This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json) Hash identifier: mjv7tY6yD720v1EliGTZKukuQ/nWpyNT7UoxurebQ+U= Subject key identifier: AE:EB:17:1E:83:A8:20:A5:F4:CB:14:F2:AC:53:C2:0A:E1:AC:12:C0 Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54 Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54 Certificate serial: 019BF3F488F705C8F76BF1F53D643DC063F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 07:00:47 +0000 Manifest this update: Sun 25 Jan 2026 07:00:47 +0000 Manifest next update: Mon 26 Jan 2026 07:00:47 +0000 Files and hashes: 1: e6rt8CL4Tt23u6mnF3HX9gILLdw.roa (hash: 0VKltNMP0fVwSJth+lSOjHYVHCR+JxiPMU1thfnFsLc=) 2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: VDjnNrez0xqXjvz4EgqHH81V+GNs1wYMJ22evfVoMX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:88:f7:05:c8:f7:6b:f1:f5:3d:64:3d:c0:63:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54 Validity Not Before: Jan 25 07:00:47 2026 GMT Not After : Jan 26 07:00:47 2026 GMT Subject: CN=aeeb171e83a820a5f4cb14f2ac53c20ae1ac12c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fb:ec:48:4f:e8:83:06:7d:cd:ca:71:82:22: bf:6f:45:77:e1:c4:33:b2:6b:95:b0:1f:bc:e8:87: 7b:65:90:ec:35:a7:80:77:00:01:9d:86:1e:8e:42: 6a:e7:d3:e4:4a:6f:ed:a9:e5:f6:f4:dc:db:14:1b: 30:b1:77:ed:cd:d2:b3:a8:33:a0:a1:1c:aa:5a:36: 9c:38:67:98:3f:e5:b3:85:22:ba:a0:2e:0c:4b:99: 9a:1c:09:f4:56:29:66:69:6f:a7:9e:cb:27:31:d9: 54:ff:c7:2f:40:a7:09:11:09:1b:72:d9:7d:1e:c5: dc:e6:cf:ea:b9:e0:44:45:5a:61:39:34:ab:11:89: 8d:bd:6f:bc:9a:af:d4:99:75:6b:54:3e:99:39:fa: fa:3f:b7:c6:8b:fc:5b:7a:dc:36:bd:f9:f8:b9:6a: 55:51:d6:ac:78:93:4f:e0:41:74:19:f4:8f:0b:ca: a0:91:74:87:2d:dc:ff:72:7e:a0:7e:ab:50:97:32: 85:eb:b4:2a:d5:9d:50:99:83:d8:e9:a4:f2:37:36: cf:76:12:d9:3f:74:1d:37:50:cd:40:b0:2f:db:25: 4d:cd:e3:cc:db:18:f9:b3:f4:ba:7d:b0:cb:b4:73: f7:82:68:eb:a8:30:39:83:fe:37:45:15:c8:ef:81: f1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EB:17:1E:83:A8:20:A5:F4:CB:14:F2:AC:53:C2:0A:E1:AC:12:C0 X509v3 Authority Key Identifier: keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:49:dd:96:b5:3e:a9:67:f5:20:04:f4:32:09:a2:41:fa:e3: 07:f7:20:26:e5:17:20:34:14:93:78:0d:f6:cf:19:de:bf:94: eb:27:71:f7:ab:fc:b7:91:cf:9a:9d:2c:28:90:8f:93:39:b2: 05:e8:fc:f3:8c:13:5e:70:ee:a4:a9:11:b7:e6:21:a0:69:ce: 64:22:dd:d9:c9:73:e8:3c:71:6a:25:a4:12:2a:68:b7:26:c2: 4d:dd:c3:d7:3f:ae:9f:ac:67:0c:60:cb:12:7e:a4:ff:88:45: db:b8:d3:88:a4:59:30:ae:ce:91:53:77:2d:2d:75:53:e6:98: 57:7e:54:f9:13:db:37:33:e8:ce:a8:44:9c:9d:9f:10:3a:d6: f9:22:1d:16:bf:00:94:66:4e:38:ec:90:0d:75:ae:8b:f1:2b: 27:7f:d9:81:41:86:64:56:be:c3:4e:34:45:d4:c8:60:d1:8b: e5:23:9b:68:17:ee:c6:05:cb:5e:b1:a5:2e:4d:99:64:7e:02: d5:df:5f:69:2b:89:ba:e1:2d:69:c9:28:bf:be:dc:b5:9b:d2: 96:13:62:63:8a:7e:19:43:aa:2b:7a:f4:a6:1d:ed:39:60:e7: 4d:59:3b:88:e2:df:e3:2c:96:76:c6:fd:64:8f:12:c3:72:95: 53:b8:42:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9Ij3Bcj3a/H1PWQ9wGPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDNlMmIxMmY0NzkxOTgyOTRmYWY2MGM2ZTM2YTBhMWI3 YmZkNTQwHhcNMjYwMTI1MDcwMDQ3WhcNMjYwMTI2MDcwMDQ3WjAzMTEwLwYDVQQD EyhhZWViMTcxZTgzYTgyMGE1ZjRjYjE0ZjJhYzUzYzIwYWUxYWMxMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fvsSE/ogwZ9zcpxgiK/b0V34cQz smuVsB+86Id7ZZDsNaeAdwABnYYejkJq59PkSm/tqeX29NzbFBswsXftzdKzqDOg oRyqWjacOGeYP+WzhSK6oC4MS5maHAn0VilmaW+nnssnMdlU/8cvQKcJEQkbctl9 HsXc5s/queBERVphOTSrEYmNvW+8mq/UmXVrVD6ZOfr6P7fGi/xbetw2vfn4uWpV UdaseJNP4EF0GfSPC8qgkXSHLdz/cn6gfqtQlzKF67Qq1Z1QmYPY6aTyNzbPdhLZ P3QdN1DNQLAv2yVNzePM2xj5s/S6fbDLtHP3gmjrqDA5g/43RRXI74HxCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7rFx6DqCCl9MsU8qxTwgrhrBLAMB8GA1UdIwQY MBaAFKvT4rEvR5GYKU+vYMbjagobe/1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEt OTk3ZjQ3YWI3ZGYyLzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEtOTk3ZjQ3YWI3ZGYy LzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0ndlrU+ qWf1IAT0MgmiQfrjB/cgJuUXIDQUk3gN9s8Z3r+U6ydx96v8t5HPmp0sKJCPkzmy Bej884wTXnDupKkRt+YhoGnOZCLd2clz6DxxaiWkEipotybCTd3D1z+un6xnDGDL En6k/4hF27jTiKRZMK7OkVN3LS11U+aYV35U+RPbNzPozqhEnJ2fEDrW+SIdFr8A lGZOOOyQDXWui/ErJ3/ZgUGGZFa+w040RdTIYNGL5SObaBfuxgXLXrGlLk2ZZH4C 1d9faSuJuuEtackov77ctZvSlhNiY4p+GUOqK3r0ph3tOWDnTVk7iOLf4yyWdsb9 ZI8Sw3KVU7hCgA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:56 2026 by rpki-client