This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json) Hash identifier: DQFz8dGxr6RRfg/bjZUQFaBXdHhvfGPu6jaWMiONdjo= Subject key identifier: EC:98:F4:5E:36:B4:E0:B3:FA:EA:A0:B0:1D:4C:D8:26:1F:37:DD:87 Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18 Certificate serial: 019BFE0A2C26751A49DB3D663C40A772AA66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft Manifest number: 17F3 Signing time: Tue 27 Jan 2026 06:00:37 +0000 Manifest this update: Tue 27 Jan 2026 06:00:37 +0000 Manifest next update: Wed 28 Jan 2026 06:00:37 +0000 Files and hashes: 1: 9Pwo7Ca64AS5wuLjjYW5Bcx-2iY.roa (hash: KlGL1317ayBy6hNLxnwdnsLxt72PcQk4H81AKDRosfI=) 2: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: cynBhq8tz2Bn8pUifxzdT3tNH+K7SAkZkQJtt+3g82Y=) 3: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (hash: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM=) 4: Sompo4sxvvROdjoZfiDq50faXfk.roa (hash: gEMQmsxvILpWDS8TIsfBnFHT3cfYRB4Lsa8x41J62hY=) 5: VxowdBzPqof9vzEqLjnkNBo4yck.roa (hash: OTDMhBcP+WbUFYsB8km0x2Ap8UBhFkwcBM0NKVz08Uw=) 6: dXyU9dvy-RL56kxAeM9aZtX19b4.roa (hash: Qdhb2+QEBYW0iPhxNt+tJQ5NTdnCyw9dULNf6sBX/ds=) 7: t1vkmCK8KzwYpdaOj2Z8K8WRkuE.roa (hash: cQGDZLaCNeANHuWk60qBEto7tZ5K0Q991hBY/3JdECg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:2c:26:75:1a:49:db:3d:66:3c:40:a7:72:aa:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3545a7200164912041bb931efb1feac123b43a18 Validity Not Before: Jan 27 06:00:37 2026 GMT Not After : Jan 28 06:00:37 2026 GMT Subject: CN=ec98f45e36b4e0b3faeaa0b01d4cd8261f37dd87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:eb:b9:10:41:ff:c0:90:90:c5:0d:5d:b1: 7f:66:ac:98:d0:68:b1:f8:d6:e1:86:33:6f:c5:b5: c7:95:84:00:b7:b2:77:5d:8c:23:68:35:be:d9:2e: a3:32:98:13:9d:67:e9:b8:de:75:55:d8:ea:89:73: 19:f7:b9:61:8b:ef:6b:e7:37:7c:7a:14:4a:74:35: aa:2a:14:37:8f:9b:10:14:91:b5:a7:be:4c:4e:35: 5d:d9:1b:f9:a8:eb:da:3d:ae:48:c8:3f:69:09:aa: 48:fb:b2:e9:17:c4:fb:63:5c:98:7e:31:c7:d5:ac: 7c:78:2b:67:d7:b4:79:d1:e0:11:85:bb:9a:99:b7: fa:5b:9e:47:7e:7e:22:f7:9f:16:09:25:2f:8e:67: f5:d3:9b:2b:21:d2:74:51:c5:ca:00:7e:8b:8f:f7: 6d:9a:e3:cc:07:7a:39:a6:dc:0d:37:89:5c:be:4d: 42:cb:7a:b8:8b:3e:fc:34:f4:bb:a3:1a:d4:08:03: 86:08:a9:6d:3c:46:7e:37:77:f6:f2:b2:6b:ba:d7: 75:98:ff:06:43:33:02:65:50:a8:56:e9:0c:15:2a: 58:59:48:26:2f:c3:05:f5:b7:39:7d:fc:d0:09:59: 93:74:1c:f5:23:2f:61:0b:b0:7d:00:76:cd:46:c5: 8e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:98:F4:5E:36:B4:E0:B3:FA:EA:A0:B0:1D:4C:D8:26:1F:37:DD:87 X509v3 Authority Key Identifier: keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:1d:3f:bc:62:6e:af:4b:e8:96:de:1f:c4:4f:85:5d:dd:ef: 7f:76:d4:ba:6a:f3:92:ef:6d:35:48:d1:5d:7d:2d:ec:f7:27: 82:c1:f7:03:66:9d:71:25:a3:5d:e7:87:b1:dc:38:d2:97:ff: a0:2a:7e:fb:46:d5:1d:0f:3e:a4:86:f9:37:71:03:30:b6:da: 89:6e:5a:a6:93:06:ee:5e:a1:67:9f:9e:be:6e:b0:74:02:cc: 34:09:c6:24:78:85:c5:a2:fd:4b:44:db:82:1b:4a:30:8e:8e: 5e:4e:76:62:34:c6:8a:ef:30:ba:fc:a4:a1:8e:13:97:b9:e9: 66:de:1e:f8:ab:ed:36:c8:e4:61:97:8d:98:40:a3:af:20:45: 48:60:e1:20:58:72:b0:b3:c8:1c:d4:34:80:4b:f3:83:d7:ad: cf:15:ed:85:3b:be:12:01:e3:cf:d6:a1:37:e4:ee:30:24:2c: 90:e7:3c:9f:ad:24:30:1e:90:bb:da:02:ef:e2:a6:01:04:dd: f1:4a:38:ce:31:8f:2d:67:d1:69:fc:de:9c:8d:0f:d0:5c:d5: 05:73:6d:e3:4d:50:91:49:59:6d:8c:6f:a3:35:82:e5:e4:93: 48:94:3c:39:97:62:96:5e:09:4d:2f:56:26:f0:96:7d:cb:69: 6e:ba:49:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CiwmdRpJ2z1mPECncqpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi NDNhMTgwHhcNMjYwMTI3MDYwMDM3WhcNMjYwMTI4MDYwMDM3WjAzMTEwLwYDVQQD EyhlYzk4ZjQ1ZTM2YjRlMGIzZmFlYWEwYjAxZDRjZDgyNjFmMzdkZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjbruRBB/8CQkMUNXbF/ZqyY0Gix +NbhhjNvxbXHlYQAt7J3XYwjaDW+2S6jMpgTnWfpuN51VdjqiXMZ97lhi+9r5zd8 ehRKdDWqKhQ3j5sQFJG1p75MTjVd2Rv5qOvaPa5IyD9pCapI+7LpF8T7Y1yYfjHH 1ax8eCtn17R50eARhbuambf6W55Hfn4i958WCSUvjmf105srIdJ0UcXKAH6Lj/dt muPMB3o5ptwNN4lcvk1Cy3q4iz78NPS7oxrUCAOGCKltPEZ+N3f28rJrutd1mP8G QzMCZVCoVukMFSpYWUgmL8MF9bc5ffzQCVmTdBz1Iy9hC7B9AHbNRsWODQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyY9F42tOCz+uqgsB1M2CYfN92HMB8GA1UdIwQY MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt YWFiYjA2MmU0MGRiLzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAh0/vGJu r0volt4fxE+FXd3vf3bUumrzku9tNUjRXX0t7PcngsH3A2adcSWjXeeHsdw40pf/ oCp++0bVHQ8+pIb5N3EDMLbaiW5appMG7l6hZ5+evm6wdALMNAnGJHiFxaL9S0Tb ghtKMI6OXk52YjTGiu8wuvykoY4Tl7npZt4e+KvtNsjkYZeNmECjryBFSGDhIFhy sLPIHNQ0gEvzg9etzxXthTu+EgHjz9ahN+TuMCQskOc8n60kMB6Qu9oC7+KmAQTd 8Uo4zjGPLWfRafzenI0P0FzVBXNt401QkUlZbYxvozWC5eSTSJQ8OZdill4JTS9W JvCWfctpbrpJGw== -----END CERTIFICATE-----Generated at Tue Jan 27 16:22:27 2026 by rpki-client