This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json) Hash identifier: PcfOiWSHgBoCnW4532Bk/r9M4muHvUqi1ARdpNKptZ8= Subject key identifier: 43:7E:2E:52:8F:43:06:BF:5C:40:A8:99:E5:41:97:14:EA:79:88:BD Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32 Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832 Certificate serial: 019BF72D41B03E7107495C6D677A3A59F7C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft Manifest number: 0D06 Signing time: Sun 25 Jan 2026 22:01:36 +0000 Manifest this update: Sun 25 Jan 2026 22:01:36 +0000 Manifest next update: Mon 26 Jan 2026 22:01:36 +0000 Files and hashes: 1: A-8nhpgeRouHY2UnNZP3Ty36Mq4.roa (hash: 0Z1tKMjOQH8GDFQdN2zkZ1XfpKKTrB+7t0AWIQlWOsU=) 2: nUmVeUkNC8_ViD_UA6x1PEPc9jI.roa (hash: SFQUWNNE8spFBp4DjpdKZ/dLlID0cBvRZXOgsiCgoVM=) 3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: CHjaxBWDT4ysX8eqc0grk9/1VEZ3A19hPxEhz77+Wi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:41:b0:3e:71:07:49:5c:6d:67:7a:3a:59:f7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832 Validity Not Before: Jan 25 22:01:36 2026 GMT Not After : Jan 26 22:01:36 2026 GMT Subject: CN=437e2e528f4306bf5c40a899e5419714ea7988bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:5e:6b:ea:6d:e6:ab:ae:e8:fc:97:63:33: 52:14:ca:5c:b5:41:3e:0b:19:00:03:d7:18:91:76: b7:d5:eb:60:82:65:4e:a1:e7:7f:d9:39:d6:5a:c6: 71:52:01:71:67:ad:48:ff:0a:95:d4:29:f8:34:cb: 9b:56:ad:ac:db:23:59:00:95:9b:51:21:0b:b5:f3: 0d:98:66:a2:2b:3e:47:72:e2:ae:5a:8b:56:0e:c5: bb:6d:f6:d6:52:3e:19:b3:dd:bf:c6:39:09:ca:b2: 8b:a9:d7:fe:75:6e:56:ef:08:77:cd:46:c9:b0:3b: 9b:58:66:2a:08:1e:4d:61:e6:c0:6b:a2:35:39:da: cb:e3:47:45:6e:88:06:1b:21:c3:05:4e:ac:11:5f: ad:cd:f0:77:23:49:27:b8:79:99:4d:87:34:4e:6f: c2:e5:f2:3a:49:b8:fa:a6:57:22:80:77:23:c2:6a: 08:e7:67:50:58:43:ee:d9:15:9c:e8:ca:57:0c:74: 49:0e:1b:15:74:54:b8:36:c4:bc:96:4b:25:d3:bc: 1c:84:48:36:98:5b:5c:11:d3:cc:83:14:44:5d:8d: 01:c0:02:41:31:6d:01:23:82:1a:a2:71:bf:a5:ee: ab:5c:94:07:64:92:41:74:cd:0c:af:09:ab:ff:42: ed:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7E:2E:52:8F:43:06:BF:5C:40:A8:99:E5:41:97:14:EA:79:88:BD X509v3 Authority Key Identifier: keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:da:cd:07:cc:30:9a:7d:dd:ee:7c:83:e2:29:82:a6:61:8c: 03:43:96:9d:6f:ae:c2:e4:19:29:7b:b3:2a:2e:bf:ed:93:82: 20:6b:d0:25:eb:19:64:98:1a:a1:9c:13:b5:c7:da:15:1d:df: 6d:30:3e:62:65:cf:41:75:f9:5d:96:5e:dc:2c:6a:6c:13:f2: 98:56:4b:5d:67:32:22:ab:79:31:c4:8e:6e:59:93:9d:90:0f: 17:26:2c:b7:3c:30:2b:9e:24:5c:a3:7b:f2:f5:a2:5e:40:40: 10:30:67:23:c6:95:1f:4c:6b:a0:09:15:2f:86:13:49:d3:7e: 2a:22:ec:d8:d6:1d:06:98:6c:b2:91:e5:8c:0b:cd:8c:7f:a6: a9:61:a3:a7:74:4a:3a:56:6e:db:91:f4:26:ef:3e:af:bf:c5: 4c:64:fb:45:32:4b:dc:8c:b5:7d:ef:e3:70:ae:52:61:ac:d0: 90:bd:9e:e6:8d:49:56:09:13:47:2e:fd:df:7a:b0:1f:8a:cb: 9c:69:c5:94:23:b4:e5:99:af:fa:d4:2e:06:da:68:53:4a:98: 29:31:2f:64:e5:28:7b:a9:59:5a:70:54:a2:07:d7:79:c8:87: d6:73:9c:af:ec:ec:68:3c:85:b8:64:b8:65:99:49:ca:cd:52: 98:d6:f8:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LUGwPnEHSVxtZ3o6WffHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmEwMjNlYmRiMTJlOTcxZTdhODcyOWQ4MjZhNzkyNGNm N2U4MzIwHhcNMjYwMTI1MjIwMTM2WhcNMjYwMTI2MjIwMTM2WjAzMTEwLwYDVQQD Eyg0MzdlMmU1MjhmNDMwNmJmNWM0MGE4OTllNTQxOTcxNGVhNzk4OGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuVea+pt5quu6PyXYzNSFMpctUE+ CxkAA9cYkXa31etggmVOoed/2TnWWsZxUgFxZ61I/wqV1Cn4NMubVq2s2yNZAJWb USELtfMNmGaiKz5HcuKuWotWDsW7bfbWUj4Zs92/xjkJyrKLqdf+dW5W7wh3zUbJ sDubWGYqCB5NYebAa6I1OdrL40dFbogGGyHDBU6sEV+tzfB3I0knuHmZTYc0Tm/C 5fI6Sbj6plcigHcjwmoI52dQWEPu2RWc6MpXDHRJDhsVdFS4NsS8lksl07wchEg2 mFtcEdPMgxREXY0BwAJBMW0BI4IaonG/pe6rXJQHZJJBdM0Mrwmr/0Lt0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEN+LlKPQwa/XEComeVBlxTqeYi9MB8GA1UdIwQY MBaAFKgqAj69sS6XHnqHKdgmp5JM9+gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUt MjJmYzU4OGJjNjZmLzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUtMjJmYzU4OGJjNjZm LzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNrNB8ww mn3d7nyD4imCpmGMA0OWnW+uwuQZKXuzKi6/7ZOCIGvQJesZZJgaoZwTtcfaFR3f bTA+YmXPQXX5XZZe3CxqbBPymFZLXWcyIqt5McSOblmTnZAPFyYstzwwK54kXKN7 8vWiXkBAEDBnI8aVH0xroAkVL4YTSdN+KiLs2NYdBphsspHljAvNjH+mqWGjp3RK OlZu25H0Ju8+r7/FTGT7RTJL3Iy1fe/jcK5SYazQkL2e5o1JVgkTRy7933qwH4rL nGnFlCO05Zmv+tQuBtpoU0qYKTEvZOUoe6lZWnBUogfXeciH1nOcr+zsaDyFuGS4 ZZlJys1SmNb4QA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:58 2026 by rpki-client