This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json) Hash identifier: WPo68YqL9XM9aR81axQUJlHFOHS25ZMga1W1PQdOJR0= Subject key identifier: AF:1C:EE:15:68:93:AD:57:78:2A:46:4B:82:48:D1:D3:5C:AC:B9:84 Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74 Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74 Certificate serial: 019BF3F4E7A5179B002A05233D0C56014FD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft Manifest number: 12C5 Signing time: Sun 25 Jan 2026 07:01:12 +0000 Manifest this update: Sun 25 Jan 2026 07:01:12 +0000 Manifest next update: Mon 26 Jan 2026 07:01:12 +0000 Files and hashes: 1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=) 2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: Ri/l8DXVOzMUUhNs2qyCbhLIKlxjrA/aDH3OAdRL7RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:e7:a5:17:9b:00:2a:05:23:3d:0c:56:01:4f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74 Validity Not Before: Jan 25 07:01:12 2026 GMT Not After : Jan 26 07:01:12 2026 GMT Subject: CN=af1cee156893ad57782a464b8248d1d35cacb984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:82:5a:e0:3c:b4:59:28:7a:95:1d:51:44:5b: 4b:0b:79:a6:6c:45:3f:12:a5:d9:4b:d0:d6:67:76: 48:1f:bc:9e:56:6b:c0:ea:95:ee:b9:5b:f3:7c:6d: 49:36:b7:e1:c9:51:d3:f1:4a:2f:2f:d5:07:09:f0: 8a:ad:b4:ff:1b:a4:5f:a2:2d:e7:f0:bf:f8:2e:89: 4c:d0:a0:64:a6:92:8c:99:88:b1:d9:a8:55:7c:bc: bc:4c:cd:73:25:07:ba:e2:6b:df:a5:1d:a7:1a:56: 70:18:45:03:6f:c4:b2:f7:72:7f:2d:ae:69:44:d7: 07:fb:df:b6:8b:6a:9a:31:e4:a1:1b:7e:c3:9a:0d: 1a:15:b1:54:0d:bc:0e:fb:f7:2d:c8:59:9c:48:9d: 4c:31:41:06:05:e7:6a:ce:43:06:6b:5d:ce:c6:35: 19:76:a7:f5:01:f0:7f:1f:3b:4f:f3:63:c1:7e:bd: d7:a0:00:e2:e4:d4:74:d6:40:38:d1:46:75:2b:46: b6:a3:c3:94:0f:a7:51:51:ee:65:32:00:9f:2c:23: c6:49:ec:cc:96:e2:f7:5f:29:27:17:3e:5f:a5:a1: 1d:d3:07:18:18:ca:35:ed:18:5e:5d:30:b5:c7:5a: a0:bc:bd:a3:20:a3:a0:74:97:de:33:02:6a:21:85: 17:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1C:EE:15:68:93:AD:57:78:2A:46:4B:82:48:D1:D3:5C:AC:B9:84 X509v3 Authority Key Identifier: keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d8:41:43:99:b8:89:8a:71:b7:ef:34:60:47:57:23:c4:61: 95:c9:35:e5:f4:59:c8:cb:f6:c6:fa:8a:a5:1a:9e:95:a2:64: 39:53:c2:ac:9b:22:a4:4f:6e:f6:45:82:d9:cb:be:c8:98:ca: a1:90:cb:e1:c3:30:80:44:cc:bb:48:e5:0b:d4:2a:59:b1:37: 9c:c5:84:89:5d:61:b3:ed:a1:a0:af:44:73:0e:bb:a1:80:59: b3:bc:88:49:ed:df:97:11:3c:6d:c3:b0:98:6a:23:fc:e5:74: ad:be:e9:32:12:d0:c9:3c:bf:1a:47:b1:f1:cb:0d:5a:19:9e: 01:bd:95:c9:fe:b3:e5:cf:e1:34:40:9c:c2:13:77:aa:e2:62: 17:41:e5:61:28:35:f3:6f:8e:44:cf:63:81:b1:9b:38:41:78: 7a:ad:fc:41:fd:b6:cb:69:12:2b:a9:dd:ff:29:49:44:74:b2: 58:ad:32:25:58:71:20:78:71:3f:5a:94:e1:50:ef:ea:f5:d7: 7f:54:84:5c:ef:04:f5:07:41:10:ab:d9:f1:40:3a:9a:95:e8: 3f:9d:b1:ef:98:5a:de:90:5f:00:a7:4e:1f:5e:84:21:c8:f1: b4:49:2e:75:58:87:fa:da:26:f1:ea:81:50:a2:00:6f:11:09: e3:6c:05:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9OelF5sAKgUjPQxWAU/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzYxNjM2NTY5M2ZiNjUwMmNiNGQ2ODdiYjY2NzQ3YjFh MmZkNzQwHhcNMjYwMTI1MDcwMTEyWhcNMjYwMTI2MDcwMTEyWjAzMTEwLwYDVQQD EyhhZjFjZWUxNTY4OTNhZDU3NzgyYTQ2NGI4MjQ4ZDFkMzVjYWNiOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4Ja4Dy0WSh6lR1RRFtLC3mmbEU/ EqXZS9DWZ3ZIH7yeVmvA6pXuuVvzfG1JNrfhyVHT8UovL9UHCfCKrbT/G6Rfoi3n 8L/4LolM0KBkppKMmYix2ahVfLy8TM1zJQe64mvfpR2nGlZwGEUDb8Sy93J/La5p RNcH+9+2i2qaMeShG37Dmg0aFbFUDbwO+/ctyFmcSJ1MMUEGBedqzkMGa13OxjUZ dqf1AfB/HztP82PBfr3XoADi5NR01kA40UZ1K0a2o8OUD6dRUe5lMgCfLCPGSezM luL3XyknFz5fpaEd0wcYGMo17RheXTC1x1qgvL2jIKOgdJfeMwJqIYUX4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8c7hVok61XeCpGS4JI0dNcrLmEMB8GA1UdIwQY MBaAFKk2FjZWk/tlAstNaHu2Z0exov10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZWIxODctNzQ4Ni00MDRjLWExZGMt MDkxMjk4NzJlMTQzLzEvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZWIxODctNzQ4Ni00MDRjLWExZGMtMDkxMjk4NzJlMTQz LzEvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9hBQ5m4 iYpxt+80YEdXI8Rhlck15fRZyMv2xvqKpRqelaJkOVPCrJsipE9u9kWC2cu+yJjK oZDL4cMwgETMu0jlC9QqWbE3nMWEiV1hs+2hoK9Ecw67oYBZs7yISe3flxE8bcOw mGoj/OV0rb7pMhLQyTy/Gkex8csNWhmeAb2Vyf6z5c/hNECcwhN3quJiF0HlYSg1 82+ORM9jgbGbOEF4eq38Qf22y2kSK6nd/ylJRHSyWK0yJVhxIHhxP1qU4VDv6vXX f1SEXO8E9QdBEKvZ8UA6mpXoP52x75ha3pBfAKdOH16EIcjxtEkudViH+tom8eqB UKIAbxEJ42wFSw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:10 2026 by rpki-client