This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json) Hash identifier: xkR1aIIGtrbpzrcNoIheUiE3C+Sr22yyRiYv2yykN+E= Subject key identifier: 84:36:A8:49:10:BA:C3:1D:A1:E1:FE:80:EF:04:AE:22:4E:34:D4:62 Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d Certificate serial: 019BF23D462290CB05ED6983B9B2F065CD24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft Manifest number: 06EA Signing time: Sat 24 Jan 2026 23:01:00 +0000 Manifest this update: Sat 24 Jan 2026 23:01:00 +0000 Manifest next update: Sun 25 Jan 2026 23:01:00 +0000 Files and hashes: 1: 2fpSa4233U1cTwSeAJBsZ5bsfJI.roa (hash: 08ef8z2l4vSO/c3zBvr23FpWqELsf8QmmodRXtNR2zc=) 2: NHpHHZAIDzgwPpSy6ezW1FtmeD8.roa (hash: np0ySnVq+ohTQoZSQT/qPIOylTE9F9ExAUt5D1kOcwE=) 3: NbeD14QOQVqxpCNvyr8gH_GQtrc.roa (hash: oswI2CSKNyAXKvPvhJzaCytbyJezZyC2UppT7NbsjUk=) 4: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: IHNrdUA5czdmw06zFNexuRtBSueQO4fWBjwSYgMeXlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:46:22:90:cb:05:ed:69:83:b9:b2:f0:65:cd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d Validity Not Before: Jan 24 23:01:00 2026 GMT Not After : Jan 25 23:01:00 2026 GMT Subject: CN=8436a84910bac31da1e1fe80ef04ae224e34d462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:71:24:b6:0a:86:46:ed:d2:9d:35:39:ed: ff:d1:74:28:f7:53:54:fe:63:db:bf:78:77:8b:f0: 58:8d:3e:46:3b:ce:59:fe:e7:89:bc:0d:56:1d:b8: 39:c4:74:01:34:c1:da:c8:dc:a9:25:26:c3:1b:40: d1:c8:43:36:69:92:9b:c1:00:db:f4:d5:98:18:3a: 74:2c:3e:cf:ae:85:28:3e:d4:f3:b3:50:a9:6b:d0: c1:d3:d3:62:14:a7:84:54:76:ec:b5:22:0a:d1:d1: 7b:5d:7e:51:8b:4c:42:8d:6d:b7:1a:9a:dc:96:f2: 38:c1:2f:dc:0d:4c:2d:d5:2e:63:cc:58:b0:8d:1a: 8a:79:43:dc:2b:e1:c6:dc:fa:b9:96:d2:6e:1d:60: 2c:e8:33:b8:37:cd:c4:2f:ff:d7:43:30:9d:eb:03: a9:d1:9d:e7:6a:29:48:7c:fe:fa:16:fa:17:c8:b3: cf:6c:bb:24:90:3c:42:18:01:c3:e0:bd:de:d5:52: 14:44:2e:1c:81:00:ef:ae:5e:57:ae:21:f8:2b:6b: a8:7a:e3:0e:a5:76:d8:96:73:6e:e2:18:96:2b:c3: ef:80:7b:cd:93:e8:fb:b5:63:17:89:29:9f:1b:18: f2:a6:c0:e9:5e:08:d6:77:49:03:6d:05:d4:72:52: 98:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:36:A8:49:10:BA:C3:1D:A1:E1:FE:80:EF:04:AE:22:4E:34:D4:62 X509v3 Authority Key Identifier: keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:c1:c3:51:d2:ea:f4:46:ed:28:36:f2:d1:85:dd:0a:73:2a: fa:56:3a:2a:fc:5b:90:00:87:e6:3a:2d:a9:41:3c:db:6a:fc: 7d:7e:53:a4:0c:74:2e:fb:b8:c0:ff:52:22:e5:ba:c4:b3:b5: 04:ad:80:c9:a7:73:59:3d:f1:b2:f0:db:82:75:ae:1b:68:9d: 33:5c:c2:ae:c8:c6:f8:06:08:3e:43:b9:bd:54:10:17:3f:81: e9:90:ae:0b:e3:c0:42:a2:80:c9:76:83:e2:2c:ad:99:b0:b0: da:93:75:5f:4b:ea:67:ef:2d:c7:87:d1:18:bd:c5:c3:3e:4d: 3e:d7:74:7c:b0:48:c2:58:f3:ee:d9:cf:ab:26:13:d0:f7:8b: c5:dc:4c:1c:8a:a2:fc:c2:dd:a8:eb:ce:67:93:11:dd:8e:55: 97:b5:de:82:aa:d4:e5:6e:be:41:28:08:6d:cd:c8:89:d6:d2: db:94:4b:b4:23:e4:61:a3:2c:76:46:f3:ab:d9:62:27:c4:ba: cc:5b:c2:0e:d4:04:58:00:44:80:bb:a2:e4:84:02:1a:70:50: 38:fc:03:6b:6d:64:43:b3:04:45:14:f8:b9:6f:fe:ba:a5:51: 12:cb:c4:23:80:0b:d2:c9:90:97:0c:45:42:90:5d:15:7b:6f: 77:5a:24:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPUYikMsF7WmDubLwZc0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTI5N2IxZDM2YTQyZGUzOGU4NDgwYmI5MjliNDViYzkw MzBjOWQwHhcNMjYwMTI0MjMwMTAwWhcNMjYwMTI1MjMwMTAwWjAzMTEwLwYDVQQD Eyg4NDM2YTg0OTEwYmFjMzFkYTFlMWZlODBlZjA0YWUyMjRlMzRkNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZdxJLYKhkbt0p01Oe3/0XQo91NU /mPbv3h3i/BYjT5GO85Z/ueJvA1WHbg5xHQBNMHayNypJSbDG0DRyEM2aZKbwQDb 9NWYGDp0LD7ProUoPtTzs1Cpa9DB09NiFKeEVHbstSIK0dF7XX5Ri0xCjW23Gprc lvI4wS/cDUwt1S5jzFiwjRqKeUPcK+HG3Pq5ltJuHWAs6DO4N83EL//XQzCd6wOp 0Z3nailIfP76FvoXyLPPbLskkDxCGAHD4L3e1VIURC4cgQDvrl5XriH4K2uoeuMO pXbYlnNu4hiWK8PvgHvNk+j7tWMXiSmfGxjypsDpXgjWd0kDbQXUclKYnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQ2qEkQusMdoeH+gO8EriJONNRiMB8GA1UdIwQY MBaAFKgSl7HTakLeOOhIC7kptFvJAwydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUt MjJkZDBmMzkyOGQ1LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUtMjJkZDBmMzkyOGQ1 LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcHDUdLq 9EbtKDby0YXdCnMq+lY6KvxbkACH5jotqUE822r8fX5TpAx0Lvu4wP9SIuW6xLO1 BK2AyadzWT3xsvDbgnWuG2idM1zCrsjG+AYIPkO5vVQQFz+B6ZCuC+PAQqKAyXaD 4iytmbCw2pN1X0vqZ+8tx4fRGL3Fwz5NPtd0fLBIwljz7tnPqyYT0PeLxdxMHIqi /MLdqOvOZ5MR3Y5Vl7XegqrU5W6+QSgIbc3IidbS25RLtCPkYaMsdkbzq9liJ8S6 zFvCDtQEWABEgLui5IQCGnBQOPwDa21kQ7MERRT4uW/+uqVREsvEI4AL0smQlwxF QpBdFXtvd1okKw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:09:48 2026 by rpki-client