This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json) Hash identifier: gHIyOHBcpzDX+E5UDIS5XgX+jsxNepJJuqfwPh8KXqo= Subject key identifier: D6:6C:97:5B:E8:73:4B:1C:D1:68:10:0E:35:A5:62:6E:BB:63:09:56 Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71 Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771 Certificate serial: 019BF2E2E81D0AB948059F7DB9B7BA1245F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft Manifest number: 0EC9 Signing time: Sun 25 Jan 2026 02:01:55 +0000 Manifest this update: Sun 25 Jan 2026 02:01:55 +0000 Manifest next update: Mon 26 Jan 2026 02:01:55 +0000 Files and hashes: 1: iikBT2QAMhI0pO1fQIqlbLTfu0Q.roa (hash: +EmJ11d4GwDSAWX/0XCakljAxmrpGGVNg4y/8FSEGCU=) 2: lnQ2qM12OcTN3Tl66lkxIuHBUCI.roa (hash: +iEMNwBTYNtnrtcaCkTfTG4LTW15CLlDWqlFL/QxTSM=) 3: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: gfwkJ9ycTafC72al0za+jRfJ/FuTmnKPXZcIUfN/NOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:e8:1d:0a:b9:48:05:9f:7d:b9:b7:ba:12:45:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771 Validity Not Before: Jan 25 02:01:55 2026 GMT Not After : Jan 26 02:01:55 2026 GMT Subject: CN=d66c975be8734b1cd168100e35a5626ebb630956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:03:36:3b:44:10:d4:b3:a9:92:b4:fe:32:fd: ed:2f:0f:e7:a3:72:1a:6f:e9:b7:a9:f7:0a:59:05: fa:7a:48:87:91:86:14:ca:39:33:4d:76:06:92:1b: e0:c7:1d:1c:d7:51:aa:1a:19:f1:fd:2b:b4:ef:c2: c4:29:a9:7e:74:8c:37:b6:bf:ff:04:2d:49:6e:d1: a2:c0:3e:48:7c:32:5d:b1:23:18:40:9f:70:27:e0: 26:af:72:75:15:15:26:ae:8a:d0:f0:76:5d:52:98: 45:ff:1f:c6:77:99:6b:ab:99:43:83:a1:40:bf:4d: 7e:98:84:5d:d7:be:c6:67:fd:2b:4a:eb:bc:aa:78: 21:3b:e9:6c:f6:44:75:3a:19:34:2a:ae:4c:ac:f7: d0:09:d2:e9:14:06:f3:de:6c:40:5a:c5:4d:16:40: cd:53:09:6a:c5:61:65:50:79:ad:9e:d2:0d:79:e2: 31:eb:21:48:0e:87:f1:0e:8b:78:8b:2c:70:89:95: 69:cb:e5:6a:d3:68:02:ae:40:09:c0:9f:24:4e:9d: 4b:b0:74:bc:c4:68:f3:4a:f3:c1:ab:0f:63:ed:15: 14:43:ec:67:d4:cd:96:6d:9e:b5:06:5e:76:98:19: 80:db:72:fa:13:37:e4:e7:c2:49:e0:17:61:18:c2: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6C:97:5B:E8:73:4B:1C:D1:68:10:0E:35:A5:62:6E:BB:63:09:56 X509v3 Authority Key Identifier: keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:80:36:44:fe:e3:e8:00:d1:85:a1:2e:2b:af:98:22:98:74: f4:03:c7:45:36:6d:01:8f:63:3c:2f:85:eb:a6:79:40:b8:1a: 13:82:24:68:a5:99:ef:f9:07:44:df:87:3f:2b:95:41:14:c9: 9d:50:30:48:d1:e1:cd:bf:2b:9f:1c:0b:e0:b8:2f:de:69:b9: 96:90:d0:1a:b8:f2:71:23:c2:8c:00:37:6e:aa:34:c7:7b:49: 6d:89:af:d4:a9:c2:c1:a7:55:ec:0e:f1:22:6f:48:a1:18:7b: ae:58:d8:b9:7a:3a:04:a9:c2:84:6e:5d:b5:16:8a:2d:bd:69: e4:bf:9a:f2:c5:79:12:cf:a2:56:82:1f:d6:4e:53:c4:2e:47: 2d:6f:d8:87:41:21:62:28:94:55:c8:45:d9:b8:4e:6f:f1:9d: 85:7b:5e:8d:e9:1e:45:f6:54:6b:d7:5d:69:85:4f:ff:16:80: 70:e9:44:c8:cc:50:26:4c:d8:40:e5:d1:b0:2d:d2:30:ac:b2: 28:86:ee:56:8a:3c:31:ed:3c:c2:b0:d0:8c:dd:33:51:9e:63: 16:d9:fd:0d:29:d8:78:54:97:ce:c7:08:6b:0a:50:0c:15:71: a1:9e:2b:b5:40:be:2e:65:e6:bc:29:45:ff:f4:a6:ed:6c:22: fa:7a:33:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4ugdCrlIBZ99ube6EkXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmFiZGE5MDM0NmQwY2FkMjVkY2E2Zjc0NTBiY2NmOGQw OGU3NzEwHhcNMjYwMTI1MDIwMTU1WhcNMjYwMTI2MDIwMTU1WjAzMTEwLwYDVQQD EyhkNjZjOTc1YmU4NzM0YjFjZDE2ODEwMGUzNWE1NjI2ZWJiNjMwOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AM2O0QQ1LOpkrT+Mv3tLw/no3Ia b+m3qfcKWQX6ekiHkYYUyjkzTXYGkhvgxx0c11GqGhnx/Su078LEKal+dIw3tr// BC1JbtGiwD5IfDJdsSMYQJ9wJ+Amr3J1FRUmrorQ8HZdUphF/x/Gd5lrq5lDg6FA v01+mIRd177GZ/0rSuu8qnghO+ls9kR1Ohk0Kq5MrPfQCdLpFAbz3mxAWsVNFkDN UwlqxWFlUHmtntINeeIx6yFIDofxDot4iyxwiZVpy+Vq02gCrkAJwJ8kTp1LsHS8 xGjzSvPBqw9j7RUUQ+xn1M2WbZ61Bl52mBmA23L6Ezfk58JJ4BdhGMLAQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZsl1voc0sc0WgQDjWlYm67YwlWMB8GA1UdIwQY MBaAFKdqvakDRtDK0l3Kb3RQvM+NCOdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNDVjOWItN2I0YS00YjIxLTliMDAt NGQzMDE2ODRjM2JjLzEvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8zNDVjOWItN2I0YS00YjIxLTliMDAtNGQzMDE2ODRjM2Jj LzEvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoA2RP7j 6ADRhaEuK6+YIph09APHRTZtAY9jPC+F66Z5QLgaE4IkaKWZ7/kHRN+HPyuVQRTJ nVAwSNHhzb8rnxwL4Lgv3mm5lpDQGrjycSPCjAA3bqo0x3tJbYmv1KnCwadV7A7x Im9IoRh7rljYuXo6BKnChG5dtRaKLb1p5L+a8sV5Es+iVoIf1k5TxC5HLW/Yh0Eh YiiUVchF2bhOb/GdhXtejekeRfZUa9ddaYVP/xaAcOlEyMxQJkzYQOXRsC3SMKyy KIbuVoo8Me08wrDQjN0zUZ5jFtn9DSnYeFSXzscIawpQDBVxoZ4rtUC+LmXmvClF //Sm7Wwi+nozyA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:49:29 2026 by rpki-client