This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json) Hash identifier: YAfMKkc9UmmT2jiMGCTYQwhXHqYEe2HOgXhOqEfKzY4= Subject key identifier: 0B:D7:23:0C:F1:15:A2:19:25:E3:52:0D:37:49:AC:C3:B0:A9:E9:C7 Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45 Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145 Certificate serial: 019BF53E14D30114D0897034355B71576499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft Manifest number: 09C2 Signing time: Sun 25 Jan 2026 13:00:44 +0000 Manifest this update: Sun 25 Jan 2026 13:00:44 +0000 Manifest next update: Mon 26 Jan 2026 13:00:44 +0000 Files and hashes: 1: 4rFWGG1hCLjpdzpnntCtvivktok.roa (hash: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc=) 2: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: RL7Mcb4tfUU83def6dyRMvxs2Y3f5QUP6MrIFhJQSg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:14:d3:01:14:d0:89:70:34:35:5b:71:57:64:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145 Validity Not Before: Jan 25 13:00:44 2026 GMT Not After : Jan 26 13:00:44 2026 GMT Subject: CN=0bd7230cf115a21925e3520d3749acc3b0a9e9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:79:39:f4:b9:af:92:6b:e5:11:54:e8:24: dc:87:32:cd:be:c3:1e:50:ab:e5:d8:5a:51:57:2a: 6c:60:0f:c8:1b:4b:4e:86:19:02:d8:45:24:28:e1: 95:72:e3:74:cb:6a:d6:18:69:ea:cf:eb:9a:78:ef: 51:41:22:7b:24:25:90:97:de:fa:4d:af:ed:26:d5: a5:9e:eb:4e:10:44:01:31:42:e6:d2:d4:99:97:ec: 8c:c9:76:a0:5a:42:0b:15:e2:07:7e:35:bb:d9:04: 71:ca:78:ea:14:cb:a4:77:80:e6:22:cb:60:03:dd: 65:af:e3:40:69:d9:20:90:7e:55:08:05:5c:ac:78: 2e:8c:c0:de:37:35:49:9e:6c:5a:b5:55:28:1c:a4: e3:b8:bf:3a:8d:ac:da:41:04:44:3d:ab:7b:c0:ad: af:66:fb:f6:00:8b:a4:fe:83:2e:01:73:69:14:9b: 95:95:d0:a9:12:ef:43:cd:ec:d4:a2:8e:1f:7f:0a: 6a:90:6e:c3:d3:60:d9:35:37:57:64:9b:0c:08:9a: 70:09:dc:af:76:6c:0e:ce:ec:2b:51:62:b4:08:74: 97:97:c6:d7:f1:34:5e:5b:d6:36:91:2b:3d:ce:ac: 18:94:70:8c:ab:44:13:97:f9:07:07:ac:6d:b8:c5: 4a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D7:23:0C:F1:15:A2:19:25:E3:52:0D:37:49:AC:C3:B0:A9:E9:C7 X509v3 Authority Key Identifier: keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4b:6f:05:fc:fe:cb:06:75:b5:6f:42:bf:bd:92:82:9b:4d: 2c:fe:20:cd:9a:7f:fb:5c:89:8c:07:01:07:b4:63:47:ee:78: 0e:40:d2:5c:06:b9:11:8a:11:69:d6:73:54:3e:6f:29:0a:b9: 86:7c:70:ac:8e:c5:82:e5:11:b5:28:55:a7:35:86:1d:e6:dd: e5:cf:f9:85:cd:28:1f:ad:89:e8:21:1b:d2:36:8a:66:1d:97: 7a:fe:ad:14:7e:8b:a6:90:92:0f:bf:75:a8:6a:97:4b:2f:65: d2:1e:95:2b:e0:f3:fe:eb:12:c2:6c:90:2b:77:7e:ec:a2:46: ad:02:4d:28:5e:df:46:d2:5a:ff:2d:c3:da:b7:ea:0c:dc:f8: d8:71:9e:75:b3:71:4f:fb:e3:7f:ba:15:65:ac:f4:b8:e0:4f: 55:e8:8c:8e:93:7f:91:f4:19:84:87:22:2d:79:3c:46:0f:76: 23:83:1d:bb:72:a1:27:6a:dd:a3:c9:5c:67:8b:b0:33:2c:19: 90:0b:74:4b:4c:46:f0:9e:d0:16:14:79:75:ae:d2:b0:ea:3a: 14:d4:e8:93:2f:d5:d5:d5:5e:f8:c5:6b:93:20:e4:38:6c:30: 81:de:30:69:d1:26:43:81:24:fa:ba:56:e2:88:0b:67:92:8e: e6:c0:15:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PhTTARTQiXA0NVtxV2SZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw NmMxNDUwHhcNMjYwMTI1MTMwMDQ0WhcNMjYwMTI2MTMwMDQ0WjAzMTEwLwYDVQQD EygwYmQ3MjMwY2YxMTVhMjE5MjVlMzUyMGQzNzQ5YWNjM2IwYTllOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF15OfS5r5Jr5RFU6CTchzLNvsMe UKvl2FpRVypsYA/IG0tOhhkC2EUkKOGVcuN0y2rWGGnqz+uaeO9RQSJ7JCWQl976 Ta/tJtWlnutOEEQBMULm0tSZl+yMyXagWkILFeIHfjW72QRxynjqFMukd4DmIstg A91lr+NAadkgkH5VCAVcrHgujMDeNzVJnmxatVUoHKTjuL86jazaQQREPat7wK2v Zvv2AIuk/oMuAXNpFJuVldCpEu9DzezUoo4ffwpqkG7D02DZNTdXZJsMCJpwCdyv dmwOzuwrUWK0CHSXl8bX8TReW9Y2kSs9zqwYlHCMq0QTl/kHB6xtuMVKOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvXIwzxFaIZJeNSDTdJrMOwqenHMB8GA1UdIwQY MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt Njk2YjYxNWNiZWMzLzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0tvBfz+ ywZ1tW9Cv72SgptNLP4gzZp/+1yJjAcBB7RjR+54DkDSXAa5EYoRadZzVD5vKQq5 hnxwrI7FguURtShVpzWGHebd5c/5hc0oH62J6CEb0jaKZh2Xev6tFH6LppCSD791 qGqXSy9l0h6VK+Dz/usSwmyQK3d+7KJGrQJNKF7fRtJa/y3D2rfqDNz42HGedbNx T/vjf7oVZaz0uOBPVeiMjpN/kfQZhIciLXk8Rg92I4Mdu3KhJ2rdo8lcZ4uwMywZ kAt0S0xG8J7QFhR5da7SsOo6FNToky/V1dVe+MVrkyDkOGwwgd4wadEmQ4Ek+rpW 4ogLZ5KO5sAVeg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:07 2026 by rpki-client