This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json) Hash identifier: OVQHogqnrQ/eSqcA2z0jtyaqRse0nm5jgO+RPvBKyDI= Subject key identifier: F4:A0:DE:06:0B:D3:BC:0D:E4:8A:E4:0C:FA:53:84:75:B5:68:20:D3 Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62 Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62 Certificate serial: 019BF318A3F208F4C9519638B5359A8D3CBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft Manifest number: 0A48 Signing time: Sun 25 Jan 2026 03:00:36 +0000 Manifest this update: Sun 25 Jan 2026 03:00:36 +0000 Manifest next update: Mon 26 Jan 2026 03:00:36 +0000 Files and hashes: 1: AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa (hash: XYjuOSawg9GbeUiAsIFDnNUeoKdfUJFTjZesq9ksMa4=) 2: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: gEhOQYAtQVm368QA/zbq+6IsdpGN/XIJz10W4Zh1WG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:a3:f2:08:f4:c9:51:96:38:b5:35:9a:8d:3c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62 Validity Not Before: Jan 25 03:00:36 2026 GMT Not After : Jan 26 03:00:36 2026 GMT Subject: CN=f4a0de060bd3bc0de48ae40cfa538475b56820d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:86:a8:c7:55:4e:25:3a:7c:00:f2:7e:a6:52: a9:66:61:5b:8d:70:13:ea:8c:1c:51:95:80:28:4e: 5d:3f:02:bc:3b:13:9e:97:ad:95:a4:a1:30:96:10: 42:6c:04:46:61:37:ab:60:d7:9a:c3:fd:b1:c7:f8: 46:ad:25:a1:03:e8:7d:30:29:c5:ac:ed:a9:8a:e5: 83:e4:08:ee:c0:d8:ae:76:8c:c0:42:58:9f:aa:41: 49:83:8b:3c:8e:c3:05:77:fd:8e:02:83:f4:db:c7: b6:29:33:b0:92:13:37:f3:9c:c5:87:00:91:60:e1: ef:c5:43:98:2f:82:51:67:4b:6e:0d:ae:3c:a0:05: 73:aa:05:55:96:50:26:9d:39:30:3e:d1:9c:5b:a7: 72:85:b1:4e:d2:6f:19:46:5e:bc:8b:fd:eb:37:fa: 52:ff:2c:99:c4:a7:73:79:62:f9:08:57:1d:26:61: 8d:ee:96:65:50:bd:ef:ef:b5:8e:70:ae:55:7b:f5: ba:b9:ab:64:56:34:16:e4:99:52:0d:0d:56:c7:5b: 20:f8:bd:a2:f2:b6:2c:7f:11:f2:1c:8a:e2:d3:2b: f5:19:75:66:6c:99:04:0f:28:cd:84:cc:21:03:8a: 9f:2a:85:b2:f7:53:90:ad:0f:67:51:14:90:e3:df: c6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A0:DE:06:0B:D3:BC:0D:E4:8A:E4:0C:FA:53:84:75:B5:68:20:D3 X509v3 Authority Key Identifier: keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ac:0c:94:a6:88:fa:31:86:4d:42:d9:35:2f:6f:2c:ae:f6: 52:fd:56:2c:1f:01:af:65:7c:23:4a:a2:90:af:b3:ab:8a:3f: c6:f9:8b:cf:8b:9d:f6:2d:6b:3c:0a:ee:a9:eb:66:4c:bf:7b: 9b:19:80:06:19:1d:03:fc:3a:ff:85:57:26:70:68:82:f8:d2: 98:89:51:6f:7c:41:7d:25:f2:56:11:36:68:a4:65:e1:1f:40: af:67:32:51:d0:8a:c4:2c:09:43:89:44:e6:7c:5d:55:b4:db: a2:83:a5:f5:bd:09:61:8f:a8:ea:2b:68:19:53:ea:b2:c0:39: 5a:a3:bf:b1:3a:0a:b0:ad:39:0b:4b:a4:bd:0f:73:85:c2:08: cb:f8:31:1d:b7:19:d8:f5:9a:0f:af:42:45:c0:15:86:e0:45: 86:5d:e9:32:0d:73:89:95:bf:f5:b6:a8:d2:5d:7c:6d:00:77: 1b:64:be:30:6f:1c:3f:0b:f1:2d:dc:99:1c:55:68:16:79:48: 3e:d2:b8:68:16:06:17:ce:b6:5f:00:d9:40:6a:b5:ad:92:49: c0:6b:94:7a:28:49:0c:a4:8d:ff:0a:19:d7:9e:c9:b4:25:5f: 7d:3e:5f:1b:3c:06:4f:d1:e7:62:c9:55:b5:84:69:a3:e8:1f: 77:f6:c3:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGKPyCPTJUZY4tTWajTy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmRiOWI4MGRmYjljOTU2NzhiMDdlZjJjOTUzZDYzMTA3 ZjVmNjIwHhcNMjYwMTI1MDMwMDM2WhcNMjYwMTI2MDMwMDM2WjAzMTEwLwYDVQQD EyhmNGEwZGUwNjBiZDNiYzBkZTQ4YWU0MGNmYTUzODQ3NWI1NjgyMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4aox1VOJTp8APJ+plKpZmFbjXAT 6owcUZWAKE5dPwK8OxOel62VpKEwlhBCbARGYTerYNeaw/2xx/hGrSWhA+h9MCnF rO2piuWD5AjuwNiudozAQlifqkFJg4s8jsMFd/2OAoP028e2KTOwkhM385zFhwCR YOHvxUOYL4JRZ0tuDa48oAVzqgVVllAmnTkwPtGcW6dyhbFO0m8ZRl68i/3rN/pS /yyZxKdzeWL5CFcdJmGN7pZlUL3v77WOcK5Ve/W6uatkVjQW5JlSDQ1Wx1sg+L2i 8rYsfxHyHIri0yv1GXVmbJkEDyjNhMwhA4qfKoWy91OQrQ9nURSQ49/GMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSg3gYL07wN5IrkDPpThHW1aCDTMB8GA1UdIwQY MBaAFKktubgN+5yVZ4sH7yyVPWMQf19iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDIt Y2I3YTVmZDFhYzQ3LzEvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDItY2I3YTVmZDFhYzQ3 LzEvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6wMlKaI +jGGTULZNS9vLK72Uv1WLB8Br2V8I0qikK+zq4o/xvmLz4ud9i1rPAruqetmTL97 mxmABhkdA/w6/4VXJnBogvjSmIlRb3xBfSXyVhE2aKRl4R9Ar2cyUdCKxCwJQ4lE 5nxdVbTbooOl9b0JYY+o6itoGVPqssA5WqO/sToKsK05C0ukvQ9zhcIIy/gxHbcZ 2PWaD69CRcAVhuBFhl3pMg1ziZW/9bao0l18bQB3G2S+MG8cPwvxLdyZHFVoFnlI PtK4aBYGF862XwDZQGq1rZJJwGuUeihJDKSN/woZ157JtCVffT5fGzwGT9HnYslV tYRpo+gfd/bDlg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:36:16 2026 by rpki-client