This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft File: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json) Hash identifier: UXuUlHaiaKI6aECupnGKTT1nyHV/MjUR+xEOaT7ZVPY= Subject key identifier: AA:A4:1B:3A:A1:D4:13:0C:A9:05:F3:EF:AA:9F:4F:B2:6E:DA:0A:7D Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Certificate serial: 019BDA6BBAC20363113E554DBF07567EAE46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft Manifest number: 1106 Signing time: Tue 20 Jan 2026 08:00:51 +0000 Manifest this update: Tue 20 Jan 2026 08:00:51 +0000 Manifest next update: Wed 21 Jan 2026 08:00:51 +0000 Files and hashes: 1: K6ii7zwpTXAnLxoEd2L2cebqqYg.roa (hash: +Kg9QdSSLwTZgzwhWg2rJmNh8L6tzXz3oQ9EW3sf1KY=) 2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: h/MgW418XO69awMOS8TYUly9ljzgDvGDbNO0HIOSweE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:6b:ba:c2:03:63:11:3e:55:4d:bf:07:56:7e:ae:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Validity Not Before: Jan 20 08:00:51 2026 GMT Not After : Jan 21 08:00:51 2026 GMT Subject: CN=aaa41b3aa1d4130ca905f3efaa9f4fb26eda0a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:bc:13:f9:05:bc:59:94:d8:f2:97:f8:57: 9b:35:77:b6:0c:fd:03:a4:4d:63:0d:ff:32:97:9a: 0f:50:96:7e:da:07:88:21:b7:16:eb:75:fd:70:b9: eb:ee:e0:bf:2c:da:bb:8c:4b:cb:bd:46:49:b7:42: c4:90:4b:ff:e1:ab:2c:15:6e:7a:f6:3b:78:93:09: cf:0a:c8:29:f4:c3:6a:c1:6b:5e:fe:fe:ca:da:b1: 63:d8:ce:ac:c5:88:0d:fa:24:ae:47:c4:ed:07:f1: b7:9d:5f:6f:94:4d:f0:8d:c6:13:ac:3b:d4:83:dc: 15:ff:e5:f9:18:88:3d:9b:34:98:ec:c8:bc:f9:ab: c8:a0:1a:63:a8:67:de:7e:ba:be:0a:54:d3:32:4a: b2:5e:75:66:88:76:ec:38:b4:bf:e8:db:90:5b:60: be:82:3a:ec:b6:f7:ec:23:ea:a5:7d:f6:b6:a3:98: ab:2f:ac:22:4e:2c:f6:20:86:00:47:7e:34:27:4f: 92:7c:2f:32:1a:b7:b0:b4:a3:26:9d:58:c3:a6:c3: 8d:4e:eb:44:88:60:92:23:f2:7f:05:87:81:f5:b9: d6:75:33:7f:aa:ce:14:7d:40:c4:5e:f9:fe:e7:b4: 09:49:10:01:c7:7f:8b:b0:97:ea:2d:5b:98:2e:f0: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A4:1B:3A:A1:D4:13:0C:A9:05:F3:EF:AA:9F:4F:B2:6E:DA:0A:7D X509v3 Authority Key Identifier: keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9a:86:7b:df:d4:92:38:27:f6:00:c9:b3:1d:a3:c5:11:f2: 4f:08:7a:6a:20:39:62:0d:3c:fa:6f:64:6a:6c:28:0e:ed:5d: 3f:a1:c0:7a:59:b9:1e:f7:cf:f1:19:24:0b:55:a3:9e:c6:ba: ba:b7:80:64:9f:6c:76:ef:6b:80:cd:c1:33:a1:af:0d:98:bd: 7f:80:6e:6e:4a:33:0f:6a:fb:09:e8:77:ca:f9:32:95:13:5c: 0f:15:ba:22:45:8c:03:0b:37:dd:ca:8a:13:fd:88:f1:f0:41: ea:44:f1:0a:48:f5:c4:32:54:46:c9:79:05:d0:51:d3:ee:13: f5:33:22:ad:f0:b2:9b:ea:e0:f0:c8:67:37:1c:36:58:69:88: 75:a2:ca:ab:dd:78:63:fa:6b:2a:85:5c:49:87:0f:9f:93:63: e3:09:a0:2f:d0:db:22:a1:b8:95:16:c2:fa:61:64:3e:97:0d: 1b:c6:8f:f6:26:3f:1a:2b:43:c2:e2:9b:b4:7c:7e:ee:6a:26: ef:01:ee:c9:17:30:3c:0c:78:90:87:38:ba:45:b0:8f:6c:68: 59:f4:6f:ff:a0:00:cd:c1:57:b3:7f:1e:89:42:c4:09:32:bf: 99:1b:0b:03:37:79:bc:9a:b1:98:46:ea:38:d9:42:91:d2:f6: 72:f7:b9:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvaa7rCA2MRPlVNvwdWfq5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNjZhNWNmYTM5Y2ZhOTFlMzEzNDQzZjYxM2U3M2NjZTcz ZjIxNDAwHhcNMjYwMTIwMDgwMDUxWhcNMjYwMTIxMDgwMDUxWjAzMTEwLwYDVQQD EyhhYWE0MWIzYWExZDQxMzBjYTkwNWYzZWZhYTlmNGZiMjZlZGEwYTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWK8E/kFvFmU2PKX+FebNXe2DP0D pE1jDf8yl5oPUJZ+2geIIbcW63X9cLnr7uC/LNq7jEvLvUZJt0LEkEv/4assFW56 9jt4kwnPCsgp9MNqwWte/v7K2rFj2M6sxYgN+iSuR8TtB/G3nV9vlE3wjcYTrDvU g9wV/+X5GIg9mzSY7Mi8+avIoBpjqGfefrq+ClTTMkqyXnVmiHbsOLS/6NuQW2C+ gjrstvfsI+qlffa2o5irL6wiTiz2IIYAR340J0+SfC8yGrewtKMmnVjDpsONTutE iGCSI/J/BYeB9bnWdTN/qs4UfUDEXvn+57QJSRABx3+LsJfqLVuYLvATswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqkGzqh1BMMqQXz76qfT7Ju2gp9MB8GA1UdIwQY MBaAFJ1mpc+jnPqR4xNEP2E+c8znPyFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYt YTE5NTA3ZGU3NWI0LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYtYTE5NTA3ZGU3NWI0 LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5qGe9/U kjgn9gDJsx2jxRHyTwh6aiA5Yg08+m9kamwoDu1dP6HAelm5HvfP8RkkC1Wjnsa6 ureAZJ9sdu9rgM3BM6GvDZi9f4BubkozD2r7Ceh3yvkylRNcDxW6IkWMAws33cqK E/2I8fBB6kTxCkj1xDJURsl5BdBR0+4T9TMirfCym+rg8MhnNxw2WGmIdaLKq914 Y/prKoVcSYcPn5Nj4wmgL9DbIqG4lRbC+mFkPpcNG8aP9iY/GitDwuKbtHx+7mom 7wHuyRcwPAx4kIc4ukWwj2xoWfRv/6AAzcFXs38eiULECTK/mRsLAzd5vJqxmEbq ONlCkdL2cve5Wg== -----END CERTIFICATE-----Generated at Tue Jan 20 09:27:42 2026 by rpki-client