This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json) Hash identifier: hNpcZRjQr3PRih6oJjlRoiIM8J9nS/OPmzE5Nk3Gxa4= Subject key identifier: 45:55:36:8E:FE:9D:1C:B2:D0:08:A6:D2:56:62:DB:84:A9:74:82:BD Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec Certificate serial: 019BFA64C53F5866651FE7DBDDBBA4F56CED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft Manifest number: 12EA Signing time: Mon 26 Jan 2026 13:01:06 +0000 Manifest this update: Mon 26 Jan 2026 13:01:06 +0000 Manifest next update: Tue 27 Jan 2026 13:01:06 +0000 Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: rE8DgU26typAIXJN56v6GTpleo6yg9hR/GzW5p/MQ70=) 2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:c5:3f:58:66:65:1f:e7:db:dd:bb:a4:f5:6c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec Validity Not Before: Jan 26 13:01:06 2026 GMT Not After : Jan 27 13:01:06 2026 GMT Subject: CN=4555368efe9d1cb2d008a6d25662db84a97482bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:49:b6:7f:00:60:08:9c:a3:7d:11:41:d8: e4:7d:f5:f0:1c:c2:10:30:6a:89:6f:f9:9b:b5:99: 98:10:9d:30:59:d9:be:97:bc:94:bc:06:fc:97:84: 58:15:42:d8:b2:aa:84:47:c4:b3:51:d0:72:2a:f3: 1c:ee:7c:61:b1:62:55:bc:d6:af:83:66:bd:e9:81: 8c:17:7b:9e:76:05:21:e3:80:10:77:5c:15:7e:11: 35:0b:fc:16:f9:f0:9f:e3:95:fb:4c:c2:7e:05:6b: 95:cb:59:ca:e2:57:9b:63:aa:df:80:7e:71:c0:71: bc:0f:d1:80:fe:f1:fc:51:98:1f:7e:d1:b0:79:ae: 19:58:43:e6:40:27:e5:b6:5d:0e:93:e5:df:4e:32: 96:49:f0:20:6e:03:1d:4f:b6:0d:2b:f7:a4:41:15: c9:a9:69:13:b0:78:ba:5a:9c:b7:10:95:03:ab:76: 90:28:1f:71:03:66:12:e9:71:45:ec:07:41:ab:ed: e6:f4:8b:b9:96:4f:da:a8:8d:37:97:e2:70:98:18: aa:80:64:81:f9:ce:0b:bf:35:7f:a6:a7:6a:37:e2: 5a:b8:14:db:61:c9:22:b3:c3:c2:8a:c1:03:4b:87: bc:8a:29:f0:b9:89:d6:13:c9:2c:0a:0d:cd:00:25: 4b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:55:36:8E:FE:9D:1C:B2:D0:08:A6:D2:56:62:DB:84:A9:74:82:BD X509v3 Authority Key Identifier: keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7e:43:62:db:1f:0e:23:0f:2c:08:39:a5:1b:d5:a0:97:b5: c8:e7:3d:5f:71:a9:1b:f7:f2:d3:71:73:81:d9:5b:58:6a:1f: e7:33:3d:44:48:0a:36:39:dc:64:0c:63:00:f5:c2:80:b1:88: 43:e6:2e:0a:5c:e6:25:ce:fe:47:3e:c1:49:dd:35:6c:3f:84: 04:30:dd:23:b4:95:73:56:bb:f6:21:8d:57:17:7a:74:3e:b2: cf:61:6d:3f:41:a7:2f:3f:a2:20:3d:9c:45:d7:3d:d1:22:4a: d2:b9:0b:3b:18:59:f5:dc:3f:43:06:b2:86:23:c4:86:5b:3c: 7e:bf:9d:36:a8:15:75:34:1e:3a:3f:2f:17:af:4f:53:46:fd: c5:01:e3:bc:93:8e:77:bf:30:21:48:65:7b:13:84:ef:a2:f0: a1:68:32:fb:e9:43:57:1a:a3:c0:9e:a4:b1:b4:3a:a4:4a:25: fb:4c:87:7f:d9:85:7e:d9:9f:ae:38:08:3d:90:0c:b9:84:c3: e1:de:52:79:25:cd:7c:bf:79:05:4e:e0:1f:37:47:df:b9:92: e3:32:03:2e:87:cf:ab:3e:0d:48:04:44:c0:ca:ca:a4:32:f7: 82:41:67:8c:7a:33:8d:b3:46:8d:ae:bd:96:d7:ee:aa:e0:e8: 23:28:00:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZMU/WGZlH+fb3buk9WztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NTFjZWE1YWNlNzdmNGQ3ZjRkZDI4MmYxMGFiOWNiMGVl NGQxZWMwHhcNMjYwMTI2MTMwMTA2WhcNMjYwMTI3MTMwMTA2WjAzMTEwLwYDVQQD Eyg0NTU1MzY4ZWZlOWQxY2IyZDAwOGE2ZDI1NjYyZGI4NGE5NzQ4MmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVBJtn8AYAico30RQdjkffXwHMIQ MGqJb/mbtZmYEJ0wWdm+l7yUvAb8l4RYFULYsqqER8SzUdByKvMc7nxhsWJVvNav g2a96YGMF3uedgUh44AQd1wVfhE1C/wW+fCf45X7TMJ+BWuVy1nK4lebY6rfgH5x wHG8D9GA/vH8UZgfftGwea4ZWEPmQCfltl0Ok+XfTjKWSfAgbgMdT7YNK/ekQRXJ qWkTsHi6Wpy3EJUDq3aQKB9xA2YS6XFF7AdBq+3m9Iu5lk/aqI03l+JwmBiqgGSB +c4LvzV/pqdqN+JauBTbYckis8PCisEDS4e8iinwuYnWE8ksCg3NACVL9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVVNo7+nRyy0Aim0lZi24SpdIK9MB8GA1UdIwQY MBaAFDZRzqWs539Nf03SgvEKucsO5NHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hYzIxNGItMzc3Mi00ODEwLTkyMDYt YjkyYjA5NGYzYTNjLzEvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9hYzIxNGItMzc3Mi00ODEwLTkyMDYtYjkyYjA5NGYzYTNj LzEvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACn5DYtsf DiMPLAg5pRvVoJe1yOc9X3GpG/fy03FzgdlbWGof5zM9REgKNjncZAxjAPXCgLGI Q+YuClzmJc7+Rz7BSd01bD+EBDDdI7SVc1a79iGNVxd6dD6yz2FtP0GnLz+iID2c Rdc90SJK0rkLOxhZ9dw/QwayhiPEhls8fr+dNqgVdTQeOj8vF69PU0b9xQHjvJOO d78wIUhlexOE76LwoWgy++lDVxqjwJ6ksbQ6pEol+0yHf9mFftmfrjgIPZAMuYTD 4d5SeSXNfL95BU7gHzdH37mS4zIDLofPqz4NSAREwMrKpDL3gkFnjHozjbNGja69 ltfuquDoIygATQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:58 2026 by rpki-client