This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json) Hash identifier: Q1Cm84nrgIzqpGqwKS2wRQwKy8FyT/AxH6el5xl4514= Subject key identifier: 92:BA:16:08:4D:3D:2A:AD:46:04:72:90:00:9C:E7:CB:ED:72:02:B3 Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Certificate serial: 019BF4D091912C1C36C71B106E36E32B730D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft Manifest number: 145B Signing time: Sun 25 Jan 2026 11:01:07 +0000 Manifest this update: Sun 25 Jan 2026 11:01:07 +0000 Manifest next update: Mon 26 Jan 2026 11:01:07 +0000 Files and hashes: 1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: ZfvlUQ4i5wHKiitK2NsKr3CmjSu/mkUYUsbuTinPnVU=) 2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=) 3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=) 4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=) 5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=) 6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=) 7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:91:91:2c:1c:36:c7:1b:10:6e:36:e3:2b:73:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Validity Not Before: Jan 25 11:01:07 2026 GMT Not After : Jan 26 11:01:07 2026 GMT Subject: CN=92ba16084d3d2aad46047290009ce7cbed7202b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:e7:93:5c:f8:9f:b9:e8:f1:f0:46:7b:98: b5:7d:67:6d:45:64:56:68:76:34:03:d0:47:e4:a1: fe:16:c6:ad:d8:82:f7:76:2a:39:78:f8:e7:2c:cf: 53:f3:20:8c:2f:c3:92:88:c1:b6:24:8b:6c:98:33: 02:8f:88:3a:0f:ab:d0:43:4f:cf:9a:cf:ef:f1:d7: e5:17:86:5e:ed:61:22:0e:a4:f9:8f:d1:02:66:c3: 24:f0:6e:6b:17:5b:cb:f2:25:bf:75:49:bb:06:c9: b7:d6:d7:22:28:67:55:d5:b1:c8:af:85:02:89:6a: 5e:a8:7d:45:c4:6c:f3:9e:06:38:59:8d:9f:9e:ac: 26:e8:54:b1:81:b5:f4:89:73:1b:4b:ef:fc:ab:f3: de:3b:9c:cc:e9:f8:22:4e:9f:f9:2d:4f:aa:01:49: aa:44:23:68:30:f2:fa:0f:a9:12:93:a7:7b:b4:6a: 24:72:ad:96:1e:59:2b:da:d5:28:6e:8c:b3:f7:d8: 57:81:21:3b:eb:a4:41:35:1e:d6:bd:53:d1:d0:e7: b4:e1:e9:69:d3:2c:3c:1b:5d:98:9d:05:83:23:95: d2:79:c5:2a:73:68:86:4b:63:c2:06:8a:98:e3:0c: c5:93:23:44:9e:c8:44:ff:da:6e:00:3f:60:fe:ab: a2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BA:16:08:4D:3D:2A:AD:46:04:72:90:00:9C:E7:CB:ED:72:02:B3 X509v3 Authority Key Identifier: keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:01:e3:67:a3:56:a3:f1:79:9b:22:04:ec:1c:ab:e4:eb:8b: d7:df:85:d9:d3:7d:0c:3d:be:cc:01:6c:ae:d2:0a:3f:77:8c: 5c:8e:bd:85:7f:15:52:7f:17:43:e5:9e:94:4f:07:61:26:73: 33:e6:ec:22:7e:cf:c9:b7:f1:af:37:50:71:55:ed:bc:1d:8a: f1:67:d5:b8:49:65:25:99:22:78:1c:93:d5:1b:94:7e:5f:3f: fa:3d:fb:8f:b2:d7:cd:3c:81:e1:34:a5:66:d7:cd:cf:30:af: 92:ab:af:7b:6e:f4:e2:29:46:24:22:f5:34:79:e1:81:2f:6d: 35:d3:0a:e6:18:d2:75:37:6a:f2:5e:e3:13:25:54:e1:85:c2: 11:f4:94:db:e3:d1:cd:d4:bb:a0:9b:92:a5:bf:e2:7e:22:4b: 22:95:af:0c:9b:53:ca:af:3c:d4:01:36:ab:26:47:ca:53:ba: ac:d9:6d:85:59:34:0f:56:d5:3b:ec:76:b3:52:36:27:d2:3f: 9b:fc:b7:d4:d8:92:41:1c:ef:76:ac:a8:58:93:c0:ee:e0:a4: 50:d8:71:90:ce:62:9d:3b:3c:fd:a5:77:dc:d2:04:ae:cc:23: 6a:f0:b2:18:5c:64:c7:75:c7:6f:47:82:9b:9b:be:d1:11:95: 7e:b8:45:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00JGRLBw2xxsQbjbjK3MNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz ZWY0NmUwHhcNMjYwMTI1MTEwMTA3WhcNMjYwMTI2MTEwMTA3WjAzMTEwLwYDVQQD Eyg5MmJhMTYwODRkM2QyYWFkNDYwNDcyOTAwMDljZTdjYmVkNzIwMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqvnk1z4n7no8fBGe5i1fWdtRWRW aHY0A9BH5KH+Fsat2IL3dio5ePjnLM9T8yCML8OSiMG2JItsmDMCj4g6D6vQQ0/P ms/v8dflF4Ze7WEiDqT5j9ECZsMk8G5rF1vL8iW/dUm7Bsm31tciKGdV1bHIr4UC iWpeqH1FxGzzngY4WY2fnqwm6FSxgbX0iXMbS+/8q/PeO5zM6fgiTp/5LU+qAUmq RCNoMPL6D6kSk6d7tGokcq2WHlkr2tUoboyz99hXgSE766RBNR7WvVPR0Oe04elp 0yw8G12YnQWDI5XSecUqc2iGS2PCBoqY4wzFkyNEnshE/9puAD9g/qui7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJK6FghNPSqtRgRykACc58vtcgKzMB8GA1UdIwQY MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt Yjk1YjA4YTIzYWUxLzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwHjZ6NW o/F5myIE7Byr5OuL19+F2dN9DD2+zAFsrtIKP3eMXI69hX8VUn8XQ+WelE8HYSZz M+bsIn7PybfxrzdQcVXtvB2K8WfVuEllJZkieByT1RuUfl8/+j37j7LXzTyB4TSl ZtfNzzCvkquve2704ilGJCL1NHnhgS9tNdMK5hjSdTdq8l7jEyVU4YXCEfSU2+PR zdS7oJuSpb/ifiJLIpWvDJtTyq881AE2qyZHylO6rNlthVk0D1bVO+x2s1I2J9I/ m/y31NiSQRzvdqyoWJPA7uCkUNhxkM5inTs8/aV33NIErswjavCyGFxkx3XHb0eC m5u+0RGVfrhFEg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:49:19 2026 by rpki-client