This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json) Hash identifier: 9uoePX+E9Ui3OQAHsoJppAHOtPjgM6k3aq8Ef9YblQ8= Subject key identifier: 4A:AC:87:89:A1:C4:03:83:68:EA:28:AC:3D:58:8A:57:75:A3:F1:EB Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8 Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8 Certificate serial: 019BF91B550A8FA31D1727FE1C1F1E296492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft Manifest number: 177F Signing time: Mon 26 Jan 2026 07:01:16 +0000 Manifest this update: Mon 26 Jan 2026 07:01:16 +0000 Manifest next update: Tue 27 Jan 2026 07:01:16 +0000 Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: nMaFDx+Rb1FTVRtU7F6CpJ0Ppe9T37yAxJxptm3Czrs=) 2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:55:0a:8f:a3:1d:17:27:fe:1c:1f:1e:29:64:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8 Validity Not Before: Jan 26 07:01:16 2026 GMT Not After : Jan 27 07:01:16 2026 GMT Subject: CN=4aac8789a1c4038368ea28ac3d588a5775a3f1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:32:88:ab:51:f9:89:d6:e0:34:ee:c3:dd: b3:47:76:e8:d5:6a:6f:2e:a8:a6:d6:7a:e4:7b:ef: 46:3d:dc:fa:b2:28:2a:d3:3b:03:af:db:2d:bc:10: f5:c4:66:45:bc:c1:ab:a9:d6:a5:9d:99:ba:14:56: 71:b9:07:2c:28:e9:bf:b1:9f:e8:a9:a6:d0:07:90: d8:83:fe:3b:31:c4:11:36:ab:c5:a6:9d:d8:93:70: e4:2c:d1:93:89:72:e0:20:56:8d:2e:aa:f9:7a:9b: d7:6c:1d:61:0d:dd:cb:1d:1f:d0:af:97:6b:e8:23: 3a:e3:4e:f1:13:c9:74:cf:2c:3c:e6:41:7a:af:6b: 37:63:c6:93:9c:1d:19:74:59:7f:11:ae:42:aa:27: 3c:53:ee:af:09:47:e1:99:86:3e:a4:7f:14:eb:65: 3b:fa:40:d9:52:8e:c6:5a:5f:06:29:cc:b9:4a:8a: 76:e5:c0:c8:c0:48:c7:a8:95:c2:e5:e8:df:ec:3f: a5:b3:f3:a1:b8:dc:81:de:05:8b:3c:cc:e4:0c:6b: e5:84:d7:63:b6:9e:11:07:67:97:3b:de:ca:d5:0e: 71:bb:89:76:d3:d9:36:e3:2f:6b:71:6a:91:14:a8: 5c:f2:fc:f9:74:18:89:82:4a:a4:f5:98:a8:2f:02: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AC:87:89:A1:C4:03:83:68:EA:28:AC:3D:58:8A:57:75:A3:F1:EB X509v3 Authority Key Identifier: keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:af:9d:bb:ad:82:f1:19:5d:9a:39:b4:1d:2d:06:db:ae:39: 46:e1:e6:b4:ee:9d:55:f7:28:4c:7b:ef:13:ef:35:da:b6:99: 49:df:64:4f:89:9a:0c:61:ed:29:8a:07:ad:71:7c:36:33:17: 73:31:f4:a6:e4:a2:a5:b8:f4:6d:83:10:64:fb:2f:82:aa:57: a4:04:33:1a:21:f4:26:c7:3a:c2:08:c7:24:ca:d7:81:8c:34: 86:eb:f5:e2:c3:e7:b0:bc:af:8b:58:c4:b3:b9:b7:fb:18:0c: a2:53:ee:f7:a0:88:0b:f4:46:b4:b3:7b:20:59:d8:bf:5a:bd: 33:d3:00:15:e2:19:1b:aa:69:1b:91:76:59:7c:d2:53:27:92: 4e:d4:8b:88:78:2a:3d:88:db:a2:08:d3:74:26:36:17:0c:c7: d4:de:81:aa:63:3c:da:f4:e7:a5:b2:f8:f0:7f:30:1a:db:e5: 2a:c0:59:d4:41:d4:dd:21:e5:92:eb:e1:03:1f:e8:7f:03:de: b3:87:50:73:6d:9f:ff:b7:c3:a0:0f:70:d9:d5:a8:02:fe:44: d5:6f:25:11:44:81:5f:ba:cf:07:5f:ce:c0:e9:32:77:38:3f: a3:7d:97:59:f6:4e:bf:d2:b9:6a:88:d9:fd:c4:ea:dd:f0:de: 1a:ba:e3:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G1UKj6MdFyf+HB8eKWSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5M2UzN2ViOWNiMTk4MzI1ZDY1NjY3MzI4OTI1OGQyOGVi OWYzYjgwHhcNMjYwMTI2MDcwMTE2WhcNMjYwMTI3MDcwMTE2WjAzMTEwLwYDVQQD Eyg0YWFjODc4OWExYzQwMzgzNjhlYTI4YWMzZDU4OGE1Nzc1YTNmMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphUyiKtR+YnW4DTuw92zR3bo1Wpv Lqim1nrke+9GPdz6sigq0zsDr9stvBD1xGZFvMGrqdalnZm6FFZxuQcsKOm/sZ/o qabQB5DYg/47McQRNqvFpp3Yk3DkLNGTiXLgIFaNLqr5epvXbB1hDd3LHR/Qr5dr 6CM6407xE8l0zyw85kF6r2s3Y8aTnB0ZdFl/Ea5Cqic8U+6vCUfhmYY+pH8U62U7 +kDZUo7GWl8GKcy5Sop25cDIwEjHqJXC5ejf7D+ls/OhuNyB3gWLPMzkDGvlhNdj tp4RB2eXO97K1Q5xu4l209k24y9rcWqRFKhc8vz5dBiJgkqk9ZioLwIJXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqsh4mhxAODaOoorD1Yild1o/HrMB8GA1UdIwQY MBaAFKk+N+ucsZgyXWVmcyiSWNKOufO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNDYxZDItMjE4Mi00MDhlLTg2ZGYt MzlmNzUzNzU3ODQ4LzEvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wNDYxZDItMjE4Mi00MDhlLTg2ZGYtMzlmNzUzNzU3ODQ4 LzEvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6+du62C 8Rldmjm0HS0G2645RuHmtO6dVfcoTHvvE+812raZSd9kT4maDGHtKYoHrXF8NjMX czH0puSipbj0bYMQZPsvgqpXpAQzGiH0Jsc6wgjHJMrXgYw0huv14sPnsLyvi1jE s7m3+xgMolPu96CIC/RGtLN7IFnYv1q9M9MAFeIZG6ppG5F2WXzSUyeSTtSLiHgq PYjbogjTdCY2FwzH1N6BqmM82vTnpbL48H8wGtvlKsBZ1EHU3SHlkuvhAx/ofwPe s4dQc22f/7fDoA9w2dWoAv5E1W8lEUSBX7rPB1/OwOkydzg/o32XWfZOv9K5aojZ /cTq3fDeGrrjGw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:44 2026 by rpki-client