This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft File: qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json) Hash identifier: 6oMHLl+x5UPiaAeOS/5j2yG96efjf0lM6Azeyysl1n0= Subject key identifier: A5:B7:56:D6:C2:08:12:2F:42:0E:90:C6:7F:D6:F7:93:14:71:61:E8 Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58 Certificate issuer: /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58 Certificate serial: 019BF3BD5E6062D08187323DA5B7AE423B93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 06:00:32 +0000 Manifest this update: Sun 25 Jan 2026 06:00:32 +0000 Manifest next update: Mon 26 Jan 2026 06:00:32 +0000 Files and hashes: 1: agl7At-sGTLsDTh6fIsNcYqjRVI.roa (hash: kdWoOhR4/BvlVOKr5PU254MlzFegaJ4FGVoYgfo0kq0=) 2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: HtDR4g9s4o1WyChtcRk8c0cRlA+pI3+/nEBkZmZbxkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:5e:60:62:d0:81:87:32:3d:a5:b7:ae:42:3b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58 Validity Not Before: Jan 25 06:00:32 2026 GMT Not After : Jan 26 06:00:32 2026 GMT Subject: CN=a5b756d6c208122f420e90c67fd6f793147161e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:25:2d:69:05:21:2e:80:3b:52:3e:90:a6:8e: d8:35:d5:d6:31:4c:ba:f3:d7:a9:1e:4b:70:ef:9c: 15:44:52:a9:58:bb:de:65:b0:5e:b2:7c:17:45:62: ef:f3:90:e6:bc:53:e8:21:37:85:97:99:ec:e6:76: 12:48:fd:c4:d8:52:78:8f:f5:a8:7a:68:7f:99:65: 0a:40:a3:74:0b:70:46:76:2f:87:6e:49:74:95:9d: e3:4a:ca:94:8a:04:6a:73:28:dd:e7:dd:71:78:d2: eb:d1:b7:28:6e:ee:8f:ac:a0:8b:ff:69:0d:6d:4b: 63:7b:c4:12:c4:88:01:72:d8:c7:fd:7c:09:bb:3a: c2:d9:48:b1:8f:28:fc:8f:49:7d:8b:a8:00:1e:4b: aa:0b:3b:87:66:88:e4:0d:c8:f0:d3:fd:15:91:31: 50:79:dc:20:3b:1e:b8:82:d9:40:2d:81:93:82:7c: aa:9c:1d:e6:7b:b4:11:21:a4:d5:83:e3:4f:ae:79: 3d:c4:87:46:71:ae:24:68:ad:a4:78:43:a6:e3:99: fd:b5:e9:2d:14:b2:50:84:7f:62:be:cd:1c:21:fb: 96:db:66:99:35:23:8a:ee:6c:a8:a4:5c:d3:62:61: c9:ac:79:da:cb:79:ac:67:ce:34:43:56:3e:d0:ce: 4e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B7:56:D6:C2:08:12:2F:42:0E:90:C6:7F:D6:F7:93:14:71:61:E8 X509v3 Authority Key Identifier: keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:51:b5:cb:31:7c:9b:76:17:8d:e3:59:a1:3b:77:ed:1d:df: 6d:83:83:3a:f5:73:96:b4:45:23:91:db:fd:c5:56:fc:34:74: e3:3c:56:f1:10:77:71:d1:04:d7:e8:62:3b:a9:6d:3c:28:08: 63:1d:75:e2:f4:ba:a4:18:d6:7c:d1:b4:98:03:39:05:45:43: 47:b0:58:61:2e:42:37:35:04:2a:22:de:b3:fe:ea:a9:ec:eb: 60:08:21:a3:38:e6:5d:37:6f:35:6c:d6:e6:1f:39:3a:9f:c9: 32:83:26:44:23:e2:bd:f0:b1:24:51:5c:4e:3f:82:de:c1:61: 55:85:34:6f:8c:a7:49:68:0e:29:ca:46:43:14:2b:25:37:33: 73:85:18:1b:52:21:60:83:a9:c8:51:76:63:3f:ad:35:fd:27: da:05:11:69:06:ea:04:75:d4:3f:e5:37:f5:25:07:be:99:a9: 32:d8:b7:bd:77:59:e5:38:46:7e:67:14:76:a6:43:a6:de:a6: e1:03:28:d1:f0:d6:dc:7a:ae:df:d9:ff:13:1d:44:03:97:2e: 19:00:e7:49:ca:db:59:d7:23:fc:cb:5b:e9:24:ef:9a:3f:e8: b2:32:34:2c:bd:78:d2:bf:26:f7:70:1b:b4:83:19:ec:fd:8b: ba:ee:2e:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvV5gYtCBhzI9pbeuQjuTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYTUzNDY0YTgxMGFhMzhjOTM2ZDlkOThiNmEyZDEzMmZj YmZmNTgwHhcNMjYwMTI1MDYwMDMyWhcNMjYwMTI2MDYwMDMyWjAzMTEwLwYDVQQD EyhhNWI3NTZkNmMyMDgxMjJmNDIwZTkwYzY3ZmQ2Zjc5MzE0NzE2MWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCUtaQUhLoA7Uj6Qpo7YNdXWMUy6 89epHktw75wVRFKpWLveZbBesnwXRWLv85DmvFPoITeFl5ns5nYSSP3E2FJ4j/Wo emh/mWUKQKN0C3BGdi+Hbkl0lZ3jSsqUigRqcyjd591xeNLr0bcobu6PrKCL/2kN bUtje8QSxIgBctjH/XwJuzrC2Uixjyj8j0l9i6gAHkuqCzuHZojkDcjw0/0VkTFQ edwgOx64gtlALYGTgnyqnB3me7QRIaTVg+NPrnk9xIdGca4kaK2keEOm45n9tekt FLJQhH9ivs0cIfuW22aZNSOK7myopFzTYmHJrHnay3msZ840Q1Y+0M5OqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKW3VtbCCBIvQg6Qxn/W95MUcWHoMB8GA1UdIwQY MBaAFKqlNGSoEKo4yTbZ2YtqLRMvy/9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXFVMFpLZ1FxampKTnRuWmkyb3RFeV9MXzFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82NGRlMmYtNWYzNS00Zjc3LWE4NDQt NDNkNzRjMDAwN2U2LzEvcXFVMFpLZ1FxampKTnRuWmkyb3RFeV9MXzFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC82NGRlMmYtNWYzNS00Zjc3LWE4NDQtNDNkNzRjMDAwN2U2 LzEvcXFVMFpLZ1FxampKTnRuWmkyb3RFeV9MXzFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlG1yzF8 m3YXjeNZoTt37R3fbYODOvVzlrRFI5Hb/cVW/DR04zxW8RB3cdEE1+hiO6ltPCgI Yx114vS6pBjWfNG0mAM5BUVDR7BYYS5CNzUEKiLes/7qqezrYAghozjmXTdvNWzW 5h85Op/JMoMmRCPivfCxJFFcTj+C3sFhVYU0b4ynSWgOKcpGQxQrJTczc4UYG1Ih YIOpyFF2Yz+tNf0n2gURaQbqBHXUP+U39SUHvpmpMti3vXdZ5ThGfmcUdqZDpt6m 4QMo0fDW3Hqu39n/Ex1EA5cuGQDnScrbWdcj/Mtb6STvmj/osjI0LL140r8m93Ab tIMZ7P2Luu4uuQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:29:53 2026 by rpki-client