This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json) Hash identifier: gZCt0MmewJQofT6FdvaWCKl7b71yTOP4xHcgGCs5uns= Subject key identifier: 4F:97:65:40:3F:07:26:57:EB:2C:11:FC:94:14:AF:FF:77:8D:37:0B Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef Certificate serial: 019BB4718A0FF78FB8084104FBBD6569B3C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft Manifest number: 1759 Signing time: Mon 12 Jan 2026 23:01:38 +0000 Manifest this update: Mon 12 Jan 2026 23:01:38 +0000 Manifest next update: Tue 13 Jan 2026 23:01:38 +0000 Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: 277YxF72vfOe5t4avdeFThQDh4TcJ2MaErtgP9nJESg=) 2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b4:71:8a:0f:f7:8f:b8:08:41:04:fb:bd:65:69:b3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef Validity Not Before: Jan 12 23:01:38 2026 GMT Not After : Jan 13 23:01:38 2026 GMT Subject: CN=4f9765403f072657eb2c11fc9414afff778d370b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:06:75:04:1b:fe:8b:4e:d1:75:fa:31:56: c3:53:65:16:b7:35:bf:d0:8b:94:6f:61:29:65:50: 3c:fa:c2:7d:64:20:84:26:50:45:ca:7c:48:a7:b2: cc:90:fd:3e:69:80:bb:bd:62:36:7b:5d:44:27:6b: 88:c3:78:e0:e5:25:4f:a4:45:f3:a9:ab:a6:54:6a: 94:ee:ae:c5:f7:dd:e6:52:30:99:b5:83:84:8d:0b: e7:d0:6b:7f:62:3f:55:de:bb:3c:ad:71:80:af:da: 02:7b:25:51:4e:e4:5e:50:a8:2a:05:19:d7:e7:1c: 18:57:a6:6c:b8:96:33:12:6f:19:5b:e2:f2:18:54: 7c:f1:ff:1d:28:86:39:ff:ce:cc:a6:40:1e:95:40: 09:dc:42:d5:49:01:65:e1:ce:d1:7a:99:43:7e:2c: 13:f0:71:11:97:53:3b:45:78:7c:a9:ee:02:57:cb: 72:dd:29:90:d5:98:22:99:bd:74:0b:c5:e1:82:6c: 24:a8:71:a2:ec:52:b1:77:2b:01:30:45:b6:28:b7: bd:88:05:0e:6a:2d:a1:0f:2d:b8:f0:69:76:37:27: e9:6f:89:64:a0:d1:83:91:64:04:9f:29:a3:e9:81: 11:9a:ff:18:57:18:39:ff:8c:30:e2:02:eb:7b:e1: 95:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:97:65:40:3F:07:26:57:EB:2C:11:FC:94:14:AF:FF:77:8D:37:0B X509v3 Authority Key Identifier: keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:37:c7:c4:25:91:59:97:b2:5a:50:ce:2d:90:0d:4d:05:90: 67:24:f1:00:bf:dd:c7:e7:02:1e:36:5a:9a:df:db:b6:ae:88: 11:13:97:97:3a:1f:42:70:60:6f:3a:25:a6:86:65:45:b5:3a: a3:e0:90:76:c5:af:87:d9:00:6c:4d:53:50:1a:e8:57:8d:b1: 48:ef:ab:41:c9:a4:c2:f1:5f:ed:90:0e:a1:74:e5:47:4f:f7: 58:f3:bb:43:ce:62:26:b2:b6:bb:4e:7b:9f:f0:1a:26:7b:d4: 99:f9:b7:dc:a0:07:5c:63:1b:99:8b:d7:33:77:ae:61:de:86: 69:ba:64:d9:4f:d0:1a:b2:cd:f2:a9:d5:8e:b1:d4:e5:68:25: e8:c7:c9:1b:cd:51:33:99:af:31:0e:cf:03:9a:1f:08:a6:e9: 5d:30:46:53:34:57:f0:93:f2:1e:4e:b6:2c:43:35:fa:0a:37: d3:68:a8:f3:fe:c0:65:dc:4d:c8:9e:3e:20:d8:76:48:d8:a5: c0:20:95:57:8d:ba:d5:1d:4d:b3:59:77:ac:0f:01:d8:81:b8: 31:82:12:2c:95:4d:80:e8:ba:03:29:a0:7a:75:d1:85:cf:87: 2d:13:28:cc:dd:53:c6:e4:c7:a5:2e:ea:9e:e9:07:d0:fb:44: 39:f3:71:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu0cYoP94+4CEEE+71labPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NDcxOGQxMzVhMDliYjUyNDcwNmI0MjU5Y2FiY2M2MjZl NTE0ZWYwHhcNMjYwMTEyMjMwMTM4WhcNMjYwMTEzMjMwMTM4WjAzMTEwLwYDVQQD Eyg0Zjk3NjU0MDNmMDcyNjU3ZWIyYzExZmM5NDE0YWZmZjc3OGQzNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs48GdQQb/otO0XX6MVbDU2UWtzW/ 0IuUb2EpZVA8+sJ9ZCCEJlBFynxIp7LMkP0+aYC7vWI2e11EJ2uIw3jg5SVPpEXz qaumVGqU7q7F993mUjCZtYOEjQvn0Gt/Yj9V3rs8rXGAr9oCeyVRTuReUKgqBRnX 5xwYV6ZsuJYzEm8ZW+LyGFR88f8dKIY5/87MpkAelUAJ3ELVSQFl4c7ReplDfiwT 8HERl1M7RXh8qe4CV8ty3SmQ1Zgimb10C8XhgmwkqHGi7FKxdysBMEW2KLe9iAUO ai2hDy248Gl2Nyfpb4lkoNGDkWQEnymj6YERmv8YVxg5/4ww4gLre+GVQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+XZUA/ByZX6ywR/JQUr/93jTcLMB8GA1UdIwQY MBaAFDRHGNE1oJu1JHBrQlnKvMYm5RTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEt NWQzM2UxOGE2OWEwLzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEtNWQzM2UxOGE2OWEw LzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDfHxCWR WZeyWlDOLZANTQWQZyTxAL/dx+cCHjZamt/btq6IEROXlzofQnBgbzolpoZlRbU6 o+CQdsWvh9kAbE1TUBroV42xSO+rQcmkwvFf7ZAOoXTlR0/3WPO7Q85iJrK2u057 n/AaJnvUmfm33KAHXGMbmYvXM3euYd6Gabpk2U/QGrLN8qnVjrHU5Wgl6MfJG81R M5mvMQ7PA5ofCKbpXTBGUzRX8JPyHk62LEM1+go302io8/7AZdxNyJ4+INh2SNil wCCVV4261R1Ns1l3rA8B2IG4MYISLJVNgOi6AymgenXRhc+HLRMozN1TxuTHpS7q nukH0PtEOfNxmw== -----END CERTIFICATE-----Generated at Tue Jan 13 04:37:05 2026 by rpki-client