This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft File: 0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json) Hash identifier: NV4QtIWt3HMd7eJ7OJloAKW0I3G/1/cuaV4fGo6ddwY= Subject key identifier: F5:45:D8:1B:0E:2C:C3:E0:C6:C9:3D:DF:2F:DB:D2:66:86:C3:EE:4F Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC Certificate issuer: /CN=d2a031f139dced2f7321973354f46aac972fadac Certificate serial: 019BF574DDE6DA75F31CC2174CDB178291F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft Manifest number: 61 Signing time: Sun 25 Jan 2026 14:00:35 +0000 Manifest this update: Sun 25 Jan 2026 14:00:35 +0000 Manifest next update: Mon 26 Jan 2026 14:00:35 +0000 Files and hashes: 1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: qQM2jwQAgiu05llFI0tsijWxrI4DT6CJ6v4cZlK8udM=) 2: 1fXLoidrR-aUf1SmssfaAZyzdo8.asa (hash: YtrHqVFgYRzmfo5sver7tfaRLF7z/utDYIqu5x0aKYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:dd:e6:da:75:f3:1c:c2:17:4c:db:17:82:91:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac Validity Not Before: Jan 25 14:00:35 2026 GMT Not After : Jan 26 14:00:35 2026 GMT Subject: CN=f545d81b0e2cc3e0c6c93ddf2fdbd26686c3ee4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:9f:6b:ab:28:00:c2:82:9a:dc:a7:18:fd: d3:44:0a:dd:e1:f5:aa:ea:cf:9d:57:b7:7e:21:f7: fc:5b:a4:db:92:cc:61:c1:68:e7:fd:86:d1:91:de: 26:32:12:3d:d7:a3:3d:40:27:3d:95:26:08:4f:06: e4:73:ee:85:a6:85:08:ab:8f:39:a7:ba:15:1c:92: 86:b7:da:7b:6a:68:7b:ad:80:df:df:28:0d:f8:85: 52:1b:27:84:4e:96:a9:b2:b0:57:da:80:c0:a9:a7: 7d:69:a8:a1:7b:f4:95:3c:dc:d4:9b:50:44:a3:8a: 24:e5:7e:70:50:1f:5b:7d:87:e5:e8:75:db:d9:7e: 41:4c:a0:5f:b6:22:82:24:37:1d:0e:f4:45:4a:b9: a8:79:83:3e:42:67:30:f8:b5:e7:4b:d8:b8:c4:94: e1:4a:a0:46:ef:ca:97:5d:08:d8:4b:6d:52:7b:6f: f8:21:f0:4f:83:d9:a5:61:af:f7:b4:00:21:75:57: 95:1f:21:e2:b2:17:87:a7:e5:66:db:79:73:cd:3f: 23:1a:74:71:ed:b1:23:99:ef:44:dd:5c:35:7e:07: 16:14:ea:b1:60:b6:81:4a:fb:bc:8c:f2:51:04:25: 60:e3:4f:f2:da:2a:d2:e1:62:05:3f:e5:4d:02:d1: 4a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:45:D8:1B:0E:2C:C3:E0:C6:C9:3D:DF:2F:DB:D2:66:86:C3:EE:4F X509v3 Authority Key Identifier: keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ca:c0:68:d9:9f:19:07:5e:61:92:c3:08:b3:88:06:c1:ae: 7b:bd:88:23:d1:6f:8b:39:68:3d:c7:80:02:b7:de:3b:22:39: b6:7e:66:8b:37:47:62:19:f0:34:7f:90:dd:1c:71:b3:60:d5: ac:2e:ff:33:b6:41:11:10:19:30:2d:b8:7a:c0:eb:6e:37:bd: 0f:7e:c0:c0:da:ca:25:43:2e:9f:e7:f2:19:ce:eb:15:3f:04: 49:c9:b0:c7:12:b2:43:85:03:f1:4b:be:7b:79:3b:50:a8:ce: dd:2f:83:7a:73:3d:ec:63:20:18:15:d9:0e:ff:3d:3d:12:67: cf:5e:87:82:51:ca:d3:85:fa:5e:fd:af:81:e7:c2:1f:36:d2: 43:e2:03:c4:df:8b:dd:d1:a8:25:ea:ee:86:75:6b:c0:10:ff: ec:c9:a0:af:4d:9e:11:9d:1b:78:7c:75:a9:c4:3c:ee:02:7a: c9:41:5e:a4:b8:ff:07:e8:6b:48:6e:2f:92:02:dc:42:42:e9: 56:f7:2b:6a:61:85:cb:e3:2c:5b:fa:17:81:bb:7b:1c:48:3b: ec:08:b7:73:cc:3f:82:b4:39:47:1b:67:7e:7b:05:a4:9d:2e: 23:12:af:9a:a8:cf:0e:53:34:a3:49:b6:98:1b:29:5d:f6:ef: e3:9d:be:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dN3m2nXzHMIXTNsXgpH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYTAzMWYxMzlkY2VkMmY3MzIxOTczMzU0ZjQ2YWFjOTcy ZmFkYWMwHhcNMjYwMTI1MTQwMDM1WhcNMjYwMTI2MTQwMDM1WjAzMTEwLwYDVQQD EyhmNTQ1ZDgxYjBlMmNjM2UwYzZjOTNkZGYyZmRiZDI2Njg2YzNlZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Iifa6soAMKCmtynGP3TRArd4fWq 6s+dV7d+Iff8W6TbksxhwWjn/YbRkd4mMhI916M9QCc9lSYITwbkc+6FpoUIq485 p7oVHJKGt9p7amh7rYDf3ygN+IVSGyeETpapsrBX2oDAqad9aaihe/SVPNzUm1BE o4ok5X5wUB9bfYfl6HXb2X5BTKBftiKCJDcdDvRFSrmoeYM+Qmcw+LXnS9i4xJTh SqBG78qXXQjYS21Se2/4IfBPg9mlYa/3tAAhdVeVHyHisheHp+Vm23lzzT8jGnRx 7bEjme9E3Vw1fgcWFOqxYLaBSvu8jPJRBCVg40/y2irS4WIFP+VNAtFK+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVF2BsOLMPgxsk93y/b0maGw+5PMB8GA1UdIwQY MBaAFNKgMfE53O0vcyGXM1T0aqyXL62sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHFBeDhUbmM3Uzl6SVpjelZQUnFySmN2cmF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iNDUxZjMtNGNjYi00YTA4LWFiNzgt NjI3NDA3MjVmNzFhLzEvMHFBeDhUbmM3Uzl6SVpjelZQUnFySmN2cmF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9iNDUxZjMtNGNjYi00YTA4LWFiNzgtNjI3NDA3MjVmNzFh LzEvMHFBeDhUbmM3Uzl6SVpjelZQUnFySmN2cmF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8rAaNmf GQdeYZLDCLOIBsGue72II9FvizloPceAArfeOyI5tn5mizdHYhnwNH+Q3Rxxs2DV rC7/M7ZBERAZMC24esDrbje9D37AwNrKJUMun+fyGc7rFT8EScmwxxKyQ4UD8Uu+ e3k7UKjO3S+DenM97GMgGBXZDv89PRJnz16HglHK04X6Xv2vgefCHzbSQ+IDxN+L 3dGoJeruhnVrwBD/7Mmgr02eEZ0beHx1qcQ87gJ6yUFepLj/B+hrSG4vkgLcQkLp VvcramGFy+MsW/oXgbt7HEg77Ai3c8w/grQ5RxtnfnsFpJ0uIxKvmqjPDlM0o0m2 mBspXfbv452+kg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:11 2026 by rpki-client