This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json) Hash identifier: XiOJ90kyfGYQWCsEDk5aLZw6UB9w5aUbFZ/HDTQLQdg= Subject key identifier: C0:5F:87:5B:7E:90:84:AF:43:F0:C7:78:CD:53:D3:C4:23:6C:50:15 Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90 Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190 Certificate serial: 019BFC5368367BCC6D033E25EC52EC82985B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 22:01:23 +0000 Manifest this update: Mon 26 Jan 2026 22:01:23 +0000 Manifest next update: Tue 27 Jan 2026 22:01:23 +0000 Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=) 2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: 87sOHZznpTT+lIvOGCt5uJQFRZ7OFvt4ByVPvWi5fho=) 3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:68:36:7b:cc:6d:03:3e:25:ec:52:ec:82:98:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190 Validity Not Before: Jan 26 22:01:23 2026 GMT Not After : Jan 27 22:01:23 2026 GMT Subject: CN=c05f875b7e9084af43f0c778cd53d3c4236c5015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:42:36:b5:87:bb:1c:4c:9a:4e:8c:83:82: 53:9f:70:bc:eb:3e:07:21:69:45:ab:32:43:e2:bb: 9a:a7:d3:ee:f8:30:37:91:17:9f:f4:f8:73:38:8f: b7:ac:08:bb:31:a9:46:04:8b:a7:d1:37:81:b8:11: 8e:bf:b6:95:f6:71:7e:68:b8:a4:6f:e0:51:24:08: 88:0a:8d:fd:45:8b:b5:5e:79:37:91:bb:8a:20:6d: d3:b9:8c:94:39:5e:0f:83:96:70:3d:fd:49:5f:58: e6:ef:3f:e8:a9:9e:4c:5d:4c:fd:29:eb:80:bf:0e: 38:ed:9d:3b:87:34:db:16:41:8b:64:6c:75:b3:87: b2:38:25:c1:64:5d:c6:4d:2b:38:c2:32:8e:e1:56: 14:e2:1e:13:10:14:e2:3d:05:b0:0e:8f:6e:bd:65: 42:27:b9:e9:5d:46:3a:51:92:28:60:73:8b:77:3d: 6a:37:ff:4e:18:de:59:1e:70:59:11:07:aa:15:c2: 08:7d:d8:00:ad:34:04:74:be:8b:1a:e5:68:a9:b1: bb:34:34:a5:59:03:49:08:18:48:67:97:13:6c:fe: d3:0e:5d:ea:d7:03:75:d1:16:4b:84:70:ba:a7:93: 08:37:be:10:74:83:d0:4e:1c:67:57:3b:86:c6:f6: e8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5F:87:5B:7E:90:84:AF:43:F0:C7:78:CD:53:D3:C4:23:6C:50:15 X509v3 Authority Key Identifier: keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:eb:f2:01:3e:65:22:48:46:7b:41:6d:ac:c8:dc:02:8c:f8: ef:34:e9:88:d5:e6:eb:26:61:88:a9:06:81:17:ea:23:d4:09: 10:e6:da:19:a7:ff:d4:73:00:61:6c:44:10:86:73:4f:37:84: 1c:c8:14:c1:1f:0e:54:74:b7:99:1d:60:74:e7:9a:0a:50:74: 01:6b:d6:b7:d1:83:fd:ab:36:da:df:0a:f7:c0:32:22:db:61: a2:6f:f2:d8:b2:7e:9b:fe:db:f7:40:a3:e1:ea:90:db:1c:2f: fc:ae:6c:f8:cd:82:6e:2d:f8:20:60:e7:20:4e:6e:19:cd:0e: f6:cd:2d:2b:11:b3:fa:81:bb:fa:da:d8:5d:0a:db:79:bc:e8: 11:99:f9:69:f9:eb:9c:4e:35:a6:1a:a0:ea:86:79:40:28:ce: a2:cc:01:c1:90:36:39:9e:17:4b:11:92:04:ff:bc:08:76:f0: 48:f8:25:23:5e:f9:32:39:8b:de:3d:61:da:fb:fd:18:65:d2: b4:b5:b9:13:d2:9d:3f:34:31:15:35:bb:0d:af:c3:f5:98:95: 4f:0a:6c:94:16:43:75:84:41:41:7f:12:64:69:4e:0f:ca:bc: 67:c0:f9:ab:a5:de:b8:64:7a:41:7b:0c:c5:7d:9b:c4:c1:50: 02:b7:2e:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8U2g2e8xtAz4l7FLsgphbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj MDgxOTAwHhcNMjYwMTI2MjIwMTIzWhcNMjYwMTI3MjIwMTIzWjAzMTEwLwYDVQQD EyhjMDVmODc1YjdlOTA4NGFmNDNmMGM3NzhjZDUzZDNjNDIzNmM1MDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDtCNrWHuxxMmk6Mg4JTn3C86z4H IWlFqzJD4ruap9Pu+DA3kRef9PhzOI+3rAi7MalGBIun0TeBuBGOv7aV9nF+aLik b+BRJAiICo39RYu1Xnk3kbuKIG3TuYyUOV4Pg5ZwPf1JX1jm7z/oqZ5MXUz9KeuA vw447Z07hzTbFkGLZGx1s4eyOCXBZF3GTSs4wjKO4VYU4h4TEBTiPQWwDo9uvWVC J7npXUY6UZIoYHOLdz1qN/9OGN5ZHnBZEQeqFcIIfdgArTQEdL6LGuVoqbG7NDSl WQNJCBhIZ5cTbP7TDl3q1wN10RZLhHC6p5MIN74QdIPQThxnVzuGxvboTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBfh1t+kISvQ/DHeM1T08QjbFAVMB8GA1UdIwQY MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt MzkzNjk2ODlmMjdlLzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOvyAT5l IkhGe0FtrMjcAoz47zTpiNXm6yZhiKkGgRfqI9QJEObaGaf/1HMAYWxEEIZzTzeE HMgUwR8OVHS3mR1gdOeaClB0AWvWt9GD/as22t8K98AyItthom/y2LJ+m/7b90Cj 4eqQ2xwv/K5s+M2Cbi34IGDnIE5uGc0O9s0tKxGz+oG7+trYXQrbebzoEZn5afnr nE41phqg6oZ5QCjOoswBwZA2OZ4XSxGSBP+8CHbwSPglI175MjmL3j1h2vv9GGXS tLW5E9KdPzQxFTW7Da/D9ZiVTwpslBZDdYRBQX8SZGlOD8q8Z8D5q6XeuGR6QXsM xX2bxMFQArcumA== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:57 2026 by rpki-client