This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json) Hash identifier: CTciJz05Npdr4N+jnzgqHFvzWNKFAgH7uL/90Yn0uF8= Subject key identifier: B6:6E:A1:7B:C0:A7:EC:B5:59:F4:2B:88:84:D2:36:13:5A:EA:B7:9C Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71 Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71 Certificate serial: 019C0EFEC45DC0CF9DDA61F1E7428F78E68A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft Manifest number: 0AEC Signing time: Fri 30 Jan 2026 13:01:43 +0000 Manifest this update: Fri 30 Jan 2026 13:01:43 +0000 Manifest next update: Sat 31 Jan 2026 13:01:43 +0000 Files and hashes: 1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=) 2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: 5RBT/jK34gps7AVg/tAEkbEHfKY+jcMOx7fhNYHbsWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:fe:c4:5d:c0:cf:9d:da:61:f1:e7:42:8f:78:e6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71 Validity Not Before: Jan 30 13:01:43 2026 GMT Not After : Jan 31 13:01:43 2026 GMT Subject: CN=b66ea17bc0a7ecb559f42b8884d236135aeab79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:a6:18:ff:e7:bb:9a:a5:e6:55:01:58:5e: 04:fb:f6:08:56:dc:4e:3e:e2:de:30:d6:50:9c:be: e7:36:cd:ae:0a:54:30:23:1d:f0:30:3a:5a:cf:8b: 52:dd:a9:0b:4a:b1:26:e3:a7:2b:5c:77:7f:b2:d4: fc:6e:88:6b:32:4a:00:49:5f:49:aa:96:55:3e:2c: ac:80:0c:76:b0:f0:ab:2d:af:e2:d7:b2:ff:d8:e9: cf:11:b1:c6:46:12:e0:40:d9:77:3f:26:39:34:db: 32:77:02:fa:6a:80:8e:f5:20:c1:1d:55:50:2d:53: b0:6e:be:01:dc:b5:bd:49:69:20:66:47:cf:a6:93: 8f:2a:8f:52:4b:85:10:15:23:4d:77:21:0d:22:6c: a8:e2:8f:a7:bd:fb:59:7c:22:b1:0b:fb:9c:b6:31: 8c:6f:40:6d:d4:ec:ff:57:dd:44:a7:aa:65:90:b8: 61:69:25:0f:ec:c7:98:0d:45:09:46:42:04:c7:04: d5:33:ac:79:ce:12:ea:57:52:85:67:31:92:ad:18: 01:26:41:fe:80:28:32:18:c6:4e:ab:2d:76:b5:3e: bf:79:f4:f5:05:ef:0a:cf:24:c5:ed:57:2b:3b:81: 07:5a:ae:44:9b:7d:3d:3c:98:59:50:2e:b5:0b:ab: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6E:A1:7B:C0:A7:EC:B5:59:F4:2B:88:84:D2:36:13:5A:EA:B7:9C X509v3 Authority Key Identifier: keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:46:5d:44:84:f2:af:69:e1:1d:1f:59:35:6f:64:ff:a1:2c: 04:1e:bf:43:1f:fd:97:86:7f:cd:ea:dc:75:f3:d6:64:75:cd: cd:28:b0:46:aa:74:4d:88:05:09:35:84:dc:c5:24:89:0e:42: 4b:d6:ee:a8:4e:1a:85:fb:57:11:42:ec:da:60:6d:68:3e:5c: 77:96:db:0b:fd:57:c6:c3:d3:a0:ce:5d:6c:69:29:3c:13:3f: a8:7a:ad:8e:0c:d2:e5:0e:1f:c5:e4:59:d0:0b:1d:d9:1f:66: 3f:5c:db:8d:28:7e:47:5b:12:84:37:87:a8:68:4f:09:6d:7c: 12:e5:62:77:e3:04:4f:45:ed:51:71:2e:bd:b8:92:4d:eb:fe: 1a:0a:5a:5a:b8:5b:e0:00:f7:eb:22:4b:a1:bf:f5:fe:80:fe: 6e:76:dd:46:3b:77:fb:75:6f:3b:22:55:cb:6a:39:71:3e:19: 93:9b:1f:b0:db:f6:1e:44:f9:5a:87:7e:c5:68:90:22:de:8d: 99:f5:df:2b:1f:42:ee:1c:72:76:4d:13:43:44:16:f0:b9:99: df:91:2e:7c:17:bc:62:ef:af:b6:ee:7c:d0:51:24:1f:02:6b: 21:62:81:b7:5a:ee:7a:d3:f7:47:a3:47:ca:61:e0:a0:ce:09: 7e:6f:1b:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwO/sRdwM+d2mHx50KPeOaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5 ZjhhNzEwHhcNMjYwMTMwMTMwMTQzWhcNMjYwMTMxMTMwMTQzWjAzMTEwLwYDVQQD EyhiNjZlYTE3YmMwYTdlY2I1NTlmNDJiODg4NGQyMzYxMzVhZWFiNzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fWmGP/nu5ql5lUBWF4E+/YIVtxO PuLeMNZQnL7nNs2uClQwIx3wMDpaz4tS3akLSrEm46crXHd/stT8bohrMkoASV9J qpZVPiysgAx2sPCrLa/i17L/2OnPEbHGRhLgQNl3PyY5NNsydwL6aoCO9SDBHVVQ LVOwbr4B3LW9SWkgZkfPppOPKo9SS4UQFSNNdyENImyo4o+nvftZfCKxC/uctjGM b0Bt1Oz/V91Ep6plkLhhaSUP7MeYDUUJRkIExwTVM6x5zhLqV1KFZzGSrRgBJkH+ gCgyGMZOqy12tT6/efT1Be8KzyTF7VcrO4EHWq5Em309PJhZUC61C6ufIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZuoXvAp+y1WfQriITSNhNa6recMB8GA1UdIwQY MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt MTRlYzQxZDRjMGE2LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2 LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAykZdRITy r2nhHR9ZNW9k/6EsBB6/Qx/9l4Z/zercdfPWZHXNzSiwRqp0TYgFCTWE3MUkiQ5C S9buqE4ahftXEULs2mBtaD5cd5bbC/1XxsPToM5dbGkpPBM/qHqtjgzS5Q4fxeRZ 0Asd2R9mP1zbjSh+R1sShDeHqGhPCW18EuVid+MET0XtUXEuvbiSTev+GgpaWrhb 4AD36yJLob/1/oD+bnbdRjt3+3VvOyJVy2o5cT4Zk5sfsNv2HkT5Wod+xWiQIt6N mfXfKx9C7hxydk0TQ0QW8LmZ35EufBe8Yu+vtu580FEkHwJrIWKBt1ruetP3R6NH ymHgoM4Jfm8biQ== -----END CERTIFICATE-----Generated at Fri Jan 30 20:11:43 2026 by rpki-client