This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json) Hash identifier: D93r2In4Tmj2Hzxq4Q2rkq54Ycu7u4VQEM5tZYesNao= Subject key identifier: CD:F0:64:EF:0F:44:1D:64:4F:98:93:10:C2:98:84:FD:00:F9:42:FD Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07 Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07 Certificate serial: 019BF3BE1B2400F4B9DA6DA76105FF2AAD0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft Manifest number: 0287 Signing time: Sun 25 Jan 2026 06:01:20 +0000 Manifest this update: Sun 25 Jan 2026 06:01:20 +0000 Manifest next update: Mon 26 Jan 2026 06:01:20 +0000 Files and hashes: 1: 5-EJwRqi1XA3u9gFAcZ9njZ3ubQ.roa (hash: hFNKGoVbXoj2tJMUg9incrRV/V229/edfKbWOK21tzs=) 2: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: rMqhTU0lHuXnY2R8ZyGmu5ufQvs+XSGVcswvBzhO69M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:1b:24:00:f4:b9:da:6d:a7:61:05:ff:2a:ad:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07 Validity Not Before: Jan 25 06:01:20 2026 GMT Not After : Jan 26 06:01:20 2026 GMT Subject: CN=cdf064ef0f441d644f989310c29884fd00f942fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:46:1a:e4:73:c0:31:c5:15:76:06:0d:ba: bf:fd:ba:e6:43:e6:89:33:7a:1e:dd:e3:cd:c2:83: 10:0a:20:2a:0a:58:d2:61:47:69:e7:71:7a:db:75: 9b:7a:55:1b:41:05:c0:bf:87:78:72:49:52:23:48: 70:e3:bd:d1:fa:81:2c:9e:15:7f:47:4a:e5:f9:73: bc:ef:60:58:be:d4:7c:fb:0c:44:27:05:8f:ad:af: 66:21:6b:01:25:dc:c2:6f:09:78:0b:38:90:38:db: 98:1f:9d:2a:f7:46:e5:df:3a:b1:96:cb:2a:6a:af: ec:29:95:9e:7c:74:dc:d1:bb:c7:16:34:d9:d8:59: f8:c4:39:ac:ce:aa:87:ea:ce:46:dc:1d:0d:34:89: d7:f3:6f:65:fa:7b:96:b6:27:e5:1a:d2:a8:93:24: de:ce:0c:62:74:30:92:fd:0e:46:5e:5e:b7:ba:38: b4:6d:ac:38:23:95:2c:17:7f:71:6b:53:a7:c9:bf: 5b:21:06:21:db:a5:79:ae:db:cf:e6:26:c7:b7:ab: c0:54:7a:c3:43:02:d8:e2:76:77:f4:1c:ad:b7:bf: b8:74:a7:14:93:48:bd:bf:27:c6:78:6c:52:2f:b5: 5f:47:b7:06:a4:39:ae:6e:9f:79:a6:0c:94:23:af: e1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F0:64:EF:0F:44:1D:64:4F:98:93:10:C2:98:84:FD:00:F9:42:FD X509v3 Authority Key Identifier: keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:88:54:85:a7:94:38:dc:15:48:71:50:d2:02:c8:47:03:83: 17:8f:57:db:67:8a:2d:7e:2e:41:a5:30:ff:51:d6:dd:da:b9: 1a:14:51:68:a8:b4:3f:ef:df:83:3c:5a:7d:00:7d:24:90:da: f7:f5:17:c5:6a:aa:97:cd:08:60:3d:e3:97:81:25:d2:2b:3c: 1a:21:56:01:e2:a1:c9:f3:a2:04:b2:23:b7:3e:6b:76:e6:01: a0:53:5a:29:74:fe:5b:6d:59:a9:20:0f:92:f0:0f:47:ca:8b: a3:82:12:03:bb:da:3b:61:8b:d9:02:c3:15:33:2a:7c:c7:5b: c0:1d:2e:c8:50:46:d1:2d:3f:ae:74:f4:0c:ab:74:b3:c7:7d: 0a:0d:8c:a7:86:d1:db:65:5d:f2:12:6b:b1:0f:fb:73:ea:99: 67:6f:7e:ab:bf:32:d1:7d:ba:78:51:cf:44:6a:23:bb:69:02: 52:dc:7b:1a:3d:87:f4:a6:6b:3e:27:fd:31:a4:ae:b6:59:fb: 76:f5:4e:d6:64:af:11:8e:6d:93:f0:91:04:0c:20:ee:e4:c5: 0d:d4:58:e3:dd:76:56:81:7d:d7:e2:72:39:c6:3f:17:15:2d: 08:8f:a8:20:53:1d:11:66:91:28:55:cb:71:43:23:90:39:36: 1e:6d:81:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvhskAPS52m2nYQX/Kq0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2JmZDQyMGRiNWNhZWJhZGExYTIwNTVkODdiYzdkYTJi MDljMDcwHhcNMjYwMTI1MDYwMTIwWhcNMjYwMTI2MDYwMTIwWjAzMTEwLwYDVQQD EyhjZGYwNjRlZjBmNDQxZDY0NGY5ODkzMTBjMjk4ODRmZDAwZjk0MmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8pGGuRzwDHFFXYGDbq//brmQ+aJ M3oe3ePNwoMQCiAqCljSYUdp53F623WbelUbQQXAv4d4cklSI0hw473R+oEsnhV/ R0rl+XO872BYvtR8+wxEJwWPra9mIWsBJdzCbwl4CziQONuYH50q90bl3zqxlssq aq/sKZWefHTc0bvHFjTZ2Fn4xDmszqqH6s5G3B0NNInX829l+nuWtiflGtKokyTe zgxidDCS/Q5GXl63uji0baw4I5UsF39xa1Onyb9bIQYh26V5rtvP5ibHt6vAVHrD QwLY4nZ39Bytt7+4dKcUk0i9vyfGeGxSL7VfR7cGpDmubp95pgyUI6/hoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3wZO8PRB1kT5iTEMKYhP0A+UL9MB8GA1UdIwQY MBaAFKp7/UINtcrrraGiBV2HvH2isJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2Mt NzliNDA5YzFiZDM4LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2MtNzliNDA5YzFiZDM4 LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4hUhaeU ONwVSHFQ0gLIRwODF49X22eKLX4uQaUw/1HW3dq5GhRRaKi0P+/fgzxafQB9JJDa 9/UXxWqql80IYD3jl4El0is8GiFWAeKhyfOiBLIjtz5rduYBoFNaKXT+W21ZqSAP kvAPR8qLo4ISA7vaO2GL2QLDFTMqfMdbwB0uyFBG0S0/rnT0DKt0s8d9Cg2Mp4bR 22Vd8hJrsQ/7c+qZZ29+q78y0X26eFHPRGoju2kCUtx7Gj2H9KZrPif9MaSutln7 dvVO1mSvEY5tk/CRBAwg7uTFDdRY4912VoF91+JyOcY/FxUtCI+oIFMdEWaRKFXL cUMjkDk2Hm2B+g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:51 2026 by rpki-client