This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json) Hash identifier: VYWXwW6j5+w4qM2JAtJj99OiX+Te4b0enk5QVvaVnOA= Subject key identifier: 76:1F:DE:7F:88:CC:CB:67:BB:06:71:CD:8C:5E:19:B5:9F:D5:36:4F Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8 Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8 Certificate serial: 019BB54D1C5D158B80491D591BF21F002082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft Manifest number: 17C8 Signing time: Tue 13 Jan 2026 03:01:28 +0000 Manifest this update: Tue 13 Jan 2026 03:01:28 +0000 Manifest next update: Wed 14 Jan 2026 03:01:28 +0000 Files and hashes: 1: ch0Gf-LnkPr3xLplBtIjQ2SMNso.roa (hash: ocJ3ZhxBFEr5BinzaB5e1jdT52gEvEi1z6bbG+QW4Ns=) 2: kl-QOGVe7PK91vpCi2USAa3ccpw.roa (hash: HWbTD/Tv8Ial6ox3QeIYsotL/F4NlFjQ8kHdlhrPJ4Y=) 3: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: qenJ37KlJ2UCNagdz+4nRbKtWAkG9o8i1oonKtmLCm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b5:4d:1c:5d:15:8b:80:49:1d:59:1b:f2:1f:00:20:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8 Validity Not Before: Jan 13 03:01:28 2026 GMT Not After : Jan 14 03:01:28 2026 GMT Subject: CN=761fde7f88cccb67bb0671cd8c5e19b59fd5364f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:e2:ec:74:8f:ea:65:e6:15:25:f8:d5:e6: 52:2b:4d:65:e2:f6:74:92:ac:f6:e3:ae:14:d6:4c: 4b:8b:a7:90:52:23:0f:e6:23:bf:82:44:3f:d0:70: 84:fb:65:43:35:f5:1b:a9:0c:f1:91:a6:36:9b:55: 17:59:09:e0:37:5f:b6:83:90:c8:3f:af:9d:4d:5a: be:70:6c:8d:d6:96:45:65:1a:50:35:96:8b:d1:e8: 61:58:a4:13:29:f8:99:f6:c6:37:19:79:b9:01:a9: c5:4a:6a:71:6c:84:70:68:d4:ec:c4:15:40:45:8b: 7c:fd:89:b5:db:04:81:3d:17:0b:bb:46:01:de:9e: 65:01:da:68:ca:f4:3b:2b:9a:0b:9e:80:a0:02:84: a6:bf:19:16:84:03:20:b2:65:68:9c:79:b8:0b:d0: cb:06:f1:03:01:6d:c8:d0:b5:25:03:02:31:ca:5f: e1:02:57:a6:c9:31:b1:3d:77:42:c6:68:c6:2c:4e: 7e:b3:c9:26:f2:71:c5:82:37:42:09:ce:ed:43:98: 85:04:81:e9:bb:ed:32:8a:0b:72:db:e9:1c:88:e2: c1:cd:a2:fb:a0:e4:79:a2:7a:8c:2f:ed:d5:cd:3d: d5:14:98:3e:de:c4:5f:b0:42:f9:47:59:14:d4:76: e4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1F:DE:7F:88:CC:CB:67:BB:06:71:CD:8C:5E:19:B5:9F:D5:36:4F X509v3 Authority Key Identifier: keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:8e:33:78:e8:68:38:3f:78:62:b6:9b:33:92:59:d9:76:0e: b3:9e:18:44:24:7a:25:0d:02:7b:29:ea:94:e1:3f:2c:51:3b: be:dc:ab:c0:3f:e1:8b:28:b0:2b:94:83:fa:97:bb:58:ce:df: 69:b6:1f:26:52:37:bb:bd:2f:77:6f:8c:ef:41:66:36:a5:a6: f5:3a:0c:9f:26:4b:3d:ce:88:d5:90:3e:c0:77:62:1f:e7:26: 48:2e:10:62:f4:4a:38:18:6f:56:8a:ff:08:25:6b:f7:ff:8d: cd:f3:49:60:3a:d3:6f:b7:46:9c:29:9a:e0:88:fd:ea:91:71: 46:24:90:77:7c:f5:81:38:e9:70:93:e5:cc:7c:09:97:ce:84: 55:0a:cd:b7:9c:4b:22:55:f1:24:b4:92:38:e0:83:71:d5:13: 6f:e7:dd:f4:13:33:d5:2e:21:26:2b:cb:0c:fe:60:48:a2:bf: b0:24:e5:b0:d1:b5:2b:ba:19:5a:75:47:3c:f9:e9:eb:d8:97: 09:5d:ba:65:b5:5b:92:93:b2:56:99:5e:e9:d3:29:f7:f8:d7: f0:74:ea:4c:91:5b:c5:13:54:8d:ca:81:6f:4a:87:4f:91:55: 71:d3:66:83:38:f5:69:6d:07:14:b9:5d:cf:a0:a6:2e:69:7d: f6:78:f5:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu1TRxdFYuASR1ZG/IfACCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMmJjM2M1NTY0ZDQzNDM4MWNiNzhiYTQ3YWQ1OGJlNGQz ZGVhYTgwHhcNMjYwMTEzMDMwMTI4WhcNMjYwMTE0MDMwMTI4WjAzMTEwLwYDVQQD Eyg3NjFmZGU3Zjg4Y2NjYjY3YmIwNjcxY2Q4YzVlMTliNTlmZDUzNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6ji7HSP6mXmFSX41eZSK01l4vZ0 kqz2464U1kxLi6eQUiMP5iO/gkQ/0HCE+2VDNfUbqQzxkaY2m1UXWQngN1+2g5DI P6+dTVq+cGyN1pZFZRpQNZaL0ehhWKQTKfiZ9sY3GXm5AanFSmpxbIRwaNTsxBVA RYt8/Ym12wSBPRcLu0YB3p5lAdpoyvQ7K5oLnoCgAoSmvxkWhAMgsmVonHm4C9DL BvEDAW3I0LUlAwIxyl/hAlemyTGxPXdCxmjGLE5+s8km8nHFgjdCCc7tQ5iFBIHp u+0yigty2+kciOLBzaL7oOR5onqML+3VzT3VFJg+3sRfsEL5R1kU1HbkMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYf3n+IzMtnuwZxzYxeGbWf1TZPMB8GA1UdIwQY MBaAFJ8rw8VWTUNDgct4uketWL5NPeqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1Mjct NTU0MjYzODE5NTNjLzEvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1MjctNTU0MjYzODE5NTNj LzEvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk44zeOho OD94YrabM5JZ2XYOs54YRCR6JQ0CeynqlOE/LFE7vtyrwD/hiyiwK5SD+pe7WM7f abYfJlI3u70vd2+M70FmNqWm9ToMnyZLPc6I1ZA+wHdiH+cmSC4QYvRKOBhvVor/ CCVr9/+NzfNJYDrTb7dGnCma4Ij96pFxRiSQd3z1gTjpcJPlzHwJl86EVQrNt5xL IlXxJLSSOOCDcdUTb+fd9BMz1S4hJivLDP5gSKK/sCTlsNG1K7oZWnVHPPnp69iX CV26ZbVbkpOyVple6dMp9/jX8HTqTJFbxRNUjcqBb0qHT5FVcdNmgzj1aW0HFLld z6CmLml99nj1rg== -----END CERTIFICATE-----Generated at Tue Jan 13 06:43:55 2026 by rpki-client