This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json) Hash identifier: zDf4ulGk4H8Rn/aYKIJWAYt+09khkQlLd0+1WDehQAw= Subject key identifier: 5C:E2:8C:FE:BA:F8:98:56:CF:FB:4E:83:FB:7E:76:D4:7D:85:EC:EE Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42 Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342 Certificate serial: 019BF6515DECB4FF1A30AD1EEDEA3CF62224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft Manifest number: 15F3 Signing time: Sun 25 Jan 2026 18:01:26 +0000 Manifest this update: Sun 25 Jan 2026 18:01:26 +0000 Manifest next update: Mon 26 Jan 2026 18:01:26 +0000 Files and hashes: 1: OFCs67DffEHin03fXSzbafPRilM.roa (hash: 6ap5zRRwDa5G9tEhkbImTGroNfBqTJcGLaIQpF4U370=) 2: ev65uGpdeskGU8rxMwP9DGzY7yo.roa (hash: mm84YFZH+EnFHVYRA5O2XqnvCrusjCtnVPoVlpbhPxc=) 3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: X3YXhuWxtlrFdYaI5rDwU8J9y1Z9YerWzqu8f9C+UR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:5d:ec:b4:ff:1a:30:ad:1e:ed:ea:3c:f6:22:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342 Validity Not Before: Jan 25 18:01:26 2026 GMT Not After : Jan 26 18:01:26 2026 GMT Subject: CN=5ce28cfebaf89856cffb4e83fb7e76d47d85ecee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:ff:72:ec:32:29:cb:2e:b3:69:8b:bb:2a: e3:e1:c5:5f:b8:96:52:3f:ec:d2:89:8c:76:15:ff: ba:6a:c4:4e:72:a3:ea:55:96:ff:da:00:b4:44:b2: f2:ab:1d:d0:9e:6b:23:20:b4:7e:be:ff:41:13:c5: 90:66:b2:30:dc:77:b8:9a:ea:87:fb:31:c3:af:b5: a5:46:69:9c:d7:68:3d:3f:7e:73:0e:a9:1f:fd:ae: 49:32:97:bf:b0:db:1a:6b:c3:ab:f6:da:48:11:0d: d2:11:06:3d:6a:83:ca:79:b2:e3:29:3a:ac:e8:66: 4e:f9:53:2a:9b:e5:07:bb:8c:43:80:7a:7d:1f:72: 32:75:e0:a3:74:6d:c2:ed:80:f3:c6:86:e9:2d:07: c4:e7:66:47:7f:2a:df:f4:3e:48:92:7b:60:3b:95: 5f:a7:ee:2a:54:f4:53:ad:94:43:1c:e8:84:0a:8f: 04:8c:10:11:fd:e9:9f:e1:41:8a:3a:75:79:7b:e3: 2a:d9:c3:78:ff:3f:6a:40:b4:00:c2:c7:87:c8:3d: 8b:c5:6f:1e:65:7e:99:35:bc:3e:28:aa:21:e1:42: 6a:bb:2a:42:92:12:ef:d8:2b:48:95:b3:52:db:60: 37:a0:22:09:55:a7:53:4e:2b:f2:3d:04:a8:e8:0c: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E2:8C:FE:BA:F8:98:56:CF:FB:4E:83:FB:7E:76:D4:7D:85:EC:EE X509v3 Authority Key Identifier: keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8f:e4:9b:ce:cc:51:36:cb:a1:00:ff:42:72:96:fc:5b:2b: 1e:7c:51:ad:65:2a:50:17:2e:ef:a5:a1:ea:28:49:dd:3c:5e: 92:18:27:9e:9f:d7:20:89:e1:21:0b:7a:39:59:e2:a9:90:98: bc:8e:c5:bf:91:93:5f:0b:35:ed:5d:bb:ac:f8:63:56:85:93: db:ae:13:45:7f:45:a2:9b:d6:24:a5:b1:a7:b3:1d:af:34:37: d9:cb:d3:46:a0:ff:69:c7:85:4f:8d:93:d0:8b:c8:e7:86:70: 43:e4:c9:00:15:d6:86:86:7c:22:c6:11:ae:36:e4:9b:fe:84: 05:4c:94:7d:d2:c1:47:0a:99:e8:95:6d:ce:f6:03:e6:a3:4f: aa:21:f6:5c:d1:a4:d1:a4:18:a7:71:3e:05:70:6d:d9:cf:1e: a0:5a:fa:8d:70:a8:cd:3b:df:30:02:2d:b5:d6:9d:56:4b:c2: 7f:4a:fd:f1:d3:49:2c:e4:05:ab:3a:b6:3a:77:1f:a9:e8:15: 11:7f:5f:1e:34:df:97:af:60:0e:0a:48:55:b1:60:d6:b7:bd: 6f:32:b8:87:4d:bc:cf:9b:41:36:95:44:a8:e5:ba:52:6b:79: 84:ac:66:7c:d3:f5:97:ba:1b:fb:1c:c7:cc:68:14:21:fb:b4: d8:bf:cd:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UV3stP8aMK0e7eo89iIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDk4OGQxZGYwYTZjY2FiMmU5MzYxNDk1MTA1OTk2MGJh ZDQzNDIwHhcNMjYwMTI1MTgwMTI2WhcNMjYwMTI2MTgwMTI2WjAzMTEwLwYDVQQD Eyg1Y2UyOGNmZWJhZjg5ODU2Y2ZmYjRlODNmYjdlNzZkNDdkODVlY2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsT/cuwyKcsus2mLuyrj4cVfuJZS P+zSiYx2Ff+6asROcqPqVZb/2gC0RLLyqx3QnmsjILR+vv9BE8WQZrIw3He4muqH +zHDr7WlRmmc12g9P35zDqkf/a5JMpe/sNsaa8Or9tpIEQ3SEQY9aoPKebLjKTqs 6GZO+VMqm+UHu4xDgHp9H3IydeCjdG3C7YDzxobpLQfE52ZHfyrf9D5IkntgO5Vf p+4qVPRTrZRDHOiECo8EjBAR/emf4UGKOnV5e+Mq2cN4/z9qQLQAwseHyD2LxW8e ZX6ZNbw+KKoh4UJquypCkhLv2CtIlbNS22A3oCIJVadTTivyPQSo6AwbPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzijP66+JhWz/tOg/t+dtR9hezuMB8GA1UdIwQY MBaAFKnZiNHfCmzKsuk2FJUQWZYLrUNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTIt ZDk3MzBmNWI1ODY3LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTItZDk3MzBmNWI1ODY3 LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAao/km87M UTbLoQD/QnKW/FsrHnxRrWUqUBcu76Wh6ihJ3Txekhgnnp/XIInhIQt6OVniqZCY vI7Fv5GTXws17V27rPhjVoWT264TRX9FopvWJKWxp7MdrzQ32cvTRqD/aceFT42T 0IvI54ZwQ+TJABXWhoZ8IsYRrjbkm/6EBUyUfdLBRwqZ6JVtzvYD5qNPqiH2XNGk 0aQYp3E+BXBt2c8eoFr6jXCozTvfMAIttdadVkvCf0r98dNJLOQFqzq2OncfqegV EX9fHjTfl69gDgpIVbFg1re9bzK4h028z5tBNpVEqOW6Umt5hKxmfNP1l7ob+xzH zGgUIfu02L/Nmg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:49 2026 by rpki-client