This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json) Hash identifier: Q0POM7tzf/fIVAs2hlBrqRMu6eQcATweZdN1KbO3I7w= Subject key identifier: 87:C5:9B:5B:AD:44:B8:22:F2:73:F3:A9:C8:C3:31:E4:67:E2:F6:DD Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6 Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6 Certificate serial: 019BF34FE85AEDB3A5440740E32B27B4BA0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft Manifest number: 1788 Signing time: Sun 25 Jan 2026 04:00:58 +0000 Manifest this update: Sun 25 Jan 2026 04:00:58 +0000 Manifest next update: Mon 26 Jan 2026 04:00:58 +0000 Files and hashes: 1: HEgUCqwNNPF2Q09uNy1z0SF2eHk.roa (hash: nQkhhNw6S8PZEQHevPsGMLpoMsMwEk7juRVeNkbr0JM=) 2: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: Zz5DjmzMmD6fZtC3VpcQIUfBqoPGdGHmLzrtcaHX1I4=) 3: wA3yzq_z75jJrcxF21_yaXTLA1E.roa (hash: iBqEBSf11enOfh3VlmmIO8pdDcGFw1PdUgNRwZ2N9r8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:e8:5a:ed:b3:a5:44:07:40:e3:2b:27:b4:ba:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6 Validity Not Before: Jan 25 04:00:58 2026 GMT Not After : Jan 26 04:00:58 2026 GMT Subject: CN=87c59b5bad44b822f273f3a9c8c331e467e2f6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1f:52:08:e2:20:e2:34:e3:82:8e:22:bc:a7: ef:12:9a:83:14:91:42:c0:2f:ea:a1:dc:9f:0d:5f: f6:c0:98:31:02:e1:0a:13:1e:68:b5:bf:92:c1:67: 97:83:5b:ab:91:a5:24:03:f3:1b:dd:07:2d:16:9f: 9c:d7:84:cb:29:14:9d:a2:dd:59:3e:ec:e1:46:9b: d8:47:5c:b2:5c:85:06:d7:39:6e:3b:63:9f:14:0e: 00:c6:bc:9c:3d:93:bc:9e:b5:0b:6c:33:ad:5c:6c: 62:30:7a:56:f5:ff:8c:e5:b5:be:1b:34:50:77:66: a3:77:ed:b7:6b:ad:7d:48:d5:8d:a7:dc:6c:4c:db: 6f:29:32:02:31:61:93:b6:ae:2f:66:a6:79:d8:7c: 58:25:6f:80:f4:c0:5c:c1:c3:3c:93:74:a2:ac:4c: ea:c1:65:44:a2:49:48:50:ef:75:63:15:82:65:55: 7e:44:63:28:3f:0b:3e:ee:67:1a:78:ae:a7:75:c8: 84:e9:8f:43:92:dc:ce:50:f3:8e:1f:3f:bd:10:03: 2e:f9:a9:fa:5a:81:b0:1b:15:09:a2:b8:68:c9:ee: 00:ee:31:c0:bc:a2:05:d1:3d:99:65:02:4f:5b:86: 6e:02:20:a1:36:7e:16:fe:a1:bb:54:1f:7f:6b:58: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C5:9B:5B:AD:44:B8:22:F2:73:F3:A9:C8:C3:31:E4:67:E2:F6:DD X509v3 Authority Key Identifier: keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b9:54:87:44:06:a8:07:4c:f0:f2:0d:3d:00:05:d9:e2:18: be:ed:fe:ab:be:a2:ea:7c:06:24:93:61:fa:10:cf:1f:0e:eb: ec:7a:51:97:32:c7:1b:b9:75:75:3f:2d:17:c5:76:62:d7:c6: 3c:48:bc:09:d8:f3:51:6c:65:69:24:67:63:c5:d8:f8:64:da: b9:a9:30:b9:11:bb:a1:be:cb:34:16:98:41:1b:d6:c3:19:73: a0:7d:ea:32:7a:bd:0a:51:b8:a6:0d:1e:e6:ff:e8:a2:28:7d: e5:c9:3c:95:ce:85:c5:ea:cb:de:14:ff:1e:62:ca:04:3f:c0: 73:9c:30:4d:a8:32:97:80:d4:b2:0e:a3:be:09:91:1f:72:88: 5c:6d:eb:7b:fb:7c:b5:46:70:73:2f:ef:39:5d:4d:ad:71:56: 4c:66:d4:42:6d:6f:71:08:a0:97:74:96:b1:08:72:2b:1b:4b: e7:43:b6:50:6f:82:d4:11:43:2f:c2:bc:29:ac:3b:f2:d9:f4: 48:56:57:9a:8e:97:a2:99:70:4c:ea:7e:a3:28:79:ae:ef:2f: 86:13:9c:46:8e:97:fb:36:bf:07:93:6c:1e:9b:bb:92:4c:ff: 4b:25:7c:fa:25:66:3e:27:c9:9f:8a:b4:55:5b:ad:9f:98:f9: 7a:0a:ab:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT+ha7bOlRAdA4ysntLoPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODJmM2QwZTY2NDI5YjY4NWIxODUwYTlkZmYyNWM3YWEz N2EwYzYwHhcNMjYwMTI1MDQwMDU4WhcNMjYwMTI2MDQwMDU4WjAzMTEwLwYDVQQD Eyg4N2M1OWI1YmFkNDRiODIyZjI3M2YzYTljOGMzMzFlNDY3ZTJmNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB9SCOIg4jTjgo4ivKfvEpqDFJFC wC/qodyfDV/2wJgxAuEKEx5otb+SwWeXg1urkaUkA/Mb3QctFp+c14TLKRSdot1Z PuzhRpvYR1yyXIUG1zluO2OfFA4AxrycPZO8nrULbDOtXGxiMHpW9f+M5bW+GzRQ d2ajd+23a619SNWNp9xsTNtvKTICMWGTtq4vZqZ52HxYJW+A9MBcwcM8k3SirEzq wWVEoklIUO91YxWCZVV+RGMoPws+7mcaeK6ndciE6Y9DktzOUPOOHz+9EAMu+an6 WoGwGxUJorhoye4A7jHAvKIF0T2ZZQJPW4ZuAiChNn4W/qG7VB9/a1js3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfFm1utRLgi8nPzqcjDMeRn4vbdMB8GA1UdIwQY MBaAFKmC89DmZCm2hbGFCp3/JceqN6DGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQt OGI0NzkzZjkwZjE1LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQtOGI0NzkzZjkwZjE1 LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVblUh0QG qAdM8PINPQAF2eIYvu3+q76i6nwGJJNh+hDPHw7r7HpRlzLHG7l1dT8tF8V2YtfG PEi8CdjzUWxlaSRnY8XY+GTauakwuRG7ob7LNBaYQRvWwxlzoH3qMnq9ClG4pg0e 5v/ooih95ck8lc6FxerL3hT/HmLKBD/Ac5wwTagyl4DUsg6jvgmRH3KIXG3re/t8 tUZwcy/vOV1NrXFWTGbUQm1vcQigl3SWsQhyKxtL50O2UG+C1BFDL8K8Kaw78tn0 SFZXmo6XoplwTOp+oyh5ru8vhhOcRo6X+za/B5NsHpu7kkz/SyV8+iVmPifJn4q0 VVutn5j5egqr7A== -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:06 2026 by rpki-client