This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json) Hash identifier: ln0S1f7TDm346o0/kSn66ITLTnN/VHbPcJ+hyBMR8ig= Subject key identifier: 8C:AF:2E:CA:1A:C3:48:98:98:1B:8E:F9:6A:5B:53:AE:9D:83:CF:36 Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c Certificate serial: 019C1BA70E3D8C0D871399133DECF5D73585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft Manifest number: 1821 Signing time: Mon 02 Feb 2026 00:00:58 +0000 Manifest this update: Mon 02 Feb 2026 00:00:58 +0000 Manifest next update: Tue 03 Feb 2026 00:00:58 +0000 Files and hashes: 1: 59E_pBHuOOWdiE37ftfZgTACrjg.roa (hash: wZxavqeLHdj5qCOpHNZLKUOBtGFYxuAkYSqaSAQ643U=) 2: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: Rg0oBVhq/QuC2BtJOvokz1OCFIctxkpzbHFb4E6C/6Q=) 3: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=) 4: gwfvHd9vGQ-YayDB4JMmJ6Zoy-k.roa (hash: JXFha1HpeDKqZ6dndv5E6MFGVWN5nIxgaGNdqYj6mdM=) 5: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=) 6: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=) 7: xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa (hash: LI07T8x4WOMtmCDk/CQyntDelPjiSN5ovqKx6m4pWV0=) 8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:a7:0e:3d:8c:0d:87:13:99:13:3d:ec:f5:d7:35:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c Validity Not Before: Feb 2 00:00:58 2026 GMT Not After : Feb 3 00:00:58 2026 GMT Subject: CN=8caf2eca1ac34898981b8ef96a5b53ae9d83cf36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:43:d6:1f:a0:bf:dc:58:e6:88:66:33:8f:89: 40:a2:7e:4f:15:d1:6e:8e:80:8a:f6:3c:ca:dc:91: e7:50:07:b3:50:a1:1d:6e:10:b6:47:16:8d:23:a2: 90:16:7b:c2:f1:6c:c9:1f:48:ec:b3:7a:02:b4:8e: 8a:0c:29:40:88:79:7c:c1:c4:fa:c8:d1:34:d8:00: 53:b2:2b:57:ed:dc:16:0b:99:26:af:fc:b0:c7:ba: af:ae:cd:b7:be:9a:42:66:2c:4b:9b:83:bd:bd:7c: cf:b5:26:0c:58:53:9b:e1:d6:f7:81:50:bc:d0:bd: a9:c9:9e:7d:31:58:3f:77:8c:ce:64:07:57:59:c8: 02:19:9e:00:79:9a:fb:cd:27:84:51:6b:11:6c:1e: 67:0d:43:a3:70:0e:c4:7f:84:b3:72:80:52:f1:91: 14:f9:5f:7d:a6:05:d7:e3:70:be:9f:79:68:8b:ff: 3e:9b:be:5c:bf:c6:eb:31:ee:78:a0:59:cb:9f:1c: ea:ad:9a:01:59:07:aa:01:22:0e:9d:9d:42:3c:c9: ed:7c:f6:74:5e:3a:ce:57:f1:73:2f:43:6e:27:4d: 3a:2a:06:a2:e0:bc:4c:ad:88:59:fe:df:e8:ea:1c: e9:bc:8c:2d:86:86:6c:ed:cd:9b:f6:ee:b7:e3:e3: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AF:2E:CA:1A:C3:48:98:98:1B:8E:F9:6A:5B:53:AE:9D:83:CF:36 X509v3 Authority Key Identifier: keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:0f:1f:f7:6c:74:37:3e:56:7b:43:e2:df:16:f7:ba:eb:c2: bd:39:42:0e:be:a7:1d:c5:a3:ca:a1:a3:39:1f:b6:c9:4d:8a: 80:5d:ab:eb:a5:a4:ac:be:19:e6:2a:4f:18:84:26:72:23:10: f1:b1:54:9e:64:3b:20:ef:2e:a8:2d:9e:df:9f:ff:82:81:87: 19:40:f2:cb:f9:c6:54:1d:cf:42:dc:85:18:00:79:55:20:8a: d9:99:46:fd:13:c4:7e:28:eb:64:ec:3d:e5:cb:78:4f:0a:11: 89:94:bc:04:f1:d8:58:7f:71:f4:db:33:50:f9:33:bc:20:c6: 4c:be:48:cd:7a:ca:a8:09:ff:4a:d4:d0:02:57:1a:2f:ed:39: be:6c:25:37:a9:08:89:67:81:ce:3f:9f:b9:75:8b:a7:7a:06: 97:42:cc:df:6b:61:aa:ee:03:e4:d7:df:15:12:ca:5d:2a:0f: 6a:a8:2e:3e:9e:d3:e2:93:b2:a8:e1:5c:78:58:1a:84:7f:ef: cc:27:1b:ce:1c:b9:ce:b2:4a:20:c2:90:33:33:42:6e:c6:bc: b7:53:1d:c7:74:6c:75:36:6f:47:32:5b:7b:92:c5:66:88:c0: fe:95:4b:e9:b4:bd:59:b3:fb:47:bf:39:58:11:9e:63:fa:c5: b5:d3:73:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbpw49jA2HE5kTPez11zWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj MGYyNGMwHhcNMjYwMjAyMDAwMDU4WhcNMjYwMjAzMDAwMDU4WjAzMTEwLwYDVQQD Eyg4Y2FmMmVjYTFhYzM0ODk4OTgxYjhlZjk2YTViNTNhZTlkODNjZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEPWH6C/3FjmiGYzj4lAon5PFdFu joCK9jzK3JHnUAezUKEdbhC2RxaNI6KQFnvC8WzJH0jss3oCtI6KDClAiHl8wcT6 yNE02ABTsitX7dwWC5kmr/ywx7qvrs23vppCZixLm4O9vXzPtSYMWFOb4db3gVC8 0L2pyZ59MVg/d4zOZAdXWcgCGZ4AeZr7zSeEUWsRbB5nDUOjcA7Ef4SzcoBS8ZEU +V99pgXX43C+n3loi/8+m75cv8brMe54oFnLnxzqrZoBWQeqASIOnZ1CPMntfPZ0 XjrOV/FzL0NuJ006Kgai4LxMrYhZ/t/o6hzpvIwthoZs7c2b9u634+MaMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyvLsoaw0iYmBuO+WpbU66dg882MB8GA1UdIwQY MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt ZTNmY2IyM2UzNDM4LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4 LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIA8f92x0 Nz5We0Pi3xb3uuvCvTlCDr6nHcWjyqGjOR+2yU2KgF2r66WkrL4Z5ipPGIQmciMQ 8bFUnmQ7IO8uqC2e35//goGHGUDyy/nGVB3PQtyFGAB5VSCK2ZlG/RPEfijrZOw9 5ct4TwoRiZS8BPHYWH9x9NszUPkzvCDGTL5IzXrKqAn/StTQAlcaL+05vmwlN6kI iWeBzj+fuXWLp3oGl0LM32thqu4D5NffFRLKXSoPaqguPp7T4pOyqOFceFgahH/v zCcbzhy5zrJKIMKQMzNCbsa8t1Mdx3RsdTZvRzJbe5LFZojA/pVL6bS9WbP7R785 WBGeY/rFtdNzyg== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:19 2026 by rpki-client