This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json) Hash identifier: pDdbmagmU2W5gvGR4wXJrBnKTMXhUDBF+kucVWd9f48= Subject key identifier: B0:18:3B:5C:7A:6D:7E:1F:4C:40:91:BB:64:01:AC:64:42:55:16:6E Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9 Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9 Certificate serial: 019BA7232000A3583954E41D8EB42D5F78A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft Manifest number: 16FF Signing time: Sat 10 Jan 2026 09:00:55 +0000 Manifest this update: Sat 10 Jan 2026 09:00:55 +0000 Manifest next update: Sun 11 Jan 2026 09:00:55 +0000 Files and hashes: 1: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: XgXjZ4rT42DNzKp6kJKsDO9FLgWNGEU9yvZ1pUzYVA8=) 2: jCabWwc4lrzZfud5oOw_j95TRxI.roa (hash: IlGH+P9+bkg65b5rGsYg3482ima8u2sdZU18E1WvtY8=) 3: vqGFDj0dJpEJ_K9mMZMY2Pb0u70.roa (hash: 6ZW28XbNWPt2onL+kOFHq5ID9QTnhKevRaeNbk8iaXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:23:20:00:a3:58:39:54:e4:1d:8e:b4:2d:5f:78:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9 Validity Not Before: Jan 10 09:00:55 2026 GMT Not After : Jan 11 09:00:55 2026 GMT Subject: CN=b0183b5c7a6d7e1f4c4091bb6401ac644255166e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:59:62:86:45:80:55:f8:c1:fb:a5:a4:8c:01: b7:49:98:1f:ba:40:94:64:ab:bb:6c:df:73:7d:c9: f4:7a:d2:9f:61:91:83:0f:90:98:d2:50:f5:53:6b: ba:e7:d6:4d:bc:e3:77:bc:01:25:6a:e3:db:69:2e: ad:fb:fa:d6:22:d8:3c:ee:77:c4:fe:11:8f:20:29: 1a:73:1b:57:2f:e8:d1:ea:ee:52:d0:cf:97:a2:00: 41:d9:1d:67:16:9a:13:eb:d0:3e:24:5a:48:6f:c9: 7c:9c:20:87:c2:3f:87:21:8f:07:46:c5:fd:fd:8b: 3d:99:1b:15:da:6b:67:4a:d7:8f:9a:58:d9:29:6f: 28:5f:49:b6:03:0d:e5:2a:b5:40:41:a8:b0:91:82: 95:23:10:96:74:41:7a:2c:e7:b9:10:cc:33:47:ab: 4a:60:b3:d8:1a:8f:f0:c6:94:36:61:39:c6:77:92: 5f:2d:06:ed:11:ec:1f:43:24:ee:59:ec:76:e0:68: fe:e1:55:13:06:c7:a4:b8:76:92:a2:24:01:a7:48: 2c:9d:c1:5a:df:4b:2d:f9:f2:21:00:ed:89:2f:94: 31:ec:47:b8:0d:75:b8:5b:ca:0d:ce:64:ec:88:4b: 6b:1e:5e:75:ac:e6:7b:16:93:97:1e:6f:97:83:5d: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:18:3B:5C:7A:6D:7E:1F:4C:40:91:BB:64:01:AC:64:42:55:16:6E X509v3 Authority Key Identifier: keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d7:c0:d7:ec:05:71:46:2a:93:cf:c3:33:d5:cf:d6:bc:3e: 0e:47:d0:16:cb:bd:fd:9f:f8:39:08:84:2f:19:8e:dd:11:13: 36:1a:e7:2a:ed:79:4e:3b:06:74:c9:b1:61:f2:bd:8e:91:ea: 5e:7f:a1:37:81:20:54:db:b0:41:10:eb:52:f0:40:9b:23:1d: bf:5e:45:82:fd:e8:a9:44:cf:b9:3c:ca:aa:89:54:5f:09:e6: 79:67:4d:8f:90:ca:bd:ff:5c:29:ec:7a:7f:5f:ea:a3:50:bd: 82:21:e0:79:34:ab:12:a9:23:de:dd:9a:ba:86:ed:ca:4e:7a: 9e:f9:bf:6d:83:68:9b:09:36:23:f9:5a:2b:0e:37:43:8a:80: ae:69:6e:0e:fe:a8:8b:18:5d:1e:43:9d:58:1f:36:59:12:56: 1c:bc:05:e2:08:7b:d8:61:02:65:c0:1f:fa:f4:8f:6e:bb:35: a5:3f:55:c1:c1:54:3f:13:0e:e8:38:58:93:16:d7:1a:a5:ec: cc:67:21:f7:eb:6b:75:20:a8:3a:c7:c3:42:71:b8:d4:2a:11: 38:61:ba:5b:36:43:d9:f5:56:6b:66:7d:c6:6a:d4:ff:a1:d6: e6:68:7b:36:21:e7:79:8a:ab:c6:1c:e9:86:dc:b2:0a:bc:83: 5c:d1:2c:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZunIyAAo1g5VOQdjrQtX3ipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTNkNGJmMWJjMGY4MTcyODIwNWU1MWRlMDk3Y2YzODNh MGNkYzkwHhcNMjYwMTEwMDkwMDU1WhcNMjYwMTExMDkwMDU1WjAzMTEwLwYDVQQD EyhiMDE4M2I1YzdhNmQ3ZTFmNGM0MDkxYmI2NDAxYWM2NDQyNTUxNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01lihkWAVfjB+6WkjAG3SZgfukCU ZKu7bN9zfcn0etKfYZGDD5CY0lD1U2u659ZNvON3vAElauPbaS6t+/rWItg87nfE /hGPICkacxtXL+jR6u5S0M+XogBB2R1nFpoT69A+JFpIb8l8nCCHwj+HIY8HRsX9 /Ys9mRsV2mtnStePmljZKW8oX0m2Aw3lKrVAQaiwkYKVIxCWdEF6LOe5EMwzR6tK YLPYGo/wxpQ2YTnGd5JfLQbtEewfQyTuWex24Gj+4VUTBsekuHaSoiQBp0gsncFa 30st+fIhAO2JL5Qx7Ee4DXW4W8oNzmTsiEtrHl51rOZ7FpOXHm+Xg10K6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAYO1x6bX4fTECRu2QBrGRCVRZuMB8GA1UdIwQY MBaAFDXj1L8bwPgXKCBeUd4JfPODoM3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2Qt YTYzNDc5MTQ0MGNhLzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2QtYTYzNDc5MTQ0MGNh LzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdfA1+wF cUYqk8/DM9XP1rw+DkfQFsu9/Z/4OQiELxmO3RETNhrnKu15TjsGdMmxYfK9jpHq Xn+hN4EgVNuwQRDrUvBAmyMdv15Fgv3oqUTPuTzKqolUXwnmeWdNj5DKvf9cKex6 f1/qo1C9giHgeTSrEqkj3t2auobtyk56nvm/bYNomwk2I/laKw43Q4qArmluDv6o ixhdHkOdWB82WRJWHLwF4gh72GECZcAf+vSPbrs1pT9VwcFUPxMO6DhYkxbXGqXs zGch9+trdSCoOsfDQnG41CoROGG6WzZD2fVWa2Z9xmrU/6HW5mh7NiHneYqrxhzp htyyCryDXNEsjA== -----END CERTIFICATE-----Generated at Sat Jan 10 14:31:03 2026 by rpki-client