This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json) Hash identifier: kOVyD1JvfY4Rz41fTvFT3xkifQ49wBRcqwgoBe5/nak= Subject key identifier: E8:46:99:70:70:4B:93:E3:80:6D:AE:E0:3A:B4:9C:64:CC:4B:67:92 Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01 Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501 Certificate serial: 019BF319330C39B2342D84AF95AF5342EC1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft Manifest number: 12DB Signing time: Sun 25 Jan 2026 03:01:13 +0000 Manifest this update: Sun 25 Jan 2026 03:01:13 +0000 Manifest next update: Mon 26 Jan 2026 03:01:13 +0000 Files and hashes: 1: 1j1sIxN7dokPMeqtWpa2O79IJ2E.roa (hash: curzmuQMCpShAx5Xjvb+jxSDTma4OGIGe6t1amKgW4Y=) 2: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: VwlV4iq/wvBlsBiQ7n0i5kQVYQsnIpgFUIbAAFjE47g=) 3: H41pXcA8VjDWzAOdUw8kJkHTePo.roa (hash: vd9X0KNO4KjRnGRSxo8WoFeqcJXdexnSKn3TUknAjFQ=) 4: og4k5qVFbhVmLtxHVp2XKWNx-Vw.roa (hash: t6ZkyRFXAOHZOC93uE5FiUdcUyb51CT48WJCdjiZU/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:33:0c:39:b2:34:2d:84:af:95:af:53:42:ec:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501 Validity Not Before: Jan 25 03:01:13 2026 GMT Not After : Jan 26 03:01:13 2026 GMT Subject: CN=e8469970704b93e3806daee03ab49c64cc4b6792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:9d:55:27:33:ef:f2:c5:d3:cf:a0:06:39: af:85:d9:ae:fe:12:f9:e4:eb:2e:83:f4:e9:81:57: 6c:81:fa:49:d6:76:f9:4b:42:a0:5e:32:49:31:8f: e5:35:c1:cb:f1:cd:d0:07:d0:66:81:53:f6:57:07: 18:d5:eb:a0:66:25:ce:97:77:76:82:11:cf:b2:55: 49:98:0e:75:f0:b3:e0:3b:c6:cb:e3:95:d5:db:1f: c2:83:dc:0e:72:59:38:40:83:cc:76:fc:00:a3:cf: 55:48:9a:51:83:d6:59:21:32:04:f7:62:95:0d:37: 2b:60:51:fb:cc:59:7f:69:66:d8:2e:a2:ae:fe:1a: 72:f0:03:31:3c:3b:db:23:9c:2e:72:76:71:78:e0: 58:c6:6b:df:4f:d9:b9:56:a5:bb:c6:4f:1d:a0:c5: 88:c1:5a:e6:0e:b1:84:b1:6a:fb:e5:81:03:02:83: 47:ab:43:da:ef:2d:ad:3f:79:93:64:0f:6d:db:62: 5c:92:05:dd:45:c6:dd:40:20:4c:93:b3:07:b3:50: ae:2a:9d:85:9a:81:9c:6b:bf:05:ab:83:b7:68:c1: c9:86:36:26:9f:c0:53:2b:ae:48:60:ab:12:62:48: 0b:2b:f8:42:42:54:97:38:3b:2f:fa:b7:ab:c4:4f: 95:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:46:99:70:70:4B:93:E3:80:6D:AE:E0:3A:B4:9C:64:CC:4B:67:92 X509v3 Authority Key Identifier: keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ea:ff:fa:71:df:4f:ef:29:82:44:31:c5:70:9c:7e:81:1a: 0d:ff:3f:93:6b:05:13:52:57:37:77:d3:85:11:72:2c:28:36: 6d:a6:2a:8c:ad:6f:02:09:10:f1:70:bf:75:eb:e6:aa:cb:13: a4:fa:24:06:63:34:2c:d4:5d:8b:7e:93:50:bf:9c:9f:cc:ab: be:eb:85:ab:ce:54:d2:78:1d:a4:ea:2c:76:ba:ff:20:56:ab: 8d:e7:da:25:98:8e:3c:d8:8d:a9:1c:c1:be:b7:8d:d7:4d:f0: a5:52:32:a1:34:62:eb:8f:f2:9b:0f:5a:41:a7:e8:d5:16:70: 25:9b:d2:c7:ee:ad:7e:0c:b0:85:71:ad:ac:d7:ea:64:72:c3: 29:fe:2b:0c:33:a8:ce:73:e1:6e:00:1c:40:67:47:54:6f:a3: 12:4e:8f:1e:cc:d4:28:b8:16:c3:df:cd:ff:54:b1:41:95:6d: cd:90:4f:f9:73:4b:ad:a1:d8:ec:bb:c3:fd:11:39:3d:2d:8a: f8:14:79:09:c3:74:9f:d3:35:dd:ec:45:45:3d:ed:0f:a2:f4: bc:c7:bc:76:29:3d:a2:ea:71:93:c8:07:18:3d:b8:1e:f2:c2: eb:c9:08:71:3f:3d:f9:bb:af:71:1f:4e:78:be:ff:8c:79:d3: de:9a:33:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGTMMObI0LYSvla9TQuweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWE4OWY3YjcyMjI3OWMwMzI5NDJkY2YyNDg2NWY2ZDcy ZDY1MDEwHhcNMjYwMTI1MDMwMTEzWhcNMjYwMTI2MDMwMTEzWjAzMTEwLwYDVQQD EyhlODQ2OTk3MDcwNGI5M2UzODA2ZGFlZTAzYWI0OWM2NGNjNGI2NzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3CdVScz7/LF08+gBjmvhdmu/hL5 5Osug/TpgVdsgfpJ1nb5S0KgXjJJMY/lNcHL8c3QB9BmgVP2VwcY1eugZiXOl3d2 ghHPslVJmA518LPgO8bL45XV2x/Cg9wOclk4QIPMdvwAo89VSJpRg9ZZITIE92KV DTcrYFH7zFl/aWbYLqKu/hpy8AMxPDvbI5wucnZxeOBYxmvfT9m5VqW7xk8doMWI wVrmDrGEsWr75YEDAoNHq0Pa7y2tP3mTZA9t22JckgXdRcbdQCBMk7MHs1CuKp2F moGca78Fq4O3aMHJhjYmn8BTK65IYKsSYkgLK/hCQlSXODsv+rerxE+V7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhGmXBwS5PjgG2u4Dq0nGTMS2eSMB8GA1UdIwQY MBaAFNaqife3IiecAylC3PJIZfbXLWUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYt OGJhNjg4ODY2OWNmLzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYtOGJhNjg4ODY2OWNm LzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROr/+nHf T+8pgkQxxXCcfoEaDf8/k2sFE1JXN3fThRFyLCg2baYqjK1vAgkQ8XC/devmqssT pPokBmM0LNRdi36TUL+cn8yrvuuFq85U0ngdpOosdrr/IFarjefaJZiOPNiNqRzB vreN103wpVIyoTRi64/ymw9aQafo1RZwJZvSx+6tfgywhXGtrNfqZHLDKf4rDDOo znPhbgAcQGdHVG+jEk6PHszUKLgWw9/N/1SxQZVtzZBP+XNLraHY7LvD/RE5PS2K +BR5CcN0n9M13exFRT3tD6L0vMe8dik9oupxk8gHGD24HvLC68kIcT89+buvcR9O eL7/jHnT3pozWA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:37 2026 by rpki-client