This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft File: qn2enOi8XayPr4gW2aCgqGHbioU.mft (raw, json) Hash identifier: G22+SH6h/voyu9UxROaavQ52NTm5RCONRMEljfwAGhE= Subject key identifier: 55:47:42:7E:DC:09:EC:40:B6:F0:CE:78:A7:CB:51:2C:01:1D:AB:98 Authority key identifier: AA:7D:9E:9C:E8:BC:5D:AC:8F:AF:88:16:D9:A0:A0:A8:61:DB:8A:85 Certificate issuer: /CN=aa7d9e9ce8bc5dac8faf8816d9a0a0a861db8a85 Certificate serial: 019BF574D78E144E819E5704183961961C6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qn2enOi8XayPr4gW2aCgqGHbioU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft Manifest number: 45 Signing time: Sun 25 Jan 2026 14:00:33 +0000 Manifest this update: Sun 25 Jan 2026 14:00:33 +0000 Manifest next update: Mon 26 Jan 2026 14:00:33 +0000 Files and hashes: 1: OvPEVe_g0HPTbX2kaynw_Z6o3Pg.asa (hash: 5ulFTi8KO5d3SHzr+nQc7b2zIT0hBb21FVmP8ETMn+M=) 2: qn2enOi8XayPr4gW2aCgqGHbioU.crl (hash: e6RSSUGNEiMScy6wfL6HPaKudQMB+XAMs0wx9y15nu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft rsync://rpki.ripe.net/repository/DEFAULT/qn2enOi8XayPr4gW2aCgqGHbioU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:d7:8e:14:4e:81:9e:57:04:18:39:61:96:1c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7d9e9ce8bc5dac8faf8816d9a0a0a861db8a85 Validity Not Before: Jan 25 14:00:33 2026 GMT Not After : Jan 26 14:00:33 2026 GMT Subject: CN=5547427edc09ec40b6f0ce78a7cb512c011dab98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:58:21:85:86:98:c4:86:d5:ae:eb:5b:45: 19:a5:ce:d6:b8:5a:d1:d5:e9:9e:8e:4d:d4:b3:73: 2c:a3:a3:d8:2f:87:cf:a5:b5:58:f2:b0:89:6f:be: 59:b3:64:5a:5e:06:d4:e9:09:02:96:2f:2c:3c:4c: e0:9a:1f:0e:63:d7:4d:e4:68:8b:67:98:8d:32:f1: 4e:24:cb:f4:29:ac:f2:0e:2c:df:e5:35:6e:1c:d5: e4:de:4d:0c:e5:88:41:53:aa:b1:fb:39:c0:e6:5a: 21:32:88:d7:4d:87:6b:8c:bf:d8:44:3e:a2:29:17: 01:da:73:63:d0:08:7d:c6:64:75:df:60:0e:61:87: 43:45:78:38:96:ec:7d:6c:f9:e6:0c:c4:c4:8d:8f: 98:1c:ee:6c:2d:e7:8b:14:92:f5:a1:da:dc:ce:89: 25:6f:47:4a:af:7e:81:64:d1:3d:fc:4f:3c:a1:e7: 12:c4:6a:b3:14:7c:60:b8:8c:8c:12:d0:56:8e:c6: ce:8b:2d:6a:df:23:92:e9:1a:86:2e:86:ce:c1:71: 6d:9c:d9:27:f2:db:ce:9c:e9:aa:24:39:17:ca:91: 59:1e:5d:89:e9:de:22:05:7f:06:68:ea:81:29:1b: 47:2a:7a:dc:a0:65:af:93:2d:c3:cb:7e:a1:26:17: 98:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:47:42:7E:DC:09:EC:40:B6:F0:CE:78:A7:CB:51:2C:01:1D:AB:98 X509v3 Authority Key Identifier: keyid:AA:7D:9E:9C:E8:BC:5D:AC:8F:AF:88:16:D9:A0:A0:A8:61:DB:8A:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qn2enOi8XayPr4gW2aCgqGHbioU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:47:c2:f9:af:f3:4b:aa:51:e4:51:4f:ab:f9:1b:c5:00:85: d7:87:cf:e1:36:c2:53:2d:7f:63:3a:95:dc:60:99:fd:4e:d6: 77:ed:2d:e1:56:a9:63:f4:8d:e1:bf:58:72:63:69:e9:30:97: a9:d2:98:81:c1:54:2d:2c:c7:8a:5c:37:9e:b4:7d:99:3b:85: e7:c1:9b:65:ec:23:ea:14:f6:4a:25:3e:cf:4b:c8:01:c2:23: fc:0f:ae:26:08:f9:d6:05:2b:de:fd:eb:db:db:f6:3a:3f:1a: 1d:b2:c4:8f:19:89:0d:94:00:69:f9:71:45:25:ac:63:38:a2: 07:bd:2d:a8:77:00:5b:c7:6f:55:37:92:cb:ab:67:c3:69:cd: 34:1d:af:14:7e:d7:dc:34:21:0a:3b:bb:3d:52:86:87:1d:6f: f3:73:e9:e1:95:cc:b7:4d:69:a0:f2:9f:0b:93:29:37:7f:2b: 50:fa:bc:8a:41:cb:86:e2:c1:a5:eb:30:d9:b6:fe:53:ae:90: 38:05:84:31:33:8d:fd:8c:0b:2d:eb:ef:a4:54:53:fb:f5:aa: e2:20:3a:b4:fb:7e:31:c7:f3:7e:05:96:95:93:bf:a7:81:4e: 60:64:23:de:87:30:01:24:5b:d5:cb:b8:1a:6b:48:cc:f8:b9: f3:3a:b2:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dNeOFE6BnlcEGDlhlhxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2Q5ZTljZThiYzVkYWM4ZmFmODgxNmQ5YTBhMGE4NjFk YjhhODUwHhcNMjYwMTI1MTQwMDMzWhcNMjYwMTI2MTQwMDMzWjAzMTEwLwYDVQQD Eyg1NTQ3NDI3ZWRjMDllYzQwYjZmMGNlNzhhN2NiNTEyYzAxMWRhYjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqZYIYWGmMSG1a7rW0UZpc7WuFrR 1emejk3Us3Mso6PYL4fPpbVY8rCJb75Zs2RaXgbU6QkCli8sPEzgmh8OY9dN5GiL Z5iNMvFOJMv0KazyDizf5TVuHNXk3k0M5YhBU6qx+znA5lohMojXTYdrjL/YRD6i KRcB2nNj0Ah9xmR132AOYYdDRXg4lux9bPnmDMTEjY+YHO5sLeeLFJL1odrczokl b0dKr36BZNE9/E88oecSxGqzFHxguIyMEtBWjsbOiy1q3yOS6RqGLobOwXFtnNkn 8tvOnOmqJDkXypFZHl2J6d4iBX8GaOqBKRtHKnrcoGWvky3Dy36hJheYmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVHQn7cCexAtvDOeKfLUSwBHauYMB8GA1UdIwQY MBaAFKp9npzovF2sj6+IFtmgoKhh24qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW4yZW5PaThYYXlQcjRnVzJhQ2dxR0hiaW9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMjhkNWItNjliMS00NzUyLTk5Y2It NTU0YTgxYzkwNzExLzEvcW4yZW5PaThYYXlQcjRnVzJhQ2dxR0hiaW9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lMjhkNWItNjliMS00NzUyLTk5Y2ItNTU0YTgxYzkwNzEx LzEvcW4yZW5PaThYYXlQcjRnVzJhQ2dxR0hiaW9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUfC+a/z S6pR5FFPq/kbxQCF14fP4TbCUy1/YzqV3GCZ/U7Wd+0t4VapY/SN4b9YcmNp6TCX qdKYgcFULSzHilw3nrR9mTuF58GbZewj6hT2SiU+z0vIAcIj/A+uJgj51gUr3v3r 29v2Oj8aHbLEjxmJDZQAaflxRSWsYziiB70tqHcAW8dvVTeSy6tnw2nNNB2vFH7X 3DQhCju7PVKGhx1v83Pp4ZXMt01poPKfC5MpN38rUPq8ikHLhuLBpesw2bb+U66Q OAWEMTON/YwLLevvpFRT+/Wq4iA6tPt+McfzfgWWlZO/p4FOYGQj3ocwASRb1cu4 GmtIzPi58zqyUA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:43:08 2026 by rpki-client