This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json) Hash identifier: lBEpcwVhPxpNvzlKvBc+nq4PN3DaoLhYqeAAQjPaGzM= Subject key identifier: 84:82:EA:8E:54:32:03:BD:F8:A4:54:37:EE:82:ED:AB:65:B1:3A:E5 Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4 Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4 Certificate serial: 019BF79AB7317DDA50D36D650E7EE7229774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft Manifest number: 0640 Signing time: Mon 26 Jan 2026 00:01:10 +0000 Manifest this update: Mon 26 Jan 2026 00:01:10 +0000 Manifest next update: Tue 27 Jan 2026 00:01:10 +0000 Files and hashes: 1: Ayy3FQCZfsnrrkGpwiilXLbjkWM.roa (hash: esgmCzM37dMW6UxbTfw9yQ8cfp/xjD2YDV7D5NJMYIE=) 2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: fv58PLywI2vWV9wTxE7ApBK55qdY3sZLKfTxSuqKs6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:b7:31:7d:da:50:d3:6d:65:0e:7e:e7:22:97:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4 Validity Not Before: Jan 26 00:01:10 2026 GMT Not After : Jan 27 00:01:10 2026 GMT Subject: CN=8482ea8e543203bdf8a45437ee82edab65b13ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:de:62:46:bb:9a:fd:ba:a9:04:89:85:2e:31: 60:8d:db:70:3d:73:fe:a7:d8:20:87:69:c3:ee:4b: 42:2c:fb:dc:d2:d2:18:18:01:b2:f8:59:83:c5:e7: e0:1c:ae:96:75:39:4a:bc:c3:ae:b2:49:97:25:62: 8e:c4:b2:86:f8:12:90:4a:1b:61:56:b3:55:8e:fd: 94:42:31:41:b6:27:a6:86:dd:17:4d:21:e3:68:35: 69:c1:10:04:61:a5:e5:c6:66:cd:90:1b:c0:12:b8: a5:c9:cf:5a:c4:9d:5c:48:10:9b:e4:ec:4a:1d:f0: 9f:fc:92:81:e1:c9:f3:72:4b:0c:b2:85:b2:af:56: e2:fd:af:b8:82:04:0a:83:12:cb:6d:bf:f7:a0:2a: e3:85:1c:7b:b2:43:08:d8:53:db:33:a9:b6:2b:28: 23:21:07:f4:f1:ae:46:ae:d8:47:5a:e5:e2:84:39: 23:73:2b:96:9b:d6:09:e7:96:c2:06:93:71:50:e2: f5:7f:2d:14:59:63:6e:ac:bf:aa:3a:d1:f0:31:52: ac:e4:34:a9:6a:85:07:8b:72:d6:1a:ef:96:3e:c4: d5:29:ad:ea:bc:58:1b:1c:e8:25:dc:a1:1f:c6:23: 1d:d5:cb:d4:9c:61:40:4d:76:f1:05:78:af:36:98: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:82:EA:8E:54:32:03:BD:F8:A4:54:37:EE:82:ED:AB:65:B1:3A:E5 X509v3 Authority Key Identifier: keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:44:a6:51:ee:e1:eb:c0:c6:b4:53:32:fa:9b:68:d7:25:60: aa:b7:94:7a:e6:1a:b4:f6:c7:e8:77:14:bb:6d:18:52:8b:ba: 71:a3:0f:52:c8:49:88:7b:07:2d:65:ff:5a:d5:d1:35:3f:c4: 92:51:19:01:f3:a8:fa:d7:44:e7:d7:4b:35:ef:3e:82:4a:f5: 06:96:a2:57:27:14:c7:e2:9c:6a:4c:cf:31:aa:c1:a2:d3:ae: 4c:34:1b:36:31:f7:9f:1d:5b:19:d4:8e:b6:02:f2:57:dc:74: 79:c8:bf:28:db:03:5d:6a:13:08:36:4b:2d:54:b2:5f:e5:52: 8b:eb:c7:9a:4f:50:be:4f:0c:55:5a:34:20:9f:ab:fd:21:b5: 96:7b:74:0f:3f:09:3a:ce:c8:08:80:25:6e:32:58:88:a2:1e: 77:53:88:1d:20:fa:b6:14:78:33:d3:da:6a:78:72:56:49:14: f0:8a:fb:dd:49:c4:14:31:7e:54:ab:df:87:68:90:aa:cb:a9: 5e:e3:22:72:ff:a1:e2:f4:f6:af:12:c4:cd:9b:50:92:76:4e: 48:fb:ec:f1:d6:67:bb:2d:7f:ed:af:5e:f8:22:1c:59:ba:e1: 83:49:bd:5e:2d:1c:7d:96:a7:03:de:23:9b:64:9d:39:94:26: c0:62:45:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mrcxfdpQ021lDn7nIpd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MGUyOGYyZTUwOWZlMzdhYzVjMzQwMWEwYThjMTEwMjli NjIxZTQwHhcNMjYwMTI2MDAwMTEwWhcNMjYwMTI3MDAwMTEwWjAzMTEwLwYDVQQD Eyg4NDgyZWE4ZTU0MzIwM2JkZjhhNDU0MzdlZTgyZWRhYjY1YjEzYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA495iRrua/bqpBImFLjFgjdtwPXP+ p9ggh2nD7ktCLPvc0tIYGAGy+FmDxefgHK6WdTlKvMOuskmXJWKOxLKG+BKQShth VrNVjv2UQjFBtiemht0XTSHjaDVpwRAEYaXlxmbNkBvAErilyc9axJ1cSBCb5OxK HfCf/JKB4cnzcksMsoWyr1bi/a+4ggQKgxLLbb/3oCrjhRx7skMI2FPbM6m2Kygj IQf08a5GrthHWuXihDkjcyuWm9YJ55bCBpNxUOL1fy0UWWNurL+qOtHwMVKs5DSp aoUHi3LWGu+WPsTVKa3qvFgbHOgl3KEfxiMd1cvUnGFATXbxBXivNpgeGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISC6o5UMgO9+KRUN+6C7atlsTrlMB8GA1UdIwQY MBaAFKkOKPLlCf43rFw0AaCowRAptiHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEt YTAwM2JmZGY0ZTQ1LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEtYTAwM2JmZGY0ZTQ1 LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUSmUe7h 68DGtFMy+pto1yVgqreUeuYatPbH6HcUu20YUou6caMPUshJiHsHLWX/WtXRNT/E klEZAfOo+tdE59dLNe8+gkr1BpaiVycUx+KcakzPMarBotOuTDQbNjH3nx1bGdSO tgLyV9x0eci/KNsDXWoTCDZLLVSyX+VSi+vHmk9Qvk8MVVo0IJ+r/SG1lnt0Dz8J Os7ICIAlbjJYiKIed1OIHSD6thR4M9PaanhyVkkU8Ir73UnEFDF+VKvfh2iQqsup XuMicv+h4vT2rxLEzZtQknZOSPvs8dZnuy1/7a9e+CIcWbrhg0m9Xi0cfZanA94j m2SdOZQmwGJF9A== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:35 2026 by rpki-client