This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft File: pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json) Hash identifier: V91L8lYgFDJzON5VL5d5yZzE6O2P++1/cYzsGVZ6NCY= Subject key identifier: 04:C4:7D:27:FA:DE:44:A5:7B:CD:71:C5:B2:22:17:F5:6C:A8:33:DF Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0 Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0 Certificate serial: 019BF6F5F52F4F8F2E50E5F231CDB62960D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft Manifest number: 0213 Signing time: Sun 25 Jan 2026 21:01:12 +0000 Manifest this update: Sun 25 Jan 2026 21:01:12 +0000 Manifest next update: Mon 26 Jan 2026 21:01:12 +0000 Files and hashes: 1: 6phx-w5UIxjdX_HJEdkzEKdfgmU.roa (hash: SGPInug9Hk9CwPLCuVMV05j3spVvBaapQvXlXlYZ4gY=) 2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: AZ2N7TCBieOkq0H99kpKF6t30gqxvLQrEkdMzrZqP1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:f5:2f:4f:8f:2e:50:e5:f2:31:cd:b6:29:60:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0 Validity Not Before: Jan 25 21:01:12 2026 GMT Not After : Jan 26 21:01:12 2026 GMT Subject: CN=04c47d27fade44a57bcd71c5b22217f56ca833df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:73:e9:8a:f5:d0:6d:a2:a8:30:95:8a:c8: d3:e9:d8:d7:30:55:ee:df:a3:a5:64:e2:18:da:eb: bd:fb:b5:bb:ab:48:fb:1f:32:3d:1e:c7:6f:48:b3: e0:56:ab:ca:53:c5:f4:99:30:8e:70:c5:ba:79:d7: 2f:ba:ec:0a:3c:0f:bd:c4:d4:67:28:f4:e9:e8:dc: 61:88:c6:86:d3:b6:4b:58:2b:ce:44:fd:7c:af:a9: d7:46:ac:2d:08:4b:2d:fa:bd:e2:93:1d:08:30:39: 80:03:d4:93:ff:e5:c2:e0:74:a4:ce:fb:98:6f:67: f7:7e:f0:b6:84:59:d0:43:55:8d:b1:3d:a7:49:9e: 7e:05:55:67:63:eb:26:f1:3d:78:9b:cd:1c:b0:37: 01:db:f5:e2:cf:d2:7f:1f:1d:cd:35:eb:98:8f:5f: d1:72:7b:86:d9:96:7f:23:6f:d9:38:06:b6:e9:5e: 7d:f3:b7:46:45:81:8d:97:5d:fc:8d:a8:f1:31:86: 68:20:d6:75:c9:9d:f7:93:3c:32:65:e0:47:ad:05: 2b:5a:79:93:fc:2e:dc:b0:68:94:18:1f:08:98:62: fc:50:1e:50:24:b4:eb:19:06:2f:e6:39:71:96:8a: 73:1c:ae:4c:0b:4d:49:63:7b:b9:2d:6c:b9:5a:2d: 80:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C4:7D:27:FA:DE:44:A5:7B:CD:71:C5:B2:22:17:F5:6C:A8:33:DF X509v3 Authority Key Identifier: keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:cb:79:e6:e0:34:de:53:ab:6b:35:c2:b0:d8:a7:ba:df:1a: b5:92:5b:99:50:c2:ac:8f:e0:ef:76:c2:d0:b4:d7:33:42:28: 29:8b:1f:07:81:7c:89:7d:47:48:08:db:d0:6e:2a:bd:52:7a: a2:14:89:cc:25:57:73:b6:69:6b:7d:21:3b:42:66:d1:83:e9: 16:69:a8:4e:dc:6a:ea:2e:ea:bc:59:b1:6f:eb:dc:af:d5:07: 48:fb:bc:cd:40:75:05:80:b4:9a:50:d1:3c:11:52:50:f3:21: c6:01:47:f7:a1:51:03:9f:c1:0c:8a:67:ba:98:4e:12:09:67: 5d:21:f1:9f:a0:09:ab:02:b8:58:76:11:92:bb:4a:62:1a:75: 36:47:a6:2e:93:35:a0:1b:5b:fb:7c:57:e2:4c:f9:ae:c4:56: b2:a3:21:c6:97:98:87:2c:c4:30:36:50:18:33:aa:65:51:9e: 39:37:d4:22:cd:cf:75:92:82:64:e1:70:ed:dd:35:c5:7b:8a: 67:18:2e:73:0f:36:d4:c5:04:fc:e9:30:72:0d:7c:b5:f9:fa: 7d:0d:47:15:13:6f:6c:d7:ef:b4:05:fb:2a:27:3e:c6:27:47: 5c:ed:23:10:ff:6b:a8:fe:42:0b:1e:b3:2f:08:54:4f:8b:29: e4:46:2d:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29fUvT48uUOXyMc22KWDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTNhOWM3MTM5MWQ4ZmEwNmI3MzQyYWE5MmM2ZWVhMmE1 M2U1YzAwHhcNMjYwMTI1MjEwMTEyWhcNMjYwMTI2MjEwMTEyWjAzMTEwLwYDVQQD EygwNGM0N2QyN2ZhZGU0NGE1N2JjZDcxYzViMjIyMTdmNTZjYTgzM2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/Bz6Yr10G2iqDCVisjT6djXMFXu 36OlZOIY2uu9+7W7q0j7HzI9HsdvSLPgVqvKU8X0mTCOcMW6edcvuuwKPA+9xNRn KPTp6NxhiMaG07ZLWCvORP18r6nXRqwtCEst+r3ikx0IMDmAA9ST/+XC4HSkzvuY b2f3fvC2hFnQQ1WNsT2nSZ5+BVVnY+sm8T14m80csDcB2/Xiz9J/Hx3NNeuYj1/R cnuG2ZZ/I2/ZOAa26V5987dGRYGNl138jajxMYZoINZ1yZ33kzwyZeBHrQUrWnmT /C7csGiUGB8ImGL8UB5QJLTrGQYv5jlxlopzHK5MC01JY3u5LWy5Wi2AswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATEfSf63kSle81xxbIiF/VsqDPfMB8GA1UdIwQY MBaAFKajqccTkdj6Brc0KqksbuoqU+XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFPcHh4T1IyUG9HdHpRcXFTeHU2aXBUNWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yNWU0NjYtNmRlZS00ODVkLWFlMmMt YzY3MGYwZWIyM2E0LzEvcHFPcHh4T1IyUG9HdHpRcXFTeHU2aXBUNWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yNWU0NjYtNmRlZS00ODVkLWFlMmMtYzY3MGYwZWIyM2E0 LzEvcHFPcHh4T1IyUG9HdHpRcXFTeHU2aXBUNWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMt55uA0 3lOrazXCsNinut8atZJbmVDCrI/g73bC0LTXM0IoKYsfB4F8iX1HSAjb0G4qvVJ6 ohSJzCVXc7Zpa30hO0Jm0YPpFmmoTtxq6i7qvFmxb+vcr9UHSPu8zUB1BYC0mlDR PBFSUPMhxgFH96FRA5/BDIpnuphOEglnXSHxn6AJqwK4WHYRkrtKYhp1NkemLpM1 oBtb+3xX4kz5rsRWsqMhxpeYhyzEMDZQGDOqZVGeOTfUIs3PdZKCZOFw7d01xXuK Zxgucw821MUE/Okwcg18tfn6fQ1HFRNvbNfvtAX7Kic+xidHXO0jEP9rqP5CCx6z LwhUT4sp5EYtIw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:24 2026 by rpki-client