This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft File: qqMUWS716ou-hNBkslYXH-KvyD4.mft (raw, json) Hash identifier: +bv3Dvcr9f54XLSFYBuQ01NwDS+PdIfLpg4yUB1D4ow= Subject key identifier: 9F:CF:D5:55:CE:31:89:77:AE:72:B7:34:B1:1D:34:81:23:F7:CD:E3 Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E Certificate issuer: /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e Certificate serial: 019BF2AAC18C9F27183E96032668CF709528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft Manifest number: 0C69 Signing time: Sun 25 Jan 2026 01:00:35 +0000 Manifest this update: Sun 25 Jan 2026 01:00:35 +0000 Manifest next update: Mon 26 Jan 2026 01:00:35 +0000 Files and hashes: 1: 1y4mjCjd3yaeU16gh_uU_xDclvA.roa (hash: akVEsaylTtagPHzHitk7WCUHGfvzfwDTl/6FhQXu8p4=) 2: qqMUWS716ou-hNBkslYXH-KvyD4.crl (hash: 5mTmHVGZOwxa98mO5nh8CK271ic5CXlslH/FudSHmM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:aa:c1:8c:9f:27:18:3e:96:03:26:68:cf:70:95:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e Validity Not Before: Jan 25 01:00:35 2026 GMT Not After : Jan 26 01:00:35 2026 GMT Subject: CN=9fcfd555ce318977ae72b734b11d348123f7cde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:c9:80:a5:df:57:03:be:56:0e:c0:3e:70: 24:14:96:e2:46:ed:8d:02:09:bc:41:45:f1:e1:5d: 53:06:a6:f8:ef:be:a4:a6:f9:aa:20:d5:90:93:1b: 83:bf:ba:c5:f6:1b:f5:ed:6b:40:cd:19:d6:bd:ab: 31:fd:75:11:54:fd:ec:c8:cb:ae:7d:3b:33:e5:a9: 48:38:85:2e:a7:30:17:69:a4:bd:ab:2b:b0:be:b9: f9:3d:7f:8e:1b:e9:fc:31:43:95:e2:c3:56:a5:89: e6:53:21:db:2c:e1:10:b3:d4:a0:8e:f2:97:3c:84: 1c:38:44:e1:b1:8b:b5:11:09:40:c1:84:10:66:d9: c1:82:52:f4:ef:01:25:cc:14:20:4c:ef:4f:88:4a: cb:8f:5b:8f:7c:ff:82:25:3c:61:80:2c:e5:a4:8e: 9e:aa:e6:9b:75:1d:19:6b:43:63:fd:64:91:73:9a: 10:58:b3:e7:22:2e:6e:05:8a:cd:01:93:2e:f5:a4: b1:7a:52:aa:01:a7:0a:3e:85:44:9b:75:bf:ac:fb: 51:b2:50:a8:25:e0:ee:4d:3d:98:2b:ba:45:92:73: 72:98:d6:97:3d:cb:0b:18:9e:f5:e8:38:16:d7:c6: 0b:35:09:72:16:b0:ea:23:73:22:ca:2f:ba:c5:59: 99:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CF:D5:55:CE:31:89:77:AE:72:B7:34:B1:1D:34:81:23:F7:CD:E3 X509v3 Authority Key Identifier: keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ab:a6:07:84:f4:e9:4d:4b:7f:da:fa:ff:11:0a:12:d1:46: d9:03:87:23:d9:db:78:c4:6a:91:1f:3f:8b:22:e6:ab:75:d5: 09:4a:9f:be:95:d0:66:5b:6f:d5:ae:43:ca:66:2d:ff:89:b9: ed:7c:61:bb:20:a5:b6:64:b5:96:93:f5:e9:b6:4a:aa:8c:cd: 8a:f2:66:f6:35:82:9f:89:09:fb:2c:67:c0:e6:4e:bf:4c:22: 77:c2:3c:a2:09:ff:05:46:a9:92:18:e2:9b:c2:0d:c8:54:b2: 30:be:c2:7a:6d:07:8a:21:f4:d7:1b:d0:e4:d5:9f:81:60:fd: 1b:65:48:bf:fe:f8:cb:29:91:ce:df:9f:4f:6e:53:88:6b:83: 5b:4f:dc:9b:cd:19:32:6f:b0:be:8d:4c:9e:c3:8b:2b:6b:3f: 32:fd:10:c1:45:d8:a8:5b:41:be:85:4a:e2:1b:5e:18:b8:b2: 65:dc:dc:80:0f:d3:3a:20:d4:51:62:9a:73:cf:5d:7a:03:04: b8:5d:54:bc:1c:d2:8d:43:08:74:68:31:19:7e:3d:74:8b:2a: fb:40:62:5c:5a:9c:b5:12:a2:9d:88:11:ea:0f:08:11:30:d3: 4a:0c:59:5f:21:41:ce:26:62:b5:d5:9b:78:39:ec:d1:13:1c: 83:39:62:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqsGMnycYPpYDJmjPcJUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYTMxNDU5MmVmNWVhOGJiZTg0ZDA2NGIyNTYxNzFmZTJh ZmM4M2UwHhcNMjYwMTI1MDEwMDM1WhcNMjYwMTI2MDEwMDM1WjAzMTEwLwYDVQQD Eyg5ZmNmZDU1NWNlMzE4OTc3YWU3MmI3MzRiMTFkMzQ4MTIzZjdjZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1PJgKXfVwO+Vg7APnAkFJbiRu2N Agm8QUXx4V1TBqb4776kpvmqINWQkxuDv7rF9hv17WtAzRnWvasx/XURVP3syMuu fTsz5alIOIUupzAXaaS9qyuwvrn5PX+OG+n8MUOV4sNWpYnmUyHbLOEQs9SgjvKX PIQcOEThsYu1EQlAwYQQZtnBglL07wElzBQgTO9PiErLj1uPfP+CJTxhgCzlpI6e quabdR0Za0Nj/WSRc5oQWLPnIi5uBYrNAZMu9aSxelKqAacKPoVEm3W/rPtRslCo JeDuTT2YK7pFknNymNaXPcsLGJ716DgW18YLNQlyFrDqI3Miyi+6xVmZAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/P1VXOMYl3rnK3NLEdNIEj983jMB8GA1UdIwQY MBaAFKqjFFku9eqLvoTQZLJWFx/ir8g+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83ZThjMTctZTIwMS00ZmY0LTgzNjYt ZjBkZjIzODk4ZjY0LzEvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83ZThjMTctZTIwMS00ZmY0LTgzNjYtZjBkZjIzODk4ZjY0 LzEvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaumB4T0 6U1Lf9r6/xEKEtFG2QOHI9nbeMRqkR8/iyLmq3XVCUqfvpXQZltv1a5DymYt/4m5 7XxhuyCltmS1lpP16bZKqozNivJm9jWCn4kJ+yxnwOZOv0wid8I8ogn/BUapkhji m8INyFSyML7Cem0HiiH01xvQ5NWfgWD9G2VIv/74yymRzt+fT25TiGuDW0/cm80Z Mm+wvo1MnsOLK2s/Mv0QwUXYqFtBvoVK4hteGLiyZdzcgA/TOiDUUWKac89degME uF1UvBzSjUMIdGgxGX49dIsq+0BiXFqctRKinYgR6g8IETDTSgxZXyFBziZitdWb eDns0RMcgzlinQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:28:45 2026 by rpki-client