This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json) Hash identifier: R0MvDyoljZJciN1iPhqXDRxXDsiwg+dIlwq20SqRMAc= Subject key identifier: 0A:4E:46:C1:7A:21:C7:5B:B2:98:6F:EF:89:4E:B4:84:4E:61:7C:EF Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12 Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12 Certificate serial: 019B797F9C0B00F3881E54570C7762C1BF33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft Manifest number: 0B94 Signing time: Thu 01 Jan 2026 12:19:24 +0000 Manifest this update: Thu 01 Jan 2026 12:19:24 +0000 Manifest next update: Fri 02 Jan 2026 12:19:24 +0000 Files and hashes: 1: InPFMpdJAXXO_yXbxGZuHeN8kBs.roa (hash: vCdlR4+URzLW/X9eKQ1ExsBHfsRxyqUAmI7ldq8lqGc=) 2: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: NcPN3X25yYQrEucvZNQaDVGyJTbMew/6/AuMK9uO/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:9c:0b:00:f3:88:1e:54:57:0c:77:62:c1:bf:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12 Validity Not Before: Jan 1 12:19:24 2026 GMT Not After : Jan 2 12:19:24 2026 GMT Subject: CN=0a4e46c17a21c75bb2986fef894eb4844e617cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8f:f0:4e:8a:af:f8:73:4d:e5:24:98:a8:5e: 37:32:f3:6d:40:ae:1c:bd:df:6f:6d:24:4a:47:90: 2c:ee:0d:17:bd:85:24:6a:57:1a:b4:b4:46:1c:23: fc:e6:46:15:bd:7e:6c:a0:c3:5a:ae:7c:14:23:61: 06:6a:71:57:a5:71:b0:ac:a9:be:e7:63:60:b4:7b: 71:ab:27:e9:50:f0:52:ec:2e:18:98:d3:69:21:2b: 27:40:ae:b6:82:57:12:f2:c8:d3:cb:c7:48:31:75: 4c:91:af:6d:a8:3b:6c:9c:dd:8b:64:96:65:d4:f9: 55:b7:c1:99:a5:43:4d:bd:00:e4:a4:42:aa:a4:4d: e2:b2:2a:56:18:a3:cd:03:cb:da:31:c9:1e:5a:07: ac:22:29:cd:ff:16:36:a7:83:be:d2:97:40:be:0c: 41:7e:4d:fe:a6:11:21:8e:46:60:58:d0:2e:32:4d: 9b:88:1e:94:9b:9c:02:a3:71:38:68:47:be:75:ee: d6:d0:91:8e:33:68:d1:f6:8e:d8:e8:12:e1:f2:6a: 76:f9:42:67:98:72:6d:86:99:17:ff:84:4d:d0:03: 83:fc:a1:11:8a:f5:83:75:cc:4b:a0:8e:6c:34:d3: 8b:e4:8f:f3:a8:a6:f4:20:e3:35:12:2b:5f:c8:bb: 89:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4E:46:C1:7A:21:C7:5B:B2:98:6F:EF:89:4E:B4:84:4E:61:7C:EF X509v3 Authority Key Identifier: keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:63:9f:37:b3:6e:74:ec:d5:e8:51:ca:1f:94:2a:78:6b:74: 32:0b:c2:41:91:53:fe:98:5d:28:99:1f:bf:15:be:7c:6e:dd: d8:6c:51:5e:eb:3b:d6:7e:e2:94:b0:8a:3e:02:d1:04:34:02: ab:16:4d:0b:97:19:7b:a9:b3:2b:47:b1:90:4c:47:0a:bd:bd: ad:70:b9:ff:cf:c4:51:23:f1:10:c9:2e:bd:6c:84:4e:aa:69: 7b:17:4f:61:5a:e7:4a:15:24:44:54:69:5d:79:9d:5f:39:82: bf:4e:ba:ab:e3:1d:cb:d9:31:7b:ab:36:c0:b6:af:a6:ab:4e: 65:3d:36:58:84:0d:6e:03:8b:c4:2e:9b:a4:e2:3d:b5:7e:1f: 28:69:9a:22:31:e0:84:ec:fb:fc:b5:b1:27:ab:b4:c4:6a:9c: 9a:1e:b6:87:54:5d:0b:a8:fe:b9:f9:7e:83:36:5e:19:44:24: cc:bb:61:0a:94:2a:f9:07:55:5d:44:03:f7:a1:28:a8:e0:7f: 42:5b:f6:33:b2:3c:e7:ee:01:1d:e4:2c:ef:6b:07:48:be:a3: 9c:66:96:c8:f2:14:48:a3:3d:f7:96:0e:c9:5a:3c:ef:75:d4: 3b:3c:04:74:2c:96:98:2c:24:ed:37:ee:54:4e:f1:a6:d2:7a: a5:8b:6f:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5f5wLAPOIHlRXDHdiwb8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDc5MTNjZTNhMTE1ODhiNTljM2M5ZjlkYTlmZjc3ZjI0 OGFjMTIwHhcNMjYwMTAxMTIxOTI0WhcNMjYwMTAyMTIxOTI0WjAzMTEwLwYDVQQD EygwYTRlNDZjMTdhMjFjNzViYjI5ODZmZWY4OTRlYjQ4NDRlNjE3Y2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY/wToqv+HNN5SSYqF43MvNtQK4c vd9vbSRKR5As7g0XvYUkalcatLRGHCP85kYVvX5soMNarnwUI2EGanFXpXGwrKm+ 52NgtHtxqyfpUPBS7C4YmNNpISsnQK62glcS8sjTy8dIMXVMka9tqDtsnN2LZJZl 1PlVt8GZpUNNvQDkpEKqpE3isipWGKPNA8vaMckeWgesIinN/xY2p4O+0pdAvgxB fk3+phEhjkZgWNAuMk2biB6Um5wCo3E4aEe+de7W0JGOM2jR9o7Y6BLh8mp2+UJn mHJthpkX/4RN0AOD/KERivWDdcxLoI5sNNOL5I/zqKb0IOM1EitfyLuJtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApORsF6Icdbsphv74lOtIROYXzvMB8GA1UdIwQY MBaAFDVHkTzjoRWItZw8n52p/3fySKwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wY2RhNzQtYzliYi00ZDkyLTllNmYt Mzg5OTc4MjFmZmNlLzEvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wY2RhNzQtYzliYi00ZDkyLTllNmYtMzg5OTc4MjFmZmNl LzEvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2OfN7Nu dOzV6FHKH5QqeGt0MgvCQZFT/phdKJkfvxW+fG7d2GxRXus71n7ilLCKPgLRBDQC qxZNC5cZe6mzK0exkExHCr29rXC5/8/EUSPxEMkuvWyETqppexdPYVrnShUkRFRp XXmdXzmCv066q+Mdy9kxe6s2wLavpqtOZT02WIQNbgOLxC6bpOI9tX4fKGmaIjHg hOz7/LWxJ6u0xGqcmh62h1RdC6j+ufl+gzZeGUQkzLthCpQq+QdVXUQD96EoqOB/ Qlv2M7I85+4BHeQs72sHSL6jnGaWyPIUSKM995YOyVo873XUOzwEdCyWmCwk7Tfu VE7xptJ6pYtvQA== -----END CERTIFICATE-----Generated at Thu Jan 1 15:42:15 2026 by rpki-client