This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft File: q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json) Hash identifier: LKDdcwistJALX3WbTJU8vG6kncogmcH7yjeXxKpvh4k= Subject key identifier: 5C:B0:4A:10:FD:0E:DA:92:D1:73:43:6C:73:36:1D:5F:E2:88:01:B3 Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18 Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918 Certificate serial: 019BF5AC6DD8872CA279C820E327D32D19AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 15:01:16 +0000 Manifest this update: Sun 25 Jan 2026 15:01:16 +0000 Manifest next update: Mon 26 Jan 2026 15:01:16 +0000 Files and hashes: 1: 6HLmOIlw0JJlLfNpuVhkS5VevII.roa (hash: duraaLF3+tphpAPz7hcD0W+ai9uSm22QFtqEemAzlOs=) 2: cgiCnDdXt2ZfV4gQ6f64Txzv9UI.roa (hash: Epq0AQtf5gLEvFkohacS+3j5hF97hS/AEpHSVuOJB9w=) 3: nwJtWBtHHCOXbdDRVJgpwU9yEVc.roa (hash: KTNFAJc/6ueKlLn/0ANsYJWuRw0+1gFif+avYpTFJp4=) 4: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: 1Z3dyskznGlL1Mg5GB26qWEmL8fPsGKWtFTamq3hENk=) 5: qfWUaAQNlV9wKmB2U3853Bl8uNA.roa (hash: rOp4emJoeO5JknR894vKgNsr/vggi5P0L+PXDJf8JnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:6d:d8:87:2c:a2:79:c8:20:e3:27:d3:2d:19:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918 Validity Not Before: Jan 25 15:01:16 2026 GMT Not After : Jan 26 15:01:16 2026 GMT Subject: CN=5cb04a10fd0eda92d173436c73361d5fe28801b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:30:ee:dd:e2:ce:4f:8b:d5:6a:12:67:76: 8a:6a:fd:48:9f:9e:bf:c6:a8:3e:75:f3:04:e5:3c: f1:1e:d2:0f:f4:35:f2:8e:3e:8a:bf:70:07:88:7b: 1f:08:a9:0d:87:2b:0d:0d:d5:9e:df:7e:a1:9f:59: f9:ed:0f:f3:2c:a6:3a:ea:83:b1:2d:ca:fe:e3:c2: bb:15:72:bd:58:75:2d:9e:f3:cc:ef:2d:46:81:eb: 52:ba:df:e4:5d:ce:ad:74:e7:af:f7:3e:e1:47:f8: 04:b1:2e:40:8c:e7:b4:08:21:c9:8d:6b:92:64:38: 85:a9:57:8d:d1:42:da:b5:ad:bc:9e:2a:e8:ab:68: 09:5c:cf:89:6c:8b:e7:b0:02:ab:f3:b0:ce:8a:7a: 65:ef:dc:31:9f:7a:9b:3d:6e:f4:33:c4:14:b6:45: 66:5f:3d:6b:3c:1e:e2:87:45:c1:2a:52:fa:58:a5: 4f:66:1a:ab:20:e4:46:60:2e:26:0b:f6:9f:59:ff: fd:35:6a:5f:c3:3a:2c:92:6b:28:7e:69:2a:47:db: 77:db:69:c7:18:79:0f:2d:93:77:80:3a:88:fc:30: 7b:27:d8:f0:40:bf:03:41:4c:0e:f6:40:e2:8d:27: 67:e0:fc:85:68:67:31:04:79:24:70:df:2c:5c:5f: 67:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B0:4A:10:FD:0E:DA:92:D1:73:43:6C:73:36:1D:5F:E2:88:01:B3 X509v3 Authority Key Identifier: keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4b:63:cc:7e:d0:98:81:0e:27:e5:81:56:b0:f4:00:36:d4: 82:7f:94:c8:29:9e:7a:89:d1:0d:e5:e4:30:70:34:dd:a4:bd: a3:c6:01:ae:22:77:21:d7:2e:3d:58:c3:d3:36:87:50:a2:44: 69:d8:a5:97:4a:0f:dc:44:ab:1d:da:d2:b0:a3:f0:a6:89:0f: 02:0e:99:83:d7:6b:b1:df:a9:68:12:32:8f:5d:ba:32:62:f5: 71:f5:42:60:5c:93:75:96:da:40:80:99:b3:90:03:02:6a:c7: 08:b3:d0:f5:98:7f:a5:71:12:a4:20:9d:37:15:12:80:b6:42: ca:0c:1c:50:b8:98:d0:4f:23:fa:58:6a:9c:b2:2c:f4:23:31: 18:ed:1a:28:bb:33:1c:9d:57:d9:0a:86:a2:79:cb:ae:d6:81: 6c:ea:4a:6c:92:23:39:68:14:fe:15:3d:ef:92:57:0a:bc:b1: b7:28:13:28:0f:bd:ee:56:19:5d:3e:f5:55:2a:54:18:6e:02: ba:83:00:22:a9:0c:50:1f:23:20:08:75:3f:b2:3f:4f:da:ab: 38:45:2c:64:e2:b3:69:62:aa:96:3d:87:94:7e:5c:22:26:27: 5f:fd:c6:ab:ee:0e:a5:e9:b0:87:18:eb:d9:0b:8f:8f:df:52: c5:a8:06:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rG3Yhyyiecgg4yfTLRmsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNGYwMGY1YzNhYjNkZjRjNjc0YTQxMGQ4YTBmMDE4MmZi NWU5MTgwHhcNMjYwMTI1MTUwMTE2WhcNMjYwMTI2MTUwMTE2WjAzMTEwLwYDVQQD Eyg1Y2IwNGExMGZkMGVkYTkyZDE3MzQzNmM3MzM2MWQ1ZmUyODgwMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucsw7t3izk+L1WoSZ3aKav1In56/ xqg+dfME5TzxHtIP9DXyjj6Kv3AHiHsfCKkNhysNDdWe336hn1n57Q/zLKY66oOx Lcr+48K7FXK9WHUtnvPM7y1GgetSut/kXc6tdOev9z7hR/gEsS5AjOe0CCHJjWuS ZDiFqVeN0ULata28niroq2gJXM+JbIvnsAKr87DOinpl79wxn3qbPW70M8QUtkVm Xz1rPB7ih0XBKlL6WKVPZhqrIORGYC4mC/afWf/9NWpfwzoskmsofmkqR9t322nH GHkPLZN3gDqI/DB7J9jwQL8DQUwO9kDijSdn4PyFaGcxBHkkcN8sXF9nqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFywShD9DtqS0XNDbHM2HV/iiAGzMB8GA1UdIwQY MBaAFKtPAPXDqz30xnSkENig8BgvtekYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUt Mzg1M2QzNDBjOWE2LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUtMzg1M2QzNDBjOWE2 LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUtjzH7Q mIEOJ+WBVrD0ADbUgn+UyCmeeonRDeXkMHA03aS9o8YBriJ3IdcuPVjD0zaHUKJE adill0oP3ESrHdrSsKPwpokPAg6Zg9drsd+paBIyj126MmL1cfVCYFyTdZbaQICZ s5ADAmrHCLPQ9Zh/pXESpCCdNxUSgLZCygwcULiY0E8j+lhqnLIs9CMxGO0aKLsz HJ1X2QqGonnLrtaBbOpKbJIjOWgU/hU975JXCryxtygTKA+97lYZXT71VSpUGG4C uoMAIqkMUB8jIAh1P7I/T9qrOEUsZOKzaWKqlj2HlH5cIiYnX/3Gq+4Opemwhxjr 2QuPj99SxagGaQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:40 2026 by rpki-client