This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft File: q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json) Hash identifier: HwiZCJaDCQ9KF4PwxIEGjGXXXMeud1O/6004o/P/Ips= Subject key identifier: 74:74:36:F8:45:04:92:31:D8:6C:9E:BB:58:EE:D6:52:CC:E3:76:FF Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Certificate serial: 019BF72CEA36A065B4E7677C4A8025D01ADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft Manifest number: 0664 Signing time: Sun 25 Jan 2026 22:01:14 +0000 Manifest this update: Sun 25 Jan 2026 22:01:14 +0000 Manifest next update: Mon 26 Jan 2026 22:01:14 +0000 Files and hashes: 1: DYsiQqVjAuJI8byUG8mKd0jSQh4.asa (hash: YMrGSqc7KqHO4j1lgZTxY1WoFwm99rirLTct3gzShT0=) 2: UMfLn4hPH5R_1hQD4UOLCtDtmiU.roa (hash: gXIOBSbjWI6IVjh8IXmjFidTPNW2xP/m42MptHiY2Wk=) 3: ZLPqhzCBZnWKf6Ejj9mHPZInK0A.roa (hash: fDVxJt+eTWzb1YGH406MqF2UxgyF9iK3BrieNaTLjIM=) 4: _HpIO26oTlp3ah6eb8LpZJn4sZU.asa (hash: rNwAJLoUrEajetBo8sWHQzmyDtFszLMTuAjSH9z1rL4=) 5: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: ujNBLL+TUCZ9MBYY5mawRlzmNPpGuoHqchMamICzrXA=) 6: sIrL6b_di1kxEMzg3ieNCdw3WJ4.roa (hash: Wu+8arEyxXYyHRsQgH9EF3izIIcpQmHoeba8OxIgES4=) 7: yfQb9AlKC_r1qbW7JgUEAWbb2SE.roa (hash: V6bi9bW+gyxZUdO/fUkn/b7FLfhAgD7Kio8Z4leJS74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ea:36:a0:65:b4:e7:67:7c:4a:80:25:d0:1a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Validity Not Before: Jan 25 22:01:14 2026 GMT Not After : Jan 26 22:01:14 2026 GMT Subject: CN=747436f845049231d86c9ebb58eed652cce376ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fb:bf:19:85:05:4d:c0:80:e8:ad:ea:ac:04: 5c:0b:4b:d6:ad:5f:ee:13:e9:03:72:4f:09:9e:c9: 4a:d6:a2:06:8d:86:74:ac:08:39:80:7e:fd:a1:45: 7c:88:99:a4:cb:21:eb:6b:ae:b3:22:5a:c1:7e:6b: 02:2d:53:fe:69:3b:3b:df:37:5e:3d:ad:78:d6:47: 06:12:58:ef:e3:d2:86:7d:1a:75:0e:e3:9d:03:c5: 9d:78:a6:c5:87:ad:0a:c7:9f:03:a8:08:d2:32:a8: 16:17:dc:0d:c8:c0:4f:ef:f5:b0:86:b9:bf:90:d3: 48:40:a6:b2:44:84:a8:fe:32:37:22:15:a7:e7:7c: a3:2f:41:37:a0:a3:e0:30:99:3f:0f:70:a9:ad:58: d5:fd:2b:10:23:9f:84:0b:a3:ae:9c:d4:a8:06:53: ce:8d:52:ca:f1:1e:03:dd:57:d4:c5:0f:c4:ae:2e: 03:8e:12:0d:26:a6:c2:ce:14:89:1e:31:f8:f6:f3: e2:6f:1f:79:65:01:2c:c8:55:1d:62:44:10:ba:ed: a6:8c:0d:a6:d8:dd:ba:94:0e:85:c6:6d:92:f0:bf: de:a4:be:ea:11:77:50:f9:30:43:10:44:21:c1:e8: 31:d5:9c:d7:c1:86:b2:db:9f:1f:2e:5f:f6:a9:ce: 80:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:74:36:F8:45:04:92:31:D8:6C:9E:BB:58:EE:D6:52:CC:E3:76:FF X509v3 Authority Key Identifier: keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e2:9f:13:ff:37:66:b8:25:fd:e2:b9:6a:e9:5d:31:29:70: e1:c7:e4:61:73:ce:ef:42:9e:28:f0:c9:d3:88:5e:74:f2:a0: 86:69:34:4e:11:ae:43:99:74:c8:01:7b:ed:be:47:34:83:e1: 18:33:a1:a3:db:26:d1:03:89:68:fa:51:78:9e:5b:8d:03:81: bf:20:63:a3:56:c6:b5:09:6c:fa:71:97:d6:a8:0a:73:86:b9: 29:43:ca:95:b3:33:19:3e:b5:94:32:bc:55:42:bd:a2:1f:e8: eb:92:34:c7:80:8b:50:96:23:77:bf:1a:62:cf:57:34:00:55: 29:57:1d:21:a6:08:a9:3b:51:03:df:a3:32:48:f6:89:c8:e6: f2:89:e0:0b:97:05:08:5a:b1:87:2e:8c:7b:bb:22:cf:c4:84: 61:96:97:d1:5c:b1:3a:2e:42:3a:2d:4b:e0:23:bd:95:17:4d: 7c:bf:2f:e9:92:ac:73:a4:7c:b3:ac:59:93:9a:1b:1e:13:4a: 5b:c3:7b:b5:f5:5c:6f:c9:0b:06:67:c1:bc:bd:09:2b:b1:73: dc:09:cc:68:81:8f:61:53:bf:7d:dd:40:85:c0:3e:4c:4b:4f: f7:57:82:4a:a6:6a:9f:30:59:25:d0:a3:b2:49:cb:ba:cc:ed: cf:98:88:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LOo2oGW052d8SoAl0BrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzE5MThjMWY0NWU2ZWMxN2RhY2E2N2E3YWQxOTNjYWYw NGI3YjIwHhcNMjYwMTI1MjIwMTE0WhcNMjYwMTI2MjIwMTE0WjAzMTEwLwYDVQQD Eyg3NDc0MzZmODQ1MDQ5MjMxZDg2YzllYmI1OGVlZDY1MmNjZTM3NmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/u/GYUFTcCA6K3qrARcC0vWrV/u E+kDck8JnslK1qIGjYZ0rAg5gH79oUV8iJmkyyHra66zIlrBfmsCLVP+aTs73zde Pa141kcGEljv49KGfRp1DuOdA8WdeKbFh60Kx58DqAjSMqgWF9wNyMBP7/Wwhrm/ kNNIQKayRISo/jI3IhWn53yjL0E3oKPgMJk/D3CprVjV/SsQI5+EC6OunNSoBlPO jVLK8R4D3VfUxQ/Eri4DjhINJqbCzhSJHjH49vPibx95ZQEsyFUdYkQQuu2mjA2m 2N26lA6Fxm2S8L/epL7qEXdQ+TBDEEQhwegx1ZzXwYay258fLl/2qc6AMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHR0NvhFBJIx2Gyeu1ju1lLM43b/MB8GA1UdIwQY MBaAFKvBkYwfRebsF9rKZ6etGTyvBLeyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEt NmJiNWZlNjY1NzUwLzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEtNmJiNWZlNjY1NzUw LzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+KfE/83 Zrgl/eK5auldMSlw4cfkYXPO70KeKPDJ04hedPKghmk0ThGuQ5l0yAF77b5HNIPh GDOho9sm0QOJaPpReJ5bjQOBvyBjo1bGtQls+nGX1qgKc4a5KUPKlbMzGT61lDK8 VUK9oh/o65I0x4CLUJYjd78aYs9XNABVKVcdIaYIqTtRA9+jMkj2icjm8ongC5cF CFqxhy6Me7siz8SEYZaX0VyxOi5COi1L4CO9lRdNfL8v6ZKsc6R8s6xZk5obHhNK W8N7tfVcb8kLBmfBvL0JK7Fz3AnMaIGPYVO/fd1AhcA+TEtP91eCSqZqnzBZJdCj sknLusztz5iIIg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:27 2026 by rpki-client