This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft File: N4ezJLDTL7GjZ4sCxIIobUwmug8.mft (raw, json) Hash identifier: La4yTdkgQ4SsxRvjphEuYl3+H9ZQnCOyQSF4szExptE= Subject key identifier: 12:43:2D:B8:58:97:F4:10:34:73:A5:A0:43:11:E8:F0:50:8D:8B:65 Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f Certificate serial: 019B9E577C72BD787A0E9A5C29C5A9F5B498 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft Manifest number: 17BC Signing time: Thu 08 Jan 2026 16:01:32 +0000 Manifest this update: Thu 08 Jan 2026 16:01:32 +0000 Manifest next update: Fri 09 Jan 2026 16:01:32 +0000 Files and hashes: 1: 9mOuuvijZnA_STwkYngVMPsH8JY.roa (hash: fX3y4W7rd9iSm1Vwp+9QVvzxdTPDv1ImVwXNUL4pyB8=) 2: N4ezJLDTL7GjZ4sCxIIobUwmug8.crl (hash: /Vp+ktuQUunZ4wSVSuScmn9whvPaJI5tgbH3Q36dZtI=) 3: ajIXahG1h02mHzUr71Bdt_pBNcY.roa (hash: kb65zR8ztUqoEmCVoclsV9qtFS56zcMpxTgwfbOjC74=) 4: nwWoxyfeZ0vZo2FUj5MajXpH3kY.roa (hash: sY2bCxjxo0ci2bvDv4Rjq6+XrMtq9QVH+g5SCrc5djQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:57:7c:72:bd:78:7a:0e:9a:5c:29:c5:a9:f5:b4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f Validity Not Before: Jan 8 16:01:32 2026 GMT Not After : Jan 9 16:01:32 2026 GMT Subject: CN=12432db85897f4103473a5a04311e8f0508d8b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:81:bb:2d:76:d0:fa:56:f7:43:31:66:73: c7:78:5d:86:46:50:1c:51:85:34:da:26:d6:9e:21: 22:9e:9a:c0:91:a8:35:7c:53:7c:c5:22:6b:3a:91: 34:4c:89:fe:fb:6d:50:8a:38:f4:9d:83:a1:82:18: 87:62:44:d4:cb:a2:65:85:6e:08:91:fe:57:c1:80: 05:fd:40:b8:50:5e:13:b4:83:f5:fb:75:a2:1e:06: 1f:e7:f3:2c:97:6f:a1:0f:0a:30:85:8f:0a:29:9e: 5e:65:a2:52:87:fe:84:3e:57:ac:bf:95:72:64:8a: ac:87:e6:35:82:ec:d8:00:d8:69:d7:2f:ea:ab:75: 63:ce:b4:3b:79:51:01:23:e0:5d:2d:31:4b:13:64: 86:be:05:8f:af:d2:01:37:ea:72:bc:d5:f7:40:bf: 56:96:c6:a6:37:40:39:47:77:3a:dc:f4:0b:1e:39: 94:46:b5:10:78:ed:14:75:a8:23:d5:1c:5e:5e:69: 0f:5b:7f:da:f4:af:3b:f4:5c:53:48:ca:2b:3a:64: 84:38:c7:64:01:5b:91:44:4f:97:f6:45:a2:0a:63: c4:56:b4:35:af:eb:0a:be:eb:7c:aa:60:15:83:24: 8a:12:e3:42:71:ea:76:c9:49:3d:4b:68:ee:cc:27: cd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:43:2D:B8:58:97:F4:10:34:73:A5:A0:43:11:E8:F0:50:8D:8B:65 X509v3 Authority Key Identifier: keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:91:b3:26:96:5f:49:42:60:b4:96:08:10:13:77:26:3b:c0: 86:72:aa:8b:d1:31:f6:61:06:f2:f1:62:01:8d:90:1d:5d:9f: 88:18:87:9d:50:c7:db:5d:5f:c1:9f:f3:3c:6d:57:2b:e8:ec: 8f:7c:1d:44:f0:3e:9d:c5:13:56:dc:84:7d:88:73:2e:07:ad: 20:43:db:8f:9c:02:ae:ac:bb:f8:7c:d4:e3:33:ab:8e:74:d7: c7:08:02:c3:11:53:15:db:2b:71:4c:14:08:da:fa:c8:9f:f6: a8:36:22:a4:46:60:3f:ed:fc:0d:f1:0e:c6:4a:68:46:b8:b4: 88:57:74:48:c4:52:24:b0:27:cc:7c:a3:82:c5:b8:93:90:f0: b8:5a:86:df:4b:53:dd:bb:b6:52:cf:e2:f8:dd:a9:32:a5:1c: 09:12:dd:9c:77:bd:1b:25:d3:01:78:41:76:f0:be:a6:eb:dd: 95:94:d9:9d:9c:1f:ec:7f:b8:70:22:02:1a:3a:36:c6:1b:a5: d1:84:b5:fe:0d:5a:ec:c3:e8:7e:ba:5a:46:09:c1:d1:cc:c6: 65:46:27:fc:c1:29:1e:66:bf:17:58:9f:61:0a:93:7f:ea:84: c6:15:15:63:08:d9:bf:d3:56:a5:9d:1c:db:dc:d9:fe:08:e5: ad:7c:f9:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZueV3xyvXh6DppcKcWp9bSYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ODdiMzI0YjBkMzJmYjFhMzY3OGIwMmM0ODIyODZkNGMy NmJhMGYwHhcNMjYwMTA4MTYwMTMyWhcNMjYwMTA5MTYwMTMyWjAzMTEwLwYDVQQD EygxMjQzMmRiODU4OTdmNDEwMzQ3M2E1YTA0MzExZThmMDUwOGQ4YjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIWBuy120PpW90MxZnPHeF2GRlAc UYU02ibWniEinprAkag1fFN8xSJrOpE0TIn++21Qijj0nYOhghiHYkTUy6JlhW4I kf5XwYAF/UC4UF4TtIP1+3WiHgYf5/Msl2+hDwowhY8KKZ5eZaJSh/6EPlesv5Vy ZIqsh+Y1guzYANhp1y/qq3VjzrQ7eVEBI+BdLTFLE2SGvgWPr9IBN+pyvNX3QL9W lsamN0A5R3c63PQLHjmURrUQeO0Udagj1RxeXmkPW3/a9K879FxTSMorOmSEOMdk AVuRRE+X9kWiCmPEVrQ1r+sKvut8qmAVgySKEuNCcep2yUk9S2juzCfNxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJDLbhYl/QQNHOloEMR6PBQjYtlMB8GA1UdIwQY MBaAFDeHsySw0y+xo2eLAsSCKG1MJroPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2Ut YzQ3MTE0ODIzODBlLzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2UtYzQ3MTE0ODIzODBl LzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5GzJpZf SUJgtJYIEBN3JjvAhnKqi9Ex9mEG8vFiAY2QHV2fiBiHnVDH211fwZ/zPG1XK+js j3wdRPA+ncUTVtyEfYhzLgetIEPbj5wCrqy7+HzU4zOrjnTXxwgCwxFTFdsrcUwU CNr6yJ/2qDYipEZgP+38DfEOxkpoRri0iFd0SMRSJLAnzHyjgsW4k5DwuFqG30tT 3bu2Us/i+N2pMqUcCRLdnHe9GyXTAXhBdvC+puvdlZTZnZwf7H+4cCICGjo2xhul 0YS1/g1a7MPofrpaRgnB0czGZUYn/MEpHma/F1ifYQqTf+qExhUVYwjZv9NWpZ0c 29zZ/gjlrXz5jQ== -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:16 2026 by rpki-client