This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft File: qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json) Hash identifier: 2HYe5/fO9dEKhvUM3QFu3OQmfxXqPq0ru36wdW6voJ4= Subject key identifier: 0A:F2:EE:1F:E8:FC:13:59:6C:FE:F0:DF:D1:4C:96:27:76:25:06:CC Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6 Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6 Certificate serial: 019BF83F6F849B136C29B146C21D8099789E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft Manifest number: 17F2 Signing time: Mon 26 Jan 2026 03:01:05 +0000 Manifest this update: Mon 26 Jan 2026 03:01:05 +0000 Manifest next update: Tue 27 Jan 2026 03:01:05 +0000 Files and hashes: 1: CNslXorIhHcxu1ZmEwT8mrYvs6k.roa (hash: s1ROfgQwLlFxkAsbeS9eF9uhXnn1miGuc5wD3r3iLCo=) 2: ie_Pu7uiMx8GOXLlSXzf2113uw4.roa (hash: 0qiWVLbjFxTIJ5VjDihdh12+Gr4lOgtQTqIJcLMq4Wc=) 3: o4zZlyS221abBwGOsgbFYOgvgMI.roa (hash: TiMn5uiz7jjx9HbjbyRUh6Tq/Z12nqOsqsCynyTQnIw=) 4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: E96lnGC1k4cmAaSubJjALxC/d5JaYAqjPh78/Ou802w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:6f:84:9b:13:6c:29:b1:46:c2:1d:80:99:78:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6 Validity Not Before: Jan 26 03:01:05 2026 GMT Not After : Jan 27 03:01:05 2026 GMT Subject: CN=0af2ee1fe8fc13596cfef0dfd14c9627762506cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:3b:18:f9:db:99:89:be:7c:09:f2:8c:ef: 34:d9:86:50:9a:c1:f0:56:4b:1c:26:f2:18:f4:63: 06:db:15:78:a7:12:d2:ac:d7:3f:77:f8:57:3d:34: 61:b5:03:57:9a:e3:6b:d2:39:93:96:11:7f:bd:ae: d1:ed:f0:5b:64:05:63:c7:e6:89:6a:53:03:62:c9: dd:66:a7:0a:b8:65:5d:e8:56:34:df:57:39:d0:ba: 2e:75:53:fc:63:5e:9c:9f:d7:68:08:ad:44:f6:b4: bf:7e:b0:4c:19:e4:0e:4d:7e:d4:aa:e2:9b:1a:bb: 11:c9:02:d1:11:ef:70:30:ab:01:4b:f6:31:c9:07: fc:17:cf:91:8e:ab:0d:5c:3c:d7:ab:a4:62:c3:20: f4:62:be:9f:3c:7d:a0:8b:cc:fb:37:d3:62:69:a8: 69:dc:3a:3c:d2:f9:05:8a:8d:45:51:bb:4c:9a:ac: 8e:35:0b:19:10:0f:19:95:70:c4:d4:f1:8e:13:59: d2:ec:da:f6:85:76:8d:8a:bf:55:a1:53:47:de:0f: a6:7a:8a:4a:98:e4:fd:d7:d6:ab:fc:fa:98:aa:af: 94:34:ff:af:d3:e7:39:ce:4f:f2:48:93:c6:73:42: eb:97:5e:29:d3:e8:d1:b2:ac:02:24:1d:67:78:a5: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F2:EE:1F:E8:FC:13:59:6C:FE:F0:DF:D1:4C:96:27:76:25:06:CC X509v3 Authority Key Identifier: keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:af:c1:0b:f3:45:d2:86:aa:10:af:39:13:b9:24:09:09:24: 1a:3e:cb:d3:c6:85:72:be:66:82:8a:34:fc:1e:67:d7:b3:55: 7b:6a:db:e0:25:89:e1:57:f0:ad:ed:60:09:39:b7:8d:6a:47: 25:ac:de:8c:c5:d1:c6:8b:be:4c:51:3e:6d:a0:8b:72:b9:06: 4a:3f:f5:a5:16:d0:00:55:7c:d5:12:bd:0a:74:46:32:04:c0: 33:5d:dc:e7:06:a6:8a:a3:46:da:cd:6a:4e:11:a2:47:67:39: 3b:9d:ec:a7:34:77:84:90:ee:28:bf:d0:ad:f0:aa:4e:50:75: 44:89:32:c1:1f:db:f9:5f:0a:6a:9b:00:c6:98:30:1b:18:b2: 56:86:8c:4f:35:d7:00:8c:23:f5:22:46:59:e9:0b:84:d2:99: 26:ec:12:0b:ca:3f:37:72:c6:c5:01:1c:6b:9b:10:98:9f:c2: c6:3b:31:5e:28:0d:0a:2b:32:62:b9:b2:10:d1:34:c0:29:60: 9d:21:da:1c:cd:c8:db:12:81:70:ca:c7:15:00:73:de:77:3e: 93:d5:5d:38:ba:4e:1c:de:35:f1:58:36:ba:ec:1a:3d:22:c5: a8:ee:1d:6f:c7:e4:ea:41:7e:0e:0b:fe:d9:6f:22:db:0c:fd: 1e:d6:fc:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P2+EmxNsKbFGwh2AmXieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZWM1N2JjODQ2NGZlYzJlOWExYjA5OGZmY2UzNGMyMWFh ZjljYTYwHhcNMjYwMTI2MDMwMTA1WhcNMjYwMTI3MDMwMTA1WjAzMTEwLwYDVQQD EygwYWYyZWUxZmU4ZmMxMzU5NmNmZWYwZGZkMTRjOTYyNzc2MjUwNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9k7GPnbmYm+fAnyjO802YZQmsHw VkscJvIY9GMG2xV4pxLSrNc/d/hXPTRhtQNXmuNr0jmTlhF/va7R7fBbZAVjx+aJ alMDYsndZqcKuGVd6FY031c50LoudVP8Y16cn9doCK1E9rS/frBMGeQOTX7UquKb GrsRyQLREe9wMKsBS/YxyQf8F8+RjqsNXDzXq6RiwyD0Yr6fPH2gi8z7N9Niaahp 3Do80vkFio1FUbtMmqyONQsZEA8ZlXDE1PGOE1nS7Nr2hXaNir9VoVNH3g+meopK mOT919ar/PqYqq+UNP+v0+c5zk/ySJPGc0Lrl14p0+jRsqwCJB1neKWCpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAry7h/o/BNZbP7w39FMlid2JQbMMB8GA1UdIwQY MBaAFKnsV7yEZP7C6aGwmP/ONMIar5ymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMt MTlhM2M1NjQ5YjU3LzEvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMtMTlhM2M1NjQ5YjU3 LzEvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6/BC/NF 0oaqEK85E7kkCQkkGj7L08aFcr5mgoo0/B5n17NVe2rb4CWJ4Vfwre1gCTm3jWpH JazejMXRxou+TFE+baCLcrkGSj/1pRbQAFV81RK9CnRGMgTAM13c5wamiqNG2s1q ThGiR2c5O53spzR3hJDuKL/QrfCqTlB1RIkywR/b+V8KapsAxpgwGxiyVoaMTzXX AIwj9SJGWekLhNKZJuwSC8o/N3LGxQEca5sQmJ/CxjsxXigNCisyYrmyENE0wClg nSHaHM3I2xKBcMrHFQBz3nc+k9VdOLpOHN418Vg2uuwaPSLFqO4db8fk6kF+Dgv+ 2W8i2wz9Htb8sw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:45 2026 by rpki-client