This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json) Hash identifier: PHaAWN2COetBJxo5aqMeHC5YGHHxpa/Eu0udANtwlBg= Subject key identifier: C4:75:0D:D9:0B:70:39:46:6F:30:4B:1F:CF:D5:B5:25:57:81:2E:D7 Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c Certificate serial: 019BF7633B2A5E9B73E3381E069F7F5CE83E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft Manifest number: 1009 Signing time: Sun 25 Jan 2026 23:00:34 +0000 Manifest this update: Sun 25 Jan 2026 23:00:34 +0000 Manifest next update: Mon 26 Jan 2026 23:00:34 +0000 Files and hashes: 1: 1jO_MX-Sw_SWrVNjj0SJGriKWso.roa (hash: +1Ob4GS5KDjiEWqocBShAx8xfU9H3FA5ublgst6nteY=) 2: 7aBM0h9dPhAyCGUi4UC0KOUaN6k.roa (hash: A6f4ThaBnwORbpYnfvo9LMhkIymfzCboRFjkjjXbkTQ=) 3: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: by+RSjmP/mu4P9bUri9EFE6mclSXIxSfbBDyrEBATVc=) 4: Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa (hash: uM9EsZZ8E2g49L46zhUinx0urR3LGpmOX04s8ebZGss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:3b:2a:5e:9b:73:e3:38:1e:06:9f:7f:5c:e8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c Validity Not Before: Jan 25 23:00:34 2026 GMT Not After : Jan 26 23:00:34 2026 GMT Subject: CN=c4750dd90b7039466f304b1fcfd5b52557812ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:1d:f9:9b:ce:e8:f2:66:79:4c:92:e8:3b: b9:3c:b4:06:24:3e:4b:73:74:44:ce:c0:2b:ca:f6: a5:08:9e:d9:a8:bd:87:c5:75:b5:61:22:c3:95:31: fe:d0:80:87:db:5b:71:e8:94:6a:71:3e:fb:9b:6e: a9:df:e4:32:a7:dc:6c:60:a8:46:87:88:f7:c6:dc: fa:e5:bd:43:e3:26:24:11:af:f5:50:5b:b5:23:54: e4:c8:c3:64:84:76:92:ce:7f:13:83:de:fd:26:af: 1b:11:f5:4a:6a:49:22:b5:e4:b7:2a:21:8f:61:e7: 24:88:b8:1e:39:5f:93:ae:48:10:39:bf:ef:0d:fb: 9c:6d:c4:f1:3d:e3:91:38:f7:77:0f:e9:39:9f:9b: 07:66:17:b1:d3:ad:c9:2b:37:c7:cc:b7:e7:3b:37: 5d:ed:85:8a:f1:2a:91:45:19:cc:62:8f:bf:87:33: 84:fb:47:9d:de:13:12:37:03:a2:b0:d5:66:23:47: 2f:54:dc:26:fe:e3:a9:35:ec:09:a2:72:1f:cd:73: 62:e5:1b:6f:09:a6:ff:70:9e:02:68:4f:af:fc:48: 93:b0:bf:08:4c:c1:fb:c7:ad:72:7b:07:29:a3:a6: b3:20:a0:10:97:33:a5:3c:48:a5:0a:0c:04:1f:68: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:75:0D:D9:0B:70:39:46:6F:30:4B:1F:CF:D5:B5:25:57:81:2E:D7 X509v3 Authority Key Identifier: keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:cb:f5:00:84:f1:fb:5f:5c:16:39:74:0d:b6:50:04:4c:ea: 93:17:31:7e:f0:b1:d5:2d:75:23:be:45:82:b6:f6:1b:2a:56: 3a:80:c7:00:80:8e:4e:d7:80:01:c8:b4:7b:49:d0:92:7b:5a: 2f:ea:24:88:da:8b:67:47:77:b7:69:44:1d:9e:92:af:0a:4f: 06:aa:c7:61:16:72:6e:2d:39:97:76:fd:a4:62:40:cf:e7:72: a4:f7:de:c9:a0:ca:0e:fa:cf:77:b7:9c:d8:8b:dd:e8:be:2a: f4:97:b2:5f:bf:aa:74:33:2a:a5:51:8d:43:35:42:e6:5b:23: 72:85:28:7c:25:79:28:ee:4e:65:44:10:76:2f:84:98:59:e5: e9:6f:e5:ee:b7:37:37:a1:a0:54:0e:48:78:f6:69:38:ee:39: 91:d7:df:cb:47:94:ee:3e:6b:dc:27:87:8e:95:03:aa:f1:f9: b4:7b:5c:b5:22:36:3c:f2:85:ea:e2:62:27:87:d4:fb:db:fb: 9b:66:d3:e2:34:08:e9:fe:b7:25:9c:ec:b5:c9:9d:10:93:3f: a8:89:06:05:ec:70:99:b2:71:f6:ed:b5:bb:6c:55:da:0e:57: 20:cc:83:55:38:56:4c:4c:45:1b:e5:f3:ee:ce:eb:95:b5:72: 32:b0:b1:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3YzsqXptz4zgeBp9/XOg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw ZGM5MmMwHhcNMjYwMTI1MjMwMDM0WhcNMjYwMTI2MjMwMDM0WjAzMTEwLwYDVQQD EyhjNDc1MGRkOTBiNzAzOTQ2NmYzMDRiMWZjZmQ1YjUyNTU3ODEyZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0od+ZvO6PJmeUyS6Du5PLQGJD5L c3REzsAryvalCJ7ZqL2HxXW1YSLDlTH+0ICH21tx6JRqcT77m26p3+Qyp9xsYKhG h4j3xtz65b1D4yYkEa/1UFu1I1TkyMNkhHaSzn8Tg979Jq8bEfVKakkiteS3KiGP YeckiLgeOV+TrkgQOb/vDfucbcTxPeOROPd3D+k5n5sHZhex063JKzfHzLfnOzdd 7YWK8SqRRRnMYo+/hzOE+0ed3hMSNwOisNVmI0cvVNwm/uOpNewJonIfzXNi5Rtv Cab/cJ4CaE+v/EiTsL8ITMH7x61yewcpo6azIKAQlzOlPEilCgwEH2g2MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMR1DdkLcDlGbzBLH8/VtSVXgS7XMB8GA1UdIwQY MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt YjA2ODMxNTk2NDQ5LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5 LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsv1AITx +19cFjl0DbZQBEzqkxcxfvCx1S11I75Fgrb2GypWOoDHAICOTteAAci0e0nQknta L+okiNqLZ0d3t2lEHZ6SrwpPBqrHYRZybi05l3b9pGJAz+dypPfeyaDKDvrPd7ec 2Ivd6L4q9JeyX7+qdDMqpVGNQzVC5lsjcoUofCV5KO5OZUQQdi+EmFnl6W/l7rc3 N6GgVA5IePZpOO45kdffy0eU7j5r3CeHjpUDqvH5tHtctSI2PPKF6uJiJ4fU+9v7 m2bT4jQI6f63JZzstcmdEJM/qIkGBexwmbJx9u21u2xV2g5XIMyDVThWTExFG+Xz 7s7rlbVyMrCxBw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:08 2026 by rpki-client