This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json) Hash identifier: hqnHsTJofwzX1Nthd1THW2lAq/L32dV2krbA4rpmfbw= Subject key identifier: 90:CD:53:85:FB:6E:11:8A:E1:B1:ED:4C:36:53:E7:3A:32:B7:34:11 Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1 Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1 Certificate serial: 019BF5E3A9D87DA04C44E96F21B654B59E8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft Manifest number: 029D Signing time: Sun 25 Jan 2026 16:01:36 +0000 Manifest this update: Sun 25 Jan 2026 16:01:36 +0000 Manifest next update: Mon 26 Jan 2026 16:01:36 +0000 Files and hashes: 1: LzYZHC-rjJGbruYM23VscVWulpM.roa (hash: sBrrJnoeM0fqyubYgpN8QGXQIytqFwMQbpd5rGJx9Ns=) 2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: W/J6EgEsQuo/6q2/WOfNTktP6cEQtqkeyhGi9MwzBSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:a9:d8:7d:a0:4c:44:e9:6f:21:b6:54:b5:9e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1 Validity Not Before: Jan 25 16:01:36 2026 GMT Not After : Jan 26 16:01:36 2026 GMT Subject: CN=90cd5385fb6e118ae1b1ed4c3653e73a32b73411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:62:f5:72:9c:f3:41:0c:4a:50:95:a5:7d: 70:2e:43:6d:85:84:3f:93:07:b7:f0:d3:c5:7c:4f: be:f1:21:bc:60:47:99:32:ed:82:9b:72:80:b0:2e: 5e:e7:e5:46:c6:2d:c4:e3:2a:60:6c:c3:28:7f:93: a6:0a:6e:0a:0c:02:fe:d9:24:dd:47:02:64:a4:d4: d7:43:6d:98:52:47:5f:db:94:2c:c6:a4:fb:52:7f: a5:e5:51:2f:15:2b:02:5d:79:6a:ab:94:9e:6c:8c: 68:1b:0a:66:40:c1:ac:5d:73:c9:28:ab:a4:5f:4c: ac:ec:bd:b5:4a:78:63:d8:ca:33:df:8d:91:c9:4b: ba:3d:1f:bb:a4:95:c7:80:ca:fb:3d:88:cb:58:f8: cc:ff:97:ce:5b:74:6a:ab:e8:5a:e0:db:19:8a:c6: a3:0c:da:22:8f:60:ec:eb:d6:a9:d8:d3:f3:c2:ba: e2:06:f6:16:f1:ff:a2:61:2b:de:bd:3e:07:87:d9: b0:5e:a3:a1:40:45:a8:9b:07:d3:dd:a9:ec:bf:bb: db:5f:3b:68:3c:35:60:49:db:a2:00:2e:02:43:4b: b4:f2:30:48:c2:22:eb:99:e9:13:51:94:ae:75:4a: 11:43:5c:af:21:6a:4e:ac:93:35:50:bd:8a:83:0c: a3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CD:53:85:FB:6E:11:8A:E1:B1:ED:4C:36:53:E7:3A:32:B7:34:11 X509v3 Authority Key Identifier: keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:cc:80:b2:b8:36:39:87:83:91:4c:93:fb:dd:1d:bc:8a:d9: 6a:b2:2a:a7:8b:41:a8:a2:f7:39:d0:fe:8c:94:6d:70:4f:9c: 48:c2:31:b3:7e:63:d0:4d:d9:94:21:d0:8e:2d:12:8b:62:17: 61:f9:70:29:32:14:5c:68:5a:cc:79:f3:e1:16:43:74:19:0f: d5:9d:ff:ba:70:0a:2c:cb:e2:b5:df:4c:55:43:82:2d:55:79: ea:ad:c2:ae:fe:96:06:99:f9:43:bd:3a:38:33:74:9e:e4:d1: d4:9e:94:a2:dc:f4:08:a9:39:90:69:b9:58:b3:04:b8:0d:71: 61:92:69:99:27:4d:58:ce:a8:7e:d6:37:d3:cf:10:8d:71:93: d5:5c:ad:1d:5d:0b:5e:52:33:77:f5:05:55:b8:9e:77:11:04: 89:ac:7e:8b:bf:a9:3d:da:fd:15:b1:ce:65:2b:8a:ea:93:90: 18:82:7a:ef:11:b8:31:b4:ae:d2:df:82:d8:4f:48:be:13:11: fb:c9:2e:d4:26:62:3d:c8:f8:4d:6b:d1:6f:4b:13:7b:a9:10: c1:12:f1:19:3f:91:58:3c:a7:ac:44:61:e5:0c:3d:8a:f7:e6: d7:2d:8a:63:bd:de:9c:5f:12:48:cc:b0:63:18:dc:98:99:fa: 1b:e9:0e:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv146nYfaBMROlvIbZUtZ6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmU1ZDk3OWUwMzI1Mzk5OTQ2YjIzOTA4MjJkMzBmMWQy ZjM1ZTEwHhcNMjYwMTI1MTYwMTM2WhcNMjYwMTI2MTYwMTM2WjAzMTEwLwYDVQQD Eyg5MGNkNTM4NWZiNmUxMThhZTFiMWVkNGMzNjUzZTczYTMyYjczNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2Ri9XKc80EMSlCVpX1wLkNthYQ/ kwe38NPFfE++8SG8YEeZMu2Cm3KAsC5e5+VGxi3E4ypgbMMof5OmCm4KDAL+2STd RwJkpNTXQ22YUkdf25QsxqT7Un+l5VEvFSsCXXlqq5SebIxoGwpmQMGsXXPJKKuk X0ys7L21Snhj2Moz342RyUu6PR+7pJXHgMr7PYjLWPjM/5fOW3Rqq+ha4NsZisaj DNoij2Ds69ap2NPzwrriBvYW8f+iYSvevT4Hh9mwXqOhQEWomwfT3ansv7vbXzto PDVgSduiAC4CQ0u08jBIwiLrmekTUZSudUoRQ1yvIWpOrJM1UL2KgwyjtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDNU4X7bhGK4bHtTDZT5zoytzQRMB8GA1UdIwQY MBaAFKkuXZeeAyU5mUayOQgi0w8dLzXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAt YTQ3ZDE0MWNmYzVhLzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAtYTQ3ZDE0MWNmYzVh LzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMyAsrg2 OYeDkUyT+90dvIrZarIqp4tBqKL3OdD+jJRtcE+cSMIxs35j0E3ZlCHQji0Si2IX YflwKTIUXGhazHnz4RZDdBkP1Z3/unAKLMvitd9MVUOCLVV56q3Crv6WBpn5Q706 ODN0nuTR1J6Uotz0CKk5kGm5WLMEuA1xYZJpmSdNWM6oftY3088QjXGT1VytHV0L XlIzd/UFVbiedxEEiax+i7+pPdr9FbHOZSuK6pOQGIJ67xG4MbSu0t+C2E9IvhMR +8ku1CZiPcj4TWvRb0sTe6kQwRLxGT+RWDynrERh5Qw9ivfm1y2KY73enF8SSMyw YxjcmJn6G+kOHQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:40 2026 by rpki-client