This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft File: quarBHvHMpbJcVvLrq4ukYMWt4o.mft (raw, json) Hash identifier: EL/sXL4g+R4AQ8gsJkD17AHl8TEl5xMNofuxVKTyZa4= Subject key identifier: 49:F7:82:1D:CF:44:CB:79:8E:C1:CB:54:28:62:58:18:8E:80:AC:BD Authority key identifier: AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A Certificate issuer: /CN=aae6ab047bc73296c9715bcbaeae2e918316b78a Certificate serial: 019BF68848D59FC0A486EB3528C3913230D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft Manifest number: 07B7 Signing time: Sun 25 Jan 2026 19:01:25 +0000 Manifest this update: Sun 25 Jan 2026 19:01:25 +0000 Manifest next update: Mon 26 Jan 2026 19:01:25 +0000 Files and hashes: 1: WICYHswQgB3ANXpj2XMC_BWEC_s.roa (hash: ikH6R5G0JiDUZ3ms+Esb5y69pjV5ZuQpnPGnpa+MynM=) 2: quarBHvHMpbJcVvLrq4ukYMWt4o.crl (hash: gzuMAcVXLNchZxruo8NwJ2Cz8Cj6AXBcMJ+s8hpp36s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:48:d5:9f:c0:a4:86:eb:35:28:c3:91:32:30:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae6ab047bc73296c9715bcbaeae2e918316b78a Validity Not Before: Jan 25 19:01:25 2026 GMT Not After : Jan 26 19:01:25 2026 GMT Subject: CN=49f7821dcf44cb798ec1cb54286258188e80acbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:44:2f:98:f2:4f:9d:d3:6c:5e:6b:76:42: ae:9d:c7:bb:54:16:5f:4b:6d:f0:d7:ad:1c:9b:6c: a5:21:89:ca:e9:cd:f9:7a:da:7e:4d:a3:fe:c8:9d: 71:34:9d:66:b5:9e:b8:79:3a:aa:34:c5:84:3d:f5: 73:f2:23:98:d5:50:b6:66:42:3f:3c:e7:d2:3e:88: 27:eb:88:f9:54:ad:fa:36:1f:16:df:ea:8e:6f:0b: d3:ad:5f:43:0a:a6:94:1d:19:19:2f:0f:5e:69:2b: a1:ff:3b:91:ff:fa:f0:9b:9a:54:da:07:95:96:e0: 7d:71:ba:4f:f6:68:44:c2:53:4a:64:89:53:43:0c: e0:d0:d1:f3:7f:a5:aa:b1:6b:d7:5b:20:2e:05:d5: 71:01:47:be:87:50:e3:57:c8:35:3c:6c:76:5f:e9: a7:dd:55:59:3a:32:ca:88:00:77:6c:09:8d:9f:fd: 9c:a5:8f:8a:24:35:49:01:d2:a9:7e:a5:99:57:bd: 4a:07:29:75:02:c1:30:89:bf:e9:b8:2e:6a:f1:e5: e3:dd:c4:a3:07:cf:2f:44:f3:76:42:bb:78:a7:88: d5:3d:5a:c5:32:69:bf:f4:7f:24:ab:ee:29:98:bc: ea:b7:f6:01:4c:97:fa:68:d6:cd:b9:bc:55:08:89: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F7:82:1D:CF:44:CB:79:8E:C1:CB:54:28:62:58:18:8E:80:AC:BD X509v3 Authority Key Identifier: keyid:AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ed:7c:e6:bc:b6:5a:85:da:96:25:11:ea:69:67:41:c3:4c: 48:0a:c2:a1:70:05:44:7c:27:70:59:f5:fc:65:1a:e6:56:7f: 7e:c3:a0:a9:ec:8a:4d:f1:d9:84:71:72:25:e0:69:9d:9b:e7: 52:62:d9:a5:d1:4a:17:52:43:3a:07:33:14:25:d4:bd:9e:a3: bb:5a:ea:c5:49:8e:c4:bc:68:0a:20:70:31:a1:c8:6f:85:4d: 47:59:fe:c1:78:4b:a8:d0:a7:68:18:50:3c:a7:e3:18:ff:e0: 9e:ef:78:1a:9e:a9:63:57:21:6c:1e:e7:b2:11:d5:66:f5:7b: 3f:07:66:e3:4c:f1:5a:3a:de:a9:95:ce:ce:1a:1a:1b:07:d1: ba:12:5c:49:58:35:a5:3f:81:4c:11:5f:9b:ef:b4:46:77:38: c1:e9:77:9c:38:ab:4b:df:fe:9f:08:9f:d8:51:f2:ab:af:7a: b3:78:08:e6:6b:9b:bb:1b:91:e6:d3:81:e1:7b:cb:2b:44:42: ab:b1:eb:41:f5:a9:cd:69:3e:8b:bb:5f:0a:fd:c3:2f:25:1d: 21:52:a6:90:e2:5f:44:88:d1:19:8c:63:be:87:b6:7e:87:51: 18:88:62:ad:b8:25:2f:6f:62:a6:6a:94:92:81:c5:6f:f1:16: df:aa:48:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iEjVn8Ckhus1KMORMjDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZTZhYjA0N2JjNzMyOTZjOTcxNWJjYmFlYWUyZTkxODMx NmI3OGEwHhcNMjYwMTI1MTkwMTI1WhcNMjYwMTI2MTkwMTI1WjAzMTEwLwYDVQQD Eyg0OWY3ODIxZGNmNDRjYjc5OGVjMWNiNTQyODYyNTgxODhlODBhY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp5EL5jyT53TbF5rdkKunce7VBZf S23w160cm2ylIYnK6c35etp+TaP+yJ1xNJ1mtZ64eTqqNMWEPfVz8iOY1VC2ZkI/ POfSPogn64j5VK36Nh8W3+qObwvTrV9DCqaUHRkZLw9eaSuh/zuR//rwm5pU2geV luB9cbpP9mhEwlNKZIlTQwzg0NHzf6WqsWvXWyAuBdVxAUe+h1DjV8g1PGx2X+mn 3VVZOjLKiAB3bAmNn/2cpY+KJDVJAdKpfqWZV71KByl1AsEwib/puC5q8eXj3cSj B88vRPN2Qrt4p4jVPVrFMmm/9H8kq+4pmLzqt/YBTJf6aNbNubxVCIko3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEn3gh3PRMt5jsHLVChiWBiOgKy9MB8GA1UdIwQY MBaAFKrmqwR7xzKWyXFby66uLpGDFreKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVhckJIdkhNcGJKY1Z2THJxNHVrWU1XdDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zZTgwMmUtZmFiOC00NGZjLTk5MWIt MmI1MDY5M2RiZjk1LzEvcXVhckJIdkhNcGJKY1Z2THJxNHVrWU1XdDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zZTgwMmUtZmFiOC00NGZjLTk5MWItMmI1MDY5M2RiZjk1 LzEvcXVhckJIdkhNcGJKY1Z2THJxNHVrWU1XdDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsu185ry2 WoXaliUR6mlnQcNMSArCoXAFRHwncFn1/GUa5lZ/fsOgqeyKTfHZhHFyJeBpnZvn UmLZpdFKF1JDOgczFCXUvZ6ju1rqxUmOxLxoCiBwMaHIb4VNR1n+wXhLqNCnaBhQ PKfjGP/gnu94Gp6pY1chbB7nshHVZvV7Pwdm40zxWjreqZXOzhoaGwfRuhJcSVg1 pT+BTBFfm++0Rnc4wel3nDirS9/+nwif2FHyq696s3gI5mubuxuR5tOB4XvLK0RC q7HrQfWpzWk+i7tfCv3DLyUdIVKmkOJfRIjRGYxjvoe2fodRGIhirbglL29ipmqU koHFb/EW36pIZA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:19 2026 by rpki-client