This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json) Hash identifier: qFF+Ix40fTwGgjgXarZZyUccsJ8vbeAcLPC5ECSrswc= Subject key identifier: E6:18:8E:A9:A9:CB:64:F3:23:30:80:BF:A8:56:E7:0A:44:FA:33:3F Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58 Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858 Certificate serial: 019BF53EA95F7051E2B70300E5D300929752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 13:01:22 +0000 Manifest this update: Sun 25 Jan 2026 13:01:22 +0000 Manifest next update: Mon 26 Jan 2026 13:01:22 +0000 Files and hashes: 1: 4SfojSm1O0yZDYuVtjhC0oqjoZo.roa (hash: q4mcTRajmA1x3P8ne7N/z6IxFaFTMj4qWNPcuiyXN+A=) 2: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: t0osa+c+mHdokPQpnNLmHfCDSNpW8Hf8Fx4adA2nDHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:a9:5f:70:51:e2:b7:03:00:e5:d3:00:92:97:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858 Validity Not Before: Jan 25 13:01:22 2026 GMT Not After : Jan 26 13:01:22 2026 GMT Subject: CN=e6188ea9a9cb64f3233080bfa856e70a44fa333f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:54:ae:95:e7:c8:0e:44:3a:a0:bc:5c:ca: ae:3d:02:19:d8:49:c5:da:c0:9c:dd:b5:c2:81:a7: a6:f2:de:73:e0:b4:84:8b:61:dd:b8:bc:59:97:13: fa:e3:96:2e:a1:06:03:cb:69:ba:f1:d9:77:96:63: 9b:c0:93:8a:87:d5:a3:3e:ea:60:fd:c2:84:e9:c8: 97:e4:c7:a2:48:42:8e:9a:58:ec:17:d9:a1:ea:f4: d8:1c:f5:f5:93:2e:ba:6f:89:5c:f8:10:98:dc:87: 4e:75:cd:b2:6f:99:d8:71:44:f6:fb:bd:a9:a7:fd: 6d:e2:3b:51:b2:f6:3c:a2:87:60:82:65:36:55:d2: 31:b3:9e:6f:a3:d8:b5:83:76:1d:40:36:a8:63:cf: 07:f6:8c:1e:f4:28:96:8a:36:43:24:e5:eb:93:fa: 03:d6:f0:94:d9:27:24:8b:38:38:d0:a2:91:a0:c3: d5:1e:9a:02:37:61:62:e0:a0:5f:58:1e:a0:f0:9d: fc:58:4c:ae:e0:04:b0:5b:1f:19:44:41:3a:fc:fb: ee:7b:ea:df:eb:58:19:9f:77:51:d0:fd:65:72:7b: 36:e8:cc:3a:1f:66:ed:01:70:6c:2a:ec:53:ad:db: d5:97:40:ca:ec:2b:f9:20:2f:d8:08:85:92:50:3f: b8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:18:8E:A9:A9:CB:64:F3:23:30:80:BF:A8:56:E7:0A:44:FA:33:3F X509v3 Authority Key Identifier: keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a2:e6:63:44:06:37:b9:a1:3c:26:76:73:a7:0d:9c:c1:0b: 2d:55:30:77:a1:69:4e:79:fe:66:2d:bc:79:8c:da:51:64:2b: e5:58:a9:cd:59:89:8b:6b:9a:4a:ce:48:cc:ea:0c:ad:21:4c: 79:64:67:33:ca:d7:b6:79:d3:87:e7:dd:58:8e:75:18:d9:08: 46:f7:80:d1:51:aa:e0:cb:84:b6:74:c8:cb:0b:60:25:ad:1a: 5a:01:40:c8:a5:c6:cc:b1:e6:e8:8f:1a:aa:8d:a4:ec:53:16: bc:8e:0e:c2:1d:4e:43:f4:10:9b:6c:37:87:2b:e6:6b:b8:d1: 9f:ac:a5:7e:2c:bc:37:ba:b7:1d:25:47:99:42:ec:88:e6:67: 24:48:b7:e7:f3:df:bf:fc:ed:f1:93:b8:9e:e5:ee:f7:d5:45: 7d:aa:73:a8:f8:e5:22:48:2a:38:32:a0:51:fc:dd:2b:e2:c7: 45:8f:f7:b0:73:1a:48:1f:b0:92:d8:8e:60:90:01:c1:02:1c: 2d:0d:95:91:20:7a:cc:69:3c:f0:7c:dc:be:23:9e:a9:aa:5b: 44:43:d7:ab:09:fd:d3:7b:8f:ad:7f:a8:3e:5b:8e:cd:46:0d: c0:8d:ac:71:56:58:28:88:f2:cc:e0:dd:e9:cf:ba:cb:e1:d1: 12:ae:21:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PqlfcFHitwMA5dMAkpdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiODc3MzQzNjhkODgzMTVmMTFiMzI5Mzg2Y2M1ZWYyYmI4 NzU4NTgwHhcNMjYwMTI1MTMwMTIyWhcNMjYwMTI2MTMwMTIyWjAzMTEwLwYDVQQD EyhlNjE4OGVhOWE5Y2I2NGYzMjMzMDgwYmZhODU2ZTcwYTQ0ZmEzMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qxUrpXnyA5EOqC8XMquPQIZ2EnF 2sCc3bXCgaem8t5z4LSEi2HduLxZlxP645YuoQYDy2m68dl3lmObwJOKh9WjPupg /cKE6ciX5MeiSEKOmljsF9mh6vTYHPX1ky66b4lc+BCY3IdOdc2yb5nYcUT2+72p p/1t4jtRsvY8oodggmU2VdIxs55vo9i1g3YdQDaoY88H9owe9CiWijZDJOXrk/oD 1vCU2Sckizg40KKRoMPVHpoCN2Fi4KBfWB6g8J38WEyu4ASwWx8ZREE6/Pvue+rf 61gZn3dR0P1lcns26Mw6H2btAXBsKuxTrdvVl0DK7Cv5IC/YCIWSUD+4RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYYjqmpy2TzIzCAv6hW5wpE+jM/MB8GA1UdIwQY MBaAFKuHc0No2IMV8Rsyk4bMXvK7h1hYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTRkelEyallneFh4R3pLVGhzeGU4cnVIV0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NjI1NDgtN2IzZC00MGIzLTljMDUt MTg1ODVlZDk0YTk4LzEvcTRkelEyallneFh4R3pLVGhzeGU4cnVIV0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81NjI1NDgtN2IzZC00MGIzLTljMDUtMTg1ODVlZDk0YTk4 LzEvcTRkelEyallneFh4R3pLVGhzeGU4cnVIV0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqLmY0QG N7mhPCZ2c6cNnMELLVUwd6FpTnn+Zi28eYzaUWQr5VipzVmJi2uaSs5IzOoMrSFM eWRnM8rXtnnTh+fdWI51GNkIRveA0VGq4MuEtnTIywtgJa0aWgFAyKXGzLHm6I8a qo2k7FMWvI4Owh1OQ/QQm2w3hyvma7jRn6ylfiy8N7q3HSVHmULsiOZnJEi35/Pf v/zt8ZO4nuXu99VFfapzqPjlIkgqODKgUfzdK+LHRY/3sHMaSB+wktiOYJABwQIc LQ2VkSB6zGk88HzcviOeqapbREPXqwn903uPrX+oPluOzUYNwI2scVZYKIjyzODd 6c+6y+HREq4h2g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:12:53 2026 by rpki-client