This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json) Hash identifier: SfsMd2KHBUjx76hN2bgRj9t2IPehtKopy1Fp6Wh6GrM= Subject key identifier: 18:BA:3B:94:0E:35:F3:E8:A3:E9:CE:17:05:A4:99:18:75:A6:F1:BD Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53 Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553 Certificate serial: 019BF7D20E56FD5126E49805C298A6B93917 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft Manifest number: 0875 Signing time: Mon 26 Jan 2026 01:01:37 +0000 Manifest this update: Mon 26 Jan 2026 01:01:37 +0000 Manifest next update: Tue 27 Jan 2026 01:01:37 +0000 Files and hashes: 1: FVti0CnJBxW_ujwVe576uT5sBZY.roa (hash: wKPtK/uPr/cpuHyaQuhDbiv2SdMMAyJiY4SSf65iULo=) 2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: PbAImsmHuzm1IQnTk7lDu7cDUax/SJA1Fz2G4BdxATI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:0e:56:fd:51:26:e4:98:05:c2:98:a6:b9:39:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553 Validity Not Before: Jan 26 01:01:37 2026 GMT Not After : Jan 27 01:01:37 2026 GMT Subject: CN=18ba3b940e35f3e8a3e9ce1705a4991875a6f1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:c8:d0:52:2a:3b:f3:35:7a:d1:cd:fc:7e: 21:18:00:d7:e9:0a:c7:4c:56:32:0b:51:f5:56:52: cd:84:11:28:8b:51:e6:02:52:26:52:46:b6:61:af: 4f:0f:73:f8:34:64:28:a0:4e:a8:47:30:07:d4:96: 1d:50:c0:93:c3:4a:76:bb:40:38:3b:d0:4a:eb:0c: 9c:18:24:4a:5e:1a:2e:54:4f:41:62:c3:40:4b:c8: 71:0c:78:6c:3e:65:40:ca:b0:5a:37:f2:06:37:c3: 87:1e:6d:f8:5e:45:e6:ff:96:0a:6f:0b:dc:69:55: dc:6e:00:d1:f3:e6:c1:f0:92:ee:9d:a1:15:b8:c4: ce:23:f5:dc:f9:ab:d4:f3:7a:29:54:c7:3c:74:59: 2d:3b:d9:e4:b4:43:36:4e:98:7f:dc:89:13:e2:77: 30:93:66:8d:c1:e7:12:3e:bb:13:0e:cf:ba:88:5b: a2:18:59:c8:1c:bf:c0:b5:f8:78:8c:ef:38:08:f5: c0:7d:c5:9a:97:17:ed:99:72:a5:76:30:ad:73:fa: 6d:97:4e:30:97:92:1d:b7:6b:3f:4c:81:aa:9d:e0: 0d:90:c4:84:77:99:46:49:a0:ea:f5:e2:a8:7c:24: 0d:ee:7f:ee:d5:11:04:f3:a7:b7:23:27:56:4b:f5: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BA:3B:94:0E:35:F3:E8:A3:E9:CE:17:05:A4:99:18:75:A6:F1:BD X509v3 Authority Key Identifier: keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:25:e6:f9:83:58:63:3b:1f:43:b1:f0:46:6e:77:7a:51:31: 4c:45:e2:47:d0:d7:69:a5:22:35:97:e8:a3:ac:25:8c:6b:76: 2c:76:ef:73:a6:4d:09:1c:cc:82:57:34:a5:42:e6:7c:ad:3b: f5:c7:29:98:92:da:f4:83:42:24:3e:09:a9:b4:86:a2:08:ab: 8b:56:72:8c:c9:8b:31:eb:fb:ef:b3:f5:d2:6d:97:e6:fd:d1: 50:41:8e:29:67:1d:42:68:53:b9:58:dc:09:f7:6d:d1:65:c0: 33:92:17:43:f2:68:73:d6:60:a2:10:63:fd:77:1d:a4:fe:b3: ef:73:08:2d:1a:e0:7a:f5:f5:ef:5d:8d:e2:08:b9:87:a5:c9: 0d:0e:5c:53:19:90:40:56:2b:d8:29:0b:b3:8a:1c:9b:da:1e: a4:2c:ee:dc:82:db:29:63:6d:4c:bb:9c:65:34:9e:2b:03:75: 49:f9:34:84:ba:7e:dd:8b:05:28:dc:ec:e3:99:f0:22:b5:68: f0:8f:12:40:55:b7:27:e9:04:25:bb:7a:79:57:cb:05:03:e6: a1:a7:5d:da:f8:27:49:d8:72:ff:77:d6:d8:39:e0:02:d0:e1: af:c3:c1:d4:8a:c9:fb:6f:d0:b3:bc:0e:d4:a7:73:63:89:8b: 15:b8:c5:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30g5W/VEm5JgFwpimuTkXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj OGU1NTMwHhcNMjYwMTI2MDEwMTM3WhcNMjYwMTI3MDEwMTM3WjAzMTEwLwYDVQQD EygxOGJhM2I5NDBlMzVmM2U4YTNlOWNlMTcwNWE0OTkxODc1YTZmMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqTI0FIqO/M1etHN/H4hGADX6QrH TFYyC1H1VlLNhBEoi1HmAlImUka2Ya9PD3P4NGQooE6oRzAH1JYdUMCTw0p2u0A4 O9BK6wycGCRKXhouVE9BYsNAS8hxDHhsPmVAyrBaN/IGN8OHHm34XkXm/5YKbwvc aVXcbgDR8+bB8JLunaEVuMTOI/Xc+avU83opVMc8dFktO9nktEM2Tph/3IkT4ncw k2aNwecSPrsTDs+6iFuiGFnIHL/Atfh4jO84CPXAfcWalxftmXKldjCtc/ptl04w l5Idt2s/TIGqneANkMSEd5lGSaDq9eKofCQN7n/u1REE86e3IydWS/WU0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi6O5QONfPoo+nOFwWkmRh1pvG9MB8GA1UdIwQY MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt ZjRhMzllMThjZmI0LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0 LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyXm+YNY YzsfQ7HwRm53elExTEXiR9DXaaUiNZfoo6wljGt2LHbvc6ZNCRzMglc0pULmfK07 9ccpmJLa9INCJD4JqbSGogiri1ZyjMmLMev777P10m2X5v3RUEGOKWcdQmhTuVjc Cfdt0WXAM5IXQ/Joc9ZgohBj/XcdpP6z73MILRrgevX1712N4gi5h6XJDQ5cUxmQ QFYr2CkLs4ocm9oepCzu3ILbKWNtTLucZTSeKwN1Sfk0hLp+3YsFKNzs45nwIrVo 8I8SQFW3J+kEJbt6eVfLBQPmoadd2vgnSdhy/3fW2DngAtDhr8PB1IrJ+2/Qs7wO 1KdzY4mLFbjFZQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:31 2026 by rpki-client