This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json) Hash identifier: pf9c9ixzeClYS6zbi8BStRCAw7SsIFzyRGYMwXjYntI= Subject key identifier: 76:97:71:EA:B0:A3:0D:3F:0C:B7:B6:70:48:07:23:63:24:00:5D:2B Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a Certificate serial: 019BFB09D37A5C1FC56F43E8DE57F95E22C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 16:01:23 +0000 Manifest this update: Mon 26 Jan 2026 16:01:23 +0000 Manifest next update: Tue 27 Jan 2026 16:01:23 +0000 Files and hashes: 1: ml7gG0A_mVQfOFzP3FHFwuQkr2A.roa (hash: wWznWI3pS+Ln2wiCRlmdeHQDHSW6bkqR14q4qqXsCjc=) 2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: bSSsgc3myxXMRXFBRNH56erLIVYI7zWvWw8JI7BY0NA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:d3:7a:5c:1f:c5:6f:43:e8:de:57:f9:5e:22:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a Validity Not Before: Jan 26 16:01:23 2026 GMT Not After : Jan 27 16:01:23 2026 GMT Subject: CN=769771eab0a30d3f0cb7b6704807236324005d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:04:2c:af:fd:2f:4b:d4:d5:34:41:34:5e: 37:1a:b0:99:a2:16:af:10:78:fc:01:b5:bf:e8:95: 9d:eb:93:c1:68:ab:92:fa:98:fc:19:db:df:70:f9: 6d:09:9d:11:0a:de:cf:ff:32:60:31:49:4f:b9:6d: bb:ee:0b:6f:73:03:c1:31:79:77:bb:60:d6:41:fe: 94:9e:2e:6f:71:f4:30:57:86:b9:44:36:bd:b3:9f: b4:f6:87:fe:ce:14:90:66:49:f7:56:bc:ca:22:31: 05:84:ad:cc:c0:cf:a2:8a:0c:84:5d:e4:ec:2b:ba: 98:a9:82:9b:b3:cf:a5:13:f0:e1:5a:3d:58:93:80: f8:6e:b0:0b:f7:3b:c5:a9:d1:58:a8:4d:da:db:6c: 83:6d:17:19:c8:55:51:c1:53:d7:46:53:b8:b4:17: 77:e2:3d:b6:9d:aa:86:1c:53:55:cc:f9:d3:e9:2c: eb:bf:8a:d4:71:0d:d7:a3:92:c7:d5:88:e5:4f:3e: 7b:d6:cf:f7:3c:37:9d:ce:a4:d1:1d:80:21:db:e9: b6:30:c5:63:3a:f8:c5:21:1e:d1:25:cc:7d:26:8f: 9c:cb:6f:fc:b7:c5:3c:bc:f5:f4:16:2c:45:26:ff: f1:bb:7d:cb:ce:4a:71:7e:b2:ab:af:14:2f:49:9b: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:97:71:EA:B0:A3:0D:3F:0C:B7:B6:70:48:07:23:63:24:00:5D:2B X509v3 Authority Key Identifier: keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ad:6c:c3:04:aa:01:fc:1a:11:ff:af:a4:bc:0b:5e:5d:f3: df:67:75:8e:ea:3d:bb:12:b7:6e:fe:42:10:8f:03:47:81:00: 61:a3:47:7f:72:6c:c6:86:14:74:54:f3:8f:ca:27:5f:bf:ad: c1:90:84:e7:be:a5:0e:ca:1a:6f:ab:cb:84:98:32:b7:67:26: 52:d9:1b:e2:a2:6b:b3:7f:ec:92:3f:a8:ba:2b:8d:41:93:5b: 4f:12:56:df:cd:6f:54:25:50:39:2e:ad:39:3e:63:9b:88:be: af:c8:8f:0a:93:90:35:a4:f1:0d:05:37:df:c9:65:3e:7d:d5: 16:3e:b8:2d:4e:60:31:7a:8a:87:f6:cb:bf:ae:4e:f3:91:19: 85:c6:75:f8:37:62:eb:8a:73:9f:4c:8f:55:27:7f:a4:b3:5a: 02:4e:18:b8:2e:ea:d4:fd:85:31:3b:f4:37:3f:7b:65:d2:50: dc:4e:ab:5a:0b:71:c0:ca:ac:33:2f:0b:2a:3a:f1:18:d9:91: 1b:f2:f7:a4:ad:66:ab:a8:93:22:cc:3f:03:80:8c:36:8e:28: 85:a4:03:5b:93:1e:a5:e7:22:b0:b0:f7:59:90:fa:e3:38:09: b7:fd:7d:5c:fe:a8:b7:03:b5:fd:8e:68:2c:e7:c7:fc:6e:56: 98:30:59:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CdN6XB/Fb0Po3lf5XiLBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWNmZDE1NzQ0MWY2OTQyOGRkMWY2MzYxY2E0ZjRhZTQy Y2IzOGEwHhcNMjYwMTI2MTYwMTIzWhcNMjYwMTI3MTYwMTIzWjAzMTEwLwYDVQQD Eyg3Njk3NzFlYWIwYTMwZDNmMGNiN2I2NzA0ODA3MjM2MzI0MDA1ZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHcELK/9L0vU1TRBNF43GrCZohav EHj8AbW/6JWd65PBaKuS+pj8GdvfcPltCZ0RCt7P/zJgMUlPuW277gtvcwPBMXl3 u2DWQf6Uni5vcfQwV4a5RDa9s5+09of+zhSQZkn3VrzKIjEFhK3MwM+iigyEXeTs K7qYqYKbs8+lE/DhWj1Yk4D4brAL9zvFqdFYqE3a22yDbRcZyFVRwVPXRlO4tBd3 4j22naqGHFNVzPnT6Szrv4rUcQ3Xo5LH1YjlTz571s/3PDedzqTRHYAh2+m2MMVj OvjFIR7RJcx9Jo+cy2/8t8U8vPX0FixFJv/xu33LzkpxfrKrrxQvSZuPkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaXceqwow0/DLe2cEgHI2MkAF0rMB8GA1UdIwQY MBaAFKuc/RV0QfaUKN0fY2HKT0rkLLOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUt OTU0ZjI2OTEzZjQzLzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUtOTU0ZjI2OTEzZjQz LzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYq1swwSq AfwaEf+vpLwLXl3z32d1juo9uxK3bv5CEI8DR4EAYaNHf3JsxoYUdFTzj8onX7+t wZCE576lDsoab6vLhJgyt2cmUtkb4qJrs3/skj+ouiuNQZNbTxJW381vVCVQOS6t OT5jm4i+r8iPCpOQNaTxDQU338llPn3VFj64LU5gMXqKh/bLv65O85EZhcZ1+Ddi 64pzn0yPVSd/pLNaAk4YuC7q1P2FMTv0Nz97ZdJQ3E6rWgtxwMqsMy8LKjrxGNmR G/L3pK1mq6iTIsw/A4CMNo4ohaQDW5MepecisLD3WZD64zgJt/19XP6otwO1/Y5o LOfH/G5WmDBZ1g== -----END CERTIFICATE-----Generated at Mon Jan 26 18:14:25 2026 by rpki-client