This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json) Hash identifier: ffkpAjP0ih3+6S7lsW7cET9a5tCg/epaPOHBgcQs6yU= Subject key identifier: 5A:78:E4:47:6A:B8:35:69:CF:28:DC:ED:66:2D:70:ED:9D:F4:38:9A Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27 Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827 Certificate serial: 019BF72D838EBDCB629E9F4335520AD4E2D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft Manifest number: 1106 Signing time: Sun 25 Jan 2026 22:01:53 +0000 Manifest this update: Sun 25 Jan 2026 22:01:53 +0000 Manifest next update: Mon 26 Jan 2026 22:01:53 +0000 Files and hashes: 1: 2laheRZxUjH9nDxMrHlm80h7z5Q.roa (hash: iosXrqOVeIIOelMUJUYMuylT0ggApUkiu1y8GJhCfso=) 2: NotYCgUHoY2zetpjr5kSm9qBY_k.roa (hash: oJRB8iWYyMlRGM13QOWyb/5+9ImlksyZccjTnLMZZYE=) 3: YOBJXpEHAMny3YxgbXhGFE9H1Dc.roa (hash: ubjGl6NH+8cXpUPkiXxOW4R61YalXFLiA+y8Gn0QEic=) 4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: TbUQyqLj9yt9O1keR0RRcs+WIM5MciJLvlkM2Yo9WuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:83:8e:bd:cb:62:9e:9f:43:35:52:0a:d4:e2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827 Validity Not Before: Jan 25 22:01:53 2026 GMT Not After : Jan 26 22:01:53 2026 GMT Subject: CN=5a78e4476ab83569cf28dced662d70ed9df4389a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b9:64:93:55:d0:ce:91:6b:2e:30:17:0b:b3: ec:c6:7a:78:71:42:64:21:5e:be:be:bf:9d:d0:93: 0a:70:2a:b7:8e:ba:32:6b:3c:e4:06:5a:5e:3a:ad: 23:24:e7:ee:cd:a7:b9:95:14:c7:26:aa:fa:81:73: c7:f0:46:7c:5b:f3:4c:63:5e:e2:34:ba:4c:e5:49: 99:27:ef:69:6a:66:99:07:bd:1b:46:19:c8:2b:96: ea:a8:c9:d5:c6:98:68:0e:e8:a6:ea:6d:dd:be:61: 89:ba:ec:c0:d9:e6:7c:ef:6e:14:bd:6b:9b:5d:40: 76:bd:28:fd:27:bb:06:84:7b:42:14:c1:4f:d7:f0: 71:26:55:4c:fd:25:98:39:c1:f0:6f:ba:3b:80:05: af:b6:c2:05:ef:65:93:f2:14:37:c7:60:b2:28:b9: 57:a8:d1:44:7c:68:bc:fb:59:d0:4a:5f:8e:0d:55: 56:d3:68:3e:a7:88:40:ae:d2:44:e7:4e:f2:e1:be: 05:c3:52:d0:ce:c2:c1:2d:78:90:dd:12:b8:6b:0f: 10:17:4f:18:f5:da:d4:93:d7:76:47:b0:8a:b6:1d: 6d:55:4e:63:64:ff:84:60:8f:ba:11:1b:cd:c7:18: 01:e7:c9:9a:38:ac:c7:f3:eb:eb:b4:c0:5d:c0:06: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:78:E4:47:6A:B8:35:69:CF:28:DC:ED:66:2D:70:ED:9D:F4:38:9A X509v3 Authority Key Identifier: keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e4:db:8e:e8:c6:cf:7a:bf:8e:fd:79:27:4e:61:e7:04:90: 64:a3:0d:a5:56:0e:97:13:c3:75:b6:53:fb:18:b9:e1:24:08: ce:11:6e:36:91:23:7a:aa:56:57:d2:71:0d:5b:2b:aa:57:47: 18:e3:e2:2d:21:d0:83:d2:3c:f7:80:15:b0:6b:02:31:1d:4c: 26:2c:7e:41:43:8a:1e:60:df:86:5e:c7:70:bc:74:d0:57:76: d7:4e:74:77:7a:15:b3:95:da:61:55:03:a9:57:00:5c:9a:05: 74:f8:d4:9e:47:62:89:2c:a2:75:1c:48:a7:9f:8f:b6:07:39: 3a:d5:e0:a2:ea:e1:f4:31:c1:0d:8e:7c:f2:0b:4e:4a:e9:5f: 0f:44:09:53:d0:0c:ef:da:96:f6:7c:f5:84:92:3c:17:63:f8: f7:b1:b8:52:8c:f7:d7:1b:b2:9f:53:a2:0e:c3:c1:1e:9c:e5: 0a:51:6d:8c:9c:59:02:b6:7a:8a:10:5a:e3:1e:fe:e5:f2:42: 8b:6f:16:d5:ae:35:6b:07:a5:99:6c:65:b1:0a:d2:87:77:a9: cd:63:68:92:c5:00:72:84:81:f4:7c:8b:ae:54:f7:c1:e8:01: 0b:95:47:f0:52:5a:ff:15:e5:f6:34:52:8a:6d:d5:f1:a1:70: b2:8d:ba:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LYOOvctinp9DNVIK1OLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzljYzE2MjFlZTMwMTBhZTk4ZTEyN2JkMjU0YTc4MzNm ZDI4MjcwHhcNMjYwMTI1MjIwMTUzWhcNMjYwMTI2MjIwMTUzWjAzMTEwLwYDVQQD Eyg1YTc4ZTQ0NzZhYjgzNTY5Y2YyOGRjZWQ2NjJkNzBlZDlkZjQzODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjblkk1XQzpFrLjAXC7Psxnp4cUJk IV6+vr+d0JMKcCq3jroyazzkBlpeOq0jJOfuzae5lRTHJqr6gXPH8EZ8W/NMY17i NLpM5UmZJ+9pamaZB70bRhnIK5bqqMnVxphoDuim6m3dvmGJuuzA2eZ8724UvWub XUB2vSj9J7sGhHtCFMFP1/BxJlVM/SWYOcHwb7o7gAWvtsIF72WT8hQ3x2CyKLlX qNFEfGi8+1nQSl+ODVVW02g+p4hArtJE507y4b4Fw1LQzsLBLXiQ3RK4aw8QF08Y 9drUk9d2R7CKth1tVU5jZP+EYI+6ERvNxxgB58maOKzH8+vrtMBdwAb+RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFp45EdquDVpzyjc7WYtcO2d9DiaMB8GA1UdIwQY MBaAFKk5zBYh7jAQrpjhJ70lSngz/SgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYt YjA2MTk0ZDEzYzZiLzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYtYjA2MTk0ZDEzYzZi LzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuTbjujG z3q/jv15J05h5wSQZKMNpVYOlxPDdbZT+xi54SQIzhFuNpEjeqpWV9JxDVsrqldH GOPiLSHQg9I894AVsGsCMR1MJix+QUOKHmDfhl7HcLx00Fd21050d3oVs5XaYVUD qVcAXJoFdPjUnkdiiSyidRxIp5+Ptgc5OtXgourh9DHBDY588gtOSulfD0QJU9AM 79qW9nz1hJI8F2P497G4Uoz31xuyn1OiDsPBHpzlClFtjJxZArZ6ihBa4x7+5fJC i28W1a41awelmWxlsQrSh3epzWNoksUAcoSB9HyLrlT3wegBC5VH8FJa/xXl9jRS im3V8aFwso26/g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:46 2026 by rpki-client