This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json) Hash identifier: wMgoIBCDZl8WH/mkghtqNEwqkBRr3E5A031LzctDZW0= Subject key identifier: E6:33:6E:0F:6A:9E:02:AA:D1:15:8E:1B:6E:4A:13:67:95:96:56:DC Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88 Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88 Certificate serial: 019BF6879DBB9225C6574F6E37B5AC86D3FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft Manifest number: 0ECF Signing time: Sun 25 Jan 2026 19:00:41 +0000 Manifest this update: Sun 25 Jan 2026 19:00:41 +0000 Manifest next update: Mon 26 Jan 2026 19:00:41 +0000 Files and hashes: 1: 0rfYrVviZUVYPptqvM07XCjMZN8.roa (hash: NsAvwSlgjtFhEFUQcFrnr4l17cyyPI73mz93IQlKjBw=) 2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: 9GZlq68Cm4rril7QB30ZieujVDRHw8yglRycV+N6g7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:9d:bb:92:25:c6:57:4f:6e:37:b5:ac:86:d3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88 Validity Not Before: Jan 25 19:00:41 2026 GMT Not After : Jan 26 19:00:41 2026 GMT Subject: CN=e6336e0f6a9e02aad1158e1b6e4a1367959656dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:17:40:1e:88:94:98:43:64:0f:47:43:14:49: e5:df:01:a3:e4:7a:6b:29:ac:04:32:47:ca:26:56: 3c:a6:7e:71:7b:f2:e6:a8:cd:f7:98:60:ad:a8:88: 8c:2e:e5:47:72:ab:37:31:c0:81:ab:6a:78:e9:14: 4c:97:93:4b:a1:ef:cf:a8:8d:07:93:52:20:02:1e: d4:1e:8a:91:ec:00:67:3f:fb:e1:e8:9e:6c:dd:fd: c1:13:d7:28:12:66:a6:6b:af:cd:75:e0:e9:f7:c5: c8:18:36:a0:4f:73:9c:ec:6d:ab:6d:af:44:62:83: db:7f:0b:de:ee:38:3f:63:de:da:9c:33:58:04:a2: 5e:5f:17:e3:27:22:5e:53:a4:7a:45:d9:18:5d:5d: 24:71:df:52:60:b8:59:bd:f6:c0:c2:86:e9:ba:da: d5:1d:84:53:26:80:63:ec:e6:98:09:21:37:cd:de: de:01:1c:19:25:8d:1f:e9:f1:70:47:89:e2:8a:38: d7:fd:0b:b3:0c:4e:d8:53:f6:7a:08:f8:e1:39:e5: ca:87:a4:de:fd:00:a4:44:ca:91:b7:25:08:4e:bb: 86:34:57:1f:d8:2a:b2:e0:5b:0f:d0:06:6f:e2:2a: 26:80:7d:89:0f:94:bb:ea:81:47:ba:fe:c4:1d:e2: b4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:33:6E:0F:6A:9E:02:AA:D1:15:8E:1B:6E:4A:13:67:95:96:56:DC X509v3 Authority Key Identifier: keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6c:af:a4:a4:23:b4:0e:d3:a5:d4:f4:3d:0e:67:89:27:da: 7c:53:c9:35:02:e2:c6:00:cd:13:f7:07:96:8d:fe:5b:d0:e1: e4:e2:62:3e:b9:f3:53:85:96:10:ae:56:f2:37:0f:16:f2:97: c9:14:09:16:5e:1e:3e:d6:b4:38:cb:fd:f6:c1:83:f1:9a:23: f3:a6:84:e4:9c:42:59:44:cb:79:4f:28:26:8e:86:03:1a:90: e8:4f:db:52:14:8d:f9:f5:47:00:81:e4:a1:2d:22:ea:50:d8: 47:d5:ca:d7:6c:d9:79:0e:62:1f:9b:c8:3f:35:49:65:5a:a8: c1:56:89:70:31:a5:45:08:be:c1:e5:34:cf:cd:5e:24:e8:43: 67:fa:d6:dd:06:ae:f3:b9:59:0e:22:ca:a1:52:af:77:23:46: eb:1c:df:a9:3b:37:04:f0:da:6d:ed:1e:85:db:6f:ed:05:01: 86:c0:aa:b2:9f:e8:57:b0:5f:f7:e7:c6:f4:2c:7e:29:e3:bc: ca:fe:32:1f:d3:4d:b0:f8:df:3e:ce:a3:ce:93:53:07:a9:7e: 03:d3:72:4e:89:af:0f:85:8b:c3:d8:f5:36:2c:88:76:45:42: 0b:69:b9:99:af:7e:40:a8:cb:7d:88:d6:7f:44:97:03:27:7e: 21:b6:1c:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h527kiXGV09uN7WshtP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTY5OWE1YmM2NDg3YmQyZjE3NDlkMTMzZmNhMmUzN2Zk NGRhODgwHhcNMjYwMTI1MTkwMDQxWhcNMjYwMTI2MTkwMDQxWjAzMTEwLwYDVQQD EyhlNjMzNmUwZjZhOWUwMmFhZDExNThlMWI2ZTRhMTM2Nzk1OTY1NmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhdAHoiUmENkD0dDFEnl3wGj5Hpr KawEMkfKJlY8pn5xe/LmqM33mGCtqIiMLuVHcqs3McCBq2p46RRMl5NLoe/PqI0H k1IgAh7UHoqR7ABnP/vh6J5s3f3BE9coEmama6/NdeDp98XIGDagT3Oc7G2rba9E YoPbfwve7jg/Y97anDNYBKJeXxfjJyJeU6R6RdkYXV0kcd9SYLhZvfbAwobputrV HYRTJoBj7OaYCSE3zd7eARwZJY0f6fFwR4niijjX/QuzDE7YU/Z6CPjhOeXKh6Te /QCkRMqRtyUITruGNFcf2Cqy4FsP0AZv4iomgH2JD5S76oFHuv7EHeK0QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYzbg9qngKq0RWOG25KE2eVllbcMB8GA1UdIwQY MBaAFKgWmaW8ZIe9LxdJ0TP8ouN/1NqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mZDc0OTMtNzU5OS00M2I2LTg1NTkt Nzg3YzA2MzJjZmVhLzEvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mZDc0OTMtNzU5OS00M2I2LTg1NTktNzg3YzA2MzJjZmVh LzEvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmyvpKQj tA7TpdT0PQ5niSfafFPJNQLixgDNE/cHlo3+W9Dh5OJiPrnzU4WWEK5W8jcPFvKX yRQJFl4ePta0OMv99sGD8Zoj86aE5JxCWUTLeU8oJo6GAxqQ6E/bUhSN+fVHAIHk oS0i6lDYR9XK12zZeQ5iH5vIPzVJZVqowVaJcDGlRQi+weU0z81eJOhDZ/rW3Qau 87lZDiLKoVKvdyNG6xzfqTs3BPDabe0ehdtv7QUBhsCqsp/oV7Bf9+fG9Cx+KeO8 yv4yH9NNsPjfPs6jzpNTB6l+A9NyTomvD4WLw9j1NiyIdkVCC2m5ma9+QKjLfYjW f0SXAyd+IbYcAg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:50 2026 by rpki-client