This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json) Hash identifier: kLRF8Zan62pFubkxCKmFGNeXeIsDv7+sgaQsCbDVrgY= Subject key identifier: A7:68:EB:67:C1:7E:DE:A9:AF:2B:0B:CE:93:F1:95:39:85:C3:FF:3E Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46 Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646 Certificate serial: 019BA3B4C1DBF3D25F4F3792DEBD7EB1F3E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft Manifest number: 0930 Signing time: Fri 09 Jan 2026 17:01:30 +0000 Manifest this update: Fri 09 Jan 2026 17:01:30 +0000 Manifest next update: Sat 10 Jan 2026 17:01:30 +0000 Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: SagMzBuqbRx66adcm7KYmV+NSj9T5BOMwZXAfOYmwYU=) 2: uaapElHUAVaZCvTQWY96RRO1BmE.roa (hash: YoDD+GqIi7yXJNJvp1uQ/eykR6jqDrzcDx3qks2vpKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:b4:c1:db:f3:d2:5f:4f:37:92:de:bd:7e:b1:f3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646 Validity Not Before: Jan 9 17:01:30 2026 GMT Not After : Jan 10 17:01:30 2026 GMT Subject: CN=a768eb67c17edea9af2b0bce93f1953985c3ff3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c3:e9:a7:f6:56:7d:98:40:f4:87:74:64:4c: 5d:af:f0:7f:e9:92:d5:3f:bc:18:05:fa:dc:7f:3e: 28:f0:70:76:46:36:46:8e:65:93:c0:bf:80:26:f8: 9a:d9:57:78:02:45:aa:ff:52:d8:47:b1:7e:e4:a8: 9c:49:ca:ca:93:83:e1:53:0f:2f:ee:bd:fa:8f:b2: 41:ea:83:c5:3d:e8:3e:29:52:a8:d5:4c:ab:64:d4: a6:fa:f4:7b:1a:02:50:27:26:a9:d2:99:30:fb:59: 73:6c:88:0d:93:ac:cc:83:d9:6e:5c:4c:0d:4e:0d: ea:40:a6:b5:96:34:bb:be:59:14:27:a2:25:ec:2e: ce:02:92:57:16:f9:96:1b:ae:a3:d5:b1:cf:5a:e8: 2c:3b:44:1d:6e:70:f3:13:61:b1:00:eb:d8:d6:dd: 6e:13:2d:9f:79:b0:3b:f3:55:7e:e4:66:9e:e1:ee: 0f:51:6b:54:a7:3f:f2:60:29:dd:11:f5:0d:a7:56: 12:72:a8:0a:7d:8a:ac:07:e0:71:42:ab:aa:cb:cf: 15:34:2a:54:c0:07:87:b7:d8:57:e7:3a:29:2d:e4: d5:e3:29:cc:d6:9f:88:ba:25:65:0a:c0:61:ca:13: 8f:8b:47:75:37:67:1f:95:14:80:83:71:be:61:4f: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:68:EB:67:C1:7E:DE:A9:AF:2B:0B:CE:93:F1:95:39:85:C3:FF:3E X509v3 Authority Key Identifier: keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4d:c2:1c:db:e5:92:9a:b1:8a:b3:6a:1e:c2:12:22:3f:24: 95:82:6f:32:e2:4c:5a:25:0f:86:7e:1c:30:16:2a:34:d3:c7: ce:6a:b0:29:27:72:8a:c1:ad:72:4d:47:4d:0b:d2:67:c4:5d: f6:10:26:54:19:9a:97:65:05:b0:a5:a5:a9:32:55:d7:4b:74: b9:af:4f:f2:12:33:6c:9b:ff:9a:b1:37:46:d8:fb:bb:c9:c3: 75:60:4e:ae:10:4f:43:d8:fb:79:9a:84:81:87:28:23:ee:2c: 9b:34:5b:5d:f1:20:de:c4:ec:69:7c:4d:90:7a:73:14:5a:01: cf:72:d6:0d:4e:d9:2c:b7:ee:03:49:47:ba:7b:fa:78:c2:24: 9a:f1:bb:8f:85:7e:0e:81:a6:ec:77:10:5d:3a:2b:5a:3d:a5: 3d:f1:33:aa:4d:04:48:ac:54:cd:c3:5b:52:33:a8:89:68:5f: a6:64:10:69:e2:4c:e9:d0:01:d2:c6:23:6f:4c:67:22:6c:24: eb:03:c9:b5:56:b8:aa:c1:44:8e:e8:df:9b:36:1f:88:f3:a8: f8:9b:c9:0d:d5:e5:10:65:c2:29:b2:9a:6a:b9:d9:23:14:e1: 46:6a:e7:cd:03:5f:38:50:a0:16:45:2a:59:49:bb:24:d8:38: a1:63:ce:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZujtMHb89JfTzeS3r1+sfPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDBkOTQ5MDk4M2U3ZGYzMmM3Y2YxN2NhMWVhZDRmMDVm Nzk2NDYwHhcNMjYwMTA5MTcwMTMwWhcNMjYwMTEwMTcwMTMwWjAzMTEwLwYDVQQD EyhhNzY4ZWI2N2MxN2VkZWE5YWYyYjBiY2U5M2YxOTUzOTg1YzNmZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsPpp/ZWfZhA9Id0ZExdr/B/6ZLV P7wYBfrcfz4o8HB2RjZGjmWTwL+AJvia2Vd4AkWq/1LYR7F+5KicScrKk4PhUw8v 7r36j7JB6oPFPeg+KVKo1UyrZNSm+vR7GgJQJyap0pkw+1lzbIgNk6zMg9luXEwN Tg3qQKa1ljS7vlkUJ6Il7C7OApJXFvmWG66j1bHPWugsO0QdbnDzE2GxAOvY1t1u Ey2febA781V+5Gae4e4PUWtUpz/yYCndEfUNp1YScqgKfYqsB+BxQquqy88VNCpU wAeHt9hX5zopLeTV4ynM1p+IuiVlCsBhyhOPi0d1N2cflRSAg3G+YU+wGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdo62fBft6prysLzpPxlTmFw/8+MB8GA1UdIwQY MBaAFDQA2UkJg+ffMsfPF8oerU8F95ZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYt ZjQ5NDZmMDNmNTQyLzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYtZjQ5NDZmMDNmNTQy LzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjE3CHNvl kpqxirNqHsISIj8klYJvMuJMWiUPhn4cMBYqNNPHzmqwKSdyisGtck1HTQvSZ8Rd 9hAmVBmal2UFsKWlqTJV10t0ua9P8hIzbJv/mrE3Rtj7u8nDdWBOrhBPQ9j7eZqE gYcoI+4smzRbXfEg3sTsaXxNkHpzFFoBz3LWDU7ZLLfuA0lHunv6eMIkmvG7j4V+ DoGm7HcQXTorWj2lPfEzqk0ESKxUzcNbUjOoiWhfpmQQaeJM6dAB0sYjb0xnImwk 6wPJtVa4qsFEjujfmzYfiPOo+JvJDdXlEGXCKbKaarnZIxThRmrnzQNfOFCgFkUq WUm7JNg4oWPOHA== -----END CERTIFICATE-----Generated at Fri Jan 9 23:48:13 2026 by rpki-client