This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft File: qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json) Hash identifier: CGEnbr00GDM7P3PcsbkOuJ5M0KeD0omlKy+Z42P/Sgs= Subject key identifier: 4E:BA:B2:3A:AC:66:42:5F:C4:F2:C7:9D:A2:A9:FA:65:B5:8E:01:A1 Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e Certificate serial: 019BF5ABFE71882D31784D86F9C4FF6BD6B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft Manifest number: 0BB9 Signing time: Sun 25 Jan 2026 15:00:48 +0000 Manifest this update: Sun 25 Jan 2026 15:00:48 +0000 Manifest next update: Mon 26 Jan 2026 15:00:48 +0000 Files and hashes: 1: 9Q-wIj12he9wXDbL67TYYvZ_2cI.roa (hash: TjJ3yUQRLm+yE/F996Jy9BjBIBFcfqDfS+QMH9VjHSM=) 2: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (hash: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0=) 3: PIU7Zxr6WOBUfjTOxP66dy63XjE.roa (hash: h4a3tGn4XY5dyoqR5ywDpWw2ctrTMxmn2LdoBTK4oGk=) 4: fmZxjRZiqOQwHDt7j51f9SOA6RI.roa (hash: L9SLemKUDE99zwW/1qnnl1xaC8S5UDziumUBVKNLf1U=) 5: hzWUkbNBR4BJdeJ1_o3ZU9cZ3ew.roa (hash: inLNqatIBR7g5h8QpHPp8LrXvRaSA4dGEVg1gYl4btM=) 6: kQmmX2shYiBrgwj4WH6KjhEq6dk.roa (hash: 0WkUmsljE+3CRDhGKei4uM+g06ozmYAGysnQVZuM58Y=) 7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: cUwRDV28me1QsuzhQQd7C5qw9RqTMRuxUDrCNQoxtlA=) 8: rHk667_7e1f5CM1H6jMGDJQ1_rI.roa (hash: eJy0wY8fT6hZGfxYTUIN+SEKm4c/Wt9buTzlEZ5VOng=) 9: vzfccsFprMOY9JYnROqdf595jyk.roa (hash: 9XgNIgYKyBtoz7QowqkqXgsGwcOR4Db53f7gkwA+doE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:fe:71:88:2d:31:78:4d:86:f9:c4:ff:6b:d6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e Validity Not Before: Jan 25 15:00:48 2026 GMT Not After : Jan 26 15:00:48 2026 GMT Subject: CN=4ebab23aac66425fc4f2c79da2a9fa65b58e01a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:3f:84:9d:5c:16:9a:13:57:5e:03:fd:7b: fd:62:e1:4e:57:5d:0b:ef:93:6b:7b:fc:de:e5:0f: 98:0c:ce:33:6c:43:87:a2:e4:4e:b7:56:9f:37:e5: c2:36:17:e9:43:2f:52:39:bb:8c:5d:43:da:87:0e: a0:5f:39:ec:f1:d3:ce:67:9a:51:c4:a4:ec:68:4e: 6f:da:97:4b:ab:90:c1:78:be:29:9b:12:49:3a:fd: f8:82:f6:de:ee:3d:50:18:56:c2:69:bf:a0:c2:c5: cd:f4:bc:f9:0a:d7:b9:06:f9:ab:07:26:e1:42:81: d6:e3:f3:e0:58:ec:1a:8e:1f:91:fd:dd:9a:38:f0: a8:bf:db:99:72:ca:ba:34:55:48:26:c1:e3:82:8f: a5:73:47:06:af:39:73:fc:91:7a:c5:91:83:41:2e: cc:95:94:a7:9f:b6:51:b7:35:18:9c:f2:7f:d5:bb: c2:51:9d:ed:51:14:34:f8:e8:b6:18:47:19:a3:4b: d0:9e:aa:53:42:b0:39:8c:32:84:7f:ef:22:40:af: 14:32:3a:91:61:3a:07:ce:83:9e:a1:c0:fc:a2:01: a2:a7:f4:d7:d5:c5:64:c9:c7:f4:7d:ad:e7:c0:8f: 9f:c8:7d:19:84:3e:8e:af:29:c8:e9:62:f1:8b:7b: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BA:B2:3A:AC:66:42:5F:C4:F2:C7:9D:A2:A9:FA:65:B5:8E:01:A1 X509v3 Authority Key Identifier: keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:33:83:cf:04:79:9e:6d:7d:fc:1f:0a:d9:37:a9:3a:66:e9: 01:8f:21:bd:7b:1f:94:66:ec:76:f8:ab:22:49:60:05:c3:68: 5d:99:f5:58:e7:94:76:3c:00:b9:9b:7d:36:80:99:ea:3f:f4: 5f:0f:bb:cb:31:05:70:2a:c4:eb:fd:ba:5e:3b:44:06:39:79: 50:73:15:1a:03:6f:82:27:71:ca:48:11:e7:7f:05:ba:b4:08: 9c:12:09:40:d8:c6:3a:73:47:eb:c9:91:46:40:02:08:b1:9d: da:02:41:3d:ad:f9:c8:93:54:d8:88:1f:ce:f0:7e:b6:c5:37: b9:93:6b:16:1d:1c:8f:bf:e3:c1:c6:ad:9d:2f:64:91:d9:fb: 7e:72:2c:a9:dd:15:6e:e7:75:7b:a9:e4:24:41:66:f2:f6:e7: 17:f9:e6:06:e8:30:ce:2c:6c:2a:8a:cf:b6:39:e2:39:fe:91: 0a:87:6d:1a:17:17:cc:91:9b:db:b4:e5:63:01:58:25:73:35: da:2e:90:ae:84:09:a2:07:48:ee:b1:25:19:90:4c:80:8d:22: 4c:27:e1:79:e1:66:76:02:9c:42:5b:5f:31:d9:da:e1:2c:f9: e7:ae:da:f3:a3:1f:6c:f1:92:48:0b:cf:d3:29:61:48:bd:9d: 4a:0f:20:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q/5xiC0xeE2G+cT/a9awMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3 YWJjMWUwHhcNMjYwMTI1MTUwMDQ4WhcNMjYwMTI2MTUwMDQ4WjAzMTEwLwYDVQQD Eyg0ZWJhYjIzYWFjNjY0MjVmYzRmMmM3OWRhMmE5ZmE2NWI1OGUwMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt0/hJ1cFpoTV14D/Xv9YuFOV10L 75Nre/ze5Q+YDM4zbEOHouROt1afN+XCNhfpQy9SObuMXUPahw6gXzns8dPOZ5pR xKTsaE5v2pdLq5DBeL4pmxJJOv34gvbe7j1QGFbCab+gwsXN9Lz5Cte5BvmrBybh QoHW4/PgWOwajh+R/d2aOPCov9uZcsq6NFVIJsHjgo+lc0cGrzlz/JF6xZGDQS7M lZSnn7ZRtzUYnPJ/1bvCUZ3tURQ0+Oi2GEcZo0vQnqpTQrA5jDKEf+8iQK8UMjqR YToHzoOeocD8ogGip/TX1cVkycf0fa3nwI+fyH0ZhD6OrynI6WLxi3vfQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE66sjqsZkJfxPLHnaKp+mW1jgGhMB8GA1UdIwQY MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt MWI2Zjc1MGNmOWEyLzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTODzwR5 nm19/B8K2TepOmbpAY8hvXsflGbsdvirIklgBcNoXZn1WOeUdjwAuZt9NoCZ6j/0 Xw+7yzEFcCrE6/26XjtEBjl5UHMVGgNvgidxykgR538FurQInBIJQNjGOnNH68mR RkACCLGd2gJBPa35yJNU2IgfzvB+tsU3uZNrFh0cj7/jwcatnS9kkdn7fnIsqd0V bud1e6nkJEFm8vbnF/nmBugwzixsKorPtjniOf6RCodtGhcXzJGb27TlYwFYJXM1 2i6QroQJogdI7rElGZBMgI0iTCfheeFmdgKcQltfMdna4Sz5567a86MfbPGSSAvP 0ylhSL2dSg8gMw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:49 2026 by rpki-client