This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json) Hash identifier: uMycsCPmL4WZp0gWKRndFjSQs5ESDpZM/aKuU+6cTaI= Subject key identifier: B5:65:69:6A:6B:CB:3E:07:BB:28:D1:5E:EE:F2:E2:19:57:D1:92:8B Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b Certificate serial: 019BF574E27C255AC476FE6584509AA7830D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft Manifest number: 177A Signing time: Sun 25 Jan 2026 14:00:36 +0000 Manifest this update: Sun 25 Jan 2026 14:00:36 +0000 Manifest next update: Mon 26 Jan 2026 14:00:36 +0000 Files and hashes: 1: 9iFl9E0VgWNO_Nn27bQay-c817U.roa (hash: La1IKKEmOqIsMgjt9EJI2o3J371vdfvoBpTTdCWHcKQ=) 2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: sMgdYx+TTK7bB+CzjOXCGR38Mx2cjtw49gMWFxJ2XEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:e2:7c:25:5a:c4:76:fe:65:84:50:9a:a7:83:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b Validity Not Before: Jan 25 14:00:36 2026 GMT Not After : Jan 26 14:00:36 2026 GMT Subject: CN=b565696a6bcb3e07bb28d15eeef2e21957d1928b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:00:b6:6f:10:4f:62:8a:e7:a6:b3:92:d3: 1e:24:96:4e:be:ef:8c:af:09:22:92:ef:d6:e4:8b: a8:13:2e:15:f0:50:93:74:42:af:26:48:96:51:ec: 8a:ce:57:95:ed:1d:29:ed:5f:7b:f2:7e:ce:5d:d8: 28:62:ab:17:08:ef:ed:2e:f2:05:2f:92:5a:c1:e7: 70:42:b5:3f:82:07:1e:aa:b1:88:69:18:5d:88:51: d9:29:ff:89:37:88:56:6a:26:84:c2:0e:c3:ec:a9: 4d:2d:f6:cb:ba:61:29:9e:aa:b6:b9:ac:62:ba:e3: 0e:fc:9b:ad:05:06:43:f6:de:93:1c:9d:55:d4:b1: ed:a9:8d:f0:bb:92:6e:9c:75:97:67:9d:cd:31:f2: 75:0c:ab:c8:f7:9c:99:35:9e:7a:80:18:ea:57:6c: b0:4f:b3:4a:d4:fb:68:80:d4:3f:69:ef:a0:b7:83: ee:78:6c:23:86:0d:9a:b2:ac:0d:e6:47:db:48:e9: 19:57:fd:aa:be:10:bb:bd:1c:c8:8f:99:9c:95:30: 81:f8:92:2b:7d:f1:3e:cf:a3:3b:77:f0:ba:95:1c: 00:d6:6d:82:54:55:a4:26:0d:59:98:3e:27:7b:40: e4:5d:98:2e:65:32:21:3a:7f:c9:8e:c1:1a:52:87: b8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:65:69:6A:6B:CB:3E:07:BB:28:D1:5E:EE:F2:E2:19:57:D1:92:8B X509v3 Authority Key Identifier: keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:7f:2c:c0:99:ca:53:58:98:89:25:df:b9:53:f1:3a:00:ef: 81:e0:aa:2f:09:29:a6:74:08:e3:98:16:a2:aa:08:8d:71:e5: d7:bf:91:a5:ed:07:13:38:a5:7e:19:8d:75:63:28:e7:62:85: b9:89:07:cb:1d:2a:58:e5:9d:fd:1e:d5:7f:62:8b:bc:95:a1: 11:20:4a:b2:11:f8:14:1a:62:cd:b1:14:48:24:b6:27:29:4d: 7b:6d:7f:cc:89:9a:5f:3e:e7:5b:94:72:0e:3c:7a:4f:92:30: f0:f5:95:c6:aa:49:d4:09:da:39:2d:fb:b7:65:5b:3a:8a:ce: f6:ee:2b:e2:75:28:24:9f:7c:24:f9:a7:79:e5:72:80:83:18: d2:e5:95:73:e4:fa:7d:0f:5d:d4:d1:40:2a:00:40:39:50:aa: 87:d9:86:a2:ba:47:64:45:0b:e7:0f:d1:b6:45:96:7e:3b:bf: 35:7c:d8:fe:93:37:82:63:3b:34:2a:1e:c5:ac:ff:81:c4:88: a3:45:5c:8c:3d:f6:36:4d:08:62:22:5f:05:81:c8:2a:0b:ad: 97:65:24:ff:b7:ae:bd:d1:ba:6c:a2:6d:e3:5d:d0:9f:13:f3: eb:7a:93:70:8e:6a:fb:f5:6f:e5:14:d3:c2:f1:8e:7a:a1:4e: 07:41:6e:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dOJ8JVrEdv5lhFCap4MNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhODVlOWRhMjIyNzM0NWMxOGFiZDdlNzUyNzJmODFjMjli MzBkMWIwHhcNMjYwMTI1MTQwMDM2WhcNMjYwMTI2MTQwMDM2WjAzMTEwLwYDVQQD EyhiNTY1Njk2YTZiY2IzZTA3YmIyOGQxNWVlZWYyZTIxOTU3ZDE5MjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqgAtm8QT2KK56azktMeJJZOvu+M rwkiku/W5IuoEy4V8FCTdEKvJkiWUeyKzleV7R0p7V978n7OXdgoYqsXCO/tLvIF L5JawedwQrU/ggceqrGIaRhdiFHZKf+JN4hWaiaEwg7D7KlNLfbLumEpnqq2uaxi uuMO/JutBQZD9t6THJ1V1LHtqY3wu5JunHWXZ53NMfJ1DKvI95yZNZ56gBjqV2yw T7NK1PtogNQ/ae+gt4PueGwjhg2asqwN5kfbSOkZV/2qvhC7vRzIj5mclTCB+JIr ffE+z6M7d/C6lRwA1m2CVFWkJg1ZmD4ne0DkXZguZTIhOn/JjsEaUoe48wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVlaWpryz4HuyjRXu7y4hlX0ZKLMB8GA1UdIwQY MBaAFKqF6doiJzRcGKvX51Jy+Bwpsw0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mMmZjMGUtYmJiOS00OTI0LWE4OWMt NzYyMGRiMjc5OTYyLzEvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mMmZjMGUtYmJiOS00OTI0LWE4OWMtNzYyMGRiMjc5OTYy LzEvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeX8swJnK U1iYiSXfuVPxOgDvgeCqLwkppnQI45gWoqoIjXHl17+Rpe0HEzilfhmNdWMo52KF uYkHyx0qWOWd/R7Vf2KLvJWhESBKshH4FBpizbEUSCS2JylNe21/zImaXz7nW5Ry Djx6T5Iw8PWVxqpJ1AnaOS37t2VbOorO9u4r4nUoJJ98JPmneeVygIMY0uWVc+T6 fQ9d1NFAKgBAOVCqh9mGorpHZEUL5w/RtkWWfju/NXzY/pM3gmM7NCoexaz/gcSI o0VcjD32Nk0IYiJfBYHIKgutl2Uk/7euvdG6bKJt413QnxPz63qTcI5q+/Vv5RTT wvGOeqFOB0FuHA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:34 2026 by rpki-client