This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft File: qV9jiGJSm22v1EDhcqIvASCwmuo.mft (raw, json) Hash identifier: OfC7yn0LMi0YdWu7vQfLkBIZpS4gTdrKLVeQeHodamM= Subject key identifier: 13:EC:C7:06:D6:60:1B:D8:25:65:F0:1C:54:BA:22:7A:BC:24:5F:13 Authority key identifier: A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA Certificate issuer: /CN=a95f638862529b6dafd440e172a22f0120b09aea Certificate serial: 019BF72CD2D4C68901C9581DAF8F17E04FC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 22:01:08 +0000 Manifest this update: Sun 25 Jan 2026 22:01:08 +0000 Manifest next update: Mon 26 Jan 2026 22:01:08 +0000 Files and hashes: 1: qV9jiGJSm22v1EDhcqIvASCwmuo.crl (hash: KnEwsDd3uARSzbexnXq0V2EzrsrE31lHFRDLtX65Nws=) 2: vXqWSpoy-vUfdRhBjmIqtuILrrA.roa (hash: AP1nnsDukGUHxQL7JsdOeOGXem9GHtDYUmgA7WKjN3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:d2:d4:c6:89:01:c9:58:1d:af:8f:17:e0:4f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a95f638862529b6dafd440e172a22f0120b09aea Validity Not Before: Jan 25 22:01:08 2026 GMT Not After : Jan 26 22:01:08 2026 GMT Subject: CN=13ecc706d6601bd82565f01c54ba227abc245f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:e2:b6:bc:97:5d:54:70:45:45:5f:eb:b2: 6f:2a:6a:e4:88:26:a8:ef:0d:e6:d7:30:cb:19:0a: 62:c0:17:e5:a9:6b:87:9e:f8:96:0b:3f:28:b5:2e: 1a:99:4a:78:8d:77:3d:09:4c:2c:0c:9d:f3:e3:0d: 2d:d5:32:28:f1:6d:ed:9c:01:f8:28:b4:75:b6:5c: 0c:55:6c:f1:33:3b:04:78:18:52:e0:dc:54:0d:91: dd:0e:fe:08:b4:ba:79:e9:89:ea:08:06:d0:ba:76: dd:ab:4f:9a:9f:07:b4:34:34:99:bd:17:c8:6f:1a: ec:ae:bd:37:a6:d3:9e:24:6e:d5:c3:a3:ca:64:b4: 5e:d8:42:4b:d3:17:dc:d1:2a:2f:fc:47:39:a6:4a: e8:48:b9:cf:97:a2:cc:27:08:34:20:e5:5f:e7:0d: 60:c4:12:27:72:50:5f:55:98:6a:b3:1f:22:fb:4c: 1b:61:60:39:93:59:23:e7:5a:8e:df:f3:bf:8f:96: cd:fb:70:f1:c6:f0:6e:fd:8b:9d:2a:a4:d7:8f:ff: ae:07:e8:e9:56:55:da:91:96:7f:22:6c:86:a1:d8: 34:5e:37:18:5d:68:36:bf:fc:a7:34:7e:0a:8d:b6: cd:54:e4:c4:68:79:a5:54:c7:06:20:21:b1:7c:8e: 59:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EC:C7:06:D6:60:1B:D8:25:65:F0:1C:54:BA:22:7A:BC:24:5F:13 X509v3 Authority Key Identifier: keyid:A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:81:59:7e:ae:4c:63:33:f6:20:9e:bd:36:f0:b7:f5:73:67: fd:e5:77:36:c4:96:d0:e7:54:0d:59:ec:8c:1f:79:c1:22:dd: 19:7b:91:2a:3b:eb:f6:37:b0:68:1d:4c:f7:da:d2:d1:e0:e1: 03:8b:0f:67:40:cc:8e:19:b6:62:ce:75:79:87:f3:76:03:c2: d7:71:94:2d:e6:13:87:f5:bc:74:ae:a6:c0:d7:3b:c9:11:b0: bb:bc:db:84:cc:e2:03:65:6a:73:bc:a3:7a:be:cc:61:a9:45: c7:92:be:cb:a3:c4:db:47:eb:3c:95:0e:01:25:b6:f4:ff:bf: 0a:51:30:4f:5b:b5:d0:14:cd:dc:9d:6a:c3:bc:6f:16:6e:ec: 7e:71:20:67:77:8a:15:06:96:dd:fa:21:f9:66:45:33:ea:b9: 3b:8b:50:fa:5e:35:a6:6e:61:0d:c3:1a:26:95:18:70:03:8b: 65:ee:65:3d:90:b7:88:a3:c4:0a:13:2c:39:9f:fd:3e:e3:96: 6f:55:c1:2e:b1:6e:d2:4f:e5:be:a3:ce:31:29:0e:87:ec:3e: 5b:67:24:57:f3:62:c6:c1:7b:6e:d1:b9:ec:bc:8e:81:d1:18: 57:2c:4e:10:02:2d:05:ee:85:52:4b:da:9e:77:4f:24:72:00: 1b:4f:9f:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LNLUxokByVgdr48X4E/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NWY2Mzg4NjI1MjliNmRhZmQ0NDBlMTcyYTIyZjAxMjBi MDlhZWEwHhcNMjYwMTI1MjIwMTA4WhcNMjYwMTI2MjIwMTA4WjAzMTEwLwYDVQQD EygxM2VjYzcwNmQ2NjAxYmQ4MjU2NWYwMWM1NGJhMjI3YWJjMjQ1ZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ifitryXXVRwRUVf67JvKmrkiCao 7w3m1zDLGQpiwBflqWuHnviWCz8otS4amUp4jXc9CUwsDJ3z4w0t1TIo8W3tnAH4 KLR1tlwMVWzxMzsEeBhS4NxUDZHdDv4ItLp56YnqCAbQunbdq0+anwe0NDSZvRfI bxrsrr03ptOeJG7Vw6PKZLRe2EJL0xfc0Sov/Ec5pkroSLnPl6LMJwg0IOVf5w1g xBInclBfVZhqsx8i+0wbYWA5k1kj51qO3/O/j5bN+3DxxvBu/YudKqTXj/+uB+jp VlXakZZ/ImyGodg0XjcYXWg2v/ynNH4KjbbNVOTEaHmlVMcGICGxfI5Z3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPsxwbWYBvYJWXwHFS6Inq8JF8TMB8GA1UdIwQY MBaAFKlfY4hiUpttr9RA4XKiLwEgsJrqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVY5amlHSlNtMjJ2MUVEaGNxSXZBU0N3bXVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hZjQ5M2YtNDFmZS00MDZkLWIzZmYt ZWJiNTNjMjUzMDdiLzEvcVY5amlHSlNtMjJ2MUVEaGNxSXZBU0N3bXVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9hZjQ5M2YtNDFmZS00MDZkLWIzZmYtZWJiNTNjMjUzMDdi LzEvcVY5amlHSlNtMjJ2MUVEaGNxSXZBU0N3bXVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApoFZfq5M YzP2IJ69NvC39XNn/eV3NsSW0OdUDVnsjB95wSLdGXuRKjvr9jewaB1M99rS0eDh A4sPZ0DMjhm2Ys51eYfzdgPC13GULeYTh/W8dK6mwNc7yRGwu7zbhMziA2Vqc7yj er7MYalFx5K+y6PE20frPJUOASW29P+/ClEwT1u10BTN3J1qw7xvFm7sfnEgZ3eK FQaW3foh+WZFM+q5O4tQ+l41pm5hDcMaJpUYcAOLZe5lPZC3iKPEChMsOZ/9PuOW b1XBLrFu0k/lvqPOMSkOh+w+W2ckV/NixsF7btG57LyOgdEYVyxOEAItBe6FUkva nndPJHIAG0+fgg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:20 2026 by rpki-client