This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json) Hash identifier: kXE9EdsSowA9aJxAPfUyI/LUO/87P86T9a8tdZebrNY= Subject key identifier: 50:3C:B9:A2:00:4C:89:7B:F0:C9:04:91:DC:17:49:BE:6F:D5:6A:DD Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b Certificate serial: 019BAB00F37145881CB3C24A1F59B02D5973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft Manifest number: 17C5 Signing time: Sun 11 Jan 2026 03:02:04 +0000 Manifest this update: Sun 11 Jan 2026 03:02:04 +0000 Manifest next update: Mon 12 Jan 2026 03:02:04 +0000 Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: sK7x1J6Dxj6tmR0zDDyv2cm7HKdmte5ozCNNDgzknzk=) 2: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=) 3: XbqOwXYkjht0nJnceNJjzX2ebKs.roa (hash: knPH99gttVNm7VTufmRAs4k/asX/iKOhw3wnBmFxMfs=) 4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:00:f3:71:45:88:1c:b3:c2:4a:1f:59:b0:2d:59:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b Validity Not Before: Jan 11 03:02:04 2026 GMT Not After : Jan 12 03:02:04 2026 GMT Subject: CN=503cb9a2004c897bf0c90491dc1749be6fd56add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:00:9b:33:e7:61:71:ec:67:cb:5e:0a:71:83: c4:fa:d1:e7:d3:bb:42:21:5b:1b:ef:5c:a4:7c:90: 90:51:81:b7:fb:46:53:02:ac:96:a7:a1:3d:93:9d: 9e:94:df:e4:f6:54:78:7e:26:3a:af:6a:d6:d8:f2: a7:1d:41:97:73:d5:f4:53:55:07:ec:c9:0d:7b:5f: 48:33:ff:e9:d0:a5:48:5d:3a:d5:8a:f9:fb:69:c9: 1e:e5:fd:6c:1e:ce:86:a9:88:8d:d4:d5:d1:fb:0a: 74:ba:b0:2a:18:26:3d:54:5d:88:50:0a:cc:51:49: a7:fb:eb:0d:4f:3e:61:b2:0f:74:3d:9b:91:f9:95: 07:e3:f8:22:ce:80:8d:81:79:ee:79:94:ea:25:77: 0a:ad:fe:d6:23:fa:bf:ee:3a:a7:62:49:f6:22:fc: 2f:67:33:2e:a0:8f:dc:c5:60:40:73:bb:fd:d6:e1: 96:05:d4:de:d7:e1:6c:44:80:a4:64:a3:ef:5b:cf: 72:41:16:07:fa:64:d8:3a:46:31:20:2a:d8:65:73: ce:a0:47:a4:ad:61:fd:6b:3d:aa:2a:79:62:01:08: 9c:a6:7c:3a:c0:d0:29:89:a0:14:cd:7d:ff:e7:f5: 8d:94:95:85:da:69:8b:41:c5:bc:2e:e7:12:b3:5c: 04:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3C:B9:A2:00:4C:89:7B:F0:C9:04:91:DC:17:49:BE:6F:D5:6A:DD X509v3 Authority Key Identifier: keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c3:df:bf:3d:31:93:e1:8f:35:11:e5:75:1e:00:4c:e0:a5: 61:f7:fd:d2:ae:d0:49:60:26:eb:f5:41:cb:b9:83:5c:48:f0: 76:6d:8c:30:47:73:f9:b1:2b:9a:a7:6b:a1:f6:3c:f3:11:e4: ba:81:19:91:31:43:1e:2f:8d:30:b8:f4:b3:70:6d:ea:d2:3c: 91:f6:b3:cd:ba:d2:9e:39:6c:c7:4d:43:83:bd:6c:50:11:7c: 97:ba:ac:13:04:a5:98:89:3f:7f:0a:ad:a7:75:10:13:40:67: dc:d1:c2:90:54:7d:b1:d6:1e:a9:e4:5b:00:3d:13:c9:b0:95: b5:e3:1e:7e:93:8f:39:71:53:4b:11:52:a2:17:85:b2:e2:21: f7:32:43:6a:b7:ea:5a:ea:2e:69:6a:d6:cb:71:37:e4:02:b5: 89:c1:d7:71:41:9a:c9:36:fc:92:ce:e4:93:47:1c:75:3f:cd: d0:a8:41:6b:47:2b:dc:ad:9c:b9:5f:63:e1:55:8c:88:93:37: 5c:98:10:91:5c:52:ae:44:53:6c:ba:4f:6a:bb:dd:78:6b:83: cf:1c:17:9b:36:c0:bc:f8:f1:e5:ae:83:f1:6d:fd:81:f9:14: 8d:c2:87:8e:d3:37:29:18:1b:a1:9e:ef:c9:65:ac:cb:d9:5b: 5c:ad:16:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZurAPNxRYgcs8JKH1mwLVlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWFhMDBlYTc3NzA5OGIxYmYwMzY3NTZkNjQwZTlkMzFk NjNiM2IwHhcNMjYwMTExMDMwMjA0WhcNMjYwMTEyMDMwMjA0WjAzMTEwLwYDVQQD Eyg1MDNjYjlhMjAwNGM4OTdiZjBjOTA0OTFkYzE3NDliZTZmZDU2YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ACbM+dhcexny14KcYPE+tHn07tC IVsb71ykfJCQUYG3+0ZTAqyWp6E9k52elN/k9lR4fiY6r2rW2PKnHUGXc9X0U1UH 7MkNe19IM//p0KVIXTrVivn7acke5f1sHs6GqYiN1NXR+wp0urAqGCY9VF2IUArM UUmn++sNTz5hsg90PZuR+ZUH4/gizoCNgXnueZTqJXcKrf7WI/q/7jqnYkn2Ivwv ZzMuoI/cxWBAc7v91uGWBdTe1+FsRICkZKPvW89yQRYH+mTYOkYxICrYZXPOoEek rWH9az2qKnliAQicpnw6wNApiaAUzX3/5/WNlJWF2mmLQcW8LucSs1wEqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFA8uaIATIl78MkEkdwXSb5v1WrdMB8GA1UdIwQY MBaAFDbqoA6ndwmLG/A2dW1kDp0x1js7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQt YmRiMjEzMTNjM2VjLzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQtYmRiMjEzMTNjM2Vj LzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesPfvz0x k+GPNRHldR4ATOClYff90q7QSWAm6/VBy7mDXEjwdm2MMEdz+bErmqdrofY88xHk uoEZkTFDHi+NMLj0s3Bt6tI8kfazzbrSnjlsx01Dg71sUBF8l7qsEwSlmIk/fwqt p3UQE0Bn3NHCkFR9sdYeqeRbAD0TybCVteMefpOPOXFTSxFSoheFsuIh9zJDarfq WuouaWrWy3E35AK1icHXcUGayTb8ks7kk0ccdT/N0KhBa0cr3K2cuV9j4VWMiJM3 XJgQkVxSrkRTbLpParvdeGuDzxwXmzbAvPjx5a6D8W39gfkUjcKHjtM3KRgboZ7v yWWsy9lbXK0WrA== -----END CERTIFICATE-----Generated at Sun Jan 11 06:51:07 2026 by rpki-client