This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft File: qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft (raw, json) Hash identifier: AsrXQDdWWKCBzPxhGQtRoOCVzSz4M8Y3+UViCm02mwA= Subject key identifier: 11:7D:0E:02:4D:08:7A:2B:92:87:DE:1B:D8:E5:DB:8B:5A:E2:EA:53 Authority key identifier: A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0 Certificate issuer: /CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0 Certificate serial: 019BF7D238E9CD3A9D80AF2F014B8369FB0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft Manifest number: 0725 Signing time: Mon 26 Jan 2026 01:01:47 +0000 Manifest this update: Mon 26 Jan 2026 01:01:47 +0000 Manifest next update: Tue 27 Jan 2026 01:01:47 +0000 Files and hashes: 1: 1-8RpzQOO8MH_8tY_8CiuesNU5kw.roa (hash: NwZ58UxGQif1qZHSYOqbsi4+8X/Tbr0yxp1KYuyKjAA=) 2: qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl (hash: 5fhfEIQAsnbfzbhLmZ6tm+KfSmD20gCw7cT0wobgu8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:38:e9:cd:3a:9d:80:af:2f:01:4b:83:69:fb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0 Validity Not Before: Jan 26 01:01:47 2026 GMT Not After : Jan 27 01:01:47 2026 GMT Subject: CN=117d0e024d087a2b9287de1bd8e5db8b5ae2ea53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f4:48:c8:db:ea:e7:84:98:14:41:09:f7:e6: c8:e8:e1:7a:b2:4b:ed:d9:33:83:37:f9:ee:9d:d9: 2f:d6:09:85:ae:0c:9f:23:1e:d0:5d:09:cc:f7:29: 9e:26:c7:3b:ad:c2:6f:02:23:72:c8:20:7b:bc:ba: 20:c6:0a:9d:ee:c3:d3:13:84:5a:28:b4:27:74:b1: 71:27:52:45:9c:3b:cc:13:55:d6:e8:a7:58:39:a6: 7e:40:2f:5c:ac:c0:03:11:9f:31:87:d5:88:af:c1: 23:07:3f:36:85:e3:5a:53:e8:09:d0:12:5f:9e:3b: 00:15:54:87:a2:6c:72:b1:f9:70:f7:c6:ec:83:c4: 55:c5:e0:5d:ac:df:ff:28:a2:b5:19:3f:8d:50:19: 1a:18:0e:45:e5:a1:57:86:52:88:0a:e7:f3:86:92: 7f:a5:d0:a5:86:cf:0b:81:a1:d4:84:f6:08:4f:ed: 1b:2b:86:1b:bd:68:23:06:1a:a2:c6:1c:8b:4f:c5: 07:11:a6:35:c3:b2:c4:3f:81:e4:23:36:f3:81:ca: f0:1a:01:07:65:00:3c:2f:81:ad:16:99:98:ae:90: 63:04:5c:4d:4b:e5:c4:7e:8e:7d:30:ed:79:02:49: 7f:eb:5f:bb:4c:a2:1d:fb:c6:20:48:6f:c4:34:95: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7D:0E:02:4D:08:7A:2B:92:87:DE:1B:D8:E5:DB:8B:5A:E2:EA:53 X509v3 Authority Key Identifier: keyid:A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a3:ac:82:73:1c:bf:c8:ce:25:77:cf:82:9f:41:60:90:4d: c4:e9:7e:7c:b0:62:67:29:bb:ad:0b:50:07:ba:10:72:18:4a: 4b:bf:22:52:23:52:f9:85:28:18:90:4e:b0:a9:1e:75:f6:86: 81:a0:e9:36:37:83:fa:ab:bc:36:04:02:eb:c8:78:22:d5:b4: 15:98:89:36:b0:c0:7a:75:cd:49:a1:78:00:38:6d:b2:98:7d: e7:e1:ea:31:7c:99:14:8a:0a:15:64:e2:a0:6c:79:e2:90:57: 3f:50:2a:c2:88:8c:4d:7d:3e:10:05:c2:f6:63:1a:5c:e6:ee: 4e:9e:c7:ca:3b:fc:d1:aa:78:f3:fb:0c:13:1f:74:10:b1:ea: 3b:0e:8c:bd:90:09:cc:6a:7b:98:08:8a:56:33:ce:0c:47:97: 6f:0e:4f:c4:56:7a:fc:21:ed:57:ea:8d:d2:85:d0:51:50:2f: de:68:bf:66:f6:b6:eb:e0:de:af:96:a3:3c:b1:92:ba:85:69: 79:3a:13:43:3d:17:67:dd:8f:45:d5:e9:df:0c:9a:5c:0a:54: 69:f8:bf:5b:11:9a:29:7b:8c:34:23:a6:75:ad:46:ad:49:5a: b9:ce:c3:fb:72:da:07:2d:e1:50:2a:6a:38:e6:4a:19:8b:02: ff:60:15:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30jjpzTqdgK8vAUuDafsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MjIwN2ZkNTBjNDVlOTZmMjgyNWVjNzcyY2Y2YjhkZWEz ZGZjYjAwHhcNMjYwMTI2MDEwMTQ3WhcNMjYwMTI3MDEwMTQ3WjAzMTEwLwYDVQQD EygxMTdkMGUwMjRkMDg3YTJiOTI4N2RlMWJkOGU1ZGI4YjVhZTJlYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PRIyNvq54SYFEEJ9+bI6OF6skvt 2TODN/nundkv1gmFrgyfIx7QXQnM9ymeJsc7rcJvAiNyyCB7vLogxgqd7sPTE4Ra KLQndLFxJ1JFnDvME1XW6KdYOaZ+QC9crMADEZ8xh9WIr8EjBz82heNaU+gJ0BJf njsAFVSHomxysflw98bsg8RVxeBdrN//KKK1GT+NUBkaGA5F5aFXhlKICufzhpJ/ pdClhs8LgaHUhPYIT+0bK4YbvWgjBhqixhyLT8UHEaY1w7LEP4HkIzbzgcrwGgEH ZQA8L4GtFpmYrpBjBFxNS+XEfo59MO15Akl/61+7TKId+8YgSG/ENJWbxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBF9DgJNCHorkofeG9jl24ta4upTMB8GA1UdIwQY MBaAFKgiB/1QxF6W8oJex3LPa43qPfywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYThlNDMtNmRmMC00N2VmLWFkYzUt MzBiZGQyZmUwNWIxLzEvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYThlNDMtNmRmMC00N2VmLWFkYzUtMzBiZGQyZmUwNWIx LzEvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKOsgnMc v8jOJXfPgp9BYJBNxOl+fLBiZym7rQtQB7oQchhKS78iUiNS+YUoGJBOsKkedfaG gaDpNjeD+qu8NgQC68h4ItW0FZiJNrDAenXNSaF4ADhtsph95+HqMXyZFIoKFWTi oGx54pBXP1AqwoiMTX0+EAXC9mMaXObuTp7Hyjv80ap48/sMEx90ELHqOw6MvZAJ zGp7mAiKVjPODEeXbw5PxFZ6/CHtV+qN0oXQUVAv3mi/Zva26+Der5ajPLGSuoVp eToTQz0XZ92PRdXp3wyaXApUafi/WxGaKXuMNCOmda1GrUlauc7D+3LaBy3hUCpq OOZKGYsC/2AVPQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:45:25 2026 by rpki-client