This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json) Hash identifier: qi7ekL2sCDOCo04cBnjXAGRxh/nPyrq3Ix890J0maZU= Subject key identifier: ED:0F:5E:89:A3:EF:5A:87:9E:05:3A:63:EB:29:4D:82:0F:EB:4B:F9 Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Certificate serial: 019BF79A7AC43911E9F20CE790F6E9B7AB7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft Manifest number: 0D5C Signing time: Mon 26 Jan 2026 00:00:54 +0000 Manifest this update: Mon 26 Jan 2026 00:00:54 +0000 Manifest next update: Tue 27 Jan 2026 00:00:54 +0000 Files and hashes: 1: SV2RkPOuByS_r28T-8Z9LI6s33I.roa (hash: mWVfN5OIaVZHfY5wD08vtg6Nd4vEgRrrt33wmevn5GE=) 2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: Qy8BC82SSdQEfVu+lPSwZld7WA5zUxkDx1JXG4t+Gn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:7a:c4:39:11:e9:f2:0c:e7:90:f6:e9:b7:ab:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Validity Not Before: Jan 26 00:00:54 2026 GMT Not After : Jan 27 00:00:54 2026 GMT Subject: CN=ed0f5e89a3ef5a879e053a63eb294d820feb4bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0d:35:f9:2a:ae:0a:84:24:8b:4b:5d:c9:fb: 0b:9b:01:00:61:f8:af:16:28:80:fc:f5:ea:11:e2: 7b:9d:8f:79:f8:6a:df:55:00:34:72:46:59:bf:de: 09:c4:11:c4:11:2f:6c:7d:cd:a6:3b:80:e7:36:e0: b8:f8:93:2b:4b:3b:49:3f:51:8c:f1:c3:b0:a2:1f: 54:34:95:4c:1f:cc:b6:20:1f:14:13:d7:7c:e0:66: c5:5d:bd:73:4c:75:c3:0b:cd:a5:45:a4:06:0a:d2: b9:b3:da:dc:3c:c3:ed:0d:a1:2d:a8:99:b0:60:bc: 36:04:7e:87:a6:4d:2e:3e:cb:3c:47:4d:00:b5:08: d2:5b:e8:53:7b:41:ca:1d:22:ea:8e:36:98:f3:7e: 46:5e:cc:8e:b1:59:56:7c:74:8c:60:f9:13:11:0b: 4c:6e:0e:da:d8:3b:89:f3:c4:c8:70:7c:91:3b:8d: 2c:e2:9d:dc:08:42:44:48:05:04:08:4a:36:76:c1: ad:cb:09:3c:60:71:f5:c2:f7:4d:11:70:42:ff:a7: 62:7f:50:20:8d:d2:73:fa:31:38:51:b7:01:dc:2d: ce:a2:1f:ba:9f:76:2f:66:37:a2:ee:a6:3b:af:17: e7:cd:47:3a:5b:20:38:eb:0c:4f:8c:20:b4:bb:70: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0F:5E:89:A3:EF:5A:87:9E:05:3A:63:EB:29:4D:82:0F:EB:4B:F9 X509v3 Authority Key Identifier: keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:89:6d:01:5d:a0:32:98:42:90:a7:0d:48:39:ff:f0:24:ad: 53:57:e3:24:29:06:48:49:02:4b:d0:ba:cc:f4:ab:32:c6:0f: 77:6e:aa:e9:d2:8a:07:93:20:7b:ee:d5:0b:08:c5:14:ed:21: 01:51:17:2c:e5:98:09:98:d9:50:f3:31:b0:04:e7:f5:5f:e7: 53:91:c3:ff:62:02:38:02:14:77:35:b8:3e:9d:24:ef:2b:8b: 3d:6f:82:d4:82:fd:a1:40:25:ab:ce:e4:c2:72:a5:74:ef:02: 36:2f:7c:50:8b:96:c6:92:53:f9:bb:04:e3:39:ef:57:88:c9: a7:25:f0:e4:52:b6:86:e7:4a:bf:ab:dc:94:bb:38:a0:29:98: 4d:fa:0e:1d:55:98:e3:26:1c:79:a3:56:c9:59:40:78:0f:1c: 78:bc:c9:d2:6e:eb:95:a5:dd:52:08:0a:07:7f:66:28:f3:58: 48:cd:3b:31:f3:2b:6d:c7:89:06:57:41:a3:8a:ad:a4:8c:02: 45:41:ac:5d:d3:1b:d3:6d:4f:b3:b3:3b:38:13:6c:cc:7d:ce: 6f:c5:c8:69:13:df:92:50:47:78:8e:d3:29:0c:1d:f9:f5:3f: 57:db:aa:15:cf:04:5e:a0:3a:e0:13:ed:f4:55:b9:ad:5f:b9: 59:6c:4d:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mnrEORHp8gznkPbpt6t9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YWM2ZDA2OWQ4ZmI3MzJmNGZlOTJiNGUxM2NkN2RjNGQz OTNhNDIwHhcNMjYwMTI2MDAwMDU0WhcNMjYwMTI3MDAwMDU0WjAzMTEwLwYDVQQD EyhlZDBmNWU4OWEzZWY1YTg3OWUwNTNhNjNlYjI5NGQ4MjBmZWI0YmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA01+SquCoQki0tdyfsLmwEAYfiv FiiA/PXqEeJ7nY95+GrfVQA0ckZZv94JxBHEES9sfc2mO4DnNuC4+JMrSztJP1GM 8cOwoh9UNJVMH8y2IB8UE9d84GbFXb1zTHXDC82lRaQGCtK5s9rcPMPtDaEtqJmw YLw2BH6Hpk0uPss8R00AtQjSW+hTe0HKHSLqjjaY835GXsyOsVlWfHSMYPkTEQtM bg7a2DuJ88TIcHyRO40s4p3cCEJESAUECEo2dsGtywk8YHH1wvdNEXBC/6dif1Ag jdJz+jE4UbcB3C3Ooh+6n3YvZjei7qY7rxfnzUc6WyA46wxPjCC0u3AFvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0PXomj71qHngU6Y+spTYIP60v5MB8GA1UdIwQY MBaAFKasbQadj7cy9P6StOE819xNOTpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEt YmZhMDNhNjY4NTc3LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEtYmZhMDNhNjY4NTc3 LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooltAV2g MphCkKcNSDn/8CStU1fjJCkGSEkCS9C6zPSrMsYPd26q6dKKB5Mge+7VCwjFFO0h AVEXLOWYCZjZUPMxsATn9V/nU5HD/2ICOAIUdzW4Pp0k7yuLPW+C1IL9oUAlq87k wnKldO8CNi98UIuWxpJT+bsE4znvV4jJpyXw5FK2hudKv6vclLs4oCmYTfoOHVWY 4yYceaNWyVlAeA8ceLzJ0m7rlaXdUggKB39mKPNYSM07MfMrbceJBldBo4qtpIwC RUGsXdMb021Ps7M7OBNszH3Ob8XIaRPfklBHeI7TKQwd+fU/V9uqFc8EXqA64BPt 9FW5rV+5WWxNSg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:18 2026 by rpki-client