This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft File: Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json) Hash identifier: nVxtaaiJCNtbr9/W9dlK1+xxJDbU196v5NG51GFdY1E= Subject key identifier: 84:B6:77:9B:F3:F7:D8:C1:E8:7C:1F:7B:C4:F3:5E:6A:4B:B5:FC:DB Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4 Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4 Certificate serial: 019BF4624BD8B82777EE5A71823ADB9244F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft Manifest number: 0BD2 Signing time: Sun 25 Jan 2026 09:00:41 +0000 Manifest this update: Sun 25 Jan 2026 09:00:41 +0000 Manifest next update: Mon 26 Jan 2026 09:00:41 +0000 Files and hashes: 1: KVqYko6zmqy1pTmx4kOmomDR1eo.roa (hash: FMw/fuHjmtAPyz81jyyZGfPvbXEsbopfOr42moHSoiA=) 2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: JceFt/CApo1+t/cQoMEAK7w8jkXRqEWPzTjIdaMhUJg=) 3: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=) 4: jvNVYqDPl5ZDvjEdTec8dYMFDrE.roa (hash: mkdE3JMB7Inwkz7RT7yv7TB5SnROSJYA3Nk4bVsDvlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:4b:d8:b8:27:77:ee:5a:71:82:3a:db:92:44:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4 Validity Not Before: Jan 25 09:00:41 2026 GMT Not After : Jan 26 09:00:41 2026 GMT Subject: CN=84b6779bf3f7d8c1e87c1f7bc4f35e6a4bb5fcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:e2:f7:5c:41:7e:9b:89:af:4d:fb:af:54: 42:fb:69:e8:1d:27:22:83:40:67:f5:f3:7c:51:a1: 37:13:b1:f0:bf:d7:5f:d9:fd:ba:fd:96:b2:d6:91: fd:a1:19:c7:c5:65:0d:01:40:43:91:90:fd:07:c6: 33:b8:a0:86:8f:e5:9a:38:82:32:b5:7a:fc:b8:bc: 2c:5a:0a:0b:2d:03:b9:05:ee:cb:04:86:3e:fd:70: 93:19:af:e0:5e:fc:2f:55:df:5c:0c:c9:31:2a:68: 70:f6:ff:76:c6:b1:49:cb:50:00:67:ba:37:77:92: 78:2a:4e:d2:3e:cc:2a:8b:dd:f8:5f:08:5b:5d:7d: 27:6a:37:c5:7f:9c:d1:a2:ab:82:52:82:12:34:a8: dc:f2:bb:a0:31:ea:05:d2:c3:b5:92:be:b6:7e:59: 35:bf:1d:f7:83:fb:af:70:95:50:ba:7d:b1:9f:38: d4:9a:fc:a2:0c:2e:0d:87:9e:16:29:29:49:71:b6: 3f:e4:d1:71:e4:6e:6c:8f:ca:fd:5d:14:af:13:f6: 9f:c2:c8:1f:d9:cb:6f:2d:da:3c:e8:db:4c:de:06: 13:21:31:59:cc:8f:08:7f:68:dc:02:8f:8b:a5:31: 49:a5:25:43:7f:86:32:8b:ea:1a:b2:73:f7:2a:0b: 02:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B6:77:9B:F3:F7:D8:C1:E8:7C:1F:7B:C4:F3:5E:6A:4B:B5:FC:DB X509v3 Authority Key Identifier: keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8c:6c:63:76:1c:9e:0a:89:6e:c1:ae:10:52:ee:b2:93:2a: 4d:37:e2:a6:9e:cc:d9:b5:0c:5c:4a:77:d1:b3:9f:6a:2d:87: f3:0c:56:77:7c:65:39:a2:3a:7b:d1:54:42:44:d9:7d:3e:70: f6:3f:af:54:2a:cc:cb:9d:27:52:df:85:03:2d:ec:32:a8:61: 95:d8:66:26:da:90:d6:63:28:7d:88:4a:df:d7:88:0c:ca:f9: 8e:a3:fa:3b:d2:d9:06:f6:1c:b5:31:8b:d7:da:67:ff:f8:ed: c5:c7:d4:96:53:02:82:b2:c7:1b:d5:84:17:02:3a:e2:f8:64: 91:89:75:0c:ea:10:52:18:c5:91:8e:f8:a8:2e:24:4d:04:de: f6:4d:e5:a4:de:99:24:4a:a9:d4:9a:9e:a1:8e:2b:00:64:4d: 6f:46:68:05:00:05:bf:71:1a:ca:1f:41:ba:66:ac:81:1c:77: a9:bd:bf:69:6c:ba:0b:18:5e:04:93:69:12:ba:ec:9b:a4:a9: a6:ef:3e:c4:aa:57:9e:ec:0e:d1:e4:50:7d:53:e9:b0:c0:cf: 1a:e4:f3:ca:73:07:cb:a0:63:9f:1a:ca:48:ff:46:a3:4b:7f: 1d:a3:dd:19:0a:b6:ef:25:e2:ad:43:cc:4a:0b:a9:8e:2e:2a: c8:41:e7:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YkvYuCd37lpxgjrbkkT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNjhhNGNmYjZiMWI2NDQ3ZGE5MzgzMzMyMWRkMzE1MDYx MTkzZDQwHhcNMjYwMTI1MDkwMDQxWhcNMjYwMTI2MDkwMDQxWjAzMTEwLwYDVQQD Eyg4NGI2Nzc5YmYzZjdkOGMxZTg3YzFmN2JjNGYzNWU2YTRiYjVmY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBfi91xBfpuJr037r1RC+2noHSci g0Bn9fN8UaE3E7Hwv9df2f26/Zay1pH9oRnHxWUNAUBDkZD9B8YzuKCGj+WaOIIy tXr8uLwsWgoLLQO5Be7LBIY+/XCTGa/gXvwvVd9cDMkxKmhw9v92xrFJy1AAZ7o3 d5J4Kk7SPswqi934XwhbXX0najfFf5zRoquCUoISNKjc8rugMeoF0sO1kr62flk1 vx33g/uvcJVQun2xnzjUmvyiDC4Nh54WKSlJcbY/5NFx5G5sj8r9XRSvE/afwsgf 2ctvLdo86NtM3gYTITFZzI8If2jcAo+LpTFJpSVDf4Yyi+oasnP3KgsCuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIS2d5vz99jB6Hwfe8TzXmpLtfzbMB8GA1UdIwQY MBaAFEJopM+2sbZEfak4MzId0xUGEZPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMt MmZlZThiNjMwOWNiLzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMtMmZlZThiNjMwOWNi LzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIxsY3Yc ngqJbsGuEFLuspMqTTfipp7M2bUMXEp30bOfai2H8wxWd3xlOaI6e9FUQkTZfT5w 9j+vVCrMy50nUt+FAy3sMqhhldhmJtqQ1mMofYhK39eIDMr5jqP6O9LZBvYctTGL 19pn//jtxcfUllMCgrLHG9WEFwI64vhkkYl1DOoQUhjFkY74qC4kTQTe9k3lpN6Z JEqp1JqeoY4rAGRNb0ZoBQAFv3Eayh9BumasgRx3qb2/aWy6CxheBJNpErrsm6Sp pu8+xKpXnuwO0eRQfVPpsMDPGuTzynMHy6BjnxrKSP9Go0t/HaPdGQq27yXirUPM Sgupji4qyEHn0Q== -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:54 2026 by rpki-client