This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json) Hash identifier: 0AmBMiWXLwyB/EovttLMQlH4b2eBlNKLLppYlul2Vxw= Subject key identifier: D4:26:55:A0:EB:43:21:F5:78:E1:64:C8:61:1F:7F:45:B2:65:C6:2D Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c Certificate serial: 019BF80862445F1D0F62732FDD374751B891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft Manifest number: 0D5A Signing time: Mon 26 Jan 2026 02:00:57 +0000 Manifest this update: Mon 26 Jan 2026 02:00:57 +0000 Manifest next update: Tue 27 Jan 2026 02:00:57 +0000 Files and hashes: 1: BOIyHGFsSVNlNKzWZCkVyw194to.roa (hash: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog=) 2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: vGpNF0SBxrdNtL+whJSSwiZHSluZpicuhLV1mhdyLTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:62:44:5f:1d:0f:62:73:2f:dd:37:47:51:b8:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c Validity Not Before: Jan 26 02:00:57 2026 GMT Not After : Jan 27 02:00:57 2026 GMT Subject: CN=d42655a0eb4321f578e164c8611f7f45b265c62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:92:db:75:a8:24:e0:60:c8:4f:a6:32:c0:6e: da:80:48:44:cc:a2:ed:b4:82:d0:ce:96:25:a5:d4: 4c:4c:df:53:50:e6:31:06:f6:f2:d3:ff:a6:9f:36: 73:da:07:cf:d2:f5:96:12:8d:ae:56:d1:d3:78:9f: ac:ed:ee:a3:78:1d:80:dc:c4:10:48:4e:5c:15:da: cd:39:ad:a5:bd:43:56:31:86:cc:34:38:56:77:52: e3:4c:0f:68:00:b7:37:35:21:bf:4c:02:79:ba:c2: 91:9f:ec:f9:02:50:54:a9:40:78:be:86:a8:ad:7d: 3e:f9:03:e6:ea:cf:6d:41:23:e5:94:1e:f9:15:5f: 6f:7f:1d:21:18:b4:6e:e2:dc:9e:d9:68:73:ac:96: 45:8e:2b:35:91:59:af:3f:a8:c3:74:5e:28:e9:4e: 23:2f:7c:2d:55:4b:45:c7:3c:b2:89:1d:f9:9b:3b: 24:9c:be:0a:eb:c8:3d:52:f9:09:6c:dc:df:6d:cf: 79:25:bb:fb:92:8e:da:f1:60:05:0b:36:8c:c5:be: 28:0e:4f:59:3c:f5:67:e2:22:ed:2b:aa:c1:8f:80: 41:28:7b:ba:5f:de:2c:9a:10:13:5b:da:a3:29:85: 73:cc:5b:37:3f:c7:9e:f1:a8:62:ff:4b:c6:1d:44: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:26:55:A0:EB:43:21:F5:78:E1:64:C8:61:1F:7F:45:B2:65:C6:2D X509v3 Authority Key Identifier: keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:0d:f7:d6:e8:50:ab:9c:f0:1b:19:95:a1:ca:5b:31:d8:5a: 70:9b:3d:c7:54:c4:28:d6:96:74:d3:01:e9:87:90:cf:14:ea: 74:8d:9d:e6:05:7f:62:8f:55:57:7b:eb:c4:63:80:92:2f:92: 22:be:2b:63:31:bd:ae:8a:32:36:9c:ee:f5:5d:0b:bc:2e:70: cd:a0:da:45:03:cd:a9:44:16:99:4e:03:2a:f4:8e:1f:78:78: ab:85:d3:a4:69:f6:14:43:5f:fc:a6:bf:04:0e:a5:0d:08:b8: de:7b:28:c3:d5:74:91:4d:4b:1c:60:26:26:ec:a2:d1:25:8d: c8:1d:53:6c:8d:86:0b:17:fb:4c:20:8c:69:81:8b:71:f3:b7: c5:0e:bc:db:6c:c7:d6:45:8c:96:e0:f3:26:45:e6:ff:a7:70: ef:80:c6:35:ba:92:15:85:82:af:93:fc:fa:e7:71:36:32:98: 15:2e:b6:40:52:55:2b:e0:b1:b8:87:c7:18:2f:2e:8e:5c:0d: 97:61:b0:6b:47:30:1b:89:6e:fc:d1:70:70:f4:33:c7:ef:22: 8d:85:ce:58:14:42:c0:51:10:f3:3e:64:9e:ed:73:7c:78:53: d7:d4:9b:c2:87:14:68:ca:5a:2e:d0:42:59:b5:b5:c2:02:9d: d8:21:e2:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CGJEXx0PYnMv3TdHUbiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzFjOThlM2NhYjgyMWM4NGRkZWZmMjA2OWUwMjI1OWJk NmU2MWMwHhcNMjYwMTI2MDIwMDU3WhcNMjYwMTI3MDIwMDU3WjAzMTEwLwYDVQQD EyhkNDI2NTVhMGViNDMyMWY1NzhlMTY0Yzg2MTFmN2Y0NWIyNjVjNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pLbdagk4GDIT6YywG7agEhEzKLt tILQzpYlpdRMTN9TUOYxBvby0/+mnzZz2gfP0vWWEo2uVtHTeJ+s7e6jeB2A3MQQ SE5cFdrNOa2lvUNWMYbMNDhWd1LjTA9oALc3NSG/TAJ5usKRn+z5AlBUqUB4voao rX0++QPm6s9tQSPllB75FV9vfx0hGLRu4tye2WhzrJZFjis1kVmvP6jDdF4o6U4j L3wtVUtFxzyyiR35mzsknL4K68g9UvkJbNzfbc95Jbv7ko7a8WAFCzaMxb4oDk9Z PPVn4iLtK6rBj4BBKHu6X94smhATW9qjKYVzzFs3P8ee8ahi/0vGHUSVswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQmVaDrQyH1eOFkyGEff0WyZcYtMB8GA1UdIwQY MBaAFKoxyY48q4IchN3v8gaeAiWb1uYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMt MDViZmYzMWM1M2ZlLzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMtMDViZmYzMWM1M2Zl LzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtA331uhQ q5zwGxmVocpbMdhacJs9x1TEKNaWdNMB6YeQzxTqdI2d5gV/Yo9VV3vrxGOAki+S Ir4rYzG9rooyNpzu9V0LvC5wzaDaRQPNqUQWmU4DKvSOH3h4q4XTpGn2FENf/Ka/ BA6lDQi43nsow9V0kU1LHGAmJuyi0SWNyB1TbI2GCxf7TCCMaYGLcfO3xQ6822zH 1kWMluDzJkXm/6dw74DGNbqSFYWCr5P8+udxNjKYFS62QFJVK+CxuIfHGC8ujlwN l2Gwa0cwG4lu/NFwcPQzx+8ijYXOWBRCwFEQ8z5knu1zfHhT19SbwocUaMpaLtBC WbW1wgKd2CHiag== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:09 2026 by rpki-client