This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json) Hash identifier: 4B73+h3xiabNu+Jz0yB9HHxMJMbmkolFA6zKVRZbSJA= Subject key identifier: 16:3F:61:80:8F:D4:A4:BD:0E:2E:27:06:BC:E5:99:FB:06:F4:D1:9C Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed Certificate serial: 019BF6BF4BFDC103166D1ABC68EB233D467E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft Manifest number: 14DE Signing time: Sun 25 Jan 2026 20:01:30 +0000 Manifest this update: Sun 25 Jan 2026 20:01:30 +0000 Manifest next update: Mon 26 Jan 2026 20:01:30 +0000 Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=) 2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=) 3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: nhi9tPiiyE3DM/4wuuqRs16yPJ/ZNDZCuFXU56arCfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:4b:fd:c1:03:16:6d:1a:bc:68:eb:23:3d:46:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed Validity Not Before: Jan 25 20:01:30 2026 GMT Not After : Jan 26 20:01:30 2026 GMT Subject: CN=163f61808fd4a4bd0e2e2706bce599fb06f4d19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7f:eb:3a:8a:8e:60:c7:71:65:ab:35:d8:df: 09:fb:d7:c6:5c:4b:71:5d:69:a5:ac:76:10:57:a5: ad:dc:af:6f:2f:5b:0a:9d:6c:1b:35:76:02:10:a1: ba:58:6c:c9:32:81:15:0b:98:5a:d3:a9:6f:19:ee: 10:26:07:90:7a:30:64:14:44:dc:10:b7:aa:77:eb: 5a:08:84:50:2d:7d:76:6e:56:ad:af:fc:35:93:d7: ae:4a:f0:2d:33:27:03:b5:42:a5:c8:c0:43:84:4a: d0:e4:18:ad:95:74:fd:30:1b:73:d5:0a:65:96:8d: c9:9e:7b:c2:3a:7a:74:9a:68:f9:43:68:a5:ae:c0: 1a:86:70:8f:ab:28:10:c9:26:ac:c8:a0:3e:3f:59: 5d:a2:71:db:09:cf:e8:3d:f3:c2:93:32:59:55:00: 5e:a0:66:62:b7:70:56:9d:cf:cb:c4:a1:97:a8:51: a2:48:97:2f:95:36:20:23:b3:ad:48:f0:cb:51:43: ef:29:c1:d5:d5:41:f9:b7:1c:4d:e1:37:99:24:c0: c2:61:38:ce:f3:0f:1e:07:d7:8a:39:ce:0f:83:0d: c2:75:b8:3d:b5:05:62:8f:76:bb:7a:d5:41:9f:07: 5b:b6:8a:26:5b:23:e2:cd:ec:24:7a:fc:bf:23:52: 6e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3F:61:80:8F:D4:A4:BD:0E:2E:27:06:BC:E5:99:FB:06:F4:D1:9C X509v3 Authority Key Identifier: keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:34:ec:0e:70:65:45:5a:34:34:2e:53:76:8a:5a:a6:1e:e5: 3f:ff:38:27:21:db:de:75:8a:49:28:21:e1:05:72:4d:d3:aa: 0d:34:02:b3:51:bf:ec:28:76:35:85:89:8f:98:e5:db:94:67: 15:ad:89:d8:92:ad:62:58:29:5d:44:1b:59:0f:b6:10:b7:e0: 26:b7:0a:a1:ed:85:f2:4a:8d:17:85:1d:e4:d2:d5:e6:9e:e0: f9:1d:2d:75:3d:d8:b0:59:ac:e0:ce:b6:45:cc:7d:f7:13:24: 52:5d:d5:e5:34:9d:78:9e:19:26:54:89:b6:56:13:b7:27:2b: a6:d0:84:60:b0:2b:db:6d:36:e7:e3:0c:75:e8:c1:b4:bb:c0: 01:a6:37:34:8d:92:d3:91:12:8d:e6:0f:aa:85:fa:3c:d9:e8: 86:50:e3:8d:46:2b:7e:fa:fc:ee:8f:29:4c:5a:a8:c7:7b:1d: d0:34:90:01:e5:db:d1:0e:4f:1c:a6:56:ac:f6:6d:90:35:be: 44:2a:ea:0e:6f:49:8b:b3:de:e1:6f:c6:59:c3:39:8e:4b:13: 9c:e8:0d:38:29:04:4c:ab:13:47:fe:bd:2e:44:e0:3b:43:b9: 14:65:3f:61:c4:2e:85:e8:c8:ec:fd:15:14:4f:30:4d:f7:0f: b7:b9:8c:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v0v9wQMWbRq8aOsjPUZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjQyNDJjMTBlNDM4NTM3ZTE2OWFiMDAyYmY2YmU4MWZh MmE1ZWQwHhcNMjYwMTI1MjAwMTMwWhcNMjYwMTI2MjAwMTMwWjAzMTEwLwYDVQQD EygxNjNmNjE4MDhmZDRhNGJkMGUyZTI3MDZiY2U1OTlmYjA2ZjRkMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H/rOoqOYMdxZas12N8J+9fGXEtx XWmlrHYQV6Wt3K9vL1sKnWwbNXYCEKG6WGzJMoEVC5ha06lvGe4QJgeQejBkFETc ELeqd+taCIRQLX12blatr/w1k9euSvAtMycDtUKlyMBDhErQ5BitlXT9MBtz1Qpl lo3JnnvCOnp0mmj5Q2ilrsAahnCPqygQySasyKA+P1ldonHbCc/oPfPCkzJZVQBe oGZit3BWnc/LxKGXqFGiSJcvlTYgI7OtSPDLUUPvKcHV1UH5txxN4TeZJMDCYTjO 8w8eB9eKOc4Pgw3Cdbg9tQVij3a7etVBnwdbtoomWyPizewkevy/I1JuwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBY/YYCP1KS9Di4nBrzlmfsG9NGcMB8GA1UdIwQY MBaAFK/0JCwQ5DhTfhaasAK/a+gfoqXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMt ZWU3YmEwZTlmN2NhLzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMtZWU3YmEwZTlmN2Nh LzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDTsDnBl RVo0NC5Tdopaph7lP/84JyHb3nWKSSgh4QVyTdOqDTQCs1G/7Ch2NYWJj5jl25Rn Fa2J2JKtYlgpXUQbWQ+2ELfgJrcKoe2F8kqNF4Ud5NLV5p7g+R0tdT3YsFms4M62 Rcx99xMkUl3V5TSdeJ4ZJlSJtlYTtycrptCEYLAr22025+MMdejBtLvAAaY3NI2S 05ESjeYPqoX6PNnohlDjjUYrfvr87o8pTFqox3sd0DSQAeXb0Q5PHKZWrPZtkDW+ RCrqDm9Ji7Pe4W/GWcM5jksTnOgNOCkETKsTR/69LkTgO0O5FGU/YcQuhejI7P0V FE8wTfcPt7mMeg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:58 2026 by rpki-client