This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json) Hash identifier: PpZVa2wvPwopBOI3EInBix30y4dLRMzgA6Wa0LAk8Xk= Subject key identifier: 19:D1:7F:D6:F2:A0:85:33:21:16:2E:74:CF:37:50:F5:31:B1:E9:13 Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc Certificate serial: 019B8083701F7FEA11D22EE0A9F0EB19CC00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft Manifest number: 0E00 Signing time: Fri 02 Jan 2026 21:00:56 +0000 Manifest this update: Fri 02 Jan 2026 21:00:56 +0000 Manifest next update: Sat 03 Jan 2026 21:00:56 +0000 Files and hashes: 1: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: hwYr/FFHtkNo8XdugfZIj1+5QfQIj1DWzYiT35I88L0=) 2: ob7F2VCJOAAsHnye3Fkfiw3LDrA.roa (hash: 73dBJpgeQaRvDu0bCVr2PUKhwsl+BWtyqsuA67uRjtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:83:70:1f:7f:ea:11:d2:2e:e0:a9:f0:eb:19:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc Validity Not Before: Jan 2 21:00:56 2026 GMT Not After : Jan 3 21:00:56 2026 GMT Subject: CN=19d17fd6f2a0853321162e74cf3750f531b1e913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:bd:b9:2b:85:7c:6c:61:89:2f:c8:18:2d: bc:3e:96:98:70:85:4e:c6:cd:91:7d:69:cf:f7:d9: 57:88:0d:58:e5:f8:c2:6a:23:04:c2:db:45:e3:ee: 96:65:03:84:a7:2f:b2:3e:5c:69:f1:25:35:d8:27: 0e:fe:6a:5c:ef:81:f9:97:69:dd:d9:27:95:8b:f4: ee:21:38:78:d0:7c:ca:f6:26:12:ab:a2:6f:c0:63: 9e:35:80:29:9f:f1:b5:da:bf:44:79:23:7e:39:88: b0:b4:34:64:7f:ac:53:43:b9:fa:d1:12:b4:52:1f: 68:99:c6:96:71:1e:0c:fe:1b:9e:dd:9d:63:4b:b2: 5e:c9:7c:ed:06:33:5f:46:00:f3:0e:ff:6b:15:05: d1:cd:40:fe:ad:41:86:4a:2d:c1:18:b2:7a:92:8c: 2e:55:0d:6a:36:f9:11:64:20:4a:76:ac:86:62:77: 27:e4:fb:8a:1e:26:0e:94:10:ce:69:3b:58:53:4c: 92:16:3a:95:f3:96:86:55:f4:7e:d7:8d:a9:3d:6a: a6:0b:1d:17:75:41:52:3f:f1:4b:0c:fd:f2:9d:84: a0:83:fa:a0:eb:00:e1:ec:29:14:17:ec:81:c6:7d: 01:34:2a:de:0c:57:b9:6a:ee:06:75:b7:85:e8:81: c5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D1:7F:D6:F2:A0:85:33:21:16:2E:74:CF:37:50:F5:31:B1:E9:13 X509v3 Authority Key Identifier: keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:da:a2:c7:4e:38:c7:c7:c9:75:cd:35:8d:af:f6:ea:0f:a1: 50:c6:f7:6f:67:68:73:60:53:33:4e:c1:a1:72:25:d7:c1:26: 6f:f5:ad:98:e3:ae:41:69:c8:12:83:9b:2a:eb:62:22:18:2c: b8:db:c2:64:2c:84:19:28:2f:7f:ff:85:94:6d:1c:af:05:55: b6:66:3b:59:aa:67:60:a8:d1:e2:7f:3c:a9:1a:d3:aa:8f:84: 70:fd:f5:3b:ac:65:b1:e5:e7:71:67:9c:90:10:04:47:73:67: 60:66:d2:f5:1b:08:8e:52:bf:bb:74:bf:fa:40:79:4b:79:56: 78:15:e6:dd:10:96:5d:d0:c2:4d:05:80:bd:26:33:0f:8d:e5: 30:9f:52:33:4d:af:71:3e:3b:85:9f:85:fd:3a:c3:ae:29:e5: 1a:1e:46:34:0f:99:84:40:77:87:f9:96:8b:d4:0f:22:7e:43: 72:aa:d0:3c:cc:48:38:da:d0:fd:63:a9:3c:0d:be:a9:d7:ff: b4:fe:36:73:d1:bd:3c:29:eb:74:ee:83:f9:51:bf:57:78:09: f0:cb:dc:ae:d8:5e:ab:25:02:22:1c:50:71:06:df:50:58:7b: cd:4d:58:d6:e5:50:ed:11:89:b0:4f:53:07:5c:13:a8:a3:ac: 5d:cf:3f:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAg3Aff+oR0i7gqfDrGcwAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTdmODQzYjE3ZmZjZWFhOWI4NjM2NTgxZmU0ZDU0ZTM0 NmRkY2MwHhcNMjYwMTAyMjEwMDU2WhcNMjYwMTAzMjEwMDU2WjAzMTEwLwYDVQQD EygxOWQxN2ZkNmYyYTA4NTMzMjExNjJlNzRjZjM3NTBmNTMxYjFlOTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwS9uSuFfGxhiS/IGC28PpaYcIVO xs2RfWnP99lXiA1Y5fjCaiMEwttF4+6WZQOEpy+yPlxp8SU12CcO/mpc74H5l2nd 2SeVi/TuITh40HzK9iYSq6JvwGOeNYApn/G12r9EeSN+OYiwtDRkf6xTQ7n60RK0 Uh9omcaWcR4M/hue3Z1jS7JeyXztBjNfRgDzDv9rFQXRzUD+rUGGSi3BGLJ6kowu VQ1qNvkRZCBKdqyGYncn5PuKHiYOlBDOaTtYU0ySFjqV85aGVfR+142pPWqmCx0X dUFSP/FLDP3ynYSgg/qg6wDh7CkUF+yBxn0BNCreDFe5au4GdbeF6IHFswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnRf9byoIUzIRYudM83UPUxsekTMB8GA1UdIwQY MBaAFJ5X+EOxf/zqqbhjZYH+TVTjRt3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83ZDBlZmUtNzA5ZC00ZDExLWI2OTIt MGUyMzA4MDZiNTc5LzEvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC83ZDBlZmUtNzA5ZC00ZDExLWI2OTItMGUyMzA4MDZiNTc5 LzEvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwNqix044 x8fJdc01ja/26g+hUMb3b2doc2BTM07BoXIl18Emb/WtmOOuQWnIEoObKutiIhgs uNvCZCyEGSgvf/+FlG0crwVVtmY7WapnYKjR4n88qRrTqo+EcP31O6xlseXncWec kBAER3NnYGbS9RsIjlK/u3S/+kB5S3lWeBXm3RCWXdDCTQWAvSYzD43lMJ9SM02v cT47hZ+F/TrDrinlGh5GNA+ZhEB3h/mWi9QPIn5DcqrQPMxIONrQ/WOpPA2+qdf/ tP42c9G9PCnrdO6D+VG/V3gJ8MvcrtheqyUCIhxQcQbfUFh7zU1Y1uVQ7RGJsE9T B1wTqKOsXc8/eg== -----END CERTIFICATE-----Generated at Fri Jan 2 23:25:21 2026 by rpki-client