This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json) Hash identifier: 9PomcfuPKZZDQZJr5SkU+TDTHNybKyLdv/nGHNjQM8M= Subject key identifier: 34:1C:42:96:E5:50:FB:FD:56:84:B8:07:83:53:74:2A:9B:57:37:10 Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70 Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770 Certificate serial: 019BFB0A03E05994F4BE00EC064793EC0297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 16:01:35 +0000 Manifest this update: Mon 26 Jan 2026 16:01:35 +0000 Manifest next update: Tue 27 Jan 2026 16:01:35 +0000 Files and hashes: 1: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (hash: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw=) 2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: B2uaHNuwu9YrlmEhu0YNmB706gr1i0vqYuZ5HOo4p/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:03:e0:59:94:f4:be:00:ec:06:47:93:ec:02:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770 Validity Not Before: Jan 26 16:01:35 2026 GMT Not After : Jan 27 16:01:35 2026 GMT Subject: CN=341c4296e550fbfd5684b8078353742a9b573710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2a:e8:c3:13:78:5f:3f:52:8a:a5:92:00:ed: f6:a4:c8:40:24:65:04:f4:6c:32:eb:58:e9:20:c4: 4d:ed:70:06:c2:6f:c0:86:fc:b8:fe:94:cc:25:ab: bb:26:0e:4f:1f:82:e4:c6:e1:f8:40:5d:0a:9f:db: d0:e2:1a:bb:b7:b0:8a:d5:a2:73:84:a5:21:2c:2d: 84:b3:16:42:9f:d7:83:6e:54:9c:a4:ca:f1:53:72: d4:8d:6c:0b:b4:a4:f9:16:dc:50:2b:bc:89:fe:6e: c8:c8:b5:9c:72:c4:7d:c1:bd:bb:0f:3e:f1:51:d7: 96:65:4d:a3:8d:4e:ad:14:32:7f:b1:d8:1f:46:53: e0:22:a9:81:77:c8:c8:fa:f3:5f:13:c5:c1:02:2a: 53:ff:14:5a:2d:d2:8f:fc:7a:4b:72:67:57:f8:98: 25:aa:01:e5:58:a0:19:28:13:63:d7:2f:e5:15:36: d5:8d:30:eb:18:99:02:0d:f8:35:8f:4c:4c:ff:ab: ed:51:ff:1d:2b:e6:a6:68:ff:13:df:3b:36:f2:01: 37:02:eb:06:c3:a1:7e:82:c2:32:14:03:58:e0:1b: df:1e:2f:2b:ed:ac:43:93:69:fd:32:08:bf:08:ef: b3:f0:c8:ca:a8:5b:37:36:29:b6:a0:a2:fb:cf:39: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1C:42:96:E5:50:FB:FD:56:84:B8:07:83:53:74:2A:9B:57:37:10 X509v3 Authority Key Identifier: keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:45:35:90:ca:41:9f:b7:78:b1:79:91:ca:2d:43:32:18:91: 79:03:24:3e:dd:2a:a3:67:80:a1:6e:b3:7c:d0:96:ad:88:a9: 37:41:db:78:97:75:50:64:c5:c7:8f:5e:0a:8a:08:aa:c6:1d: c5:37:3b:fc:66:dc:eb:13:80:47:51:5c:18:07:d6:72:d2:7f: f3:8d:0b:79:a6:f7:8e:85:25:9e:0c:89:54:82:e9:7b:18:a0: 24:95:8d:c7:3d:55:89:e5:a5:de:38:97:cb:73:e2:82:8b:69: 61:22:09:df:7e:a5:08:d3:46:3c:85:3f:01:10:c6:fd:b5:cc: 08:2a:00:c2:95:4c:34:f6:e0:b2:9b:6a:e9:85:09:b9:ba:65: 6c:ac:a8:1b:30:57:83:bd:fa:01:16:50:9d:70:22:86:db:04: 72:76:95:e9:67:3e:35:8d:ae:b2:7f:42:dd:46:ba:c5:d2:fd: 57:86:1f:88:9d:a4:f4:11:23:f1:fa:b5:c9:05:97:b5:9b:de: 0f:50:64:61:08:4e:3f:4e:23:d4:9e:f3:fe:2a:48:8d:eb:fc: d8:19:26:9c:53:cc:f0:cb:b8:5a:f7:e3:03:92:d6:d2:4e:16: 91:bd:2b:88:b0:9e:c6:b5:1c:da:3d:ec:25:2f:42:57:43:eb: c8:ee:08:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CgPgWZT0vgDsBkeT7AKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli NWI3NzAwHhcNMjYwMTI2MTYwMTM1WhcNMjYwMTI3MTYwMTM1WjAzMTEwLwYDVQQD EygzNDFjNDI5NmU1NTBmYmZkNTY4NGI4MDc4MzUzNzQyYTliNTczNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SrowxN4Xz9SiqWSAO32pMhAJGUE 9Gwy61jpIMRN7XAGwm/Ahvy4/pTMJau7Jg5PH4LkxuH4QF0Kn9vQ4hq7t7CK1aJz hKUhLC2EsxZCn9eDblScpMrxU3LUjWwLtKT5FtxQK7yJ/m7IyLWccsR9wb27Dz7x UdeWZU2jjU6tFDJ/sdgfRlPgIqmBd8jI+vNfE8XBAipT/xRaLdKP/HpLcmdX+Jgl qgHlWKAZKBNj1y/lFTbVjTDrGJkCDfg1j0xM/6vtUf8dK+amaP8T3zs28gE3AusG w6F+gsIyFANY4BvfHi8r7axDk2n9Mgi/CO+z8MjKqFs3Nim2oKL7zzntrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQcQpblUPv9VoS4B4NTdCqbVzcQMB8GA1UdIwQY MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct NTBlNGIwNTA0ZjQ4LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4 LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUU1kMpB n7d4sXmRyi1DMhiReQMkPt0qo2eAoW6zfNCWrYipN0HbeJd1UGTFx49eCooIqsYd xTc7/Gbc6xOAR1FcGAfWctJ/840Leab3joUlngyJVILpexigJJWNxz1VieWl3jiX y3PigotpYSIJ336lCNNGPIU/ARDG/bXMCCoAwpVMNPbgsptq6YUJubplbKyoGzBX g736ARZQnXAihtsEcnaV6Wc+NY2usn9C3Ua6xdL9V4YfiJ2k9BEj8fq1yQWXtZve D1BkYQhOP04j1J7z/ipIjev82BkmnFPM8Mu4WvfjA5LW0k4Wkb0riLCexrUc2j3s JS9CV0PryO4IMw== -----END CERTIFICATE-----Generated at Mon Jan 26 20:45:42 2026 by rpki-client