This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json) Hash identifier: shMEKmjVojZnrG6pb0UAHAwtIcGXEPn4YQ4ClbzHIQs= Subject key identifier: 6A:70:75:2A:A8:2B:6E:6C:D6:6C:A3:24:D7:11:A3:E9:B4:08:C2:F1 Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d Certificate serial: 019BAAFFF90F6BCC98244597E282E34EA6C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft Manifest number: 0310 Signing time: Sun 11 Jan 2026 03:01:00 +0000 Manifest this update: Sun 11 Jan 2026 03:01:00 +0000 Manifest next update: Mon 12 Jan 2026 03:01:00 +0000 Files and hashes: 1: 7ksTJ_jFitxF4bukC24j3eo_mx0.roa (hash: P5sZaUJcRIlYxIsN9061EjjltvsNE9PdjoK/NkSXYrQ=) 2: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: pQy660nNRVpeMakrJH3vjwlEgJy79tTZvkdF9ioJuvg=) 3: jSMK0-DQ4LkW8HGxfeOZqpRoUDg.roa (hash: LbCW9qnhO4rcrIcNPyJRkz9sjQKYiVfJkLlpl6db0Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:aa:ff:f9:0f:6b:cc:98:24:45:97:e2:82:e3:4e:a6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d Validity Not Before: Jan 11 03:01:00 2026 GMT Not After : Jan 12 03:01:00 2026 GMT Subject: CN=6a70752aa82b6e6cd66ca324d711a3e9b408c2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:fb:4c:89:f3:29:5f:0d:64:c3:1d:98:61: b1:9d:00:fe:72:56:35:fc:3b:e7:3d:2f:56:4d:b9: 42:35:c0:0a:ee:7d:b6:44:ad:d2:1c:74:43:aa:e4: fc:4d:b1:93:3a:7f:aa:2e:43:dc:15:9d:65:35:80: 28:12:17:15:ab:a3:89:da:5b:a1:a6:a4:fc:e3:b7: 69:a1:0f:3c:db:64:70:34:71:1b:02:4d:d3:82:75: 1f:d6:5e:19:61:43:c4:ab:a4:7f:02:fa:07:f8:02: 44:66:ca:a1:c7:1f:e4:f3:a3:37:21:e4:24:dd:f2: bf:99:b3:c8:82:78:a3:8a:96:2e:8b:3e:2c:35:38: d5:34:a2:4a:bb:42:75:9a:79:df:06:4d:d9:11:ba: 39:d8:c6:bf:db:02:21:26:41:c2:c7:74:9b:da:39: 88:b2:49:86:a6:bf:79:ed:07:c4:f9:c7:28:8d:0d: f1:40:05:49:ca:c4:65:c9:63:6d:d2:ed:b0:af:b9: 6b:cd:ba:e9:f1:08:45:9f:3c:2f:94:8e:24:3a:0e: 0c:1b:d2:8e:a5:fd:3d:6f:e3:e5:3b:a0:b0:d1:df: 59:79:ea:a8:c7:de:fa:00:49:48:b9:d1:d7:60:a3: 52:a7:8e:2a:70:8f:e7:23:5d:4f:0c:9c:4d:59:b9: 86:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:70:75:2A:A8:2B:6E:6C:D6:6C:A3:24:D7:11:A3:E9:B4:08:C2:F1 X509v3 Authority Key Identifier: keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a7:c5:93:f2:ba:04:b4:f9:eb:f3:81:43:0b:96:6e:17:e4: 58:52:e6:2a:ef:28:5b:bf:18:2a:f4:bc:81:41:b9:e1:0d:b2: 49:7f:2d:0d:f2:9a:5d:19:c6:01:6a:70:31:af:18:07:c5:65: f8:fb:e0:4f:83:13:27:40:b4:b7:cc:4e:d9:a3:e5:2f:a7:1f: f0:f7:6d:da:8f:ca:69:35:a6:a8:04:11:21:14:9e:cd:be:3e: 87:1b:20:cc:4d:1b:68:dd:f1:98:97:fd:17:c0:ae:6d:7a:74: cc:91:9b:4b:c3:a0:8d:85:c4:fc:49:70:4d:89:32:cf:ce:2c: 6a:c3:02:c2:70:26:77:ba:71:66:08:77:b1:ab:6d:1d:5a:af: c5:b9:c9:a0:ef:c3:61:1d:f3:8c:34:c8:25:6e:7a:74:71:69: 09:76:cf:29:97:9b:8c:00:86:c9:91:6f:59:2d:31:b0:eb:c3: 77:5a:1c:fa:41:b9:2f:4f:a9:9d:9c:d2:97:82:d4:8d:98:24: 0a:b5:cc:4f:7c:40:f3:f9:8b:8f:fb:9b:87:7c:92:fc:ad:9a: e3:d6:a9:e5:4e:2a:de:e2:24:e1:2c:52:03:44:43:f8:f1:24: 55:04:96:e8:56:c8:7a:3a:0e:33:08:ff:92:19:90:27:c7:b7: 99:8d:4d:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuq//kPa8yYJEWX4oLjTqbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZGQ0MDI2ZDI5MGYzMjAxZDI4ZWY2ODRkM2M1YWMxM2M5 NmVjNmQwHhcNMjYwMTExMDMwMTAwWhcNMjYwMTEyMDMwMTAwWjAzMTEwLwYDVQQD Eyg2YTcwNzUyYWE4MmI2ZTZjZDY2Y2EzMjRkNzExYTNlOWI0MDhjMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6b7TInzKV8NZMMdmGGxnQD+clY1 /DvnPS9WTblCNcAK7n22RK3SHHRDquT8TbGTOn+qLkPcFZ1lNYAoEhcVq6OJ2luh pqT847dpoQ8822RwNHEbAk3TgnUf1l4ZYUPEq6R/AvoH+AJEZsqhxx/k86M3IeQk 3fK/mbPIgnijipYuiz4sNTjVNKJKu0J1mnnfBk3ZEbo52Ma/2wIhJkHCx3Sb2jmI skmGpr957QfE+ccojQ3xQAVJysRlyWNt0u2wr7lrzbrp8QhFnzwvlI4kOg4MG9KO pf09b+PlO6Cw0d9Zeeqox976AElIudHXYKNSp44qcI/nI11PDJxNWbmGHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpwdSqoK25s1myjJNcRo+m0CMLxMB8GA1UdIwQY MBaAFDTdQCbSkPMgHSjvaE08WsE8luxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmIt ODc4NTA3ZWQ0NmY3LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmItODc4NTA3ZWQ0NmY3 LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARafFk/K6 BLT56/OBQwuWbhfkWFLmKu8oW78YKvS8gUG54Q2ySX8tDfKaXRnGAWpwMa8YB8Vl +PvgT4MTJ0C0t8xO2aPlL6cf8Pdt2o/KaTWmqAQRIRSezb4+hxsgzE0baN3xmJf9 F8CubXp0zJGbS8OgjYXE/ElwTYkyz84sasMCwnAmd7pxZgh3sattHVqvxbnJoO/D YR3zjDTIJW56dHFpCXbPKZebjACGyZFvWS0xsOvDd1oc+kG5L0+pnZzSl4LUjZgk CrXMT3xA8/mLj/ubh3yS/K2a49ap5U4q3uIk4SxSA0RD+PEkVQSW6FbIejoOMwj/ khmQJ8e3mY1NtA== -----END CERTIFICATE-----Generated at Sun Jan 11 11:28:31 2026 by rpki-client