This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft File: Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json) Hash identifier: kG1czpHvYgPImiFMXFNKgudxLeMfqipa1FumWWfmCJI= Subject key identifier: 63:FA:CE:CD:BD:CF:2E:C7:25:CB:4F:E4:F5:DE:07:A4:A1:47:0F:33 Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c Certificate serial: 019BAEDD694B60BEF9EBB2C65437693C0088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft Manifest number: 0435 Signing time: Sun 11 Jan 2026 21:01:44 +0000 Manifest this update: Sun 11 Jan 2026 21:01:44 +0000 Manifest next update: Mon 12 Jan 2026 21:01:44 +0000 Files and hashes: 1: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: J63infWP0BkmJkE7dYu/BmpQ/oz5mwX6WqFr6wA17ys=) 2: zHfDyMse-vNJufyI9SCct6ZccBc.roa (hash: 3exCGyL+KSp4BS9S3DhRHLN2Z0aDggGK5DfZIwZFGko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:69:4b:60:be:f9:eb:b2:c6:54:37:69:3c:00:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c Validity Not Before: Jan 11 21:01:44 2026 GMT Not After : Jan 12 21:01:44 2026 GMT Subject: CN=63facecdbdcf2ec725cb4fe4f5de07a4a1470f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6a:8a:51:74:49:2a:4d:9b:af:2e:ee:45:d1: 54:7c:3a:28:32:24:d3:5f:6e:56:d2:b0:76:0b:3e: 7e:80:46:34:a3:7e:bf:75:17:0f:2f:12:2a:5c:80: fd:c0:30:a3:dd:48:0d:c5:b7:d2:25:b6:bd:b8:41: 43:99:e9:f3:0e:a5:3d:8d:4c:0c:df:18:f4:74:75: 3c:de:95:16:2f:61:b5:28:77:f5:33:84:40:6d:af: a1:64:24:fc:03:aa:9b:03:d3:16:72:22:82:86:0f: 6d:6e:c6:8e:db:1a:7f:c9:ff:e9:b2:7e:7c:85:5b: b2:15:f7:7e:fb:e8:2d:1b:1f:5b:f6:df:9e:a9:f4: 1e:55:58:06:b3:dd:25:90:ad:c9:89:28:50:28:1c: b9:e0:12:12:8e:ee:ab:6c:a0:36:7e:0d:bd:1a:53: 98:d2:d0:30:35:5b:86:b7:48:7e:35:a0:47:f0:7f: 27:93:1e:73:e6:26:db:2f:2e:26:ec:a0:ff:89:bc: cb:d3:1e:f8:5b:a7:c2:ab:66:40:2e:a6:2d:ab:95: 64:cb:59:49:d9:cb:a9:03:80:5c:c5:30:4d:3b:ca: f0:14:d1:f0:3f:ea:2c:26:4a:02:44:6c:0d:c3:2a: b9:8c:6d:9a:80:9e:06:d6:c1:49:42:47:82:9e:01: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FA:CE:CD:BD:CF:2E:C7:25:CB:4F:E4:F5:DE:07:A4:A1:47:0F:33 X509v3 Authority Key Identifier: keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:60:d5:08:5e:0a:68:77:81:df:cd:dc:c0:78:5b:21:f8:72: 36:db:b7:ca:4a:10:81:4c:47:c3:26:6b:2b:7c:a7:c2:64:73: 72:9f:d7:e8:cb:4c:c7:d6:19:0d:c7:4a:59:2f:1d:99:df:4b: 7d:ef:f4:f4:16:c2:7a:72:73:c6:fc:a4:4d:8e:22:50:51:4d: 74:0b:02:d9:96:8a:a2:58:e1:e5:7b:d7:e2:02:60:2a:39:56: 62:ea:c7:99:49:e8:94:74:9b:95:ea:8c:aa:68:2b:b3:4c:10: c0:9a:4a:72:ab:4f:ec:53:3e:78:58:e2:b3:55:8e:21:ff:c4: 9f:59:e7:65:22:dc:14:51:38:36:05:b1:57:62:4e:15:1c:48: 78:e4:49:12:86:6f:f2:ee:a6:c7:25:c5:64:6c:49:db:93:a5: ad:5e:16:9d:69:a8:d2:6c:dc:4f:7b:da:1f:58:42:5d:c9:9a: e0:ed:76:99:03:51:57:d5:47:c7:1f:6f:e3:85:e1:81:ec:0b: a2:b9:a1:39:32:f0:05:04:eb:7c:94:50:bd:98:c3:82:dd:47: ac:a2:9c:7b:8b:9a:b2:05:84:82:85:d0:54:ae:35:79:0e:65: 5c:22:ca:f3:b1:22:9c:b5:b5:d7:f5:a8:d2:bf:59:08:ae:3b: e3:a4:02:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3WlLYL7567LGVDdpPACIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2M2NiNWM2YTA1Y2RkNDgxZjMwNGMwY2Q5NWU4NmQ3MjJk OTZkM2MwHhcNMjYwMTExMjEwMTQ0WhcNMjYwMTEyMjEwMTQ0WjAzMTEwLwYDVQQD Eyg2M2ZhY2VjZGJkY2YyZWM3MjVjYjRmZTRmNWRlMDdhNGExNDcwZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GqKUXRJKk2bry7uRdFUfDooMiTT X25W0rB2Cz5+gEY0o36/dRcPLxIqXID9wDCj3UgNxbfSJba9uEFDmenzDqU9jUwM 3xj0dHU83pUWL2G1KHf1M4RAba+hZCT8A6qbA9MWciKChg9tbsaO2xp/yf/psn58 hVuyFfd+++gtGx9b9t+eqfQeVVgGs90lkK3JiShQKBy54BISju6rbKA2fg29GlOY 0tAwNVuGt0h+NaBH8H8nkx5z5ibbLy4m7KD/ibzL0x74W6fCq2ZALqYtq5Vky1lJ 2cupA4BcxTBNO8rwFNHwP+osJkoCRGwNwyq5jG2agJ4G1sFJQkeCngGLgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP6zs29zy7HJctP5PXeB6ShRw8zMB8GA1UdIwQY MBaAFDY8tcagXN1IHzBMDNlehtci2W08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjA2ZmYtN2U4Ny00NGE2LTlhNTYt YmEzYzY0ZTE0YTFkLzEvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wMjA2ZmYtN2U4Ny00NGE2LTlhNTYtYmEzYzY0ZTE0YTFk LzEvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWDVCF4K aHeB383cwHhbIfhyNtu3ykoQgUxHwyZrK3ynwmRzcp/X6MtMx9YZDcdKWS8dmd9L fe/09BbCenJzxvykTY4iUFFNdAsC2ZaKoljh5XvX4gJgKjlWYurHmUnolHSbleqM qmgrs0wQwJpKcqtP7FM+eFjis1WOIf/En1nnZSLcFFE4NgWxV2JOFRxIeORJEoZv 8u6mxyXFZGxJ25OlrV4WnWmo0mzcT3vaH1hCXcma4O12mQNRV9VHxx9v44XhgewL ormhOTLwBQTrfJRQvZjDgt1HrKKce4uasgWEgoXQVK41eQ5lXCLK87EinLW11/Wo 0r9ZCK4746QCFw== -----END CERTIFICATE-----Generated at Mon Jan 12 03:29:01 2026 by rpki-client