This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json) Hash identifier: 7yq5G2kJqf4yhsUEK1s6Oh6jtdhiEl93zjrlizcvdLo= Subject key identifier: 7E:25:E3:6A:0A:11:C3:FA:D3:78:88:A1:08:7A:3D:22:20:37:E9:E9 Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c Certificate serial: 019B8E08CFE138CEAB1151273B2F7206B6DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft Manifest number: 10B6 Signing time: Mon 05 Jan 2026 12:01:40 +0000 Manifest this update: Mon 05 Jan 2026 12:01:40 +0000 Manifest next update: Tue 06 Jan 2026 12:01:40 +0000 Files and hashes: 1: blMjfRyOLEyojLj42XPxwXwFTD4.roa (hash: jrLQeO+lNASlqC6IDejHJLnMTZ65htbv+psssgALK6g=) 2: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: oO105cVd9fbth0LalB0UopSSt7FBVTJaFBWY7A0eNI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:08:cf:e1:38:ce:ab:11:51:27:3b:2f:72:06:b6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c Validity Not Before: Jan 5 12:01:40 2026 GMT Not After : Jan 6 12:01:40 2026 GMT Subject: CN=7e25e36a0a11c3fad37888a1087a3d222037e9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:53:65:47:62:0c:4a:6c:ee:95:ff:56:09:af: a4:72:a0:c2:75:47:91:11:a4:be:99:88:a1:57:ca: 85:9d:b9:bd:2a:8d:32:8a:e3:5a:15:41:53:df:0a: 2f:d5:de:cd:19:50:82:16:59:81:ce:96:62:d9:38: bc:74:3b:a6:c8:ae:32:10:53:83:29:5c:be:0e:cb: a3:02:4d:e6:01:a1:6e:14:1d:e2:45:ff:30:cf:1a: 5c:38:b7:b2:51:a5:2e:fd:ac:4a:d6:85:87:34:b3: 9d:68:91:48:23:5a:33:6c:04:96:8c:a8:d6:4e:75: 9f:a9:39:b0:b9:a6:74:ad:6c:1a:a1:af:e2:10:15: 90:37:ca:ab:b4:bb:65:97:57:3d:9a:b2:5a:0c:ae: 47:a8:7d:b0:45:36:f4:a4:86:39:b6:7e:3f:71:fc: 55:dd:d7:f5:30:62:38:09:da:b3:97:be:24:ec:cb: 13:0c:37:4e:cf:13:ae:18:19:da:ad:e0:72:b0:d7: 00:5e:de:d9:c8:b2:e0:61:02:13:91:28:e5:a2:cd: 07:db:76:03:58:d5:54:82:b7:6b:b8:39:3a:6f:88: b3:75:78:fe:aa:b3:ac:3a:f5:18:9f:26:47:6a:2d: e2:de:3e:b5:eb:83:85:25:23:67:5b:80:03:71:e3: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:25:E3:6A:0A:11:C3:FA:D3:78:88:A1:08:7A:3D:22:20:37:E9:E9 X509v3 Authority Key Identifier: keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d8:0a:bc:a5:b2:d6:a0:a7:71:7a:90:ae:7e:57:e1:88:5c: b2:6b:b0:88:90:f3:27:39:23:7c:ba:20:88:a2:bb:7c:ae:f7: e5:fc:e6:43:0b:46:bb:f9:d0:9b:64:40:b3:a8:9e:f6:f4:94: c1:d2:3a:91:3a:a9:bf:4d:c8:6e:ad:3c:db:d5:8d:7d:85:17: 31:f4:95:5b:a9:95:56:e8:71:d4:7a:2d:03:32:a3:75:d9:62: 73:7e:0a:b3:09:dd:e7:38:29:68:1a:bd:c9:62:90:bf:fd:79: 30:48:5d:3d:96:48:fe:44:fc:9e:f1:32:0e:8c:a1:c6:7f:89: 15:df:51:42:9f:2f:f9:58:90:e5:df:75:e5:65:03:b4:fa:b0: 31:96:4e:65:17:7a:dc:ba:b7:e2:39:62:38:e3:8d:bc:cc:d5: 53:f2:04:5e:0f:4c:fa:12:87:1a:ab:c9:36:14:29:22:db:96: 12:54:a4:5f:cb:5e:22:0e:b8:a3:8b:95:44:b0:29:a5:7d:cf: 5a:9e:93:96:b9:f2:6e:bc:13:72:21:c4:90:65:3e:f8:2e:73: 51:4a:ac:fd:9a:b4:a6:c0:d2:8e:16:06:19:e8:78:a1:d3:68: c3:52:a4:2e:96:a2:7e:37:54:e4:a8:a6:3b:6d:d7:ab:eb:4b: 8a:d4:88:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuOCM/hOM6rEVEnOy9yBrbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTRlNjVhZWNjOTVkNDQ2YTBjYjY0MGI5NzY2ZmEwZjgx NTBlM2MwHhcNMjYwMTA1MTIwMTQwWhcNMjYwMTA2MTIwMTQwWjAzMTEwLwYDVQQD Eyg3ZTI1ZTM2YTBhMTFjM2ZhZDM3ODg4YTEwODdhM2QyMjIwMzdlOWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VNlR2IMSmzulf9WCa+kcqDCdUeR EaS+mYihV8qFnbm9Ko0yiuNaFUFT3wov1d7NGVCCFlmBzpZi2Ti8dDumyK4yEFOD KVy+DsujAk3mAaFuFB3iRf8wzxpcOLeyUaUu/axK1oWHNLOdaJFII1ozbASWjKjW TnWfqTmwuaZ0rWwaoa/iEBWQN8qrtLtll1c9mrJaDK5HqH2wRTb0pIY5tn4/cfxV 3df1MGI4Cdqzl74k7MsTDDdOzxOuGBnareBysNcAXt7ZyLLgYQITkSjlos0H23YD WNVUgrdruDk6b4izdXj+qrOsOvUYnyZHai3i3j6164OFJSNnW4ADceMe9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4l42oKEcP603iIoQh6PSIgN+npMB8GA1UdIwQY MBaAFJzk5lrsyV1Eagy2QLl2b6D4FQ48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgt MTE4MjQ0MDZiZDVkLzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgtMTE4MjQ0MDZiZDVk LzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtgKvKWy 1qCncXqQrn5X4YhcsmuwiJDzJzkjfLogiKK7fK735fzmQwtGu/nQm2RAs6ie9vSU wdI6kTqpv03Ibq0829WNfYUXMfSVW6mVVuhx1HotAzKjddlic34Kswnd5zgpaBq9 yWKQv/15MEhdPZZI/kT8nvEyDoyhxn+JFd9RQp8v+ViQ5d915WUDtPqwMZZOZRd6 3Lq34jliOOONvMzVU/IEXg9M+hKHGqvJNhQpItuWElSkX8teIg64o4uVRLAppX3P Wp6TlrnybrwTciHEkGU++C5zUUqs/Zq0psDSjhYGGeh4odNow1KkLpaifjdU5Kim O23Xq+tLitSIaA== -----END CERTIFICATE-----Generated at Mon Jan 5 19:13:41 2026 by rpki-client