This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json) Hash identifier: H0ctKAWHOmYSDkYlFz9Y+al5IMafg8PPKL2usz12WbQ= Subject key identifier: C5:60:CE:24:90:3E:B0:EE:76:EA:E1:23:A7:A6:4A:DD:E0:C1:C1:10 Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb Certificate serial: 019BF206301EF9102851D1988704DB2F2AAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft Manifest number: 17E9 Signing time: Sat 24 Jan 2026 22:00:50 +0000 Manifest this update: Sat 24 Jan 2026 22:00:50 +0000 Manifest next update: Sun 25 Jan 2026 22:00:50 +0000 Files and hashes: 1: 0ECEewsHbpx9zU1JX2DIun14wc4.roa (hash: 3xUQ5J+uKoXf2K0tx/gaMVdbcJCYxizBzW4f58o5Lj4=) 2: nwtdhhsA3tvO15UW5ngy7VolYDA.roa (hash: jJBsatbPceBiOY7mvKtU7D/vsxD74iAJJTBCJFC0Hqs=) 3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: bEOCcrr+8axpqW0C3l7scK3SAirAoBmGCXup6AopTrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:06:30:1e:f9:10:28:51:d1:98:87:04:db:2f:2a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb Validity Not Before: Jan 24 22:00:50 2026 GMT Not After : Jan 25 22:00:50 2026 GMT Subject: CN=c560ce24903eb0ee76eae123a7a64adde0c1c110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3a:56:ce:ce:34:69:56:6d:16:cb:86:79:27: 4d:f4:3c:f1:78:df:56:10:0a:57:e9:75:9c:0b:73: 22:61:1f:9f:5c:7d:f1:37:b8:1a:65:47:9f:da:cc: 33:cd:75:60:26:4b:7f:9f:f3:60:ba:25:25:5e:30: ca:65:0a:55:28:89:60:60:4d:48:db:cf:f4:56:bc: 10:3c:a1:a2:2a:73:d2:92:22:6f:85:8f:09:d3:e9: 4d:94:17:4f:49:a2:a6:5f:be:f9:1f:e7:54:12:66: b9:89:8b:ec:fc:bb:de:0a:83:e6:7a:14:8c:e7:ab: 10:ea:22:bb:99:aa:64:10:ba:cf:25:20:91:6b:84: bf:92:ce:da:f3:08:22:95:66:88:1a:78:a5:ea:3a: 29:d4:4d:4d:7e:e6:4a:d3:2b:93:94:c5:98:9b:18: 3d:54:21:c4:ff:66:84:2b:bc:ae:bf:5a:92:c1:97: 0b:ad:b6:f6:b4:22:05:c6:98:02:48:41:2a:1e:67: 18:9d:26:6f:c7:c5:cb:72:ee:a5:9b:95:82:d2:7c: c8:78:44:f3:8b:fa:f7:e9:4f:88:50:69:74:d4:72: 65:d0:65:f7:67:03:46:18:03:da:46:61:63:25:c2: 11:d7:0a:e2:d9:30:8f:e3:cc:f6:61:a3:6e:10:e4: 12:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:60:CE:24:90:3E:B0:EE:76:EA:E1:23:A7:A6:4A:DD:E0:C1:C1:10 X509v3 Authority Key Identifier: keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a5:b6:9a:94:6d:39:5e:64:3e:ba:5e:cd:5b:0d:47:75:b7: 50:de:f8:df:1e:3d:a2:e4:f9:f7:ad:4b:8d:f7:6d:36:37:dc: 8c:53:67:e8:b4:85:3b:e6:31:9c:4f:2d:c2:94:45:99:17:59: 17:c5:e9:68:a8:57:90:63:3d:7f:38:41:64:fc:69:6a:5a:07: 8b:96:f5:d4:28:f2:24:d0:76:cb:5b:82:8c:41:ce:19:f8:c0: d6:b7:5c:ea:71:c2:3f:62:0b:2c:c8:ed:1a:89:29:45:11:b0: ed:cc:5d:12:e0:18:45:87:1b:93:fc:85:a7:9c:56:ed:c8:87: 8d:ea:7d:81:6d:c8:9d:a3:ef:cf:49:a9:26:3f:4b:74:15:6c: 46:44:7c:57:0e:16:73:5d:a9:37:21:48:5a:a6:8c:3b:28:10: f2:2e:0a:87:69:5d:a8:85:9c:c9:43:5f:b6:ad:45:d9:f3:cb: 82:cc:c6:d4:9f:bc:f9:50:f3:93:6c:f5:55:65:15:31:e3:dc: 9a:a8:47:69:6c:5d:3b:68:ff:23:d4:2d:0e:43:38:41:19:38: 80:fa:b2:09:6b:22:5c:f3:48:7c:e6:75:a3:e7:90:af:00:21: 2e:f6:ae:95:73:39:c8:48:1c:1b:31:0f:51:47:ea:e0:ba:c7: 5a:e3:c3:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyBjAe+RAoUdGYhwTbLyqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ODAxYmUyMzYzZjIxMWJkMmY1NzgxOGFkZWFmOWMwZGJl MTRiZGIwHhcNMjYwMTI0MjIwMDUwWhcNMjYwMTI1MjIwMDUwWjAzMTEwLwYDVQQD EyhjNTYwY2UyNDkwM2ViMGVlNzZlYWUxMjNhN2E2NGFkZGUwYzFjMTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzpWzs40aVZtFsuGeSdN9DzxeN9W EApX6XWcC3MiYR+fXH3xN7gaZUef2swzzXVgJkt/n/NguiUlXjDKZQpVKIlgYE1I 28/0VrwQPKGiKnPSkiJvhY8J0+lNlBdPSaKmX775H+dUEma5iYvs/LveCoPmehSM 56sQ6iK7mapkELrPJSCRa4S/ks7a8wgilWaIGnil6jop1E1NfuZK0yuTlMWYmxg9 VCHE/2aEK7yuv1qSwZcLrbb2tCIFxpgCSEEqHmcYnSZvx8XLcu6lm5WC0nzIeETz i/r36U+IUGl01HJl0GX3ZwNGGAPaRmFjJcIR1wri2TCP48z2YaNuEOQSywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVgziSQPrDudurhI6emSt3gwcEQMB8GA1UdIwQY MBaAFKiAG+I2PyEb0vV4GK3q+cDb4UvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84MTFlNzMtY2YzMC00OTRkLWFjYWMt ODQyMGFlOWUwNjIyLzEvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS84MTFlNzMtY2YzMC00OTRkLWFjYWMtODQyMGFlOWUwNjIy LzEvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKW2mpRt OV5kPrpezVsNR3W3UN743x49ouT5961LjfdtNjfcjFNn6LSFO+YxnE8twpRFmRdZ F8XpaKhXkGM9fzhBZPxpaloHi5b11CjyJNB2y1uCjEHOGfjA1rdc6nHCP2ILLMjt GokpRRGw7cxdEuAYRYcbk/yFp5xW7ciHjep9gW3InaPvz0mpJj9LdBVsRkR8Vw4W c12pNyFIWqaMOygQ8i4Kh2ldqIWcyUNftq1F2fPLgszG1J+8+VDzk2z1VWUVMePc mqhHaWxdO2j/I9QtDkM4QRk4gPqyCWsiXPNIfOZ1o+eQrwAhLvaulXM5yEgcGzEP UUfq4LrHWuPDXA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:30 2026 by rpki-client