This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json) Hash identifier: 3XvF4s9CVbLu8nFJvpdYQvO4nuuVl/rYrRJtmcSw1TA= Subject key identifier: 1D:23:AB:D0:07:57:B5:14:81:59:04:90:FE:2E:B3:C9:A0:48:D4:51 Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8 Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8 Certificate serial: 019BF16139A230890CB6F26B0EF7E1FA4406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft Manifest number: 10EA Signing time: Sat 24 Jan 2026 19:00:39 +0000 Manifest this update: Sat 24 Jan 2026 19:00:39 +0000 Manifest next update: Sun 25 Jan 2026 19:00:39 +0000 Files and hashes: 1: Io1aFz3FdR5Bh1mYcrCe9mIequ8.roa (hash: MsqgD4dNC1FiLIJAOYEnGOt34n4HFw6UdIBX7nTzrgg=) 2: TKU8Yc2L0FbHGl3NXxfpL1eDNnE.roa (hash: c75+0er1lGRbZ38ME3BfFzi74fQVT9//khB7uqu1zrM=) 3: k71EKLBF_cl_NNSjkCcESijpJkY.roa (hash: NcQun5U6vnHcxP8j+XhrdDKMSW0mSEQmABKKB6veuXY=) 4: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: 9iNxSQn9arfdtnAq0R/5fXm4ylq4fzKoOIuC+GblS7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:61:39:a2:30:89:0c:b6:f2:6b:0e:f7:e1:fa:44:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8 Validity Not Before: Jan 24 19:00:39 2026 GMT Not After : Jan 25 19:00:39 2026 GMT Subject: CN=1d23abd00757b51481590490fe2eb3c9a048d451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:6f:35:77:c1:0c:c3:d9:62:3f:e0:fc:3c: 45:06:61:42:96:32:ac:c7:81:23:6b:ba:05:0c:81: 3c:ad:d5:6a:6c:d2:f5:a9:e8:9a:28:04:d2:d8:09: 26:09:31:64:a2:96:b6:a2:f2:7d:41:a4:a1:db:4a: 0c:b1:03:6c:29:1d:06:a2:98:e8:4a:83:41:f5:3a: e5:b3:16:cc:0b:7e:0d:11:dc:79:b8:f8:1a:b1:f9: d3:a8:55:e6:49:c7:cc:82:ae:33:b0:f4:9c:a7:c4: 64:ec:be:20:05:67:26:3b:46:ec:15:e2:7f:41:99: ac:b7:67:7a:d1:15:9f:03:c9:0c:0e:ba:d9:e4:a5: 98:d3:05:0b:3e:d9:b0:d5:d3:64:f5:65:e0:78:b2: 3b:4e:a1:a2:a6:e6:48:bf:1f:77:0d:73:34:3e:5a: a0:6a:cf:e0:9b:6b:c9:c6:64:f0:09:8a:27:4e:da: 65:d5:6b:49:26:f5:5e:a3:34:fa:94:c0:1e:5c:05: 25:13:3b:cf:d5:69:31:a7:5e:41:3a:b7:fe:2b:ef: 3e:52:f8:ab:b0:34:ed:32:61:a2:75:1e:06:88:70: 89:cb:65:b1:4c:5e:98:41:3a:6f:7a:01:75:a6:56: f5:ec:27:a3:cd:e1:5e:a9:0f:94:56:31:18:a5:86: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:23:AB:D0:07:57:B5:14:81:59:04:90:FE:2E:B3:C9:A0:48:D4:51 X509v3 Authority Key Identifier: keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:40:cb:19:ca:e9:7c:72:30:ae:f3:99:51:5b:d6:67:6d:62: bd:be:a4:7b:d4:b2:8e:52:f1:8d:d2:df:cd:93:3c:08:98:4a: 89:2f:b4:d2:ce:1d:1f:be:77:56:b4:65:6d:87:46:52:34:6a: 3a:54:be:d7:1c:6e:9e:8a:fc:c2:3f:ad:d7:0a:78:9a:82:b0: 6f:d9:ed:72:72:8b:07:11:a1:87:29:79:e4:85:59:4a:e4:e2: 96:f6:74:65:54:46:22:b3:b4:02:f6:5b:e0:de:62:8a:99:64: 1d:ac:35:9f:7d:9e:db:86:6b:a7:d1:17:49:ea:6a:b4:8c:58: 0b:75:bc:61:47:90:9a:7c:bd:80:ce:c0:ce:ca:0d:4f:6b:c9: 79:b7:21:a0:aa:6a:31:f7:86:ee:13:4a:94:ec:41:e2:4a:cd: 2d:fa:e0:93:1f:41:2e:31:d2:4f:e3:c0:26:ba:bf:92:7c:cb: 96:19:7b:7a:79:e4:90:d9:0a:86:21:81:96:55:e2:24:e8:86: 5a:a5:e2:69:f1:d0:de:46:e1:f6:f7:65:a4:9e:d2:10:99:9a: a8:12:f2:15:c3:9b:bc:50:ea:1c:29:6c:81:ef:92:9f:05:25: dd:2b:61:8b:9a:72:22:0e:3f:a3:5c:c0:0c:e6:87:a8:fc:80: 9b:79:cb:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxYTmiMIkMtvJrDvfh+kQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MDIwMGEwMDAwZGY1ZDg0NWI5ZGIyODRkMGEyZGJlZTY3 NmM1YTgwHhcNMjYwMTI0MTkwMDM5WhcNMjYwMTI1MTkwMDM5WjAzMTEwLwYDVQQD EygxZDIzYWJkMDA3NTdiNTE0ODE1OTA0OTBmZTJlYjNjOWEwNDhkNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYFvNXfBDMPZYj/g/DxFBmFCljKs x4Eja7oFDIE8rdVqbNL1qeiaKATS2AkmCTFkopa2ovJ9QaSh20oMsQNsKR0Gopjo SoNB9TrlsxbMC34NEdx5uPgasfnTqFXmScfMgq4zsPScp8Rk7L4gBWcmO0bsFeJ/ QZmst2d60RWfA8kMDrrZ5KWY0wULPtmw1dNk9WXgeLI7TqGipuZIvx93DXM0Plqg as/gm2vJxmTwCYonTtpl1WtJJvVeozT6lMAeXAUlEzvP1Wkxp15BOrf+K+8+Uvir sDTtMmGidR4GiHCJy2WxTF6YQTpvegF1plb17CejzeFeqQ+UVjEYpYY2VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0jq9AHV7UUgVkEkP4us8mgSNRRMB8GA1UdIwQY MBaAFKkCAKAADfXYRbnbKE0KLb7mdsWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMt NThmNTc0NDk1YmI4LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMtNThmNTc0NDk1YmI4 LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0DLGcrp fHIwrvOZUVvWZ21ivb6ke9SyjlLxjdLfzZM8CJhKiS+00s4dH753VrRlbYdGUjRq OlS+1xxunor8wj+t1wp4moKwb9ntcnKLBxGhhyl55IVZSuTilvZ0ZVRGIrO0AvZb 4N5iiplkHaw1n32e24Zrp9EXSepqtIxYC3W8YUeQmny9gM7AzsoNT2vJebchoKpq MfeG7hNKlOxB4krNLfrgkx9BLjHST+PAJrq/knzLlhl7ennkkNkKhiGBllXiJOiG WqXiafHQ3kbh9vdlpJ7SEJmaqBLyFcObvFDqHClsge+SnwUl3Sthi5pyIg4/o1zA DOaHqPyAm3nLFQ== -----END CERTIFICATE-----Generated at Sun Jan 25 05:41:38 2026 by rpki-client