This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json) Hash identifier: D/zVV1t53mHrKkO5rEmf28F28PiQhzfkJ5PjQCu4laI= Subject key identifier: AD:A4:10:3F:56:38:1D:88:3E:53:95:1D:E1:B9:E3:8D:01:61:CA:98 Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42 Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842 Certificate serial: 019BF5072802042214F728D807926B93123F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft Manifest number: 09D4 Signing time: Sun 25 Jan 2026 12:00:45 +0000 Manifest this update: Sun 25 Jan 2026 12:00:45 +0000 Manifest next update: Mon 26 Jan 2026 12:00:45 +0000 Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=) 2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: WJcx9PIa6AIJc71n12TI4ox57LPPjWk0BD33tCQyCGQ=) 3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:28:02:04:22:14:f7:28:d8:07:92:6b:93:12:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842 Validity Not Before: Jan 25 12:00:45 2026 GMT Not After : Jan 26 12:00:45 2026 GMT Subject: CN=ada4103f56381d883e53951de1b9e38d0161ca98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:0f:e5:78:eb:59:56:83:20:fd:24:48:22: 14:f8:4d:5e:bc:f7:43:ec:93:44:98:32:e4:54:82: 60:fc:80:cf:29:05:b0:26:79:50:47:41:9f:a5:67: cc:93:9e:cb:7f:0f:d7:cc:7c:97:fb:3b:9a:9b:44: fc:1b:7f:75:4a:9c:9b:b9:3e:f5:73:d6:94:f7:bd: aa:7b:09:11:fb:d8:e4:9e:0e:00:e8:0d:91:c0:97: ec:26:a9:fb:79:70:4a:88:07:06:0c:94:0f:09:93: 7f:8e:8d:94:98:cb:85:36:30:ea:f0:4d:31:a3:91: 7d:9c:58:89:ee:e3:6d:2b:5f:1a:0c:a6:32:c4:dc: 81:e9:4b:00:cf:20:f7:f1:4b:77:b5:8d:91:8d:26: 53:92:24:ef:58:25:a0:24:03:ea:f6:f9:a6:00:ae: f5:08:f7:85:ef:4b:a6:8d:2e:6e:84:f9:44:7b:4e: 2c:30:6f:d5:16:bd:f0:10:90:1a:f2:4c:7a:42:5a: b3:9a:56:76:d6:9e:bd:02:44:5b:af:cc:f5:a0:9c: dc:10:e4:9d:bf:59:4c:8b:07:08:3a:91:50:6e:15: 81:09:19:7b:34:f7:b9:37:33:80:79:39:05:21:78: 04:29:b5:75:e3:5d:e4:af:73:59:43:2c:0d:b2:76: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A4:10:3F:56:38:1D:88:3E:53:95:1D:E1:B9:E3:8D:01:61:CA:98 X509v3 Authority Key Identifier: keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:46:c1:43:5f:31:03:78:bf:fd:35:fc:b6:33:d4:f5:ab:0e: 53:d9:a6:6a:d8:e9:29:dd:15:21:c5:52:3e:8a:f8:80:f7:10: 5f:46:45:2a:6d:5a:04:38:49:c0:e5:3b:e4:a5:81:4b:26:7f: 01:ed:5b:7a:c6:78:ba:40:4f:fc:20:0a:90:79:c0:9f:e0:51: d1:8f:4c:3d:ce:b5:9b:01:5c:dc:55:27:b7:8d:b7:dc:a0:59: a8:e7:21:79:14:99:55:be:7d:8d:60:3f:f1:a5:5b:7c:e5:4e: 0b:47:a9:5d:43:d3:ea:ff:71:99:bc:45:b0:e1:09:ac:9b:df: 90:7f:b2:c4:7b:f4:84:a6:d8:1c:aa:4e:3d:c8:1b:4f:2a:33: bd:40:1d:72:92:6b:3f:cb:3d:85:bb:89:ac:90:2a:0d:7c:3c: f9:53:37:d6:ce:be:6b:e1:f5:d8:5b:04:95:5c:fc:cb:21:85: 7d:8c:85:36:91:24:08:df:b2:75:db:de:6a:ad:f9:c6:07:0f: 9c:7f:d0:eb:d6:87:87:ff:7d:c9:af:8f:61:ec:83:eb:ef:18: 99:c0:26:57:a4:12:e4:91:c2:e1:c9:da:f9:62:ee:96:83:23: 1d:97:2b:51:e4:b2:d8:b1:4b:57:f3:9a:25:94:1a:a2:20:fd: 19:0c:06:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BygCBCIU9yjYB5JrkxI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2 YzI4NDIwHhcNMjYwMTI1MTIwMDQ1WhcNMjYwMTI2MTIwMDQ1WjAzMTEwLwYDVQQD EyhhZGE0MTAzZjU2MzgxZDg4M2U1Mzk1MWRlMWI5ZTM4ZDAxNjFjYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq00P5XjrWVaDIP0kSCIU+E1evPdD 7JNEmDLkVIJg/IDPKQWwJnlQR0GfpWfMk57Lfw/XzHyX+zuam0T8G391SpybuT71 c9aU972qewkR+9jkng4A6A2RwJfsJqn7eXBKiAcGDJQPCZN/jo2UmMuFNjDq8E0x o5F9nFiJ7uNtK18aDKYyxNyB6UsAzyD38Ut3tY2RjSZTkiTvWCWgJAPq9vmmAK71 CPeF70umjS5uhPlEe04sMG/VFr3wEJAa8kx6QlqzmlZ21p69AkRbr8z1oJzcEOSd v1lMiwcIOpFQbhWBCRl7NPe5NzOAeTkFIXgEKbV1413kr3NZQywNsnZJkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2kED9WOB2IPlOVHeG5440BYcqYMB8GA1UdIwQY MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt ZWVhMjY3YTU4NDk0LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0 LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEbBQ18x A3i//TX8tjPU9asOU9mmatjpKd0VIcVSPor4gPcQX0ZFKm1aBDhJwOU75KWBSyZ/ Ae1besZ4ukBP/CAKkHnAn+BR0Y9MPc61mwFc3FUnt4233KBZqOcheRSZVb59jWA/ 8aVbfOVOC0epXUPT6v9xmbxFsOEJrJvfkH+yxHv0hKbYHKpOPcgbTyozvUAdcpJr P8s9hbuJrJAqDXw8+VM31s6+a+H12FsElVz8yyGFfYyFNpEkCN+yddveaq35xgcP nH/Q69aHh/99ya+PYeyD6+8YmcAmV6QS5JHC4cna+WLuloMjHZcrUeSy2LFLV/Oa JZQaoiD9GQwGSQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:15:58 2026 by rpki-client