This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json) Hash identifier: O2cpn4uhBjOtuQUHGDtPV5yybKu4ArQlhrko+tzTveE= Subject key identifier: E9:C9:38:AF:A6:23:DB:7E:E4:08:93:7C:80:BD:B3:F3:CF:93:5F:85 Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97 Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997 Certificate serial: 019BF9F69F2C8E5485C88D12DC835C038E8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 11:00:47 +0000 Manifest this update: Mon 26 Jan 2026 11:00:47 +0000 Manifest next update: Tue 27 Jan 2026 11:00:47 +0000 Files and hashes: 1: VQMozEw5e5cFbAbax7TNnFtChpk.roa (hash: kcI4JK6ZQqSjrwXa7nCut12JkcTP0x/T3dN3B6kDSUw=) 2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: ANtK3ZvBeFI+XRRDDPHu59714pfyei5fkt3BugdKiNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:9f:2c:8e:54:85:c8:8d:12:dc:83:5c:03:8e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997 Validity Not Before: Jan 26 11:00:47 2026 GMT Not After : Jan 27 11:00:47 2026 GMT Subject: CN=e9c938afa623db7ee408937c80bdb3f3cf935f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fd:ea:5f:05:20:b8:c6:df:78:e9:cf:21:2a: 56:84:16:fb:9c:cd:e5:59:08:34:2c:64:46:9f:99: 73:3a:0b:78:98:45:f4:83:fc:ae:45:ca:dc:04:d5: 55:ab:3c:48:ac:e4:cf:a6:64:f1:0b:eb:b9:e0:20: 26:70:bc:20:47:b8:dc:c0:45:59:58:e4:83:54:f1: 87:9d:eb:71:0e:9c:01:a6:3a:4a:53:a5:93:52:fc: 59:9f:81:2d:16:17:ee:d7:67:0f:c4:bd:3e:53:49: a9:47:71:74:08:8c:1c:1e:c2:04:a6:59:d1:50:e2: b1:44:0f:06:7d:e2:35:79:db:b4:50:8b:46:fa:8a: 2d:3f:d6:0f:6a:f4:18:bf:aa:dc:85:e1:bc:92:f1: f3:05:c8:88:f1:43:49:54:99:76:4d:69:1e:3b:02: 63:6f:4b:c6:c9:3a:20:54:f9:9e:48:8a:b1:2a:8b: 97:f6:ae:2e:e1:ba:ed:47:1b:93:49:be:50:c2:63: 1a:ef:7b:5d:f7:e6:e1:e3:44:32:0b:69:a5:28:cd: c9:7e:ea:27:a9:0a:a5:dc:60:d5:69:eb:45:28:1f: 6c:c9:ee:8b:15:fd:e8:ad:c6:0b:f1:ca:f1:c1:f4: 7d:b0:2b:02:a0:5c:2b:9e:ec:42:d0:f2:ca:85:cd: ca:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C9:38:AF:A6:23:DB:7E:E4:08:93:7C:80:BD:B3:F3:CF:93:5F:85 X509v3 Authority Key Identifier: keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f9:d4:03:ac:4d:62:49:85:9a:00:1c:17:a0:b4:06:9b:5b: e9:87:5f:5c:a3:ca:af:1b:33:37:e7:fd:15:71:92:4d:a0:94: 08:78:85:be:2d:5f:37:dc:cf:cc:74:70:5d:05:e7:70:99:9c: 77:09:3a:49:51:59:f3:95:a6:e3:f2:d9:a1:46:2c:1a:92:f4: 9b:a6:e9:4c:d8:fe:6f:23:80:75:3c:c0:56:28:17:c6:6c:2a: 44:73:83:8d:b2:07:23:f4:59:47:be:37:49:c0:68:ef:c3:0c: 04:f0:ca:da:d9:72:f5:46:5b:4c:79:f7:2b:31:b1:1b:2b:6f: 40:68:5f:02:a9:c5:b9:55:60:4a:9f:b1:67:76:fe:af:fe:90: 8f:ad:10:48:db:d0:39:cb:24:79:20:6f:00:07:90:5a:2b:30: 16:17:38:8a:fb:17:a6:21:a2:51:de:6f:43:8c:e5:48:c4:e8: 39:d6:ef:7a:fd:e1:41:76:e7:ea:5d:b3:7e:4d:17:bc:e2:87: 5d:44:3b:3a:4e:aa:66:d1:9e:e9:93:92:5e:03:e0:cb:23:2c: e7:e3:53:c3:90:e3:0e:81:c2:c3:94:20:f2:e1:17:0d:90:00: 32:cd:b2:81:86:71:08:8f:e4:34:a5:3b:fe:5d:2e:55:75:f3: cf:d0:e4:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59p8sjlSFyI0S3INcA46KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZTg5YmMzMDk3NzY4YWNkNjdjMmRkNzQ3ZDNiZTFhZGI3 MmU5OTcwHhcNMjYwMTI2MTEwMDQ3WhcNMjYwMTI3MTEwMDQ3WjAzMTEwLwYDVQQD EyhlOWM5MzhhZmE2MjNkYjdlZTQwODkzN2M4MGJkYjNmM2NmOTM1Zjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv3qXwUguMbfeOnPISpWhBb7nM3l WQg0LGRGn5lzOgt4mEX0g/yuRcrcBNVVqzxIrOTPpmTxC+u54CAmcLwgR7jcwEVZ WOSDVPGHnetxDpwBpjpKU6WTUvxZn4EtFhfu12cPxL0+U0mpR3F0CIwcHsIEplnR UOKxRA8GfeI1edu0UItG+ootP9YPavQYv6rcheG8kvHzBciI8UNJVJl2TWkeOwJj b0vGyTogVPmeSIqxKouX9q4u4brtRxuTSb5QwmMa73td9+bh40QyC2mlKM3Jfuon qQql3GDVaetFKB9sye6LFf3orcYL8crxwfR9sCsCoFwrnuxC0PLKhc3KiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnJOK+mI9t+5AiTfIC9s/PPk1+FMB8GA1UdIwQY MBaAFKrom8MJd2is1nwt10fTvhrbcumXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMt ZTNkZDc3NjQ4OWExLzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMtZTNkZDc3NjQ4OWEx LzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvnUA6xN YkmFmgAcF6C0Bptb6YdfXKPKrxszN+f9FXGSTaCUCHiFvi1fN9zPzHRwXQXncJmc dwk6SVFZ85Wm4/LZoUYsGpL0m6bpTNj+byOAdTzAVigXxmwqRHODjbIHI/RZR743 ScBo78MMBPDK2tly9UZbTHn3KzGxGytvQGhfAqnFuVVgSp+xZ3b+r/6Qj60QSNvQ OcskeSBvAAeQWiswFhc4ivsXpiGiUd5vQ4zlSMToOdbvev3hQXbn6l2zfk0XvOKH XUQ7Ok6qZtGe6ZOSXgPgyyMs5+NTw5DjDoHCw5Qg8uEXDZAAMs2ygYZxCI/kNKU7 /l0uVXXzz9DkGw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:06:18 2026 by rpki-client