This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json) Hash identifier: kSsZUAm2nmE+bpsIO7xcGXKzIugCcyY/Prg8ISG47r8= Subject key identifier: 2B:02:BB:0C:6A:3C:77:33:08:C1:F5:0C:B7:4C:9F:9E:3F:82:49:5E Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27 Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027 Certificate serial: 019BF49934EFD198CB2B956F381C383D981E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft Manifest number: 0F75 Signing time: Sun 25 Jan 2026 10:00:39 +0000 Manifest this update: Sun 25 Jan 2026 10:00:39 +0000 Manifest next update: Mon 26 Jan 2026 10:00:39 +0000 Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: /aZDZIb8nEDU6tuNppI1dnvFn9PmsXBPf+09dCh3vls=) 2: v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa (hash: XiQ/nHqmOBxj0EoQgjKCVpu4MAjbfP9RThmf0ShdsEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:34:ef:d1:98:cb:2b:95:6f:38:1c:38:3d:98:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2abab75e746db1ecaa998759900399485093027 Validity Not Before: Jan 25 10:00:39 2026 GMT Not After : Jan 26 10:00:39 2026 GMT Subject: CN=2b02bb0c6a3c773308c1f50cb74c9f9e3f82495e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:99:6b:fa:f3:97:f6:b7:20:93:1f:0e:78: 42:4b:a9:05:69:89:89:bc:6a:39:a2:4f:0d:ee:ba: 1a:6a:59:6c:7f:c6:d3:9f:05:9b:95:ee:87:85:04: cd:e1:c7:47:05:5b:2b:d6:22:c9:84:19:ce:e7:b9: 65:43:b2:44:51:be:a7:1a:4e:21:f1:fa:2c:bf:e6: 76:09:75:5b:67:ee:bc:3a:5b:a7:bc:d1:33:da:f0: d3:af:ef:a1:52:2a:00:6a:30:82:94:e3:04:1e:22: 8f:e1:16:e9:a8:73:50:ec:be:8b:97:57:ad:19:92: 0d:78:9b:8f:72:63:b2:16:7f:ba:f4:4f:f4:65:24: e5:eb:2c:ee:02:ab:41:a2:d0:e6:00:07:ce:02:3c: 91:81:35:c9:fa:01:4d:51:22:d6:64:c4:0e:c7:1c: 77:4d:b9:c5:31:be:12:01:bc:90:b4:e6:a4:bc:7e: 11:5f:c0:06:08:b8:1f:b9:c1:0c:59:ba:9e:a0:80: ce:4e:ce:3f:ab:d6:56:5f:09:d4:42:49:67:d9:bc: ad:6e:77:7d:1f:d1:3f:6e:c1:52:b9:ca:ae:60:27: ae:e7:a0:03:06:35:34:a8:5f:52:b5:1b:ad:b7:44: 31:9f:b5:18:85:64:d7:20:a7:59:95:1f:69:8e:a3: 22:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:02:BB:0C:6A:3C:77:33:08:C1:F5:0C:B7:4C:9F:9E:3F:82:49:5E X509v3 Authority Key Identifier: keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:57:31:56:40:e8:f1:46:c1:36:96:8b:cb:33:f6:03:66:a9: 26:16:49:93:95:fa:2f:88:f3:64:0d:55:ee:8a:8c:58:43:4a: c6:29:d8:c8:be:b1:3c:d3:67:73:db:84:e2:6e:87:68:ca:3c: 28:08:9d:59:f4:94:95:05:33:6b:fc:e4:d7:97:1f:e2:60:da: 09:3a:b3:db:ed:1f:d9:ae:7f:31:59:11:23:20:87:fc:e4:fc: 37:dc:e9:a8:a8:3f:3a:3d:bd:9a:98:bf:a8:e1:27:52:98:a4: aa:35:29:59:c9:35:c3:0e:b5:51:37:1a:fc:b0:40:1b:2b:b8: da:d8:db:0d:3f:45:e5:73:6f:66:21:e1:6b:dd:ba:cc:c3:83: 60:4c:e4:a1:16:5c:96:b3:b1:1b:66:59:3d:bc:69:8d:c7:f7: bf:4f:55:5e:e3:c8:d1:71:3d:de:9f:b4:24:45:55:0a:f9:4e: 2e:2a:07:ac:32:f4:9c:e4:20:73:96:03:23:58:e3:96:22:52: 01:60:f9:e1:9c:92:b1:3c:9d:a7:9c:8d:04:ed:69:7d:c9:b1: 32:cf:48:f0:7d:eb:35:97:45:af:f3:e0:5b:f0:a3:06:82:ad: bc:55:13:6d:e3:95:0d:fd:33:05:4d:9e:4b:f3:53:f1:1a:e6: e5:a0:7e:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mTTv0ZjLK5VvOBw4PZgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYWJhYjc1ZTc0NmRiMWVjYWE5OTg3NTk5MDAzOTk0ODUw OTMwMjcwHhcNMjYwMTI1MTAwMDM5WhcNMjYwMTI2MTAwMDM5WjAzMTEwLwYDVQQD EygyYjAyYmIwYzZhM2M3NzMzMDhjMWY1MGNiNzRjOWY5ZTNmODI0OTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdKZa/rzl/a3IJMfDnhCS6kFaYmJ vGo5ok8N7roaallsf8bTnwWble6HhQTN4cdHBVsr1iLJhBnO57llQ7JEUb6nGk4h 8fosv+Z2CXVbZ+68OlunvNEz2vDTr++hUioAajCClOMEHiKP4RbpqHNQ7L6Ll1et GZINeJuPcmOyFn+69E/0ZSTl6yzuAqtBotDmAAfOAjyRgTXJ+gFNUSLWZMQOxxx3 TbnFMb4SAbyQtOakvH4RX8AGCLgfucEMWbqeoIDOTs4/q9ZWXwnUQkln2bytbnd9 H9E/bsFSucquYCeu56ADBjU0qF9StRutt0Qxn7UYhWTXIKdZlR9pjqMi4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsCuwxqPHczCMH1DLdMn54/gkleMB8GA1UdIwQY MBaAFNKrq3XnRtseyqmYdZkAOZSFCTAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQt NTk1YWRjNWJmZDc0LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQtNTk1YWRjNWJmZDc0 LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFcxVkDo 8UbBNpaLyzP2A2apJhZJk5X6L4jzZA1V7oqMWENKxinYyL6xPNNnc9uE4m6HaMo8 KAidWfSUlQUza/zk15cf4mDaCTqz2+0f2a5/MVkRIyCH/OT8N9zpqKg/Oj29mpi/ qOEnUpikqjUpWck1ww61UTca/LBAGyu42tjbDT9F5XNvZiHha926zMODYEzkoRZc lrOxG2ZZPbxpjcf3v09VXuPI0XE93p+0JEVVCvlOLioHrDL0nOQgc5YDI1jjliJS AWD54ZySsTydp5yNBO1pfcmxMs9I8H3rNZdFr/PgW/CjBoKtvFUTbeOVDf0zBU2e S/NT8Rrm5aB+1g== -----END CERTIFICATE-----Generated at Sun Jan 25 17:05:40 2026 by rpki-client