This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json) Hash identifier: EbtzLMqpUd1c1nbyVvVsKtmDCBlvf8d3t3jzzY1niCk= Subject key identifier: C0:A4:83:EA:EA:FD:E8:D9:5F:5E:2D:FD:91:A7:74:86:98:99:F9:85 Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33 Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733 Certificate serial: 019BFB092C3913F779890C71F62DA11ADEE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft Manifest number: 040E Signing time: Mon 26 Jan 2026 16:00:40 +0000 Manifest this update: Mon 26 Jan 2026 16:00:40 +0000 Manifest next update: Tue 27 Jan 2026 16:00:40 +0000 Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=) 2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: rmnZSz86QoyDHmQvd94QJRrd7vDilfxLu+Fl6DGmrBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:2c:39:13:f7:79:89:0c:71:f6:2d:a1:1a:de:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733 Validity Not Before: Jan 26 16:00:40 2026 GMT Not After : Jan 27 16:00:40 2026 GMT Subject: CN=c0a483eaeafde8d95f5e2dfd91a774869899f985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:51:e4:15:a8:10:2f:f9:d3:f0:da:66:b9: 91:cc:fa:c9:7f:64:aa:f1:d6:57:53:c8:39:49:e2: 8e:ab:74:b3:e5:da:c2:f0:b8:b9:a8:b2:84:0c:ee: 0b:9a:8d:af:8e:90:67:6f:1e:01:13:5a:25:76:bd: 24:8f:57:c5:09:6c:db:d6:7e:96:1a:b0:76:57:8a: 39:4d:3e:26:81:18:9b:c5:ae:a0:08:d4:ab:45:36: 62:87:ae:9a:ac:c8:d6:da:5b:c8:f8:ab:39:85:b5: 12:6d:b5:8c:0c:70:1e:9a:a5:e9:cc:11:f0:09:9d: fb:37:b4:f4:67:ef:f9:93:ea:5f:dc:3e:a6:2c:0b: 3b:92:a5:28:20:7e:a4:a7:df:66:2a:29:9a:ea:1f: f4:32:ce:0b:81:06:a2:86:4f:50:3f:c6:7f:e4:17: 93:ad:c2:ed:e3:da:2f:52:52:77:3b:ca:66:72:cc: 7f:96:9f:d3:ab:d7:8b:40:69:86:56:40:da:8c:2a: 8d:72:9f:41:f2:d7:b3:cd:cf:d4:3a:9a:b4:3b:5b: 06:24:06:6b:80:00:7d:66:95:61:81:fc:c2:97:e8: cd:a2:fa:dc:37:78:f1:eb:a1:bd:e7:d7:de:85:0b: 28:ae:3f:5f:c4:3c:84:a4:63:0b:52:99:a0:39:a8: 1e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A4:83:EA:EA:FD:E8:D9:5F:5E:2D:FD:91:A7:74:86:98:99:F9:85 X509v3 Authority Key Identifier: keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:13:c8:b2:09:b4:0a:6d:7e:1b:37:7c:28:c9:30:6c:b4:99: 75:e8:fc:68:a8:50:99:d7:f0:9a:20:74:9e:da:4e:8e:31:17: 20:c3:02:79:06:15:e6:5f:21:e6:1d:54:fa:4f:dd:c3:2b:39: c5:f2:7e:26:4d:e0:31:92:89:f7:04:12:ed:08:d2:53:0b:de: a4:59:28:59:50:63:af:c2:f7:46:59:f5:44:d8:c6:0c:8c:fc: 9d:6e:a6:20:e2:ac:ae:d9:f6:e3:f1:e1:95:64:80:6f:f2:40: ad:fa:dd:48:bd:f6:bc:33:c5:8f:8f:44:3d:ba:f0:93:79:69: 13:86:0c:87:c9:b4:20:6e:8d:3b:f7:ec:ef:cd:44:18:c1:b6: 05:47:62:e4:e3:b2:93:e0:81:32:48:4f:36:3a:3a:5c:4b:bb: 82:3a:40:16:51:24:3a:c7:eb:77:81:80:10:1a:70:c8:38:12: 38:28:81:78:0c:10:7f:a2:6a:5d:03:cc:65:59:03:58:13:b5: 65:44:ac:9b:02:15:0b:4b:8a:9e:19:4f:dd:64:9e:1f:ea:29: 14:dc:1d:fc:3a:08:22:e9:bf:14:bd:fd:a2:0e:32:08:f2:be: 04:5d:aa:8e:b3:31:58:23:e4:43:e2:64:23:7f:07:e0:8b:78: 25:9e:e3:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CSw5E/d5iQxx9i2hGt7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl M2U3MzMwHhcNMjYwMTI2MTYwMDQwWhcNMjYwMTI3MTYwMDQwWjAzMTEwLwYDVQQD EyhjMGE0ODNlYWVhZmRlOGQ5NWY1ZTJkZmQ5MWE3NzQ4Njk4OTlmOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6hR5BWoEC/50/DaZrmRzPrJf2Sq 8dZXU8g5SeKOq3Sz5drC8Li5qLKEDO4Lmo2vjpBnbx4BE1oldr0kj1fFCWzb1n6W GrB2V4o5TT4mgRibxa6gCNSrRTZih66arMjW2lvI+Ks5hbUSbbWMDHAemqXpzBHw CZ37N7T0Z+/5k+pf3D6mLAs7kqUoIH6kp99mKima6h/0Ms4LgQaihk9QP8Z/5BeT rcLt49ovUlJ3O8pmcsx/lp/Tq9eLQGmGVkDajCqNcp9B8tezzc/UOpq0O1sGJAZr gAB9ZpVhgfzCl+jNovrcN3jx66G959fehQsorj9fxDyEpGMLUpmgOageMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCkg+rq/ejZX14t/ZGndIaYmfmFMB8GA1UdIwQY MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshPIsgm0 Cm1+Gzd8KMkwbLSZdej8aKhQmdfwmiB0ntpOjjEXIMMCeQYV5l8h5h1U+k/dwys5 xfJ+Jk3gMZKJ9wQS7QjSUwvepFkoWVBjr8L3Rln1RNjGDIz8nW6mIOKsrtn24/Hh lWSAb/JArfrdSL32vDPFj49EPbrwk3lpE4YMh8m0IG6NO/fs781EGMG2BUdi5OOy k+CBMkhPNjo6XEu7gjpAFlEkOsfrd4GAEBpwyDgSOCiBeAwQf6JqXQPMZVkDWBO1 ZUSsmwIVC0uKnhlP3WSeH+opFNwd/DoIIum/FL39og4yCPK+BF2qjrMxWCPkQ+Jk I38H4It4JZ7j0g== -----END CERTIFICATE-----Generated at Tue Jan 27 01:19:04 2026 by rpki-client