This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json) Hash identifier: NnCHZq6boiDUqw1WVw38hoecRYW7zSUnI/cziZT7JV4= Subject key identifier: AC:C2:52:C5:DD:12:4B:27:7B:CF:2E:90:24:51:57:56:EB:CC:D3:86 Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb Certificate serial: 019BF91B20FF5A46C9A74A3F214ED9CA98B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft Manifest number: 1824 Signing time: Mon 26 Jan 2026 07:01:03 +0000 Manifest this update: Mon 26 Jan 2026 07:01:03 +0000 Manifest next update: Tue 27 Jan 2026 07:01:03 +0000 Files and hashes: 1: 9AQTjaHWKJCXsC30oHllY8BTYu0.roa (hash: 7fmthrhoa3IJWK083wDCI4y5oXM7TE8HLdralxn1zCQ=) 2: D8zt2B-zZXXGmbmFyYrVgX5VlhE.roa (hash: 7mktpizMJp0UVGb90YuRIUsj5vrCk7DRcIeq+0Shwlw=) 3: FR0TMzudRUII0Fa6Jf04w_3WI20.roa (hash: AJPhPEVbqaILZMRzPtnEJF9G4HZjyUJiNfN1jrcINf4=) 4: buqYzFTyi7wPpzd9BAt1N0qAHXU.roa (hash: 7fssqNhBi5yImjk1Vr2WL9ol/xv6RFd9KhgAwqTB6Mg=) 5: cdcnkJ97Pt4zm08H5wo6k7Kj1og.roa (hash: iFLFl7A8YTDlZs6b2ZtDXNK2nv2uM/FdHMVOEy9wgkc=) 6: ffozWOJhdYTlZsYd3LUTrpAH84g.roa (hash: LqRzq5DyTPzo0AG3Z9lInY0bhS/P0365y/30CPyVkNM=) 7: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: osUvGfs5guUXBpgId7fm89H6sXx6pG93xPLqikBLMC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:20:ff:5a:46:c9:a7:4a:3f:21:4e:d9:ca:98:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb Validity Not Before: Jan 26 07:01:03 2026 GMT Not After : Jan 27 07:01:03 2026 GMT Subject: CN=acc252c5dd124b277bcf2e9024515756ebccd386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:fb:15:1b:8d:b8:da:04:90:94:e0:0a:da:33: d9:4b:76:a2:80:e7:f3:13:df:da:9f:06:33:8d:1d: ea:07:92:89:61:a6:90:fb:8d:69:e5:2b:35:7a:3a: 3a:8a:22:fc:aa:5c:42:ec:d2:0b:85:ea:c6:08:b2: 60:04:28:72:8b:45:9e:11:f8:11:5a:60:10:d9:e3: 1a:c9:1e:c1:1c:a1:4a:5e:af:a9:5d:a7:d6:8c:ef: 60:7d:a7:6f:0c:ae:c8:1c:ca:c5:15:e9:d0:23:4d: a9:06:34:56:10:ae:9d:d0:5e:85:b7:1f:82:d0:8a: 1f:06:c6:01:55:ed:79:da:5e:85:63:37:5c:d0:66: e5:f7:6b:c0:09:fe:a6:dc:c5:ca:a8:64:2b:23:ee: e0:e0:dd:5b:f7:22:5c:10:ff:33:ff:e8:74:4d:86: 24:86:0b:fe:72:a3:3e:82:25:4c:a3:b7:71:b1:35: a6:0c:7b:c2:6b:6e:90:18:f1:08:b6:80:c5:95:ac: 21:34:58:8c:b3:68:e0:5c:e9:a0:57:30:13:13:fd: ab:24:cb:ca:a5:d3:a0:c5:a3:e8:d1:33:d7:bf:96: 43:a3:85:a6:e4:ba:36:b8:03:52:53:aa:8f:ee:1b: 04:ef:93:0b:65:80:d0:c5:25:76:76:2b:35:53:29: b9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C2:52:C5:DD:12:4B:27:7B:CF:2E:90:24:51:57:56:EB:CC:D3:86 X509v3 Authority Key Identifier: keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:82:e5:87:e4:79:82:f3:1a:0a:16:29:25:50:ad:89:da:3f: 61:e6:d0:58:26:3c:bf:de:a6:0f:0c:38:29:8f:b0:92:dd:9b: 68:be:50:59:8b:5d:88:75:2c:d5:7e:b4:44:9c:ed:4c:6b:4d: cd:39:8d:d3:67:44:e3:2d:a0:8f:29:9b:52:51:a1:21:7e:6c: 8a:ff:e2:86:7c:8e:a3:59:2b:be:82:2e:29:48:16:73:6a:64: 24:8a:67:d8:04:12:8d:3a:f2:ce:21:de:a9:e9:6f:2f:fd:53: a1:6e:1e:6a:48:49:5d:02:d5:29:b7:a5:8a:bd:cf:bc:9d:e1: dc:75:08:21:7a:b0:e5:c2:67:43:65:c1:5f:26:ac:80:8b:17: bd:22:8c:7b:c5:4f:ec:23:e7:72:56:e1:e5:28:60:65:88:cd: 6d:36:84:81:63:d8:c1:da:46:38:00:3e:e6:01:68:44:8c:2f: 39:69:ec:f8:26:19:c2:03:00:bc:e9:8a:a4:35:c4:df:4d:1b: 4c:47:17:91:1c:9a:30:51:05:94:e0:26:94:50:a3:0b:d7:db: e6:48:5b:69:9d:6e:c2:8b:0f:50:82:ab:3e:c3:f1:41:e3:1a: 88:55:58:3d:42:12:e4:f3:a9:0f:bc:4d:10:e6:f3:de:d4:6a: a5:6d:d6:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5GyD/WkbJp0o/IU7Zypi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl NzYxZmIwHhcNMjYwMTI2MDcwMTAzWhcNMjYwMTI3MDcwMTAzWjAzMTEwLwYDVQQD EyhhY2MyNTJjNWRkMTI0YjI3N2JjZjJlOTAyNDUxNTc1NmViY2NkMzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fsVG4242gSQlOAK2jPZS3aigOfz E9/anwYzjR3qB5KJYaaQ+41p5Ss1ejo6iiL8qlxC7NILherGCLJgBChyi0WeEfgR WmAQ2eMayR7BHKFKXq+pXafWjO9gfadvDK7IHMrFFenQI02pBjRWEK6d0F6Ftx+C 0IofBsYBVe152l6FYzdc0Gbl92vACf6m3MXKqGQrI+7g4N1b9yJcEP8z/+h0TYYk hgv+cqM+giVMo7dxsTWmDHvCa26QGPEItoDFlawhNFiMs2jgXOmgVzATE/2rJMvK pdOgxaPo0TPXv5ZDo4Wm5Lo2uANSU6qP7hsE75MLZYDQxSV2dis1Uym5awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzCUsXdEksne88ukCRRV1brzNOGMB8GA1UdIwQY MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt NmZkOTc4OTIwNWJhLzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4Llh+R5 gvMaChYpJVCtido/YebQWCY8v96mDww4KY+wkt2baL5QWYtdiHUs1X60RJztTGtN zTmN02dE4y2gjymbUlGhIX5siv/ihnyOo1krvoIuKUgWc2pkJIpn2AQSjTryziHe qelvL/1ToW4eakhJXQLVKbelir3PvJ3h3HUIIXqw5cJnQ2XBXyasgIsXvSKMe8VP 7CPnclbh5ShgZYjNbTaEgWPYwdpGOAA+5gFoRIwvOWns+CYZwgMAvOmKpDXE300b TEcXkRyaMFEFlOAmlFCjC9fb5khbaZ1uwosPUIKrPsPxQeMaiFVYPUIS5POpD7xN EObz3tRqpW3Wdg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:46:04 2026 by rpki-client