This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json) Hash identifier: 4cEHkl2U2yDBkZvv6F7Tj+rlKigsFuxuqj0tWls6Y9k= Subject key identifier: 25:6D:34:56:1D:0C:09:1D:5C:42:93:E7:6C:89:57:C3:7D:D1:11:24 Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4 Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4 Certificate serial: 019BF8E44C1D60BB8FCDE92C2E39CA845A37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft Manifest number: 0555 Signing time: Mon 26 Jan 2026 06:01:09 +0000 Manifest this update: Mon 26 Jan 2026 06:01:09 +0000 Manifest next update: Tue 27 Jan 2026 06:01:09 +0000 Files and hashes: 1: mRqgMQ1oyI_OLISSLDMm0vHAWUE.roa (hash: Yip22LT0+wHV/CLjrRT+qmDSA0wut/7NqfT12lIPjXM=) 2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: vRKYrrNrD7Ekm2Q1lTbYn2fAatMj0CnYV00PBgPz4zM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:4c:1d:60:bb:8f:cd:e9:2c:2e:39:ca:84:5a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4 Validity Not Before: Jan 26 06:01:09 2026 GMT Not After : Jan 27 06:01:09 2026 GMT Subject: CN=256d34561d0c091d5c4293e76c8957c37dd11124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:1f:16:ab:c8:ed:c2:12:cf:0b:8f:3f:6a: b8:7b:0e:71:0a:88:48:a2:3a:85:7e:4c:08:b2:59: 0a:bc:56:f7:dc:75:61:67:b2:db:ff:52:e6:48:95: 12:e2:5c:36:2a:80:17:c7:1b:1d:c0:26:29:9e:29: 8e:7e:ba:b4:5c:7d:1c:03:96:e1:ac:ed:d8:9d:40: d6:8c:60:94:dc:07:fe:7a:9d:ab:df:76:cd:be:bd: 6f:5e:d4:6c:f2:d2:cb:6c:ae:4e:5e:cd:93:db:b1: f1:b3:1d:30:d0:2d:f2:c9:a9:4a:08:f4:04:ec:de: 93:21:da:08:5d:d5:54:d4:88:e9:87:fd:47:be:b7: da:a3:0c:59:16:f9:9f:db:94:49:36:63:11:73:1a: ce:d8:23:ea:b4:44:9a:f6:92:60:db:a3:3f:52:af: b5:b4:3b:9b:27:97:d8:5f:c1:2e:d3:4f:e6:fa:04: 90:f3:cc:77:32:f7:1e:d2:9a:d4:6d:96:9b:fc:ad: ff:e8:ea:95:42:d5:28:77:5a:9f:b2:70:e8:81:60: 6a:ec:e5:8e:3e:04:d3:23:30:95:d2:01:f4:14:bc: 91:47:e5:20:a8:05:eb:a6:94:d3:fb:27:ed:a7:bc: 13:a6:d0:ba:80:d6:98:07:89:a8:06:cb:2e:36:df: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6D:34:56:1D:0C:09:1D:5C:42:93:E7:6C:89:57:C3:7D:D1:11:24 X509v3 Authority Key Identifier: keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:49:fb:4f:aa:be:fa:4a:70:a8:3b:8d:f2:f8:cb:22:5d:4b: 40:b4:b8:ff:7c:b2:63:f3:08:4b:9a:01:ce:15:b6:dd:77:38: 64:41:be:21:f4:48:35:e2:18:7e:ea:17:5b:71:7b:f3:88:fc: 6c:c5:db:3c:a4:43:71:7a:d9:e9:10:0b:73:36:c3:2c:52:48: 96:31:11:15:66:3d:3f:3e:09:4c:f1:80:bb:5b:ce:0e:f6:5e: 7b:82:f9:98:cb:6b:47:f0:d4:b6:e0:2b:58:65:b6:da:a5:6d: 92:a8:57:b5:95:0a:4f:d5:2c:67:e2:ef:7c:1d:e8:61:4e:25: 7d:5c:9f:37:eb:4a:49:fb:ef:74:a3:33:b7:f4:5f:eb:00:40: 2c:9e:0c:a6:40:d4:e1:db:df:02:b5:d0:5c:a3:ae:eb:cd:9d: f4:16:43:31:3f:a2:04:e2:6e:89:1d:25:44:94:72:a6:09:4f: 63:42:7f:61:d0:83:e1:94:b7:b2:35:53:2e:c1:8a:28:57:6d: 1e:90:18:d9:fe:be:c5:35:ab:7a:29:cb:34:11:65:c4:d8:8b: 99:2c:09:8e:6a:c6:50:36:00:2c:b2:01:cc:29:89:c5:10:cc: c6:fb:e8:99:cc:b0:4a:18:4b:ca:80:54:2e:4e:3d:3a:5a:ac: 94:cd:f1:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45EwdYLuPzeksLjnKhFo3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NWRiOGM5YjU2MzA4Y2YwODkwMjFiNTE2Y2FlNGM1NWZk NjRmZTQwHhcNMjYwMTI2MDYwMTA5WhcNMjYwMTI3MDYwMTA5WjAzMTEwLwYDVQQD EygyNTZkMzQ1NjFkMGMwOTFkNWM0MjkzZTc2Yzg5NTdjMzdkZDExMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLofFqvI7cISzwuPP2q4ew5xCohI ojqFfkwIslkKvFb33HVhZ7Lb/1LmSJUS4lw2KoAXxxsdwCYpnimOfrq0XH0cA5bh rO3YnUDWjGCU3Af+ep2r33bNvr1vXtRs8tLLbK5OXs2T27Hxsx0w0C3yyalKCPQE 7N6TIdoIXdVU1Ijph/1HvrfaowxZFvmf25RJNmMRcxrO2CPqtESa9pJg26M/Uq+1 tDubJ5fYX8Eu00/m+gSQ88x3Mvce0prUbZab/K3/6OqVQtUod1qfsnDogWBq7OWO PgTTIzCV0gH0FLyRR+UgqAXrppTT+yftp7wTptC6gNaYB4moBssuNt8neQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVtNFYdDAkdXEKT52yJV8N90REkMB8GA1UdIwQY MBaAFKhduMm1YwjPCJAhtRbK5MVf1k/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUt NjBmNDlkMTIzMTczLzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUtNjBmNDlkMTIzMTcz LzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakn7T6q+ +kpwqDuN8vjLIl1LQLS4/3yyY/MIS5oBzhW23Xc4ZEG+IfRINeIYfuoXW3F784j8 bMXbPKRDcXrZ6RALczbDLFJIljERFWY9Pz4JTPGAu1vODvZee4L5mMtrR/DUtuAr WGW22qVtkqhXtZUKT9UsZ+LvfB3oYU4lfVyfN+tKSfvvdKMzt/Rf6wBALJ4MpkDU 4dvfArXQXKOu682d9BZDMT+iBOJuiR0lRJRypglPY0J/YdCD4ZS3sjVTLsGKKFdt HpAY2f6+xTWreinLNBFlxNiLmSwJjmrGUDYALLIBzCmJxRDMxvvomcywShhLyoBU Lk49OlqslM3xqA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:52 2026 by rpki-client