This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json) Hash identifier: jtZ5LsFGhe06tNoxAgb7s904HY8AiaYp7FMU/iSMczo= Subject key identifier: B9:85:E3:AA:DD:38:65:C1:11:64:5D:78:B6:68:D2:0C:D3:FB:13:E4 Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db Certificate serial: 019BF53E939985004C01F9663CB0DED493DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 13:01:17 +0000 Manifest this update: Sun 25 Jan 2026 13:01:17 +0000 Manifest next update: Mon 26 Jan 2026 13:01:17 +0000 Files and hashes: 1: OsHfm5IcRp6wCajw-NE1iWNH7Z8.roa (hash: oS3FUlduEB7YSg+361aWK05LocqnWlc3lIUtH4BZyko=) 2: QQeZJrwl_4NJIISgArACAVq6L0o.roa (hash: uh1KpLqwgaZj2AcvOxxyx2dRcs//e4c0XtE2TUfZonY=) 3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: m2v1qaP5VfmKt8rWgGit/uX0dLkwfpLfc9wi+gsmLAk=) 4: Z4RE0ETdC4xhk1FbbundGTGGRB8.roa (hash: qQ3AizCsruyzTMQNiKoa4LuCo6aARO1PFZyPx/nGISA=) 5: ZmfnOd4CDL5CJbgzX0IFfaCpn_I.roa (hash: r+ACJr/bLBpfF1nAJ7m58XKQpbM78W0wGzauIYTi2V8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:93:99:85:00:4c:01:f9:66:3c:b0:de:d4:93:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db Validity Not Before: Jan 25 13:01:17 2026 GMT Not After : Jan 26 13:01:17 2026 GMT Subject: CN=b985e3aadd3865c111645d78b668d20cd3fb13e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:df:26:91:2b:91:82:8e:6d:0b:d7:12:24: fe:4d:63:6d:39:0a:d8:70:8c:92:45:30:f3:bc:85: b9:7a:65:e5:e5:f2:38:ee:75:2a:e9:eb:97:69:a6: 49:5a:97:a8:1b:cc:d2:6e:56:d8:b6:5b:3d:52:71: 37:27:76:b3:f5:fa:33:0e:ff:92:6e:ba:55:a7:3f: 12:58:ae:6a:22:43:54:45:38:89:bc:ab:cb:59:77: ce:94:03:ed:f0:8e:3a:20:ba:d4:ae:cc:21:11:ba: c1:cb:a6:6b:9a:72:0f:c2:82:d3:5e:27:d1:a0:b0: b4:97:5c:f5:60:a4:c6:8d:09:8b:2f:2b:ce:f8:c5: 48:e7:c9:01:3c:33:1f:96:3e:47:40:49:d1:70:af: 57:d3:67:99:05:ca:df:ca:da:50:24:ff:00:ee:63: f2:2c:6e:cd:f6:97:ce:d9:5a:fa:98:3d:77:1e:30: da:a4:bb:e5:43:24:0b:f8:fe:2c:7e:9a:75:64:a0: b9:05:ab:fd:0f:b9:04:b3:0e:ad:d6:ee:ac:6f:6f: ac:a0:3e:b5:21:c5:37:e4:a5:bd:c9:30:e2:58:ba: c6:45:cd:18:4b:45:0b:34:56:71:4c:be:14:f0:d8: d8:fb:18:82:e1:4b:a0:e4:e8:14:05:22:64:8b:87: cc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:85:E3:AA:DD:38:65:C1:11:64:5D:78:B6:68:D2:0C:D3:FB:13:E4 X509v3 Authority Key Identifier: keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:80:c4:de:1b:f4:dd:6c:5b:42:7e:77:c6:2a:d4:5f:ab:f8: e8:65:9b:7e:8d:f3:d3:e1:fe:be:66:34:7a:39:85:18:f8:11: 35:e8:bf:76:18:6e:7d:ea:5b:c6:50:92:33:68:08:cd:69:77: d9:53:88:d5:4e:cb:1d:31:b5:fc:e6:4e:e4:dd:53:03:b6:96: 8e:a2:27:7f:97:35:37:a6:dc:9d:73:70:f6:cf:39:c0:12:91: 81:ed:e6:54:de:82:b5:3a:89:25:f2:28:a5:d2:3d:6a:4e:57: d2:70:16:2b:8f:c5:1a:d1:ad:dc:19:65:09:33:1a:6e:bc:de: 7b:6d:21:33:96:a1:c6:27:b6:e5:6b:24:ec:c1:b9:85:9e:f0: 77:21:a9:d4:64:31:6d:84:ca:04:59:20:10:e0:04:0b:d4:3e: d5:d0:23:0d:fc:36:59:14:bf:54:bd:a4:e1:8e:db:5f:f1:1e: e5:21:41:7f:b3:5d:19:f5:77:ff:83:91:46:f2:4b:9e:51:db: 92:8c:9a:8b:01:b7:43:06:e3:41:8a:1f:0e:a7:a5:39:f6:29: 8a:70:50:38:4c:c8:e3:5b:4a:7c:bd:5b:de:23:d3:67:20:b0: 44:14:8d:45:13:fc:83:e8:9f:b6:58:54:0d:a3:51:6b:96:bb: e6:26:41:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PpOZhQBMAflmPLDe1JPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGIyMWY3OWI5ZWEyZjNkMDQyMzc0NzE0ODY3ZDEyNDAx OTk1ZGIwHhcNMjYwMTI1MTMwMTE3WhcNMjYwMTI2MTMwMTE3WjAzMTEwLwYDVQQD EyhiOTg1ZTNhYWRkMzg2NWMxMTE2NDVkNzhiNjY4ZDIwY2QzZmIxM2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWPfJpErkYKObQvXEiT+TWNtOQrY cIySRTDzvIW5emXl5fI47nUq6euXaaZJWpeoG8zSblbYtls9UnE3J3az9fozDv+S brpVpz8SWK5qIkNURTiJvKvLWXfOlAPt8I46ILrUrswhEbrBy6ZrmnIPwoLTXifR oLC0l1z1YKTGjQmLLyvO+MVI58kBPDMflj5HQEnRcK9X02eZBcrfytpQJP8A7mPy LG7N9pfO2Vr6mD13HjDapLvlQyQL+P4sfpp1ZKC5Bav9D7kEsw6t1u6sb2+soD61 IcU35KW9yTDiWLrGRc0YS0ULNFZxTL4U8NjY+xiC4Uug5OgUBSJki4fMdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmF46rdOGXBEWRdeLZo0gzT+xPkMB8GA1UdIwQY MBaAFEkLIfebnqLz0EI3RxSGfRJAGZXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2Mt NDgwYzMyZjQwMGUxLzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2MtNDgwYzMyZjQwMGUx LzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioDE3hv0 3WxbQn53xirUX6v46GWbfo3z0+H+vmY0ejmFGPgRNei/dhhufepbxlCSM2gIzWl3 2VOI1U7LHTG1/OZO5N1TA7aWjqInf5c1N6bcnXNw9s85wBKRge3mVN6CtTqJJfIo pdI9ak5X0nAWK4/FGtGt3BllCTMabrzee20hM5ahxie25Wsk7MG5hZ7wdyGp1GQx bYTKBFkgEOAEC9Q+1dAjDfw2WRS/VL2k4Y7bX/Ee5SFBf7NdGfV3/4ORRvJLnlHb koyaiwG3QwbjQYofDqelOfYpinBQOEzI41tKfL1b3iPTZyCwRBSNRRP8g+iftlhU DaNRa5a75iZBWA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:13 2026 by rpki-client