This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json) Hash identifier: xeQTa6cWhmuVYvvQci3SDpZrielvjo7a0aV8E1HPZeo= Subject key identifier: 8A:0F:7D:2D:37:60:6B:D0:0B:D7:78:11:89:5B:E4:07:C3:7F:99:EE Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05 Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05 Certificate serial: 019BACEE783749DB8C97C406CDA58C1D367B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft Manifest number: 07E1 Signing time: Sun 11 Jan 2026 12:01:07 +0000 Manifest this update: Sun 11 Jan 2026 12:01:07 +0000 Manifest next update: Mon 12 Jan 2026 12:01:07 +0000 Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: APcNElBqAQF5MSheacj2jeWr/wXvn0Te44uIwWtj+oc=) 2: pWavHUUzAwxTJRX5MQB2UnJBUSU.roa (hash: Ea1t0eFORl+Vva1qLechf5+/3bT67LM0/+CaezCZsSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:ee:78:37:49:db:8c:97:c4:06:cd:a5:8c:1d:36:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05 Validity Not Before: Jan 11 12:01:07 2026 GMT Not After : Jan 12 12:01:07 2026 GMT Subject: CN=8a0f7d2d37606bd00bd77811895be407c37f99ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:0f:29:74:12:6f:a3:26:68:d2:41:00:16: 4f:16:ca:1a:7d:f7:d5:74:ff:cc:47:fe:4b:c9:5f: 50:5a:d8:9b:4d:37:35:20:8d:c3:e9:1d:d4:58:ef: d8:ea:61:d4:11:91:e1:58:4a:2d:8b:63:83:f1:b9: ba:20:2b:11:7b:73:51:cc:b4:e5:c5:1e:d2:af:b3: 38:07:bf:e8:20:1f:b4:a9:f0:00:a3:3f:58:e0:21: 6f:1c:6d:39:03:ac:c6:a2:5e:ca:5c:24:a2:f4:27: 69:40:b1:3c:c0:7c:0f:f3:46:14:16:30:ec:30:ff: 65:5c:2a:7f:eb:95:c6:82:5c:ed:94:61:33:76:f9: b9:19:16:7b:72:0b:2e:ca:9d:d1:39:1d:0b:dc:5d: d5:e3:7a:ee:65:ac:2c:4f:1c:f2:ad:21:e5:2f:7e: b3:e2:03:29:bd:ae:6a:f3:cf:d4:c8:68:d1:f5:bc: ab:ae:7c:98:e3:5b:26:4b:e1:e4:21:02:8b:e5:96: 11:73:d4:34:9f:e9:1e:be:e9:c2:16:4f:d1:83:34: cc:de:2a:40:31:90:4e:e4:a0:e2:ab:b5:b0:2c:8d: 74:35:e0:f7:2b:b9:5f:93:ea:ea:6f:54:02:d4:35: b0:a9:c2:05:14:99:f1:1b:d7:9b:df:ee:93:00:de: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0F:7D:2D:37:60:6B:D0:0B:D7:78:11:89:5B:E4:07:C3:7F:99:EE X509v3 Authority Key Identifier: keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b2:cf:c5:ca:d8:82:91:ae:4b:cc:00:f5:20:b9:ea:6b:e1: 22:09:a5:e2:45:6a:4b:24:d0:af:36:0b:fc:5a:ed:9f:55:65: 6c:0e:e5:5b:dd:8b:0e:6f:62:15:bd:fa:e7:42:3b:04:76:e4: 0d:67:3d:cb:95:4d:c6:96:15:dd:14:85:59:37:ac:99:53:dc: a6:f3:a7:1a:cc:2f:67:21:76:80:91:c5:df:c0:3d:7e:43:da: e0:28:09:f1:3a:92:cc:e8:d7:6a:f9:5d:3a:17:b5:13:29:e7: 6e:51:08:30:8b:60:d4:7b:4d:0d:98:a3:56:97:77:8a:fd:19: 9c:72:87:c3:2f:cd:08:fe:0f:59:bb:78:3e:33:90:c5:c1:fe: 0a:0d:a8:b6:b4:f2:54:e0:23:4e:33:c9:ab:53:6b:25:3d:f3: b0:a9:d3:bc:61:f7:a5:4d:09:80:d0:f6:01:9b:23:86:93:41: 52:4f:66:df:c8:29:b7:2a:d0:2d:60:33:28:3f:35:10:db:24: 0e:ca:90:44:46:58:92:5b:65:2b:a4:da:dc:34:4a:93:14:c6: 56:f7:1e:6e:22:c2:38:3b:50:b2:0b:d1:ad:09:7c:69:4a:4e: b7:8a:df:aa:c2:e7:0e:f9:7a:60:97:5a:75:d5:f1:af:78:69: 5c:fb:a0:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZus7ng3SduMl8QGzaWMHTZ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDRjM2E4NjMzOGUxNzA2MDVlNjY1ZDM0ZDhhNWM4Njk5 NDhhMDUwHhcNMjYwMTExMTIwMTA3WhcNMjYwMTEyMTIwMTA3WjAzMTEwLwYDVQQD Eyg4YTBmN2QyZDM3NjA2YmQwMGJkNzc4MTE4OTViZTQwN2MzN2Y5OWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCAPKXQSb6MmaNJBABZPFsoafffV dP/MR/5LyV9QWtibTTc1II3D6R3UWO/Y6mHUEZHhWEoti2OD8bm6ICsRe3NRzLTl xR7Sr7M4B7/oIB+0qfAAoz9Y4CFvHG05A6zGol7KXCSi9CdpQLE8wHwP80YUFjDs MP9lXCp/65XGglztlGEzdvm5GRZ7cgsuyp3ROR0L3F3V43ruZawsTxzyrSHlL36z 4gMpva5q88/UyGjR9byrrnyY41smS+HkIQKL5ZYRc9Q0n+kevunCFk/RgzTM3ipA MZBO5KDiq7WwLI10NeD3K7lfk+rqb1QC1DWwqcIFFJnxG9eb3+6TAN4o/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoPfS03YGvQC9d4EYlb5AfDf5nuMB8GA1UdIwQY MBaAFJ8Ew6hjOOFwYF5mXTTYpchplIoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84NDllMjYtNjQ3Mi00NDQwLWEwMzgt N2JhYTkyYTgyOGVjLzEvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84NDllMjYtNjQ3Mi00NDQwLWEwMzgtN2JhYTkyYTgyOGVj LzEvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrLPxcrY gpGuS8wA9SC56mvhIgml4kVqSyTQrzYL/Frtn1VlbA7lW92LDm9iFb3650I7BHbk DWc9y5VNxpYV3RSFWTesmVPcpvOnGswvZyF2gJHF38A9fkPa4CgJ8TqSzOjXavld Ohe1EynnblEIMItg1HtNDZijVpd3iv0ZnHKHwy/NCP4PWbt4PjOQxcH+Cg2otrTy VOAjTjPJq1NrJT3zsKnTvGH3pU0JgND2AZsjhpNBUk9m38gptyrQLWAzKD81ENsk DsqQREZYkltlK6Ta3DRKkxTGVvcebiLCODtQsgvRrQl8aUpOt4rfqsLnDvl6YJda ddXxr3hpXPugrQ== -----END CERTIFICATE-----Generated at Sun Jan 11 14:39:28 2026 by rpki-client