This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json) Hash identifier: IIToZwGfewrVQV/lXx8uYRpPT67+JAmjp48I85gMB0w= Subject key identifier: 2C:06:1F:94:00:1C:EB:EE:25:34:54:49:65:82:4D:9C:56:B4:E8:F9 Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45 Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145 Certificate serial: 019BF4999AD11F1AC19E1309899CF043C37D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft Manifest number: 1009 Signing time: Sun 25 Jan 2026 10:01:05 +0000 Manifest this update: Sun 25 Jan 2026 10:01:05 +0000 Manifest next update: Mon 26 Jan 2026 10:01:05 +0000 Files and hashes: 1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=) 2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=) 3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: 6nolvvDIvzhX+CSxs9dfl8vpbwPfjVuzfNf5R9cGRPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:9a:d1:1f:1a:c1:9e:13:09:89:9c:f0:43:c3:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145 Validity Not Before: Jan 25 10:01:05 2026 GMT Not After : Jan 26 10:01:05 2026 GMT Subject: CN=2c061f94001cebee2534544965824d9c56b4e8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:50:6f:48:d0:24:26:f1:6b:18:61:bd:e8: 79:44:fe:ec:40:36:cb:f9:7d:e7:76:b9:1b:20:2f: 79:7f:c0:b4:26:88:ba:3b:ef:89:07:36:9b:b1:aa: 3a:7e:03:f0:6c:2c:76:eb:9a:12:13:e1:0d:18:b3: e0:7a:74:23:c2:e4:70:c2:09:45:03:ce:84:35:d6: 58:8c:7c:62:e2:28:27:0f:51:48:2e:1e:84:ae:9f: 72:23:60:10:e2:34:ca:13:3d:f9:a3:db:f9:5a:81: af:86:46:f8:ac:1c:c4:90:17:28:16:48:02:00:89: 3a:f4:a7:12:89:27:27:af:ac:f5:a3:65:5a:1a:bb: d5:f9:44:81:5a:c3:f0:ff:04:e7:29:8e:d1:25:39: 67:a3:d7:88:e4:54:37:fd:07:f8:11:ee:3c:13:37: c5:72:a5:0d:6d:27:dd:4d:ff:27:0b:99:0b:92:7e: 7c:2b:4b:42:c6:92:f2:5b:f8:fa:dc:a8:99:3a:09: 7c:4a:3b:74:e4:02:c8:47:ef:38:77:5e:86:3d:15: 19:f9:40:a1:07:75:c5:99:90:9f:d0:f0:dd:ea:13: 39:08:41:8e:a6:d9:da:2a:77:f7:04:99:f3:ed:b7: f5:b6:81:91:74:c2:06:f9:96:4b:b0:c9:b2:55:83: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:06:1F:94:00:1C:EB:EE:25:34:54:49:65:82:4D:9C:56:B4:E8:F9 X509v3 Authority Key Identifier: keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:43:b6:84:41:ed:0b:e8:eb:31:3e:d9:36:11:11:88:f5:5e: cb:49:f9:61:f9:7a:c7:ec:58:6c:ff:a0:95:d9:98:f0:0b:0f: 20:1d:30:a2:ab:3e:20:2d:a9:a9:49:40:7f:21:6a:ad:15:f8: 4d:1a:4a:f2:d9:ef:ed:6d:3b:75:07:3e:13:ab:d3:66:e3:70: 5e:28:6a:f5:97:7e:c6:39:e3:cd:00:84:8c:dc:ce:a2:7e:30: 5c:fc:4b:79:ad:ec:77:a7:44:83:60:58:70:81:b2:11:0f:01: 1e:06:a0:10:23:32:3e:f4:40:1a:5a:10:55:4d:f3:16:78:25: 56:bb:ca:3e:72:7d:95:48:08:1c:c4:ef:34:03:02:fe:0a:fb: 4b:ae:6e:54:45:a0:cf:7f:71:95:a8:b6:3a:83:da:55:6b:f9: 7f:74:f0:77:5d:63:ac:80:89:ac:e8:50:6d:2a:a5:c8:43:8f: 5f:bc:2b:92:6f:ef:24:4a:c8:ae:c2:11:52:51:21:20:4b:f3: 74:15:0d:54:cf:39:16:bb:97:fe:e4:5a:44:97:1b:f3:e4:94: f9:b3:14:a7:83:39:4a:c1:ec:32:02:50:2c:45:e1:e4:e6:ca: a0:69:aa:79:a0:2c:2e:1f:72:58:fc:00:9a:0f:84:09:6a:78: 66:32:22:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mZrRHxrBnhMJiZzwQ8N9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTdjNzQ1M2YzNzdlOWNiNmZhZTVjODkzYzA2N2EzZTFk MzUxNDUwHhcNMjYwMTI1MTAwMTA1WhcNMjYwMTI2MTAwMTA1WjAzMTEwLwYDVQQD EygyYzA2MWY5NDAwMWNlYmVlMjUzNDU0NDk2NTgyNGQ5YzU2YjRlOGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTlQb0jQJCbxaxhhveh5RP7sQDbL +X3ndrkbIC95f8C0Joi6O++JBzabsao6fgPwbCx265oSE+ENGLPgenQjwuRwwglF A86ENdZYjHxi4ignD1FILh6Erp9yI2AQ4jTKEz35o9v5WoGvhkb4rBzEkBcoFkgC AIk69KcSiScnr6z1o2VaGrvV+USBWsPw/wTnKY7RJTlno9eI5FQ3/Qf4Ee48EzfF cqUNbSfdTf8nC5kLkn58K0tCxpLyW/j63KiZOgl8Sjt05ALIR+84d16GPRUZ+UCh B3XFmZCf0PDd6hM5CEGOptnaKnf3BJnz7bf1toGRdMIG+ZZLsMmyVYNeCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwGH5QAHOvuJTRUSWWCTZxWtOj5MB8GA1UdIwQY MBaAFKgXx0U/N36ctvrlyJPAZ6Ph01FFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjct ZGVjNjgwODNmOGY2LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjctZGVjNjgwODNmOGY2 LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0O2hEHt C+jrMT7ZNhERiPVey0n5Yfl6x+xYbP+gldmY8AsPIB0woqs+IC2pqUlAfyFqrRX4 TRpK8tnv7W07dQc+E6vTZuNwXihq9Zd+xjnjzQCEjNzOon4wXPxLea3sd6dEg2BY cIGyEQ8BHgagECMyPvRAGloQVU3zFnglVrvKPnJ9lUgIHMTvNAMC/gr7S65uVEWg z39xlai2OoPaVWv5f3Twd11jrICJrOhQbSqlyEOPX7wrkm/vJErIrsIRUlEhIEvz dBUNVM85FruX/uRaRJcb8+SU+bMUp4M5SsHsMgJQLEXh5ObKoGmqeaAsLh9yWPwA mg+ECWp4ZjIi9g== -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:16 2026 by rpki-client