This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft File: rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json) Hash identifier: bpzHCupEhV13w3pj0VIogUbi6WkBK6YOPYbozWofqd0= Subject key identifier: 26:40:5D:8B:9E:E2:DE:42:44:C6:9C:CC:A5:9D:81:72:E0:CF:FA:42 Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2 Certificate issuer: /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2 Certificate serial: 019BF5AC3AD3487FD629830DA357D0C9E1CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft Manifest number: 02AD Signing time: Sun 25 Jan 2026 15:01:03 +0000 Manifest this update: Sun 25 Jan 2026 15:01:03 +0000 Manifest next update: Mon 26 Jan 2026 15:01:03 +0000 Files and hashes: 1: 5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa (hash: 5mmbc16KLPR+GEpL460h+oCJig1AkRpH39Lcr2Vr6J4=) 2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: ywOHsWg6940YdV1JuMqV4yKEASjMovykogwo72XS4rY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:3a:d3:48:7f:d6:29:83:0d:a3:57:d0:c9:e1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2 Validity Not Before: Jan 25 15:01:03 2026 GMT Not After : Jan 26 15:01:03 2026 GMT Subject: CN=26405d8b9ee2de4244c69ccca59d8172e0cffa42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:38:89:3b:4d:a6:27:66:75:16:55:7b:c2: 16:7b:b7:04:47:c0:e3:d0:85:74:7b:e2:a0:d4:1f: 3e:0c:15:77:bf:c8:bc:ee:b3:0f:e0:c2:5d:09:13: c5:fd:4c:87:a9:28:62:1c:e7:9f:e1:98:d3:b9:20: 69:4a:96:73:d5:1b:8f:63:45:d7:d8:23:da:75:8c: 83:4e:90:52:98:92:9d:2d:ba:e2:7a:8d:c1:98:88: 47:62:fa:54:49:22:59:e8:0e:5d:80:87:3a:34:ed: c8:d1:65:3b:e2:2a:9b:6c:97:7c:44:23:f4:d7:70: 46:1e:de:0d:73:96:62:80:ba:9e:2f:3a:4b:6b:e5: b8:df:34:86:f5:7d:ea:41:62:18:e2:f4:0c:5c:9d: 5c:dc:31:18:59:1b:92:99:27:0d:f7:cd:82:ee:e6: f1:24:5c:9e:30:bd:29:4f:73:cf:10:2f:90:e6:a8: d0:d7:78:9c:85:f8:06:ee:21:29:de:de:1f:69:93: 3a:38:41:c8:72:40:98:15:1a:aa:50:aa:30:7e:94: b2:6f:2a:7a:2c:e8:71:6e:47:5e:6f:78:fe:53:35: d0:a6:65:be:6e:33:e3:71:78:2c:da:38:94:fd:09: c2:c2:16:13:68:12:54:66:c8:39:e5:42:ba:df:5e: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:40:5D:8B:9E:E2:DE:42:44:C6:9C:CC:A5:9D:81:72:E0:CF:FA:42 X509v3 Authority Key Identifier: keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ec:09:05:b9:d9:c7:1c:20:c7:d4:d5:09:d1:0b:00:de:14: 3f:00:6c:de:75:14:77:01:d7:ca:26:70:aa:e3:cc:4e:0f:52: 3f:e1:2c:9a:35:b1:0a:0b:8e:6a:c6:8e:4d:98:9d:26:7e:1a: 3f:a4:7d:72:36:a8:fd:39:77:6f:d1:7a:5d:4b:9b:2f:31:f0: c7:9e:34:23:3e:da:08:b1:99:dc:ae:a8:45:45:0e:b8:d0:c7: b0:a6:fb:3c:86:e5:d2:09:31:0d:ef:58:01:f5:45:a6:4e:33: 02:c4:76:de:74:29:70:27:ec:e5:d5:cc:76:62:e4:27:dc:b4: f9:a0:52:34:e1:63:6d:2d:8a:5b:05:00:44:98:dd:24:b8:32: d2:d8:c2:50:71:09:41:fe:89:29:3b:3b:71:80:03:9f:74:3f: b9:0c:03:44:fc:4c:7c:e7:6a:e7:db:d6:b3:9b:86:11:df:b5: 62:6f:5f:e6:46:79:5b:16:00:f3:b9:aa:36:33:fb:b5:08:bc: da:7c:a0:ee:a7:9a:ff:71:2e:16:60:fb:75:51:15:f8:12:61: 3d:1e:40:54:53:47:a1:3e:8b:d4:8d:cb:c9:78:cd:52:4a:da: 0c:a9:65:7a:de:d3:a1:72:65:35:e5:e5:97:23:5f:90:6c:13: 82:61:8b:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rDrTSH/WKYMNo1fQyeHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYTUwYTRlY2Y0NTgxMGNmNmY2OWM5N2MzYzY4NWNmYzI0 OTc2YzIwHhcNMjYwMTI1MTUwMTAzWhcNMjYwMTI2MTUwMTAzWjAzMTEwLwYDVQQD EygyNjQwNWQ4YjllZTJkZTQyNDRjNjljY2NhNTlkODE3MmUwY2ZmYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2A4iTtNpidmdRZVe8IWe7cER8Dj 0IV0e+Kg1B8+DBV3v8i87rMP4MJdCRPF/UyHqShiHOef4ZjTuSBpSpZz1RuPY0XX 2CPadYyDTpBSmJKdLbrieo3BmIhHYvpUSSJZ6A5dgIc6NO3I0WU74iqbbJd8RCP0 13BGHt4Nc5ZigLqeLzpLa+W43zSG9X3qQWIY4vQMXJ1c3DEYWRuSmScN982C7ubx JFyeML0pT3PPEC+Q5qjQ13ichfgG7iEp3t4faZM6OEHIckCYFRqqUKowfpSybyp6 LOhxbkdeb3j+UzXQpmW+bjPjcXgs2jiU/QnCwhYTaBJUZsg55UK6317QGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZAXYue4t5CRMaczKWdgXLgz/pCMB8GA1UdIwQY MBaAFK6lCk7PRYEM9vacl8PGhc/CSXbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82MzA0OTYtZDM1OS00MGE2LWEyNzYt YzcyYTljNmZiOGYyLzEvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82MzA0OTYtZDM1OS00MGE2LWEyNzYtYzcyYTljNmZiOGYy LzEvcnFVS1RzOUZnUXoyOXB5WHc4YUZ6OEpKZHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+wJBbnZ xxwgx9TVCdELAN4UPwBs3nUUdwHXyiZwquPMTg9SP+EsmjWxCguOasaOTZidJn4a P6R9cjao/Tl3b9F6XUubLzHwx540Iz7aCLGZ3K6oRUUOuNDHsKb7PIbl0gkxDe9Y AfVFpk4zAsR23nQpcCfs5dXMdmLkJ9y0+aBSNOFjbS2KWwUARJjdJLgy0tjCUHEJ Qf6JKTs7cYADn3Q/uQwDRPxMfOdq59vWs5uGEd+1Ym9f5kZ5WxYA87mqNjP7tQi8 2nyg7qea/3EuFmD7dVEV+BJhPR5AVFNHoT6L1I3LyXjNUkraDKllet7ToXJlNeXl lyNfkGwTgmGLpQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:00 2026 by rpki-client