This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json) Hash identifier: MggrW76j9a1Z7XCMHzz2DKCXg9Qi4FwSXXKMiP7kF+U= Subject key identifier: 51:0F:E1:96:E6:6A:90:D5:52:69:D9:73:7F:7A:00:B0:9C:56:71:A8 Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1 Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1 Certificate serial: 019BF6877CCAE94DC9A52CAE15BA1700FAC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft Manifest number: 09C0 Signing time: Sun 25 Jan 2026 19:00:32 +0000 Manifest this update: Sun 25 Jan 2026 19:00:32 +0000 Manifest next update: Mon 26 Jan 2026 19:00:32 +0000 Files and hashes: 1: 6ixSBAJQlI9QTdVaxkNUntZMsmE.roa (hash: md0a0a+udrQg7g7OFxeWWB53q44wWyhdageagzGFqqY=) 2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: 65qB8tWutPclWe70n76dur4wkub0eisjBNq2+gpX15c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:7c:ca:e9:4d:c9:a5:2c:ae:15:ba:17:00:fa:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1 Validity Not Before: Jan 25 19:00:32 2026 GMT Not After : Jan 26 19:00:32 2026 GMT Subject: CN=510fe196e66a90d55269d9737f7a00b09c5671a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:62:a1:33:85:73:4a:80:e4:15:0f:29:68:85: 54:9e:da:e1:80:5d:a8:f2:bd:d0:28:f4:22:8e:08: 7d:fc:c8:7b:d6:e6:67:d4:30:77:a6:f0:85:71:51: a1:69:ad:70:46:a3:d4:8b:dd:4e:4f:13:9d:0d:0e: 0c:fa:83:9f:86:35:c2:ff:1f:f9:e9:77:ea:e7:12: 7d:97:18:5b:57:92:1c:52:a5:c2:c1:c5:e8:86:18: 69:9d:a0:8e:9a:e1:2e:37:03:c7:fd:ae:27:6f:e0: 0c:8d:2a:b2:6f:63:95:5b:54:62:31:ab:ab:a6:14: 40:1a:4f:68:e5:a0:06:b5:97:91:ad:81:ce:6d:e1: f4:e9:03:14:e7:a2:a2:56:07:ab:5e:af:6f:be:c7: d1:7b:b4:49:dc:8f:15:0a:ab:9e:e1:a7:40:6c:ff: d7:cc:d5:0f:a7:56:ca:fc:63:db:d1:72:19:76:39: e1:7e:06:13:45:af:42:05:38:35:8a:8f:90:52:8d: 91:5f:08:b4:76:e6:eb:32:70:bc:c0:da:2f:2d:2d: b9:be:f5:32:86:5e:7a:45:56:b8:f6:2d:46:f8:7b: 53:b3:d5:68:8b:56:4d:98:2d:39:85:79:14:b4:40: 66:af:a0:64:cb:71:d8:15:27:6b:11:10:b3:c2:93: b9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0F:E1:96:E6:6A:90:D5:52:69:D9:73:7F:7A:00:B0:9C:56:71:A8 X509v3 Authority Key Identifier: keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c7:a8:73:a4:29:53:de:82:30:07:64:2a:fb:e2:28:76:eb: 04:af:99:e0:cf:b8:c6:f1:7d:98:9f:61:e6:bc:58:f8:2d:ea: 8b:db:27:f1:4b:b9:1f:27:2b:f6:ec:6f:ee:95:5e:fe:46:b8: fa:b7:7a:42:bf:06:f8:73:a3:19:ae:ce:86:af:65:48:3a:f3: 92:72:97:04:a1:7c:a0:b6:2e:ac:b7:05:51:37:76:c0:73:3e: 58:03:fa:24:7c:42:d6:d8:db:59:70:21:a5:a6:45:bc:09:6e: 4e:17:e0:77:af:55:52:75:4c:41:5c:b7:a9:34:a2:16:bd:38: 90:08:7b:cf:32:8c:55:ff:be:d4:fe:38:5f:e3:94:39:d3:2a: 87:9a:db:1b:eb:6f:c9:73:dc:a6:8a:0b:14:17:51:22:e5:bf: 30:23:1d:25:9e:8a:da:5f:14:5d:01:8c:cd:76:1c:0c:37:8a: 3b:9d:a5:e4:5d:bb:56:68:02:0e:1b:ef:10:d5:61:cb:7e:db: 86:4a:aa:34:80:66:16:32:85:a8:11:3b:a1:5d:fb:1c:e5:6a: 9d:ab:e0:ba:66:2e:c5:c7:42:b4:04:be:b3:c8:76:58:5c:ec: bc:a5:62:7e:13:0a:6d:e0:5a:36:4a:06:3e:7d:f7:0e:cd:85: bc:62:f6:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h3zK6U3JpSyuFboXAPrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTdhNjhmMDhhMmUzMGJhN2Q3M2Q0NGM5YTZlMjQwMGZk MGEzYjEwHhcNMjYwMTI1MTkwMDMyWhcNMjYwMTI2MTkwMDMyWjAzMTEwLwYDVQQD Eyg1MTBmZTE5NmU2NmE5MGQ1NTI2OWQ5NzM3ZjdhMDBiMDljNTY3MWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GKhM4VzSoDkFQ8paIVUntrhgF2o 8r3QKPQijgh9/Mh71uZn1DB3pvCFcVGhaa1wRqPUi91OTxOdDQ4M+oOfhjXC/x/5 6Xfq5xJ9lxhbV5IcUqXCwcXohhhpnaCOmuEuNwPH/a4nb+AMjSqyb2OVW1RiMaur phRAGk9o5aAGtZeRrYHObeH06QMU56KiVgerXq9vvsfRe7RJ3I8VCque4adAbP/X zNUPp1bK/GPb0XIZdjnhfgYTRa9CBTg1io+QUo2RXwi0dubrMnC8wNovLS25vvUy hl56RVa49i1G+HtTs9Voi1ZNmC05hXkUtEBmr6Bky3HYFSdrERCzwpO59wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEP4ZbmapDVUmnZc396ALCcVnGoMB8GA1UdIwQY MBaAFKpXpo8IouMLp9c9RMmm4kAP0KOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMt ODQ2OGU0OWYwMGVkLzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMtODQ2OGU0OWYwMGVk LzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMeoc6Qp U96CMAdkKvviKHbrBK+Z4M+4xvF9mJ9h5rxY+C3qi9sn8Uu5Hycr9uxv7pVe/ka4 +rd6Qr8G+HOjGa7Ohq9lSDrzknKXBKF8oLYurLcFUTd2wHM+WAP6JHxC1tjbWXAh paZFvAluThfgd69VUnVMQVy3qTSiFr04kAh7zzKMVf++1P44X+OUOdMqh5rbG+tv yXPcpooLFBdRIuW/MCMdJZ6K2l8UXQGMzXYcDDeKO52l5F27VmgCDhvvENVhy37b hkqqNIBmFjKFqBE7oV37HOVqnavgumYuxcdCtAS+s8h2WFzsvKVifhMKbeBaNkoG Pn33Ds2FvGL2vg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:45:47 2026 by rpki-client