This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json) Hash identifier: P6XYGmn4ZU49qCdtturm9kYHZYHv1bfqDiGATlENReg= Subject key identifier: FF:3C:0C:57:F5:E3:1D:34:59:12:FE:6C:51:B2:A6:66:92:0D:C7:B1 Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4 Certificate serial: 019BF951DC9892C75639E81B0563BFF237F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 08:00:50 +0000 Manifest this update: Mon 26 Jan 2026 08:00:50 +0000 Manifest next update: Tue 27 Jan 2026 08:00:50 +0000 Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=) 2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=) 3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=) 4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=) 5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=) 6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: v3TFm14ektaUbpEVGGj5x7P/8mqPcG8EXHN+Xib7Ar8=) 7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=) 8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=) 9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:dc:98:92:c7:56:39:e8:1b:05:63:bf:f2:37:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4 Validity Not Before: Jan 26 08:00:50 2026 GMT Not After : Jan 27 08:00:50 2026 GMT Subject: CN=ff3c0c57f5e31d345912fe6c51b2a666920dc7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:bb:a3:93:1d:cb:f1:96:d2:3d:e9:8b:18: 08:9a:96:a5:8a:8b:43:bf:0d:2b:ae:ae:a4:72:7d: bd:db:72:f6:3a:86:9b:09:0a:46:df:f0:06:15:70: 67:64:73:87:4d:b1:13:ff:f9:1a:b0:d3:8e:31:51: a2:a6:41:f6:fd:9a:a1:a5:34:12:67:4a:00:54:db: d6:0b:33:c0:c6:4b:37:5f:6d:e2:54:7f:c9:76:ba: 5d:77:18:2f:5d:fc:ec:7f:75:73:df:62:23:77:e0: ea:67:23:83:01:5d:da:dd:d6:87:66:c1:8f:1d:86: 78:64:44:4a:ae:70:79:38:99:ec:ed:30:d7:a6:62: de:cf:7a:85:70:65:6b:0a:11:89:bd:5c:b5:df:f4: 3e:6f:43:95:54:c3:e8:b7:02:12:44:58:4c:13:2a: 74:f5:de:20:01:a7:3c:39:be:5f:8a:57:a9:f4:79: 79:e8:8d:87:c7:8c:74:6f:a8:1f:3e:e4:81:be:2c: fa:48:b5:fb:a2:ee:13:f1:65:80:5c:46:a9:93:cb: 75:dc:23:4c:2d:0e:85:23:97:e5:37:c0:8e:1b:06: ac:fb:35:06:ce:07:3b:a9:c3:96:56:14:08:8b:ff: d1:6e:61:f5:ee:61:f2:30:b1:1f:33:2b:bd:4c:63: 25:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3C:0C:57:F5:E3:1D:34:59:12:FE:6C:51:B2:A6:66:92:0D:C7:B1 X509v3 Authority Key Identifier: keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:58:d4:1b:1b:b3:a7:61:8b:c3:a4:92:d1:8e:5e:90:c5:5f: 61:76:25:27:5a:16:3c:f5:89:06:08:05:11:e7:44:95:45:b6: cc:74:b7:94:b3:df:17:44:af:ea:ab:79:4e:62:ef:ed:e8:f4: a8:5c:31:7c:0e:29:56:6c:59:11:fb:7c:3a:c7:7d:34:d5:17: 9b:e7:c0:a2:53:1a:7e:93:19:58:92:9f:f8:1b:b8:ac:1c:e1: ba:f1:e1:2f:ff:1f:6b:e2:2e:1f:86:bb:68:b2:a5:75:8f:96: 36:64:c5:f1:0a:bd:14:4e:ff:4f:66:51:4c:98:73:1b:c9:15: 10:90:a2:18:28:03:64:4d:74:df:c6:19:61:91:c5:c1:19:1f: 69:34:e5:19:41:41:2b:0d:42:cc:de:ef:16:5c:ef:c6:48:4b: d2:7f:ce:9d:9f:96:2c:ec:7f:73:90:3b:b1:70:7c:2c:05:f8: 57:ce:28:17:36:5d:23:df:27:57:9a:9b:f3:8d:98:44:31:fc: 5d:5d:ce:77:c2:6e:78:90:da:45:e4:6f:92:6f:de:dc:91:8c: 67:4a:65:05:f1:c0:06:f9:46:ee:9d:ca:60:b4:fb:a5:18:c0: 9e:c7:87:e8:6a:c2:ab:76:7a:42:b9:1f:d5:f2:e1:84:a1:57: d9:ec:6f:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UdyYksdWOegbBWO/8jf5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWExNGNlOWQyNTIzOWI5MmZlNWFiY2U1MzI1MTUwNDRj MWFiYTQwHhcNMjYwMTI2MDgwMDUwWhcNMjYwMTI3MDgwMDUwWjAzMTEwLwYDVQQD EyhmZjNjMGM1N2Y1ZTMxZDM0NTkxMmZlNmM1MWIyYTY2NjkyMGRjN2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL+7o5Mdy/GW0j3pixgImpaliotD vw0rrq6kcn2923L2OoabCQpG3/AGFXBnZHOHTbET//kasNOOMVGipkH2/ZqhpTQS Z0oAVNvWCzPAxks3X23iVH/JdrpddxgvXfzsf3Vz32Ijd+DqZyODAV3a3daHZsGP HYZ4ZERKrnB5OJns7TDXpmLez3qFcGVrChGJvVy13/Q+b0OVVMPotwISRFhMEyp0 9d4gAac8Ob5filep9Hl56I2Hx4x0b6gfPuSBviz6SLX7ou4T8WWAXEapk8t13CNM LQ6FI5flN8COGwas+zUGzgc7qcOWVhQIi//RbmH17mHyMLEfMyu9TGMlCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP88DFf14x00WRL+bFGypmaSDcexMB8GA1UdIwQY MBaAFDUaFM6dJSObkv5avOUyUVBEwaukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEt Mjk1Mzg5NGIxZjZkLzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEtMjk1Mzg5NGIxZjZk LzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1jUGxuz p2GLw6SS0Y5ekMVfYXYlJ1oWPPWJBggFEedElUW2zHS3lLPfF0Sv6qt5TmLv7ej0 qFwxfA4pVmxZEft8Osd9NNUXm+fAolMafpMZWJKf+Bu4rBzhuvHhL/8fa+IuH4a7 aLKldY+WNmTF8Qq9FE7/T2ZRTJhzG8kVEJCiGCgDZE1038YZYZHFwRkfaTTlGUFB Kw1CzN7vFlzvxkhL0n/OnZ+WLOx/c5A7sXB8LAX4V84oFzZdI98nV5qb842YRDH8 XV3Od8JueJDaReRvkm/e3JGMZ0plBfHABvlG7p3KYLT7pRjAnseH6GrCq3Z6Qrkf 1fLhhKFX2exvGQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:39:44 2026 by rpki-client