This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json) Hash identifier: WZ4nPiq0VgEjfAwG3cqjOCkbzR//eIzDatXGBezQFlo= Subject key identifier: E3:BA:52:07:F0:FD:0A:01:5C:19:7C:D2:56:FA:3C:00:91:14:55:7B Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d Certificate serial: 019BF2E2990F095FAF2F300395A653329F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft Manifest number: 0999 Signing time: Sun 25 Jan 2026 02:01:34 +0000 Manifest this update: Sun 25 Jan 2026 02:01:34 +0000 Manifest next update: Mon 26 Jan 2026 02:01:34 +0000 Files and hashes: 1: Nd2VWji2-npmv2b1apqFNWYSkaY.roa (hash: BWQO3/ctGckcd4Dl6OgXbOo4/UEjPFHnSYCpr3sCzaU=) 2: dKP6zKEOjA35eNWIADhSGj3djko.roa (hash: 2Lz2j2XDdHTzfHzI32dG004beOMGbTVI9KUsaPstIRU=) 3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: C5O5gXMEs2nglHI6xIq43JosawQhOJj20x/GQnlBGXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:99:0f:09:5f:af:2f:30:03:95:a6:53:32:9f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d Validity Not Before: Jan 25 02:01:34 2026 GMT Not After : Jan 26 02:01:34 2026 GMT Subject: CN=e3ba5207f0fd0a015c197cd256fa3c009114557b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9e:60:d7:1d:bb:3a:f6:f7:57:08:9f:75:1f: 79:4f:15:60:86:0a:d5:05:6d:0b:33:00:5b:6f:44: 81:1a:32:fd:e9:12:b8:2f:a0:44:0c:75:2c:f7:f3: 46:0b:19:4c:f3:39:06:d0:fd:61:1f:66:17:66:26: c0:f5:e8:10:8f:6d:ed:6f:bd:a0:74:95:27:15:73: b2:f0:c8:be:be:76:4e:d6:00:61:e3:f8:22:34:f3: 64:e9:d4:02:b7:09:27:d4:51:29:6c:18:6f:5e:8f: 66:81:0c:04:d9:ef:65:1d:63:bb:27:8a:e5:e9:fc: e1:55:8a:4f:94:64:e2:13:e2:18:0c:92:fa:4a:6b: d9:22:dd:fa:0b:46:8a:ab:e1:ca:68:37:55:7b:1b: 50:aa:bf:44:e7:d0:1b:cc:52:ff:e3:58:75:63:8d: 6a:7a:09:22:94:08:01:84:bd:31:3b:f3:ed:88:12: e2:fe:01:0e:5c:07:d9:dd:51:9d:13:3e:e3:67:2a: 3b:26:86:41:ae:17:92:d3:fc:de:22:e0:ea:4a:df: 7d:bf:13:1e:da:e6:06:8a:93:6b:38:3a:be:92:f2: 2e:d2:33:83:51:37:43:85:e0:7e:c2:8d:f9:da:ec: 0f:8e:6a:0a:70:5a:36:b7:93:91:3a:b5:76:ea:a6: 21:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BA:52:07:F0:FD:0A:01:5C:19:7C:D2:56:FA:3C:00:91:14:55:7B X509v3 Authority Key Identifier: keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:5b:60:29:ac:ba:99:82:a0:4e:c0:17:28:b9:b9:60:86:0c: ed:06:7e:56:35:8a:7c:2d:64:ce:e5:d5:0b:a6:90:2a:04:77: 68:03:ab:fc:ef:c5:0f:48:82:57:e8:42:c3:73:f5:5a:c5:2a: c7:41:84:3f:38:2f:65:d5:6b:92:e4:0a:dc:db:33:00:24:0e: 6a:21:0f:74:a5:15:b8:e0:9a:4b:d8:ab:fa:3e:1d:d1:e6:8e: 3a:ea:f6:fe:a3:0a:87:1e:98:85:c5:fb:a5:f1:c1:d7:88:14: ac:59:55:7d:59:18:e6:40:f7:7e:05:c5:6b:fa:ee:69:eb:d4: ab:5e:4c:61:60:3a:ed:c3:f7:84:d3:77:74:32:63:e9:6d:0e: 1f:8c:25:cf:45:eb:21:55:a7:49:b0:f6:5f:54:12:12:ae:3e: f8:36:6f:d7:d0:64:60:11:20:e8:af:28:e5:00:9c:d3:41:a2: f1:ae:24:76:a5:4e:65:ab:6d:43:99:64:07:75:12:0a:a4:5a: 89:27:f1:5b:7b:1e:56:5c:65:43:20:30:ea:a8:a7:eb:65:2f: 42:ab:1c:e3:57:a6:69:d4:fc:ff:a6:43:b6:8d:27:7d:35:f7: 99:ae:3e:66:b2:a1:1a:92:81:17:44:45:49:eb:47:86:00:1e: b7:54:a1:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4pkPCV+vLzADlaZTMp+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNzM0ZWY1YWUyMWMwZTg5N2ZhMTg2NDQ3MTg0ZWM5YWQ0 YWUyOWQwHhcNMjYwMTI1MDIwMTM0WhcNMjYwMTI2MDIwMTM0WjAzMTEwLwYDVQQD EyhlM2JhNTIwN2YwZmQwYTAxNWMxOTdjZDI1NmZhM2MwMDkxMTQ1NTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ5g1x27Ovb3VwifdR95TxVghgrV BW0LMwBbb0SBGjL96RK4L6BEDHUs9/NGCxlM8zkG0P1hH2YXZibA9egQj23tb72g dJUnFXOy8Mi+vnZO1gBh4/giNPNk6dQCtwkn1FEpbBhvXo9mgQwE2e9lHWO7J4rl 6fzhVYpPlGTiE+IYDJL6SmvZIt36C0aKq+HKaDdVextQqr9E59AbzFL/41h1Y41q egkilAgBhL0xO/PtiBLi/gEOXAfZ3VGdEz7jZyo7JoZBrheS0/zeIuDqSt99vxMe 2uYGipNrODq+kvIu0jODUTdDheB+wo352uwPjmoKcFo2t5OROrV26qYhewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOO6Ugfw/QoBXBl80lb6PACRFFV7MB8GA1UdIwQY MBaAFKpzTvWuIcDol/oYZEcYTsmtSuKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWIt ZGE3ODBjZmI5OWE0LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWItZGE3ODBjZmI5OWE0 LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVtgKay6 mYKgTsAXKLm5YIYM7QZ+VjWKfC1kzuXVC6aQKgR3aAOr/O/FD0iCV+hCw3P1WsUq x0GEPzgvZdVrkuQK3NszACQOaiEPdKUVuOCaS9ir+j4d0eaOOur2/qMKhx6YhcX7 pfHB14gUrFlVfVkY5kD3fgXFa/ruaevUq15MYWA67cP3hNN3dDJj6W0OH4wlz0Xr IVWnSbD2X1QSEq4++DZv19BkYBEg6K8o5QCc00Gi8a4kdqVOZattQ5lkB3USCqRa iSfxW3seVlxlQyAw6qin62UvQqsc41emadT8/6ZDto0nfTX3ma4+ZrKhGpKBF0RF SetHhgAet1Sheg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:50:28 2026 by rpki-client