:66:f7:75:e6:ae:5a:93:d9:2f:f5: d1:d3:90:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfJCG+1hfksWRq/T6gpFplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MThiZTA0NDE3YTZiY2I5ZjMzOTQyYTYzMTUxOGJlNTMz ZmZhZjQwHhcNMjYwMTIxMDYwMDQ1WhcNMjYwMTIyMDYwMDQ1WjAzMTEwLwYDVQQD Eyg3MGE3NGFiMjI4NzExYzNjNGIyMjg2MTY5ZjYwM2RkYTljNjEwZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXSFQC1J7OmrsFLrwj9OHUljEycW aUQlxqFyRZ3a8ZrCZcCxzbnZfXqV6tpACWu5uv+jEdiRgaJ7hGeZg8VX5JBhiQBN 9IKFam6Mx25tI/iK8oMZEw7l5dqzqeII0VpWLMCA1TSuDtQhC5vrviHNDZ1AoJDR VkShlAkCK34ADCTf3XblOYlm0N7EQHbm8Ot/EM0lcYQc9RveHEme4fKbJHYYWx1h KRnraUfVlV/Xq7w2ZzGLlSiSmPjwqviQxnjUdmtyeZWTZ8sIjdkdyltE3KW+S2br /r5lX6NMvY6ONI4M9PnXS8FzUKt+03UvpK57mfnh7cqATndOKa7PwKZsawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCnSrIocRw8SyKGFp9gPdqcYQ4bMB8GA1UdIwQY MBaAFDYYvgRBemvLnzOUKmMVGL5TP/r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMt MjI2OGU5N2E4YmMxLzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMtMjI2OGU5N2E4YmMx LzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUU0QEzjB udfD5p2TvnBfkPr0i9bjPYF3Xk3UBWi0um9sFttSsa5irliisQisgY13X1By/ow6 y/D8ukBE1NI8eMxoKs1/GbAueHsLlcOZg0L5bADPlRLZlH19CfXHV5CIAydWFL1u YjhfBN7ltO+uMZO+msqQa5O2ci+Lh3hIKJMOR6RkqOnrtUAZyHZxg0HmZZkTQ9NZ HKiIWERhHZLcUtz6Qx/ZrNlbuYdMWgSsXOGDoPISidQpPAIjDWeKF+8FSDP8jEUW OMhtc/IUBbuK76PxgRcncgm7orIxJdfKo5KzmBcyug5eEfoubJn4HO3lAm9m93Xm rlqT2S/10dOQfw== -----END CERTIFICATE-----Generated at Wed Jan 21 08:59:33 2026 by rpki-client