This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json) Hash identifier: ngU08IQTnUU4Zo1BoghO0BaFvyFWhUE8oVLs0pmXU7E= Subject key identifier: 6F:4A:C7:02:D7:8F:01:CF:1A:43:0F:A9:76:55:0A:11:26:67:D5:81 Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44 Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744 Certificate serial: 019BF951C3240BE469B2AF5079C2718620C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft Manifest number: 0B16 Signing time: Mon 26 Jan 2026 08:00:43 +0000 Manifest this update: Mon 26 Jan 2026 08:00:43 +0000 Manifest next update: Tue 27 Jan 2026 08:00:43 +0000 Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=) 2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: mhMZ/0qnGuoh0GPuwboTupRYrou84OiMVVY5zRgwEmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:c3:24:0b:e4:69:b2:af:50:79:c2:71:86:20:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744 Validity Not Before: Jan 26 08:00:43 2026 GMT Not After : Jan 27 08:00:43 2026 GMT Subject: CN=6f4ac702d78f01cf1a430fa976550a112667d581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:3f:58:35:19:cf:00:bb:70:d5:d1:7b:58: 0b:e3:62:e0:bb:8f:d2:fc:65:37:94:44:d3:0d:11: 81:59:e7:61:5b:6e:2f:24:be:91:65:c1:e6:71:93: a2:3c:a3:f9:b0:12:38:3e:18:0a:13:3e:d9:a8:ab: 81:cc:36:ee:74:78:ec:f3:17:49:5e:3b:d7:3f:ce: 5b:00:56:15:b5:cf:12:96:73:c7:14:69:39:94:80: f2:1e:25:06:ab:b1:c6:2b:45:e6:77:ed:cc:8b:a5: 31:fe:03:fc:ec:b8:ad:51:2c:6a:93:ae:c7:0e:8f: 68:b8:62:db:0b:f3:90:68:d3:98:fc:e7:d6:5b:36: cb:ba:17:fd:4a:1e:64:6f:91:13:4c:14:af:98:0c: 3d:b0:e5:28:3d:bf:ce:35:4f:aa:d3:5f:35:07:c4: 03:e7:b0:0f:6d:6a:10:84:b3:07:ef:a4:0c:70:c6: 89:e9:8c:f2:df:fe:e7:03:b5:5e:d3:96:7f:42:24: be:48:08:86:8f:99:7d:33:d6:90:eb:5d:55:16:2f: 58:0e:46:03:ba:ac:3c:4e:fc:d3:84:b8:94:54:57: 1c:0e:26:6d:00:65:8c:5d:68:65:c7:39:98:e7:18: a3:2a:ce:8d:3c:2f:69:c2:cb:c7:8e:c2:8c:f9:0c: 4a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4A:C7:02:D7:8F:01:CF:1A:43:0F:A9:76:55:0A:11:26:67:D5:81 X509v3 Authority Key Identifier: keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:86:05:39:37:9d:7a:84:25:10:38:42:00:b3:ad:fd:7c:6d: 8a:cb:a7:2a:43:4f:f6:8a:23:ff:d1:62:31:30:c2:11:de:88: 52:3c:30:17:dd:5e:f5:f0:67:66:5b:56:78:d0:94:a6:24:ea: 00:b7:07:da:f3:b1:d7:b9:d2:87:5d:c3:64:f8:17:0e:7d:d9: a2:78:47:a5:df:71:ce:42:ac:f3:56:45:72:c0:35:d2:bb:a0: 51:57:e9:74:cd:e1:66:b8:c4:a8:9a:12:80:7d:f7:ea:a6:5e: 5c:2f:1c:f3:0e:a4:f7:30:1b:5d:89:d2:5f:e2:fc:ab:65:f2: 88:db:56:82:8f:65:0d:a8:2c:b8:d8:22:2f:5a:34:85:ca:9f: ff:60:39:a5:ea:be:5b:82:d1:0b:2b:e1:dc:1e:6d:0d:6a:87: c8:4c:e5:68:98:ba:7a:e4:fa:f0:68:7b:97:7a:6a:64:3e:f3: 6c:b2:05:8e:ca:6a:e2:2d:36:e8:92:46:46:6a:d4:3e:b2:bb: f0:5d:e0:06:ce:87:f3:2d:d6:25:bb:4d:2b:59:3c:1a:90:97: 69:ce:3e:93:db:9f:58:12:ee:ea:dd:ec:c7:9d:bc:eb:5c:41: 13:67:cb:59:99:99:17:67:d3:2f:a6:0b:e9:ad:28:74:5e:e6: 83:53:ef:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UcMkC+Rpsq9QecJxhiDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllY2IyMjJiODEyNmEyMWRmMzJkMDE1ZTRjNDg1Mzk1N2Qx ZDk3NDQwHhcNMjYwMTI2MDgwMDQzWhcNMjYwMTI3MDgwMDQzWjAzMTEwLwYDVQQD Eyg2ZjRhYzcwMmQ3OGYwMWNmMWE0MzBmYTk3NjU1MGExMTI2NjdkNTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDU/WDUZzwC7cNXRe1gL42Lgu4/S /GU3lETTDRGBWedhW24vJL6RZcHmcZOiPKP5sBI4PhgKEz7ZqKuBzDbudHjs8xdJ XjvXP85bAFYVtc8SlnPHFGk5lIDyHiUGq7HGK0Xmd+3Mi6Ux/gP87LitUSxqk67H Do9ouGLbC/OQaNOY/OfWWzbLuhf9Sh5kb5ETTBSvmAw9sOUoPb/ONU+q0181B8QD 57APbWoQhLMH76QMcMaJ6Yzy3/7nA7Ve05Z/QiS+SAiGj5l9M9aQ611VFi9YDkYD uqw8TvzThLiUVFccDiZtAGWMXWhlxzmY5xijKs6NPC9pwsvHjsKM+QxKhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9KxwLXjwHPGkMPqXZVChEmZ9WBMB8GA1UdIwQY MBaAFJ7LIiuBJqId8y0BXkxIU5V9HZdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNGYyOWEtYTcwOS00MmJhLTk2MzIt NThlNGYyNGZhYmVhLzEvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iNGYyOWEtYTcwOS00MmJhLTk2MzItNThlNGYyNGZhYmVh LzEvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIYFOTed eoQlEDhCALOt/XxtisunKkNP9ooj/9FiMTDCEd6IUjwwF91e9fBnZltWeNCUpiTq ALcH2vOx17nSh13DZPgXDn3ZonhHpd9xzkKs81ZFcsA10rugUVfpdM3hZrjEqJoS gH336qZeXC8c8w6k9zAbXYnSX+L8q2XyiNtWgo9lDagsuNgiL1o0hcqf/2A5peq+ W4LRCyvh3B5tDWqHyEzlaJi6euT68Gh7l3pqZD7zbLIFjspq4i026JJGRmrUPrK7 8F3gBs6H8y3WJbtNK1k8GpCXac4+k9ufWBLu6t3sx52861xBE2fLWZmZF2fTL6YL 6a0odF7mg1Pvbg== -----END CERTIFICATE-----Generated at Mon Jan 26 13:49:02 2026 by rpki-client