This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json) Hash identifier: O0JfOhHsVEM2JmU1xWGWNDfdD8zT8VyPZWuXiPiZvLU= Subject key identifier: C2:ED:3F:4C:6F:28:39:17:B7:F5:A9:7D:E1:51:70:CD:74:49:39:65 Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47 Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447 Certificate serial: 019BF8ADE5F5E18431583FC3B6632A641CD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 05:01:44 +0000 Manifest this update: Mon 26 Jan 2026 05:01:44 +0000 Manifest next update: Tue 27 Jan 2026 05:01:44 +0000 Files and hashes: 1: E3Abz8c2x25X2p1IuNZFKekLDzE.roa (hash: DciKvL6unAo5I4YBQh4SUA/jwjzYuA3QTOA40FWqmwU=) 2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: 7U2DNUcsZTnf7SRu8Z2h99A8I55b44Xaf59mGoH6k2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:e5:f5:e1:84:31:58:3f:c3:b6:63:2a:64:1c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447 Validity Not Before: Jan 26 05:01:44 2026 GMT Not After : Jan 27 05:01:44 2026 GMT Subject: CN=c2ed3f4c6f283917b7f5a97de15170cd74493965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:76:78:fe:08:cd:fc:d9:77:79:50:88:a1: cb:02:3c:0e:99:ad:37:4d:bb:61:83:53:39:f7:8e: a2:5b:d3:aa:8b:b0:be:e5:26:73:94:22:83:8a:e6: 36:b5:fa:40:47:e5:69:bb:d2:5c:42:bb:0d:75:8c: 3b:18:2d:60:28:0b:51:7b:fc:0d:36:c1:52:9e:87: e5:1c:f0:a9:cb:12:16:5c:97:4c:b2:94:0d:7d:64: 78:88:58:2a:89:0d:12:ce:6c:eb:ba:f5:82:08:c8: b0:86:43:10:18:db:25:4e:be:e3:51:12:6e:6e:83: ff:9a:d3:ba:c1:55:b7:2a:e6:a3:a9:0f:7d:6f:06: 46:d4:ce:7b:89:26:8e:26:82:86:02:a3:24:42:c2: ad:28:8b:e6:7a:ac:c6:93:72:5d:e3:77:7f:45:a3: bf:f4:de:3f:59:98:6e:b8:5b:c0:8e:75:f7:7b:e1: 25:4b:02:03:71:c9:8b:42:12:eb:09:28:7d:65:a6: 9a:a8:e0:a7:d9:98:72:99:ed:9a:a1:91:53:4a:36: 1d:fe:a8:3b:01:bf:7e:7b:1a:00:39:bf:4f:d2:96: 84:71:2c:e6:a2:2f:04:fa:3b:7d:15:1a:0d:5f:70: 67:b2:49:cc:09:de:8e:c3:2c:6c:f5:13:6f:63:30: e0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:ED:3F:4C:6F:28:39:17:B7:F5:A9:7D:E1:51:70:CD:74:49:39:65 X509v3 Authority Key Identifier: keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c7:93:f9:0a:5c:31:ff:3e:89:7d:ed:52:6a:7e:ba:86:58: 66:83:17:b2:06:ab:12:2c:6a:c3:b7:be:7d:06:1c:71:30:13: 13:a6:db:82:f1:1c:3e:dc:b0:6b:45:86:d3:58:75:a9:b4:70: e7:de:86:37:c3:59:19:6b:47:4f:e1:96:6c:d8:f1:7d:1d:da: af:83:48:34:04:e7:df:d7:f3:d9:cc:7b:d0:9c:89:de:71:2f: bb:71:d8:17:d5:18:25:00:52:e1:c8:e0:84:f8:61:05:a8:88: 32:ea:f8:48:a4:2c:00:fa:7f:96:d1:f9:08:57:ef:ae:cc:0e: cb:1b:d6:a7:a0:9c:a3:7a:9d:f6:0e:29:ab:7e:12:6b:e8:e8: 0c:71:27:fa:4a:68:42:52:8b:05:48:05:f5:66:c3:43:69:5d: 4b:6f:81:90:c5:fc:d7:3a:40:4a:ff:1c:e4:df:d7:f9:7b:75: b5:95:b2:1c:59:39:f3:13:b2:9d:19:d6:12:f1:f6:80:aa:26: 2f:1f:64:b4:c5:c0:99:23:6c:9e:43:9b:e8:6e:b6:7a:86:76: 35:31:ed:1b:dd:03:46:3c:85:61:a2:6d:96:d3:e0:76:f2:5d: d7:6b:82:6b:f0:3f:98:e0:d2:88:e8:b8:00:e7:8d:c5:94:4c: 72:31:c5:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4reX14YQxWD/DtmMqZBzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OGVlYmVkOTc1M2Y1ODBiZWE3NWIzNTJlNzA2MzI1YTE4 ZDE0NDcwHhcNMjYwMTI2MDUwMTQ0WhcNMjYwMTI3MDUwMTQ0WjAzMTEwLwYDVQQD EyhjMmVkM2Y0YzZmMjgzOTE3YjdmNWE5N2RlMTUxNzBjZDc0NDkzOTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubB2eP4IzfzZd3lQiKHLAjwOma03 Tbthg1M5946iW9Oqi7C+5SZzlCKDiuY2tfpAR+Vpu9JcQrsNdYw7GC1gKAtRe/wN NsFSnoflHPCpyxIWXJdMspQNfWR4iFgqiQ0SzmzruvWCCMiwhkMQGNslTr7jURJu boP/mtO6wVW3KuajqQ99bwZG1M57iSaOJoKGAqMkQsKtKIvmeqzGk3Jd43d/RaO/ 9N4/WZhuuFvAjnX3e+ElSwIDccmLQhLrCSh9ZaaaqOCn2Zhyme2aoZFTSjYd/qg7 Ab9+exoAOb9P0paEcSzmoi8E+jt9FRoNX3BnsknMCd6Owyxs9RNvYzDguwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLtP0xvKDkXt/WpfeFRcM10STllMB8GA1UdIwQY MBaAFKmO6+2XU/WAvqdbNS5wYyWhjRRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVk3cjdaZFQ5WUMtcDFzMUxuQmpKYUdORkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNzQ3NDQtZWQ0OC00NzA3LWE2M2Ut NTJmNjkxOTEzOWM0LzEvcVk3cjdaZFQ5WUMtcDFzMUxuQmpKYUdORkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hNzQ3NDQtZWQ0OC00NzA3LWE2M2UtNTJmNjkxOTEzOWM0 LzEvcVk3cjdaZFQ5WUMtcDFzMUxuQmpKYUdORkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8eT+Qpc Mf8+iX3tUmp+uoZYZoMXsgarEixqw7e+fQYccTATE6bbgvEcPtywa0WG01h1qbRw 596GN8NZGWtHT+GWbNjxfR3ar4NINATn39fz2cx70JyJ3nEvu3HYF9UYJQBS4cjg hPhhBaiIMur4SKQsAPp/ltH5CFfvrswOyxvWp6Cco3qd9g4pq34Sa+joDHEn+kpo QlKLBUgF9WbDQ2ldS2+BkMX81zpASv8c5N/X+Xt1tZWyHFk58xOynRnWEvH2gKom Lx9ktMXAmSNsnkOb6G62eoZ2NTHtG90DRjyFYaJtltPgdvJd12uCa/A/mODSiOi4 AOeNxZRMcjHFUQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:49:24 2026 by rpki-client