This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft File: inQVrmNNYTFZy9LOdKwmGn1axNQ.mft (raw, json) Hash identifier: P599qqG+ntVQHVPuyhsazL31BSJhp7S2fMtv7sJ5lXI= Subject key identifier: 3B:0A:52:3C:48:2F:7F:DF:E9:09:64:BA:1C:4F:4D:79:00:A8:4B:71 Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4 Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4 Certificate serial: 019BF989232B868660899C9E5EF12BCEB422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 09:01:12 +0000 Manifest this update: Mon 26 Jan 2026 09:01:12 +0000 Manifest next update: Tue 27 Jan 2026 09:01:12 +0000 Files and hashes: 1: VKvLqtX1ppXEiXVa8scV9rc2Ci8.roa (hash: MN3OM8Px4rr+GRLiVct7muu1ZFs7Cc/Qcnx5KlMSz48=) 2: inQVrmNNYTFZy9LOdKwmGn1axNQ.crl (hash: l3dFOr3AAxXhYAeAreVKuQdLbJD1/AhikpJCkzWftC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:23:2b:86:86:60:89:9c:9e:5e:f1:2b:ce:b4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4 Validity Not Before: Jan 26 09:01:12 2026 GMT Not After : Jan 27 09:01:12 2026 GMT Subject: CN=3b0a523c482f7fdfe90964ba1c4f4d7900a84b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:c4:ed:3c:e3:e0:f9:26:d6:b4:33:ee:fe: ac:1e:64:bd:d7:55:50:c5:55:71:67:74:b5:b9:57: 38:c3:cb:9b:0e:16:38:5c:ad:46:46:59:cd:f0:98: 93:6b:c6:7b:86:d1:54:73:06:ef:a0:1d:83:db:c1: fb:ea:73:84:88:e8:da:b1:35:07:bb:3b:0b:99:ad: 33:7e:39:ae:14:cf:41:7c:7c:3e:86:b2:32:1f:90: 60:28:a1:03:b0:73:7a:5a:53:84:db:4f:00:a6:d5: ed:5d:33:47:08:fe:41:2f:1e:46:5a:0f:75:a7:53: e4:e4:23:13:13:72:73:a4:a5:a6:e2:9c:a3:49:a9: a5:19:d7:3d:bc:89:5b:5a:e0:c5:f9:31:9e:33:2a: 77:07:bf:85:34:4a:a6:fb:e5:f7:b5:99:a6:cd:f0: cf:ef:81:db:a9:16:76:78:32:fe:42:e9:ae:ed:7f: d7:4c:ce:8f:87:4e:3a:af:d0:cd:6f:98:d9:b4:59: 47:2c:f1:53:b7:ec:82:c0:01:0e:fd:ee:5b:8b:21: dc:af:25:da:b6:6a:35:1d:68:25:db:fc:70:b9:75: ee:f5:ac:69:11:dd:03:65:93:44:66:f2:fa:72:8a: 97:05:b0:ff:80:53:54:ac:ca:79:f5:0f:82:4e:b6: 81:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0A:52:3C:48:2F:7F:DF:E9:09:64:BA:1C:4F:4D:79:00:A8:4B:71 X509v3 Authority Key Identifier: keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:92:cb:e4:5a:d5:5f:1f:cb:03:5d:ee:b4:e2:f3:a1:d6:b2: 67:2f:c6:25:71:e1:f0:98:96:35:81:79:db:b2:b8:c4:13:dd: d6:e8:d7:c0:fe:83:b4:e0:83:5b:c0:99:08:3d:9d:fc:e2:40: c1:a7:87:f6:db:d9:cb:aa:09:fd:8c:30:92:6c:f3:d1:fa:89: 92:00:6f:bf:91:33:41:8c:cf:bd:3e:49:e6:7f:31:66:b2:1b: 26:66:96:20:a3:18:41:60:8f:68:a6:de:9b:7a:18:4f:5d:b6: 79:c2:2a:f7:56:9b:f9:3c:8e:8d:0b:9c:f7:df:7d:e6:26:fe: 90:b0:91:cf:ae:47:f7:e6:3d:82:ef:db:6f:5c:b7:ed:42:d7: f2:15:36:8e:d0:be:18:4f:13:83:46:df:b1:28:d3:c3:a3:bd: 7e:b3:98:af:cb:dd:bb:9a:78:de:bf:60:5f:7c:35:10:e7:39: 95:d2:1c:3b:6d:04:b2:2f:20:c1:f6:11:ae:90:33:df:e5:69: e0:a6:a5:d1:f6:ee:d1:10:03:aa:ba:5f:e1:9e:c9:83:67:40: f7:72:5e:66:a7:ee:78:f5:f7:01:4e:3b:0d:e2:c3:68:66:3b: 65:7d:69:98:13:7a:9e:0f:61:17:d2:45:b1:f2:6f:ed:64:91: 09:29:62:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iSMrhoZgiZyeXvErzrQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNzQxNWFlNjM0ZDYxMzE1OWNiZDJjZTc0YWMyNjFhN2Q1 YWM0ZDQwHhcNMjYwMTI2MDkwMTEyWhcNMjYwMTI3MDkwMTEyWjAzMTEwLwYDVQQD EygzYjBhNTIzYzQ4MmY3ZmRmZTkwOTY0YmExYzRmNGQ3OTAwYTg0YjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0HE7Tzj4Pkm1rQz7v6sHmS911VQ xVVxZ3S1uVc4w8ubDhY4XK1GRlnN8JiTa8Z7htFUcwbvoB2D28H76nOEiOjasTUH uzsLma0zfjmuFM9BfHw+hrIyH5BgKKEDsHN6WlOE208AptXtXTNHCP5BLx5GWg91 p1Pk5CMTE3JzpKWm4pyjSamlGdc9vIlbWuDF+TGeMyp3B7+FNEqm++X3tZmmzfDP 74HbqRZ2eDL+Qumu7X/XTM6Ph046r9DNb5jZtFlHLPFTt+yCwAEO/e5biyHcryXa tmo1HWgl2/xwuXXu9axpEd0DZZNEZvL6coqXBbD/gFNUrMp59Q+CTraBxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsKUjxIL3/f6QlkuhxPTXkAqEtxMB8GA1UdIwQY MBaAFIp0Fa5jTWExWcvSznSsJhp9WsTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83ZGJmZTctMzYxNC00NTZlLWJmNGMt ZWY3ZjU2ODQyNTQ2LzEvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83ZGJmZTctMzYxNC00NTZlLWJmNGMtZWY3ZjU2ODQyNTQ2 LzEvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZLL5FrV Xx/LA13utOLzodayZy/GJXHh8JiWNYF527K4xBPd1ujXwP6DtOCDW8CZCD2d/OJA waeH9tvZy6oJ/Ywwkmzz0fqJkgBvv5EzQYzPvT5J5n8xZrIbJmaWIKMYQWCPaKbe m3oYT122ecIq91ab+TyOjQuc99995ib+kLCRz65H9+Y9gu/bb1y37ULX8hU2jtC+ GE8Tg0bfsSjTw6O9frOYr8vdu5p43r9gX3w1EOc5ldIcO20Esi8gwfYRrpAz3+Vp 4Kal0fbu0RADqrpf4Z7Jg2dA93JeZqfuePX3AU47DeLDaGY7ZX1pmBN6ng9hF9JF sfJv7WSRCSlidg== -----END CERTIFICATE-----Generated at Mon Jan 26 13:35:31 2026 by rpki-client