This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json) Hash identifier: QnzTd7Dez9vDigWtWvHO4P4i9ZYBGKvIn53HkPRcYRM= Subject key identifier: 46:C6:2D:B4:08:57:90:C5:02:48:FC:12:9B:58:48:41:AE:46:50:BB Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c Certificate serial: 019BF91B75630BA5E4EA15B6C657B0DB3077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft Manifest number: 16EA Signing time: Mon 26 Jan 2026 07:01:24 +0000 Manifest this update: Mon 26 Jan 2026 07:01:24 +0000 Manifest next update: Tue 27 Jan 2026 07:01:24 +0000 Files and hashes: 1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: 1oZF9dztSxIqfwUHAo4xNiul/+/iYeT0JRL8g1y5xfQ=) 2: mImUBsIy_K7hP2R4qNRN0dtJq4M.roa (hash: RhFRQt0PkCizfyNCWeuFtu6GmF01B1uaXSkERKXxJrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:75:63:0b:a5:e4:ea:15:b6:c6:57:b0:db:30:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c Validity Not Before: Jan 26 07:01:24 2026 GMT Not After : Jan 27 07:01:24 2026 GMT Subject: CN=46c62db4085790c50248fc129b584841ae4650bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3f:a4:e9:51:37:d5:cb:b0:5b:65:98:8c:69: 85:70:7b:54:19:d2:cd:81:54:0d:cf:0d:e5:70:59: 63:49:26:a3:72:24:a0:64:c9:07:b3:66:60:b2:35: a3:04:7a:82:87:8e:6c:32:0d:6b:45:1d:17:f3:fe: 6f:a1:07:82:c3:4e:a2:43:11:ba:91:89:41:e1:ff: de:3d:f3:22:4e:06:b9:e5:fa:13:b2:4c:3d:5a:5c: 29:82:0f:32:69:da:82:fd:e6:8e:b9:ff:1e:61:17: fd:a0:52:c7:fd:50:07:6f:11:c2:34:25:67:e6:a6: 33:df:2b:da:08:d1:d5:de:2d:c7:62:dc:a0:79:c9: 6c:1f:2d:64:03:81:82:ff:ea:20:34:8d:09:5f:6f: 83:c0:c8:2d:18:6a:25:60:dc:3e:b4:48:18:3e:e1: 5f:ef:a3:e3:ff:a8:4f:72:da:22:c7:79:ea:b8:20: 3a:8f:3f:14:fa:e4:fc:e0:91:16:61:3f:72:ed:6a: e3:21:22:e7:e4:11:70:15:c3:b6:a7:61:2a:4e:99: 03:b9:73:08:0a:02:9d:48:83:3d:c3:49:48:5c:0d: b2:b4:a1:bf:4b:3c:e4:23:d0:a7:aa:4a:17:1f:52: aa:19:c2:85:f6:43:27:de:d2:3e:87:67:84:25:3a: 2c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C6:2D:B4:08:57:90:C5:02:48:FC:12:9B:58:48:41:AE:46:50:BB X509v3 Authority Key Identifier: keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:db:6c:c6:cc:14:3e:19:64:a5:ac:4c:28:72:c0:2e:c2:8a: a4:72:0d:8a:0b:41:77:ea:9d:1a:f8:7a:ec:8a:24:07:a8:06: ec:c8:d0:8b:e7:86:ca:8c:f4:93:ed:b2:eb:f5:13:4c:2a:cb: 42:f3:d2:54:79:77:fe:2b:12:d0:36:54:d7:51:c8:25:25:e7: 89:61:93:72:6f:f8:38:c7:69:b1:6a:db:9e:ff:a0:92:21:cc: 80:ed:e4:c2:bb:a6:a0:c0:20:bc:03:5a:fb:70:5d:87:4c:34: 2f:bb:3f:bc:ca:8f:6f:46:2e:fe:3a:e2:d3:e7:92:e3:b8:cd: e8:a6:09:65:11:c5:b5:1c:0a:2a:b7:be:f9:54:f7:25:71:c2: 8b:90:00:4c:7f:e6:85:cf:b7:47:bd:c2:0b:47:ee:b1:9c:21: 11:15:c7:4b:59:27:28:63:8f:d9:d6:e8:5a:f6:c9:9b:0c:ef: c8:57:fd:a7:ff:7b:5f:bc:af:6f:81:3b:cd:ee:e4:2c:37:70: 4b:3a:e9:f5:d9:29:ed:e7:51:34:fe:c8:7c:ff:e4:4a:02:cc: 88:1d:20:a9:4a:e6:d6:ae:9c:af:50:62:a7:c6:fd:45:de:2b: ff:58:14:af:ac:36:c5:a2:64:89:f1:2a:8d:6a:9d:26:7e:1a: ba:ad:81:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G3VjC6Xk6hW2xlew2zB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTk1OWRjMTY3MTVjOGE1NGM4MDk0MjY3YjhlNDkxZmUz MjFkMmMwHhcNMjYwMTI2MDcwMTI0WhcNMjYwMTI3MDcwMTI0WjAzMTEwLwYDVQQD Eyg0NmM2MmRiNDA4NTc5MGM1MDI0OGZjMTI5YjU4NDg0MWFlNDY1MGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D+k6VE31cuwW2WYjGmFcHtUGdLN gVQNzw3lcFljSSajciSgZMkHs2ZgsjWjBHqCh45sMg1rRR0X8/5voQeCw06iQxG6 kYlB4f/ePfMiTga55foTskw9Wlwpgg8yadqC/eaOuf8eYRf9oFLH/VAHbxHCNCVn 5qYz3yvaCNHV3i3HYtygeclsHy1kA4GC/+ogNI0JX2+DwMgtGGolYNw+tEgYPuFf 76Pj/6hPctoix3nquCA6jz8U+uT84JEWYT9y7WrjISLn5BFwFcO2p2EqTpkDuXMI CgKdSIM9w0lIXA2ytKG/SzzkI9CnqkoXH1KqGcKF9kMn3tI+h2eEJTos0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbGLbQIV5DFAkj8EptYSEGuRlC7MB8GA1UdIwQY MBaAFPKpWdwWcVyKVMgJQme45JH+Mh0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMt NGViZWVjN2U4Mjc1LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMtNGViZWVjN2U4Mjc1 LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNtsxswU PhlkpaxMKHLALsKKpHINigtBd+qdGvh67IokB6gG7MjQi+eGyoz0k+2y6/UTTCrL QvPSVHl3/isS0DZU11HIJSXniWGTcm/4OMdpsWrbnv+gkiHMgO3kwrumoMAgvANa +3Bdh0w0L7s/vMqPb0Yu/jri0+eS47jN6KYJZRHFtRwKKre++VT3JXHCi5AATH/m hc+3R73CC0fusZwhERXHS1knKGOP2dboWvbJmwzvyFf9p/97X7yvb4E7ze7kLDdw Szrp9dkp7edRNP7IfP/kSgLMiB0gqUrm1q6cr1Bip8b9Rd4r/1gUr6w2xaJkifEq jWqdJn4auq2BRg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:08 2026 by rpki-client