This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json) Hash identifier: pmuruQ5hmVmQys01Wl4rB29A5+zyuJtMfk9lnaR9+v0= Subject key identifier: 24:92:72:CC:C6:56:91:38:31:D0:A2:A6:99:86:E0:7E:F6:D5:F2:CE Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca Certificate serial: 019BF8E469491B9B0E96B99A0D1E022F2FA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft Manifest number: 034A Signing time: Mon 26 Jan 2026 06:01:17 +0000 Manifest this update: Mon 26 Jan 2026 06:01:17 +0000 Manifest next update: Tue 27 Jan 2026 06:01:17 +0000 Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: KTDtJb8DdPIzPWPUsoB4eH2tPAjEtIzbQt1qypolhy8=) 2: wfRbCWoZLVmY8bAvM8RMoZB0PGc.roa (hash: bnGgZ1CdYYmazMBl45x5uGVuKXkwyk8jwkb9FImtueA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:69:49:1b:9b:0e:96:b9:9a:0d:1e:02:2f:2f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca Validity Not Before: Jan 26 06:01:17 2026 GMT Not After : Jan 27 06:01:17 2026 GMT Subject: CN=249272ccc656913831d0a2a69986e07ef6d5f2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:64:8c:e1:db:8f:fd:1f:af:a9:8a:ad:1c:6a: 94:02:3e:55:41:b9:8a:ae:80:ad:3a:a4:2d:5a:4b: 6e:60:ef:0d:d6:39:e4:f1:2a:e7:5f:ef:55:7f:6e: ab:10:74:93:69:16:5d:5f:c5:b7:96:3f:1d:b5:7d: bc:c3:70:93:d1:02:a9:d5:02:cc:d0:6d:55:27:71: 72:17:dd:6c:48:0d:75:e9:ba:c8:1a:5c:16:69:92: c4:a7:f2:44:c9:31:eb:fe:30:5f:2b:69:4f:ad:87: 53:81:b2:2c:b5:f8:9a:10:7e:ae:6f:91:8b:e5:a3: a8:5e:20:0e:e1:0e:9e:45:ff:5b:e3:00:73:9e:f9: be:ab:9b:12:8d:d3:ca:15:b2:d7:e4:95:ec:01:24: 17:6e:d2:f8:1b:4a:23:3e:87:12:3f:62:e3:5a:fb: 14:87:d1:32:cb:5b:b8:e4:7e:ed:fd:01:ae:52:bf: c7:b8:11:58:c7:ef:1d:88:9a:0f:40:51:ab:37:92: 15:35:df:b8:8a:07:e1:2c:d8:7c:e1:22:90:a9:d0: 8c:97:16:07:5d:0f:be:39:11:09:73:17:90:b9:7c: 30:74:70:7d:66:fa:98:f8:41:a8:76:fa:e0:b3:9d: c4:69:7c:93:99:b7:e5:cd:89:bf:85:97:6d:d4:ef: 21:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:92:72:CC:C6:56:91:38:31:D0:A2:A6:99:86:E0:7E:F6:D5:F2:CE X509v3 Authority Key Identifier: keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:fd:40:8f:7f:49:ab:4c:0d:dd:78:31:a0:6f:55:d9:00:a4: 2b:f1:06:f8:b4:f0:37:1a:ac:fe:6f:8a:ac:3d:d2:65:02:66: 6c:8a:be:9b:88:94:a5:78:5a:2d:10:be:3e:25:b9:38:f1:9e: 7c:0d:1f:a1:db:05:9e:b8:69:4e:57:f7:ed:41:31:06:7d:f3: d7:d3:a0:ea:1e:90:d5:f1:af:9d:f1:8f:d7:2d:93:2b:c0:1c: 55:4c:59:35:0d:64:5a:16:c2:df:ca:2c:29:f0:cd:f7:76:54: 4b:d4:2e:87:62:cf:58:88:15:58:94:b8:0a:c1:be:84:4c:60: 94:11:52:d7:b7:cb:65:b9:6c:57:83:ae:27:b6:d7:c0:7f:e1: 43:0c:d1:67:24:aa:ba:ee:3d:84:b7:81:08:b5:45:4a:d4:ab: ea:a0:57:31:67:c8:8b:fa:b1:0b:41:d7:ed:d7:8a:01:67:e6: 48:aa:d6:67:77:10:d4:1c:7f:97:89:e1:b9:d6:37:dc:d7:a0: 4e:ad:38:c4:67:1f:ea:b6:f5:08:69:10:14:41:d7:ba:0f:6c: e8:62:ca:5f:61:af:1b:99:bd:2f:ac:78:39:00:ef:95:5d:b4: a8:f9:8a:03:5a:a5:27:da:d6:07:37:64:4f:42:9a:48:ba:d8: 0f:d7:a1:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45GlJG5sOlrmaDR4CLy+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZjFkNTY3NmJkZDcwNDMzNGIyZGIzNGNhOTA0ZDc3Y2Rk MmJhY2EwHhcNMjYwMTI2MDYwMTE3WhcNMjYwMTI3MDYwMTE3WjAzMTEwLwYDVQQD EygyNDkyNzJjY2M2NTY5MTM4MzFkMGEyYTY5OTg2ZTA3ZWY2ZDVmMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GSM4duP/R+vqYqtHGqUAj5VQbmK roCtOqQtWktuYO8N1jnk8SrnX+9Vf26rEHSTaRZdX8W3lj8dtX28w3CT0QKp1QLM 0G1VJ3FyF91sSA116brIGlwWaZLEp/JEyTHr/jBfK2lPrYdTgbIstfiaEH6ub5GL 5aOoXiAO4Q6eRf9b4wBznvm+q5sSjdPKFbLX5JXsASQXbtL4G0ojPocSP2LjWvsU h9Eyy1u45H7t/QGuUr/HuBFYx+8diJoPQFGrN5IVNd+4igfhLNh84SKQqdCMlxYH XQ++OREJcxeQuXwwdHB9ZvqY+EGodvrgs53EaXyTmbflzYm/hZdt1O8hmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSScszGVpE4MdCippmG4H721fLOMB8GA1UdIwQY MBaAFDbx1Wdr3XBDNLLbNMqQTXfN0rrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80ZDg2NWMtNzBmNS00NGI5LTg4YTYt ZWE4YWZlNjc4OTcwLzEvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS80ZDg2NWMtNzBmNS00NGI5LTg4YTYtZWE4YWZlNjc4OTcw LzEvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/1Aj39J q0wN3XgxoG9V2QCkK/EG+LTwNxqs/m+KrD3SZQJmbIq+m4iUpXhaLRC+PiW5OPGe fA0fodsFnrhpTlf37UExBn3z19Og6h6Q1fGvnfGP1y2TK8AcVUxZNQ1kWhbC38os KfDN93ZUS9Quh2LPWIgVWJS4CsG+hExglBFS17fLZblsV4OuJ7bXwH/hQwzRZySq uu49hLeBCLVFStSr6qBXMWfIi/qxC0HX7deKAWfmSKrWZ3cQ1Bx/l4nhudY33Neg Tq04xGcf6rb1CGkQFEHXug9s6GLKX2GvG5m9L6x4OQDvlV20qPmKA1qlJ9rWBzdk T0KaSLrYD9eh1A== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:28 2026 by rpki-client