This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft File: qmVRVhfXd7VhHdDgs9ACU-oymgc.mft (raw, json) Hash identifier: LtS4pNoFrJAjKDLtDr2NRQhiF4CwSpwyltS0y+ldNE4= Subject key identifier: 93:E7:B2:E3:9D:DC:3E:16:96:F7:35:89:D2:60:4C:A3:78:68:64:3A Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Certificate serial: 019BF386DB4CBC214435E8A860002FB37079 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft Manifest number: 99 Signing time: Sun 25 Jan 2026 05:00:59 +0000 Manifest this update: Sun 25 Jan 2026 05:00:59 +0000 Manifest next update: Mon 26 Jan 2026 05:00:59 +0000 Files and hashes: 1: 7cUw2Cl-LurIN6oFks9FqvoL_Z0.asa (hash: 5JR4v2ucVdBpkAxn2kdLppnKMPCi8MMxkTGGwlQVif8=) 2: qmVRVhfXd7VhHdDgs9ACU-oymgc.crl (hash: PD4VnmXUkvhyhRp1F4LcuvU47aM0aBpXDskV6ikCjIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:db:4c:bc:21:44:35:e8:a8:60:00:2f:b3:70:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Validity Not Before: Jan 25 05:00:59 2026 GMT Not After : Jan 26 05:00:59 2026 GMT Subject: CN=93e7b2e39ddc3e1696f73589d2604ca37868643a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:0c:3a:ab:ae:2e:5a:0d:01:14:48:fb:ce: bc:d1:3e:8d:ce:04:8f:29:56:c3:ef:44:a8:2d:46: eb:93:25:19:6b:33:b6:59:47:b0:a7:64:82:00:7a: fc:19:5e:34:fc:0f:3e:20:94:79:93:06:62:bf:63: 90:00:30:3b:2a:42:60:b8:b5:d7:a4:01:94:d1:c2: bf:cc:a3:48:6e:35:80:13:9b:a1:54:1a:9a:44:41: a9:f3:b8:aa:47:c1:f9:50:12:17:6d:df:7c:cf:be: 90:d3:2f:86:b0:e2:d9:6c:90:73:ad:31:37:70:0e: 14:22:2c:b4:50:88:0c:74:1b:4f:0b:c4:16:91:6a: 10:b7:b4:6a:10:e5:a8:ef:89:28:5b:c5:2e:5c:a7: 3c:b1:18:66:29:bd:76:76:06:ea:9e:92:64:6f:97: d8:c9:fe:c7:a7:5c:5c:c5:1f:32:8c:79:80:95:9d: 80:8e:03:d6:4b:e9:89:3e:39:2e:9c:99:f4:6e:37: 0a:8c:5e:87:03:2a:8c:f1:64:9a:6f:d4:da:e4:42: a0:18:36:24:94:3b:31:8f:44:e9:f8:d4:a1:c9:90: a5:8d:7e:22:85:56:12:e5:12:4f:e7:4d:a8:e7:4f: e1:c2:d7:d4:cd:87:88:12:79:22:d2:e3:94:42:e6: bd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E7:B2:E3:9D:DC:3E:16:96:F7:35:89:D2:60:4C:A3:78:68:64:3A X509v3 Authority Key Identifier: keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d2:ff:74:4e:b9:2c:93:18:07:63:2c:47:29:6b:44:89:ba: af:17:14:81:e7:3d:b9:e6:24:c4:8d:85:c8:da:3e:21:a1:30: 8a:2b:6e:22:f2:8b:08:f3:6b:d8:9c:fe:96:78:2b:e8:14:5d: 64:b5:06:0d:7c:ff:c6:a1:dd:0a:6a:3a:fe:e6:5b:0d:c9:af: fd:09:5d:af:fa:51:ab:bf:c1:56:3f:58:e1:8c:83:97:b4:2b: 69:8b:39:bb:35:d7:8f:5d:bd:1a:0a:a9:67:76:1f:90:8a:50: 50:fd:8e:cc:77:7e:1f:70:27:d5:ba:7b:f5:22:a2:b0:29:d8: 66:94:0e:b3:c1:f3:ca:10:b2:3d:a3:37:1f:ba:a1:52:f6:fa: e0:6e:60:fc:03:42:ce:11:28:61:21:ea:2e:4a:dc:aa:c0:32: 50:06:df:40:45:00:27:f4:91:28:35:85:0d:45:7a:23:b8:d7: cf:36:b5:75:2c:7d:56:ce:09:13:0d:41:2f:ac:ed:30:ae:4c: 9f:5f:c9:c9:3a:4b:eb:40:60:7e:41:99:57:6c:71:a4:4b:67: 12:8e:7b:4c:a9:c1:5f:be:fc:3c:c6:3d:02:30:60:54:04:a2: 04:99:22:76:bb:80:06:bb:49:3d:5f:55:d3:45:3c:c2:91:99: 04:55:b5:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhttMvCFENeioYAAvs3B5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjU1MTU2MTdkNzc3YjU2MTFkZDBlMGIzZDAwMjUzZWEz MjlhMDcwHhcNMjYwMTI1MDUwMDU5WhcNMjYwMTI2MDUwMDU5WjAzMTEwLwYDVQQD Eyg5M2U3YjJlMzlkZGMzZTE2OTZmNzM1ODlkMjYwNGNhMzc4Njg2NDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+0MOquuLloNARRI+8680T6NzgSP KVbD70SoLUbrkyUZazO2WUewp2SCAHr8GV40/A8+IJR5kwZiv2OQADA7KkJguLXX pAGU0cK/zKNIbjWAE5uhVBqaREGp87iqR8H5UBIXbd98z76Q0y+GsOLZbJBzrTE3 cA4UIiy0UIgMdBtPC8QWkWoQt7RqEOWo74koW8UuXKc8sRhmKb12dgbqnpJkb5fY yf7Hp1xcxR8yjHmAlZ2AjgPWS+mJPjkunJn0bjcKjF6HAyqM8WSab9Ta5EKgGDYk lDsxj0Tp+NShyZCljX4ihVYS5RJP502o50/hwtfUzYeIEnki0uOUQua9swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPnsuOd3D4Wlvc1idJgTKN4aGQ6MB8GA1UdIwQY MBaAFKplUVYX13e1YR3Q4LPQAlPqMpoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEt ZTU5MmM3ZDM1ZmYyLzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEtZTU5MmM3ZDM1ZmYy LzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdL/dE65 LJMYB2MsRylrRIm6rxcUgec9ueYkxI2FyNo+IaEwiituIvKLCPNr2Jz+lngr6BRd ZLUGDXz/xqHdCmo6/uZbDcmv/Qldr/pRq7/BVj9Y4YyDl7QraYs5uzXXj129Ggqp Z3YfkIpQUP2OzHd+H3An1bp79SKisCnYZpQOs8HzyhCyPaM3H7qhUvb64G5g/ANC zhEoYSHqLkrcqsAyUAbfQEUAJ/SRKDWFDUV6I7jXzza1dSx9Vs4JEw1BL6ztMK5M n1/JyTpL60BgfkGZV2xxpEtnEo57TKnBX778PMY9AjBgVASiBJkidruABrtJPV9V 00U8wpGZBFW1MA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:40 2026 by rpki-client