This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json) Hash identifier: elAjk+GHD/cjcEtnRbat8431E8HbVYuRZWJO1wzFsiw= Subject key identifier: 77:79:DF:FC:2D:04:81:C3:12:BB:46:A2:D2:2D:BC:FB:DE:EF:61:F1 Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c Certificate serial: 019B95C28281262FA9B6A3D7D437BDA55D88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft Manifest number: 10BA Signing time: Wed 07 Jan 2026 00:01:50 +0000 Manifest this update: Wed 07 Jan 2026 00:01:50 +0000 Manifest next update: Thu 08 Jan 2026 00:01:50 +0000 Files and hashes: 1: blMjfRyOLEyojLj42XPxwXwFTD4.roa (hash: jrLQeO+lNASlqC6IDejHJLnMTZ65htbv+psssgALK6g=) 2: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: tEjWxosy/Mlj09TgmTUECbDwa4b+5gpQJZhayzbiY84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 21:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:c2:82:81:26:2f:a9:b6:a3:d7:d4:37:bd:a5:5d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c Validity Not Before: Jan 7 00:01:50 2026 GMT Not After : Jan 8 00:01:50 2026 GMT Subject: CN=7779dffc2d0481c312bb46a2d22dbcfbdeef61f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:65:18:85:54:39:61:da:d6:18:d3:52:2b: 4e:f5:e0:8f:6d:ee:de:26:37:0d:a1:9d:f9:a3:ab: a9:d2:8d:7f:8f:40:b6:3a:e7:ef:91:63:1a:cb:fe: e7:53:9a:65:b6:72:f0:d0:59:15:2d:a7:d6:4b:f5: da:b8:25:13:5c:b0:86:31:06:e1:02:ab:9f:d7:3f: fe:fc:83:da:be:2a:4c:1b:72:dc:65:83:5e:a9:bd: fe:49:21:6c:d3:75:28:98:07:49:2c:90:75:f7:0e: 63:e7:38:f5:72:dc:a0:c9:7e:2c:09:b5:4b:2c:41: 8d:12:d4:e2:76:23:6b:2a:30:4e:9c:4c:6a:6d:9b: be:45:db:ed:7b:09:18:84:28:7f:36:da:e2:38:1b: 5c:8b:47:d1:7f:ee:54:ac:77:e3:35:5a:f4:d4:b8: 9f:aa:e5:34:8e:e9:83:2f:d8:aa:15:79:18:8c:48: c2:bd:e3:7d:0b:14:88:8f:bb:38:81:7f:06:d7:38: ac:ef:34:eb:03:ff:fd:4e:f7:c1:93:d2:bd:87:99: 0e:b7:50:b0:3f:a0:67:64:1f:d4:b1:2f:1a:2a:b4: fb:a9:c4:a9:62:4f:9a:d2:7a:a2:97:4c:a5:89:1a: 90:39:cc:f0:7c:ac:fc:a2:07:b2:a0:e7:4c:67:71: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:79:DF:FC:2D:04:81:C3:12:BB:46:A2:D2:2D:BC:FB:DE:EF:61:F1 X509v3 Authority Key Identifier: keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:03:4d:7b:54:7f:5c:d9:30:ba:25:08:26:5c:d3:7b:1b:90: 94:07:e0:9d:7e:0a:7b:84:5d:2a:55:f0:a4:ca:09:8b:9a:8d: 98:e4:ac:2c:80:9b:8d:2e:8b:86:62:9f:0f:ee:36:87:a4:be: 8f:b4:e6:45:ab:c4:4f:97:8f:8e:15:79:a9:b6:d0:8a:70:43: 76:4e:ef:3f:c4:fb:da:46:55:6c:f0:78:15:e1:ca:7b:6e:90: f4:7b:e4:a0:dd:b9:a1:16:98:70:5a:bd:1a:36:d9:8b:85:2d: 11:e6:65:ce:3b:66:c9:b1:9d:2c:24:ba:eb:82:f9:a5:9c:4c: 4b:9e:9e:c8:50:de:e0:33:12:41:85:91:45:76:3a:28:19:bb: 5d:68:ed:c8:37:c0:90:a7:37:fb:50:bb:09:ba:34:9c:e7:48: 81:14:65:31:74:e0:79:48:a8:7b:d8:fd:e5:ce:1a:06:27:28: 1a:9f:d6:71:1e:14:53:fc:62:e5:8c:4b:64:78:80:f6:82:6a: ae:f5:36:05:ee:79:30:07:42:fa:d4:30:f5:f6:a4:cd:0d:7b: 69:3a:29:fe:dd:b7:22:f0:6e:08:ba:09:d1:ec:9a:77:15:c8: f6:70:99:96:09:ec:59:30:30:69:bc:df:ea:a4:7c:dd:b2:bc: 58:7e:ca:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuVwoKBJi+ptqPX1De9pV2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTRlNjVhZWNjOTVkNDQ2YTBjYjY0MGI5NzY2ZmEwZjgx NTBlM2MwHhcNMjYwMTA3MDAwMTUwWhcNMjYwMTA4MDAwMTUwWjAzMTEwLwYDVQQD Eyg3Nzc5ZGZmYzJkMDQ4MWMzMTJiYjQ2YTJkMjJkYmNmYmRlZWY2MWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmJlGIVUOWHa1hjTUitO9eCPbe7e JjcNoZ35o6up0o1/j0C2OufvkWMay/7nU5pltnLw0FkVLafWS/XauCUTXLCGMQbh Aquf1z/+/IPavipMG3LcZYNeqb3+SSFs03UomAdJLJB19w5j5zj1ctygyX4sCbVL LEGNEtTidiNrKjBOnExqbZu+RdvtewkYhCh/NtriOBtci0fRf+5UrHfjNVr01Lif quU0jumDL9iqFXkYjEjCveN9CxSIj7s4gX8G1zis7zTrA//9TvfBk9K9h5kOt1Cw P6BnZB/UsS8aKrT7qcSpYk+a0nqil0yliRqQOczwfKz8ogeyoOdMZ3GVGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHd53/wtBIHDErtGotItvPve72HxMB8GA1UdIwQY MBaAFJzk5lrsyV1Eagy2QLl2b6D4FQ48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgt MTE4MjQ0MDZiZDVkLzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgtMTE4MjQ0MDZiZDVk LzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQNNe1R/ XNkwuiUIJlzTexuQlAfgnX4Ke4RdKlXwpMoJi5qNmOSsLICbjS6LhmKfD+42h6S+ j7TmRavET5ePjhV5qbbQinBDdk7vP8T72kZVbPB4FeHKe26Q9HvkoN25oRaYcFq9 GjbZi4UtEeZlzjtmybGdLCS664L5pZxMS56eyFDe4DMSQYWRRXY6KBm7XWjtyDfA kKc3+1C7Cbo0nOdIgRRlMXTgeUioe9j95c4aBicoGp/WcR4UU/xi5YxLZHiA9oJq rvU2Be55MAdC+tQw9fakzQ17aTop/t23IvBuCLoJ0eyadxXI9nCZlgnsWTAwabzf 6qR83bK8WH7Keg== -----END CERTIFICATE-----Generated at Wed Jan 7 02:37:24 2026 by rpki-client