This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json) Hash identifier: js+xe/9MKvpBXPRm6bPcG8+QOmC4566Yv7X2qcsE16M= Subject key identifier: 77:3B:09:A3:BC:40:3C:0C:F2:3C:82:61:C0:FB:E9:9A:26:B3:52:45 Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45 Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45 Certificate serial: 019BF506FC008B299E1D0E46DCC1AAA9A74C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft Manifest number: 09BB Signing time: Sun 25 Jan 2026 12:00:34 +0000 Manifest this update: Sun 25 Jan 2026 12:00:34 +0000 Manifest next update: Mon 26 Jan 2026 12:00:34 +0000 Files and hashes: 1: KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa (hash: xjVxn6VE0DsxVNBeCrJPg5ZSsJvDyeaJISylTts3lDo=) 2: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: XfgHQlJOT68hwGyYCgJMgg5CQAOV3YyjnGHJpNveigk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:06:fc:00:8b:29:9e:1d:0e:46:dc:c1:aa:a9:a7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45 Validity Not Before: Jan 25 12:00:34 2026 GMT Not After : Jan 26 12:00:34 2026 GMT Subject: CN=773b09a3bc403c0cf23c8261c0fbe99a26b35245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:f0:ea:7a:68:de:91:40:28:5d:d4:c5:7b: 8b:57:5d:80:02:72:1c:ea:6e:39:d7:b9:a7:80:ef: 97:db:12:35:fe:54:ab:2d:47:7b:3e:bf:d0:1b:d4: d1:1f:5b:b0:37:eb:c1:75:ce:cd:9e:5a:08:26:cf: b5:93:8e:ab:ca:db:d5:f5:ab:11:40:c4:c1:4f:26: bd:b4:d6:6d:a5:79:78:51:aa:16:01:d0:22:fd:6b: 90:f8:83:79:49:5f:fe:5c:c9:a2:c8:25:32:43:3d: aa:99:14:34:4e:5f:6e:0b:8f:a3:86:d4:86:ad:ff: 19:14:58:f7:95:93:71:87:a4:24:d0:02:d7:37:d0: 07:dc:c1:4c:29:c1:3e:56:2a:21:7f:56:00:f0:62: ec:25:50:e0:21:f8:97:f6:89:3c:96:9b:cf:d3:e6: fa:b2:2c:08:5d:2b:71:9a:30:87:93:59:47:a9:b9: 0e:26:99:fd:eb:73:95:44:9f:53:4d:b2:1e:93:5a: 64:97:d5:54:27:63:6b:96:61:dd:e1:12:1e:ba:1a: be:f2:3a:49:68:8e:30:44:86:b5:5c:17:08:7d:d1: 3a:78:dd:10:72:8e:95:af:f6:da:79:b7:c1:00:8a: 15:5d:d7:c0:82:a3:07:ef:8e:04:94:cf:2e:6b:f7: 96:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3B:09:A3:BC:40:3C:0C:F2:3C:82:61:C0:FB:E9:9A:26:B3:52:45 X509v3 Authority Key Identifier: keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4d:b2:cb:94:d3:8a:f1:e0:e2:e4:0b:ef:ee:c1:82:51:ce: c0:29:bf:ad:c6:0e:f2:52:56:18:10:0d:b2:40:07:5f:1e:e5: 01:5d:55:e2:97:63:f8:c9:26:c5:3d:fe:15:cd:c6:8b:36:bc: a0:28:7e:0c:d5:5d:95:78:04:d6:87:61:3c:58:be:ab:d8:5b: 2c:d2:91:67:ae:a0:87:f3:2c:38:ec:2d:1b:d3:ee:af:88:f3: dd:c4:af:a7:5a:e5:26:29:2f:d6:1b:38:25:19:76:38:d8:71: bf:a8:22:95:fc:9d:57:2e:ba:ff:67:32:23:08:8b:61:76:75: 1f:74:d9:53:f2:4c:44:58:2f:bf:28:34:b2:20:17:97:9f:86: 0c:61:00:23:7e:a3:c3:0c:28:5b:e4:8d:3f:b4:d0:e9:bc:4a: 92:af:92:44:42:47:3a:4a:f0:54:81:b9:76:96:ec:be:bc:10: 17:88:06:7f:b1:8f:07:48:c7:25:a4:7b:fd:77:15:57:1b:fb: b0:7b:fb:52:94:6e:eb:ec:61:4b:02:95:ca:02:e8:e7:95:14: 00:7f:9a:a2:9a:cf:b3:e0:27:15:06:51:4f:30:c7:6f:3d:c6: c3:a7:74:4c:bb:7f:c6:d6:ce:6c:7a:6b:f7:30:c1:bd:19:91: 50:ac:1a:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BvwAiymeHQ5G3MGqqadMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NmUyMzQxZDc4M2U1OTM0Zjg3ZDA1YzQ3M2ZjNmQyYjMw ZDlkNDUwHhcNMjYwMTI1MTIwMDM0WhcNMjYwMTI2MTIwMDM0WjAzMTEwLwYDVQQD Eyg3NzNiMDlhM2JjNDAzYzBjZjIzYzgyNjFjMGZiZTk5YTI2YjM1MjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu33w6npo3pFAKF3UxXuLV12AAnIc 6m4517mngO+X2xI1/lSrLUd7Pr/QG9TRH1uwN+vBdc7NnloIJs+1k46rytvV9asR QMTBTya9tNZtpXl4UaoWAdAi/WuQ+IN5SV/+XMmiyCUyQz2qmRQ0Tl9uC4+jhtSG rf8ZFFj3lZNxh6Qk0ALXN9AH3MFMKcE+Viohf1YA8GLsJVDgIfiX9ok8lpvP0+b6 siwIXStxmjCHk1lHqbkOJpn963OVRJ9TTbIek1pkl9VUJ2NrlmHd4RIeuhq+8jpJ aI4wRIa1XBcIfdE6eN0Qco6Vr/baebfBAIoVXdfAgqMH744ElM8ua/eWPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc7CaO8QDwM8jyCYcD76Zoms1JFMB8GA1UdIwQY MBaAFKluI0HXg+WTT4fQXEc/xtKzDZ1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYt NmQ0MjI1N2M4ZjZiLzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYtNmQ0MjI1N2M4ZjZi LzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnk2yy5TT ivHg4uQL7+7BglHOwCm/rcYO8lJWGBANskAHXx7lAV1V4pdj+MkmxT3+Fc3Giza8 oCh+DNVdlXgE1odhPFi+q9hbLNKRZ66gh/MsOOwtG9Pur4jz3cSvp1rlJikv1hs4 JRl2ONhxv6gilfydVy66/2cyIwiLYXZ1H3TZU/JMRFgvvyg0siAXl5+GDGEAI36j wwwoW+SNP7TQ6bxKkq+SREJHOkrwVIG5dpbsvrwQF4gGf7GPB0jHJaR7/XcVVxv7 sHv7UpRu6+xhSwKVygLo55UUAH+aoprPs+AnFQZRTzDHbz3Gw6d0TLt/xtbObHpr 9zDBvRmRUKwasQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:14 2026 by rpki-client