This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json) Hash identifier: GxKxhn2wpMrCmT8WQl9B7cSyDu0HzZsJ7W4+9CqAKfE= Subject key identifier: 3B:85:77:A8:C6:A6:31:72:D7:EB:17:77:5D:12:8A:47:AB:6C:A1:44 Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9 Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9 Certificate serial: 019BF6510880E9026A3878A2844314D38D05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft Manifest number: 0800 Signing time: Sun 25 Jan 2026 18:01:04 +0000 Manifest this update: Sun 25 Jan 2026 18:01:04 +0000 Manifest next update: Mon 26 Jan 2026 18:01:04 +0000 Files and hashes: 1: KUoewwdfRmOf_tbAsPp_9X-LAEQ.roa (hash: LGunqhuUXzXuULPWvo35kZbrmM/8QY9qb8IveKrkACU=) 2: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: VCefowOOXIrCt0BefVpQbLzVxvoTQ8kUmcFU9NiJ+xs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:08:80:e9:02:6a:38:78:a2:84:43:14:d3:8d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9 Validity Not Before: Jan 25 18:01:04 2026 GMT Not After : Jan 26 18:01:04 2026 GMT Subject: CN=3b8577a8c6a63172d7eb17775d128a47ab6ca144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7b:02:4c:cd:b7:4a:af:cc:a3:d8:9f:1a:5e: 51:3d:ac:42:40:f9:8a:12:47:8c:3f:f1:8e:1a:f3: 2c:44:ff:55:8c:fd:01:59:c0:17:6b:21:03:fe:a4: e4:10:49:af:65:af:c7:0b:3a:db:6d:e3:9e:60:84: c4:da:69:56:b3:68:b2:2d:23:1e:50:86:19:bf:2f: 67:61:88:91:4e:d9:0a:d6:ee:d8:68:7d:12:7b:d4: 7e:24:33:4b:8e:4c:99:2b:3c:4c:a9:d5:cf:65:c5: ef:88:69:23:77:12:c9:8f:5f:f3:c1:b8:3f:2c:42: a1:4a:1f:7b:5e:98:56:48:1b:e1:34:1a:bc:e3:82: 9e:04:19:f3:8d:51:54:7a:da:ee:4a:6c:5c:b5:38: 68:e6:2b:f9:1e:be:8c:52:ec:b0:2e:d0:84:ea:4b: a4:d0:03:ed:21:ac:4f:b3:44:62:87:9a:73:5e:c5: dd:16:90:76:b3:c0:01:cc:d4:4b:1a:18:ff:65:6f: 91:ee:d0:af:b6:df:b9:5b:5b:d4:d5:3b:e1:df:38: 00:01:4e:a7:88:a1:54:2e:f0:92:42:fe:ad:1e:0e: 8b:06:dd:4c:30:7e:0b:b1:43:59:b3:1d:5e:51:20: 1e:89:cd:2b:49:d9:91:c1:a8:63:51:5c:96:67:bf: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:85:77:A8:C6:A6:31:72:D7:EB:17:77:5D:12:8A:47:AB:6C:A1:44 X509v3 Authority Key Identifier: keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:8b:51:12:c9:11:e2:a2:6c:e9:47:d7:53:7b:3a:46:2a:bf: 21:e8:25:14:2c:ef:25:16:57:bf:70:4b:32:46:a9:0d:aa:aa: 38:f4:3b:61:aa:e0:60:a8:70:04:cf:c6:f8:1c:b2:b3:f4:84: c9:31:03:48:60:0b:0d:3f:93:df:0e:46:ef:0e:5a:ec:9a:11: 56:56:5e:8e:b0:3d:a8:90:71:52:da:09:c9:15:b3:75:82:53: 0b:fe:43:63:c3:67:96:3f:0f:8c:77:3c:6f:d9:f3:c7:0b:a3: 8a:e9:e8:6d:e6:03:43:e3:a5:28:52:f5:77:c8:4d:5a:e4:e4: 59:d5:b7:08:b8:6a:e2:24:80:7a:f0:79:96:fb:28:ef:bd:db: c8:d6:8c:3f:b4:5e:c2:9b:fd:d0:0f:02:01:13:d8:fe:72:0c: bd:7e:a7:5e:7c:2a:9a:da:6d:1d:f5:ba:99:ab:f8:4e:4d:f0: 00:4f:2d:1d:7e:d6:81:00:63:7f:4a:44:50:d2:7e:cc:df:6d: 30:7b:73:6a:68:c7:a0:34:cd:cb:0c:54:d1:fc:3e:fd:bf:ba: b4:50:be:5c:7f:a5:6f:0e:4b:f7:ce:a6:34:ba:9b:3f:95:2f: 36:bd:f8:a2:59:f5:b3:20:39:0d:a3:eb:2b:af:63:13:90:62: 59:ec:f8:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UQiA6QJqOHiihEMU040FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MDJlYjIyYWU1YzBiNGRjZDM5YTBmOTY0MWEyNTcwNjM0 NDcxZjkwHhcNMjYwMTI1MTgwMTA0WhcNMjYwMTI2MTgwMTA0WjAzMTEwLwYDVQQD EygzYjg1NzdhOGM2YTYzMTcyZDdlYjE3Nzc1ZDEyOGE0N2FiNmNhMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXsCTM23Sq/Mo9ifGl5RPaxCQPmK EkeMP/GOGvMsRP9VjP0BWcAXayED/qTkEEmvZa/HCzrbbeOeYITE2mlWs2iyLSMe UIYZvy9nYYiRTtkK1u7YaH0Se9R+JDNLjkyZKzxMqdXPZcXviGkjdxLJj1/zwbg/ LEKhSh97XphWSBvhNBq844KeBBnzjVFUetruSmxctTho5iv5Hr6MUuywLtCE6kuk 0APtIaxPs0Rih5pzXsXdFpB2s8ABzNRLGhj/ZW+R7tCvtt+5W1vU1Tvh3zgAAU6n iKFULvCSQv6tHg6LBt1MMH4LsUNZsx1eUSAeic0rSdmRwahjUVyWZ78RtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuFd6jGpjFy1+sXd10SikerbKFEMB8GA1UdIwQY MBaAFEUC6yKuXAtNzTmg+WQaJXBjRHH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NTY1OWItMjRkNy00MjIwLWExMTgt OTNmNDI1NWYyYjgyLzEvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80NTY1OWItMjRkNy00MjIwLWExMTgtOTNmNDI1NWYyYjgy LzEvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvItREskR 4qJs6UfXU3s6Riq/IeglFCzvJRZXv3BLMkapDaqqOPQ7YargYKhwBM/G+Byys/SE yTEDSGALDT+T3w5G7w5a7JoRVlZejrA9qJBxUtoJyRWzdYJTC/5DY8Nnlj8PjHc8 b9nzxwujiunobeYDQ+OlKFL1d8hNWuTkWdW3CLhq4iSAevB5lvso773byNaMP7Re wpv90A8CARPY/nIMvX6nXnwqmtptHfW6mav4Tk3wAE8tHX7WgQBjf0pEUNJ+zN9t MHtzamjHoDTNywxU0fw+/b+6tFC+XH+lbw5L986mNLqbP5UvNr34oln1syA5DaPr K69jE5BiWez4SA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:34 2026 by rpki-client