This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json) Hash identifier: p3URY9ZNsOUtdlxKW47krjNt9kuGziQ76nlHv7HBuRs= Subject key identifier: 4F:CF:B9:76:82:E7:2B:46:D5:71:4B:77:0B:CC:4C:28:53:45:B6:20 Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51 Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151 Certificate serial: 019BF53E7BB4C2CD760C604D6F3153003D0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft Manifest number: 0E69 Signing time: Sun 25 Jan 2026 13:01:11 +0000 Manifest this update: Sun 25 Jan 2026 13:01:11 +0000 Manifest next update: Mon 26 Jan 2026 13:01:11 +0000 Files and hashes: 1: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: cWo1fXZmUGnNiHbnTMDCidvHbT+BgFBT0SKk09IpeMY=) 2: skeAadI4AP4ZvpAKWtTlCV07X48.roa (hash: teA/npSH8zrPPm6lOFHsXXFeJadHqVvDUxx+vJRFlGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:7b:b4:c2:cd:76:0c:60:4d:6f:31:53:00:3d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa85c67f22309e0d84c30b542529725328605151 Validity Not Before: Jan 25 13:01:11 2026 GMT Not After : Jan 26 13:01:11 2026 GMT Subject: CN=4fcfb97682e72b46d5714b770bcc4c285345b620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:2d:e7:a5:f8:84:2b:c6:c9:dc:fb:8d:7d: f9:66:14:5b:6a:7d:52:9d:bc:a6:9c:65:d7:90:e3: e8:8b:d4:51:ce:07:18:51:2c:ed:cd:45:63:3c:11: c0:b5:9a:72:17:93:cb:8e:76:2a:80:01:ff:1e:e5: 25:58:59:aa:d7:94:b1:f1:fa:be:93:73:da:f3:91: f6:87:66:88:ba:8d:01:9f:bf:d8:59:13:cc:6c:57: 2d:90:f6:5b:ef:0c:bc:07:57:72:2c:31:a2:13:d0: b6:27:41:aa:a6:3b:fd:e4:64:ed:04:ec:db:bd:d2: 74:4d:b3:00:40:cd:ce:dc:a9:98:01:ef:7b:1e:51: de:e3:a3:86:de:e4:83:11:f7:a3:25:9d:24:a6:7e: ee:c2:d3:f6:ec:89:5a:e4:48:58:bd:8c:75:2b:db: e4:ff:17:21:3f:6a:8d:4d:b4:f1:c3:41:10:26:f1: fc:ee:2b:77:9d:9a:01:a2:8c:6a:19:bd:ce:6b:55: 09:31:69:cd:49:86:53:54:5b:e3:ee:9c:5d:ea:80: 24:a0:00:76:db:21:a2:4c:67:52:a3:e1:72:76:80: b6:b7:58:c8:35:f3:38:81:25:b6:40:31:8a:02:56: f4:25:11:07:df:6a:06:66:aa:32:9a:b7:a7:04:5f: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CF:B9:76:82:E7:2B:46:D5:71:4B:77:0B:CC:4C:28:53:45:B6:20 X509v3 Authority Key Identifier: keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:21:38:18:31:9e:a0:24:49:ca:1d:5f:f7:6f:27:ff:9e:57: 22:b3:98:7a:15:e0:28:d2:f7:7a:2b:29:0e:33:56:aa:02:a3: 1b:27:3f:9a:f4:7d:22:8a:c2:f4:e0:95:a4:4f:c2:15:5c:5d: a0:a2:8e:8b:1e:f7:55:8f:3d:5d:7d:0b:8c:37:ca:8e:f0:72: 8b:33:33:b5:09:40:00:c4:ae:d1:88:9e:49:96:54:52:67:2c: 1a:4b:0a:a2:a6:60:f7:3e:39:6a:20:6a:11:3d:ce:8e:86:a3: 6b:c0:d4:a4:98:73:d0:72:f7:f1:45:5a:cc:b2:21:f0:07:9d: 21:7d:80:24:41:2c:c7:48:dc:26:f3:d5:00:7d:58:34:3a:24: e9:86:02:f0:92:5a:45:2a:20:14:9d:d5:c5:3f:fb:57:1f:6a: c7:56:21:01:62:a0:37:64:11:21:94:85:bd:1c:cb:23:65:cd: cc:60:24:89:f6:2a:98:82:03:0d:ce:de:83:f8:68:4b:f5:e9: d0:fb:6c:58:6b:8c:b7:cb:60:c5:9c:bc:9a:e2:95:aa:95:93: bf:29:1b:ad:27:f3:9d:36:d6:86:e5:ed:cf:62:45:be:78:dd: f9:a6:ba:5d:d0:c5:c0:f3:6e:cf:de:4b:63:d9:70:aa:77:8e: ca:37:f6:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pnu0ws12DGBNbzFTAD0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhODVjNjdmMjIzMDllMGQ4NGMzMGI1NDI1Mjk3MjUzMjg2 MDUxNTEwHhcNMjYwMTI1MTMwMTExWhcNMjYwMTI2MTMwMTExWjAzMTEwLwYDVQQD Eyg0ZmNmYjk3NjgyZTcyYjQ2ZDU3MTRiNzcwYmNjNGMyODUzNDViNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUMt56X4hCvGydz7jX35ZhRban1S nbymnGXXkOPoi9RRzgcYUSztzUVjPBHAtZpyF5PLjnYqgAH/HuUlWFmq15Sx8fq+ k3Pa85H2h2aIuo0Bn7/YWRPMbFctkPZb7wy8B1dyLDGiE9C2J0Gqpjv95GTtBOzb vdJ0TbMAQM3O3KmYAe97HlHe46OG3uSDEfejJZ0kpn7uwtP27Ila5EhYvYx1K9vk /xchP2qNTbTxw0EQJvH87it3nZoBooxqGb3Oa1UJMWnNSYZTVFvj7pxd6oAkoAB2 2yGiTGdSo+FydoC2t1jINfM4gSW2QDGKAlb0JREH32oGZqoymrenBF8HQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/PuXaC5ytG1XFLdwvMTChTRbYgMB8GA1UdIwQY MBaAFKqFxn8iMJ4NhMMLVCUpclMoYFFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmIt MmEyZWQ0NWUyNzEyLzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmItMmEyZWQ0NWUyNzEy LzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyE4GDGe oCRJyh1f928n/55XIrOYehXgKNL3eispDjNWqgKjGyc/mvR9IorC9OCVpE/CFVxd oKKOix73VY89XX0LjDfKjvByizMztQlAAMSu0YieSZZUUmcsGksKoqZg9z45aiBq ET3Ojoaja8DUpJhz0HL38UVazLIh8AedIX2AJEEsx0jcJvPVAH1YNDok6YYC8JJa RSogFJ3VxT/7Vx9qx1YhAWKgN2QRIZSFvRzLI2XNzGAkifYqmIIDDc7eg/hoS/Xp 0PtsWGuMt8tgxZy8muKVqpWTvykbrSfznTbWhuXtz2JFvnjd+aa6XdDFwPNuz95L Y9lwqneOyjf2ew== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:36 2026 by rpki-client