This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json) Hash identifier: zm/0ZIfzf3dUgVs6v/Vr3XvU0k5fnDGfTplnVUd4eMk= Subject key identifier: 67:FF:40:3F:41:72:8C:DD:97:5A:D6:3B:CC:AB:78:B8:1D:EA:2F:A6 Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Certificate serial: 019BAB6E4E41709530D4B0383EA823F2B1B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft Manifest number: 17C8 Signing time: Sun 11 Jan 2026 05:01:31 +0000 Manifest this update: Sun 11 Jan 2026 05:01:31 +0000 Manifest next update: Mon 12 Jan 2026 05:01:31 +0000 Files and hashes: 1: 7UvzRj5QP_dEFTSa2_ky9OFIs_w.roa (hash: DHzqaUg1W01FdP3m2dDSV47MKZBzpdl5evM0P3dBnbg=) 2: EatRVRBBWy_Eiw-BYatitoyprMs.roa (hash: iv+Kv1NfcsjQn7ciX3R3V9wqkwDXw2M471v/p/wN2I8=) 3: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: C6MEG7vuKowT8NqSLNioCHoLPACpX9/ZilkIn2unRGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:6e:4e:41:70:95:30:d4:b0:38:3e:a8:23:f2:b1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Validity Not Before: Jan 11 05:01:31 2026 GMT Not After : Jan 12 05:01:31 2026 GMT Subject: CN=67ff403f41728cdd975ad63bccab78b81dea2fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:77:6b:fa:d9:dc:25:bd:e5:97:a1:b9:e0:ef: d3:6b:77:fe:41:52:39:e4:02:7a:0a:e0:07:bc:c5: 5b:91:23:11:ec:ca:ac:5b:2f:c2:e1:9b:5a:c1:92: 62:d0:a9:6d:81:a3:6f:8f:f3:1a:a5:71:14:ae:fa: 09:66:eb:bd:99:ee:db:2d:de:f1:ea:ae:57:a1:29: 04:81:10:62:67:96:3e:f8:26:02:cb:d5:5d:ef:01: 04:4c:d0:eb:e9:54:da:5a:ae:76:b8:f5:51:f8:be: e8:6e:36:1c:f5:75:a9:06:b2:a6:00:0f:dd:51:30: 14:33:0f:50:bc:b0:44:4b:ec:b1:e8:da:2b:57:a6: 36:07:cb:68:30:0c:c3:bb:3b:b7:87:72:34:75:2b: cc:e5:75:ff:5a:b4:fe:41:62:eb:62:4a:a0:a8:73: ab:7d:2b:1b:12:c8:d4:26:94:fe:26:27:16:75:cb: 6f:f4:4f:94:78:ae:e3:e1:d8:f0:ee:b0:16:c6:60: e3:4e:e6:d1:42:8c:41:af:45:40:02:c6:35:64:74: cb:dc:43:a6:fe:69:ae:8f:f9:bd:86:25:ba:57:f8: d6:82:20:ea:c7:7e:41:c9:c8:c4:21:2c:c2:3d:4c: ab:2e:25:96:65:69:51:a9:e0:eb:f0:4a:7e:2b:e1: 00:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FF:40:3F:41:72:8C:DD:97:5A:D6:3B:CC:AB:78:B8:1D:EA:2F:A6 X509v3 Authority Key Identifier: keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f1:54:51:20:95:9e:35:98:96:89:65:fe:14:a6:bf:b7:44: 1d:f8:94:13:80:98:49:c8:f4:7b:8b:90:d7:ff:6b:95:fe:f3: 1d:f1:d2:01:07:8f:40:82:d9:60:68:50:d1:a4:eb:21:ff:2e: ec:d3:ab:d0:21:d2:a9:99:b9:f1:98:d4:48:b1:cf:26:7f:c9: 96:d7:18:63:77:d0:ea:78:e2:dd:e1:cd:bc:3d:10:d9:91:05: c5:23:41:cb:38:a5:ff:0d:83:0d:67:40:ec:7f:32:a8:88:d2: f2:b9:e7:ff:73:b3:41:48:a6:74:3e:e7:ac:18:ab:3a:58:53: 5c:da:a8:4b:39:26:33:34:ce:42:69:06:fd:19:8c:11:6c:c5: 47:3f:5d:5d:8f:0f:18:5d:1a:71:95:df:c3:d0:31:d5:16:99: 3d:2f:aa:fc:8f:bc:df:bd:11:f2:dc:b6:cb:0a:7c:84:ef:46: 45:67:e7:89:e3:bc:8c:45:6e:5f:78:23:e7:ac:3d:c4:c3:2c: 98:b5:65:2a:a3:47:f8:b6:be:1e:af:78:04:3b:33:ea:ad:28: 7b:48:10:7e:60:5f:44:b3:09:09:82:49:52:ef:cf:dd:05:77: 1a:3b:f0:35:a2:bc:c7:db:a7:36:47:fd:02:25:07:69:2f:50: bb:f2:01:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZurbk5BcJUw1LA4Pqgj8rG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0 OTBmMGUwHhcNMjYwMTExMDUwMTMxWhcNMjYwMTEyMDUwMTMxWjAzMTEwLwYDVQQD Eyg2N2ZmNDAzZjQxNzI4Y2RkOTc1YWQ2M2JjY2FiNzhiODFkZWEyZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+3dr+tncJb3ll6G54O/Ta3f+QVI5 5AJ6CuAHvMVbkSMR7MqsWy/C4ZtawZJi0KltgaNvj/MapXEUrvoJZuu9me7bLd7x 6q5XoSkEgRBiZ5Y++CYCy9Vd7wEETNDr6VTaWq52uPVR+L7objYc9XWpBrKmAA/d UTAUMw9QvLBES+yx6NorV6Y2B8toMAzDuzu3h3I0dSvM5XX/WrT+QWLrYkqgqHOr fSsbEsjUJpT+JicWdctv9E+UeK7j4djw7rAWxmDjTubRQoxBr0VAAsY1ZHTL3EOm /mmuj/m9hiW6V/jWgiDqx35BycjEISzCPUyrLiWWZWlRqeDr8Ep+K+EAeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGf/QD9Bcozdl1rWO8yreLgd6i+mMB8GA1UdIwQY MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt YmRlMDI4YWQ1OTMwLzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffFUUSCV njWYloll/hSmv7dEHfiUE4CYScj0e4uQ1/9rlf7zHfHSAQePQILZYGhQ0aTrIf8u 7NOr0CHSqZm58ZjUSLHPJn/JltcYY3fQ6nji3eHNvD0Q2ZEFxSNByzil/w2DDWdA 7H8yqIjS8rnn/3OzQUimdD7nrBirOlhTXNqoSzkmMzTOQmkG/RmMEWzFRz9dXY8P GF0acZXfw9Ax1RaZPS+q/I+8370R8ty2ywp8hO9GRWfnieO8jEVuX3gj56w9xMMs mLVlKqNH+La+Hq94BDsz6q0oe0gQfmBfRLMJCYJJUu/P3QV3GjvwNaK8x9unNkf9 AiUHaS9Qu/IBpA== -----END CERTIFICATE-----Generated at Sun Jan 11 08:30:19 2026 by rpki-client