This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft File: q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json) Hash identifier: soyiVDaS+WdjzIyQFRZNssWmeUNmi/B5f+h0wEsfrC0= Subject key identifier: 6D:4E:98:A1:94:10:A2:15:23:1E:2B:D2:6D:39:59:F3:5F:4D:30:CA Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4 Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4 Certificate serial: 019BF8AD6CC3CB7D3BF399A48F900272C9DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft Manifest number: 02EF Signing time: Mon 26 Jan 2026 05:01:13 +0000 Manifest this update: Mon 26 Jan 2026 05:01:13 +0000 Manifest next update: Tue 27 Jan 2026 05:01:13 +0000 Files and hashes: 1: BXI5ofFp8mb6gJRdDdim1c_uINA.roa (hash: PcZNAv5gh3OSvPv6RyLwjWyyXj09fuAhEv8CUwdyHpI=) 2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: 6Vhkz6xUz+Xzey0sT9CeWiAA3LIUsNpeKVT4mgUboNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:6c:c3:cb:7d:3b:f3:99:a4:8f:90:02:72:c9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4 Validity Not Before: Jan 26 05:01:13 2026 GMT Not After : Jan 27 05:01:13 2026 GMT Subject: CN=6d4e98a19410a215231e2bd26d3959f35f4d30ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:39:5f:ac:cf:c8:45:47:73:d3:a4:ec:95:e8: 23:92:36:00:56:0b:23:5e:cd:7b:b1:8b:0c:4c:f6: 59:d9:9f:a0:c4:c9:73:72:aa:13:36:d4:43:fb:cd: e7:15:f8:6f:d7:8d:8b:d0:7e:ed:92:6b:0b:dd:aa: dd:b0:7f:43:04:f7:ce:f2:92:0f:56:49:4d:e0:9b: eb:c6:1e:5d:b8:be:e9:21:10:ba:83:4c:ed:86:fa: ea:07:1a:75:0c:2d:0c:7a:6a:f9:e4:32:f6:1b:4b: ef:28:03:45:82:20:5f:37:ec:42:55:88:cd:6b:b7: 0a:1d:ae:25:58:a4:88:12:6d:67:22:c2:ae:90:b0: 57:14:a4:f6:69:be:9d:2f:b6:85:62:7c:0a:a0:7b: 77:9a:90:f4:94:29:d1:7b:bb:bd:fb:06:a3:0a:0b: a8:ee:7e:8c:3a:fb:42:f2:5f:a5:5f:d4:88:72:05: e7:07:11:ee:2a:49:e0:df:ac:91:2a:92:5f:b9:6a: 0b:a7:cf:67:9f:c4:84:3f:ad:0e:4f:35:bf:fb:89: 59:ad:5f:c8:51:28:05:e8:51:57:d3:cc:36:0e:a2: 66:17:2f:9f:2b:f6:35:76:80:d4:c7:5b:88:bd:51: 89:2e:ed:d2:32:77:6f:e5:4a:65:b1:79:7a:52:38: 75:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4E:98:A1:94:10:A2:15:23:1E:2B:D2:6D:39:59:F3:5F:4D:30:CA X509v3 Authority Key Identifier: keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:79:c0:45:9b:fe:0a:7b:42:ad:8e:f3:e8:e4:c6:e2:f2:5e: 62:55:7d:57:45:29:e1:23:c1:31:0f:f6:ac:38:e2:ed:d5:57: 0b:1b:db:f0:09:cc:d8:ff:61:00:0f:28:d6:31:07:41:aa:3d: 71:f8:52:6a:3c:4e:0c:4f:46:cb:4c:8b:34:e3:2b:34:06:87: f9:fa:e4:7b:bc:db:a2:67:f4:4a:cf:33:39:d3:24:54:23:1c: 3e:df:07:a0:29:05:2a:b2:2f:c2:06:86:30:8f:08:b6:de:96: 4e:32:10:0c:95:95:02:18:d8:1d:b4:d5:1b:d9:f1:c5:47:5a: cb:c6:48:5c:63:ab:4c:a6:cc:f1:2a:b1:99:c1:f6:c9:87:8c: 2d:29:d6:d9:8e:a5:d5:b7:4d:14:7a:95:8c:f8:46:c4:91:e1: 2d:80:58:65:96:47:5f:24:fe:0f:a9:20:a1:ed:55:a3:3f:72: 9d:5d:87:9b:4d:f1:eb:b8:c6:8e:3b:19:40:b1:e2:15:c0:03: 1e:f3:5c:5b:4b:86:a1:20:a9:c8:21:9c:0d:ff:66:33:fa:f4: b5:2e:1b:f4:1e:18:68:61:4f:e7:72:86:72:09:90:87:6b:78: 2a:29:1c:15:b6:13:08:93:f7:31:9a:8a:9a:5c:79:4a:47:30: e1:0e:12:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rWzDy30785mkj5ACcsndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2JlMzRmNWQyNjlkYTUwMmFhNjgzNDhiZjA3YjkyZDky YzBjYzQwHhcNMjYwMTI2MDUwMTEzWhcNMjYwMTI3MDUwMTEzWjAzMTEwLwYDVQQD Eyg2ZDRlOThhMTk0MTBhMjE1MjMxZTJiZDI2ZDM5NTlmMzVmNGQzMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zlfrM/IRUdz06TslegjkjYAVgsj Xs17sYsMTPZZ2Z+gxMlzcqoTNtRD+83nFfhv142L0H7tkmsL3ardsH9DBPfO8pIP VklN4Jvrxh5duL7pIRC6g0zthvrqBxp1DC0Memr55DL2G0vvKANFgiBfN+xCVYjN a7cKHa4lWKSIEm1nIsKukLBXFKT2ab6dL7aFYnwKoHt3mpD0lCnRe7u9+wajCguo 7n6MOvtC8l+lX9SIcgXnBxHuKkng36yRKpJfuWoLp89nn8SEP60OTzW/+4lZrV/I USgF6FFX08w2DqJmFy+fK/Y1doDUx1uIvVGJLu3SMndv5UplsXl6Ujh1vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1OmKGUEKIVIx4r0m05WfNfTTDKMB8GA1UdIwQY MBaAFKt7409dJp2lAqpoNIvwe5LZLAzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUt NTU4M2U2MWFkYjM4LzEvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUtNTU4M2U2MWFkYjM4 LzEvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3nARZv+ CntCrY7z6OTG4vJeYlV9V0Up4SPBMQ/2rDji7dVXCxvb8AnM2P9hAA8o1jEHQao9 cfhSajxODE9Gy0yLNOMrNAaH+frke7zbomf0Ss8zOdMkVCMcPt8HoCkFKrIvwgaG MI8Itt6WTjIQDJWVAhjYHbTVG9nxxUday8ZIXGOrTKbM8SqxmcH2yYeMLSnW2Y6l 1bdNFHqVjPhGxJHhLYBYZZZHXyT+D6kgoe1Voz9ynV2Hm03x67jGjjsZQLHiFcAD HvNcW0uGoSCpyCGcDf9mM/r0tS4b9B4YaGFP53KGcgmQh2t4KikcFbYTCJP3MZqK mlx5Skcw4Q4Spw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:34 2026 by rpki-client