This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json) Hash identifier: reX5yagEHDT7eEAgE9AasMn79PwSIeC+uOVAYPRQTCw= Subject key identifier: 93:C5:4F:A7:AB:1E:64:88:86:C0:4A:AD:6A:EE:F1:D6:0E:BC:35:60 Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c Certificate serial: 019BF80876D86FB228E2CAD4C80ED7EBE612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft Manifest number: 98 Signing time: Mon 26 Jan 2026 02:01:02 +0000 Manifest this update: Mon 26 Jan 2026 02:01:02 +0000 Manifest next update: Tue 27 Jan 2026 02:01:02 +0000 Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=) 2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: wth7KWzHbYBidiwy8nymj8rOtKuynijqDDDqnfhAp7Q=) 3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:76:d8:6f:b2:28:e2:ca:d4:c8:0e:d7:eb:e6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c Validity Not Before: Jan 26 02:01:02 2026 GMT Not After : Jan 27 02:01:02 2026 GMT Subject: CN=93c54fa7ab1e648886c04aad6aeef1d60ebc3560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:5e:17:17:c1:b3:52:64:d0:55:45:57:27: b4:74:e1:12:4a:b9:71:b9:e9:cd:b0:eb:3a:3a:5f: 89:36:5a:1e:6b:0e:71:47:c3:f7:1d:21:fe:61:6d: 3e:99:f6:4c:af:a1:6f:8e:be:5c:7b:9b:11:75:9f: 70:18:db:eb:16:9b:fd:ae:ea:2c:1e:3a:b5:87:21: ce:67:a9:21:5d:8e:05:21:d5:7c:ac:17:05:00:e2: bc:5b:29:79:66:e3:06:2f:1d:f9:ed:88:91:41:31: e5:b8:a1:19:6d:d7:15:40:32:cc:b7:cb:97:63:dc: 72:f5:a6:24:75:69:44:60:d1:bf:a5:fd:62:8b:a5: 30:98:d4:ac:91:36:69:22:5c:38:95:7a:18:0e:83: d3:8a:22:87:6a:b1:a5:03:a4:6b:71:99:cf:d8:76: 0f:64:56:6b:77:93:39:56:e4:b8:a0:1f:88:76:39: b7:19:5c:ee:c3:ab:97:55:a3:3f:a6:6b:3e:92:31: b5:1f:3d:ca:fc:42:31:06:89:41:d3:f0:fe:b8:66: bb:2d:5a:ae:30:45:8d:59:33:d1:de:b2:b8:38:0a: 63:82:a8:3d:54:4d:05:10:8d:3c:6b:a2:42:75:a3: c1:dd:29:81:40:58:f1:df:b6:e0:36:92:ac:8b:69: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C5:4F:A7:AB:1E:64:88:86:C0:4A:AD:6A:EE:F1:D6:0E:BC:35:60 X509v3 Authority Key Identifier: keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6e:4b:70:2e:2d:9a:47:8f:90:ef:fa:52:c8:2a:0d:fd:c8: 6f:ac:7e:6e:83:c3:e2:4e:cb:80:89:cc:a9:e1:70:7e:a5:40: de:a9:69:94:a6:36:95:dc:c0:d5:8b:00:d1:6a:e5:de:cc:2d: 56:bb:9f:97:d3:8b:34:22:69:e2:6c:d5:d9:44:a0:a5:3b:68: e0:28:7a:64:77:c8:e9:59:fd:33:17:eb:d5:c5:32:37:e2:e0: 3a:5e:6f:cc:c1:3b:77:6d:c8:65:68:1c:19:3d:0f:e4:8d:7e: bf:b3:34:90:0b:de:61:48:32:b9:02:99:16:16:04:ab:59:b7: 0d:87:d8:d3:c4:ed:13:5b:4c:0b:86:d0:5e:b2:a4:8f:83:32: 1d:b5:31:6d:07:35:e2:60:8a:d6:4c:3b:24:08:69:7c:40:ea: b5:ad:cd:45:2d:db:59:47:ce:2c:e2:c6:8e:bb:64:fa:54:5b: 0e:a1:a0:66:3d:85:5b:a0:a3:1f:6e:4b:fb:8b:44:25:76:45: 36:3f:88:f1:65:54:3f:df:07:3a:5e:ff:42:f0:57:38:a6:04: 09:bd:74:0f:2c:47:7b:46:46:78:58:37:c9:cb:df:47:0a:bf: a4:b8:c1:86:47:49:62:14:95:12:af:0a:ab:71:6b:7f:f6:b5: 91:77:b6:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CHbYb7Io4srUyA7X6+YSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDhjNDg2ZWY1NjE3MGM0MTJmMjY2MTVkMGE0MDk0YmNh MWZiMmMwHhcNMjYwMTI2MDIwMTAyWhcNMjYwMTI3MDIwMTAyWjAzMTEwLwYDVQQD Eyg5M2M1NGZhN2FiMWU2NDg4ODZjMDRhYWQ2YWVlZjFkNjBlYmMzNTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO9eFxfBs1Jk0FVFVye0dOESSrlx uenNsOs6Ol+JNloeaw5xR8P3HSH+YW0+mfZMr6Fvjr5ce5sRdZ9wGNvrFpv9ruos Hjq1hyHOZ6khXY4FIdV8rBcFAOK8Wyl5ZuMGLx357YiRQTHluKEZbdcVQDLMt8uX Y9xy9aYkdWlEYNG/pf1ii6UwmNSskTZpIlw4lXoYDoPTiiKHarGlA6RrcZnP2HYP ZFZrd5M5VuS4oB+Idjm3GVzuw6uXVaM/pms+kjG1Hz3K/EIxBolB0/D+uGa7LVqu MEWNWTPR3rK4OApjgqg9VE0FEI08a6JCdaPB3SmBQFjx37bgNpKsi2kQLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPFT6erHmSIhsBKrWru8dYOvDVgMB8GA1UdIwQY MBaAFEAIxIbvVhcMQS8mYV0KQJS8ofssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTct ZTkyYTI1NDkxY2VkLzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTctZTkyYTI1NDkxY2Vk LzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYm5LcC4t mkePkO/6UsgqDf3Ib6x+boPD4k7LgInMqeFwfqVA3qlplKY2ldzA1YsA0Wrl3swt Vrufl9OLNCJp4mzV2USgpTto4Ch6ZHfI6Vn9Mxfr1cUyN+LgOl5vzME7d23IZWgc GT0P5I1+v7M0kAveYUgyuQKZFhYEq1m3DYfY08TtE1tMC4bQXrKkj4MyHbUxbQc1 4mCK1kw7JAhpfEDqta3NRS3bWUfOLOLGjrtk+lRbDqGgZj2FW6CjH25L+4tEJXZF Nj+I8WVUP98HOl7/QvBXOKYECb10DyxHe0ZGeFg3ycvfRwq/pLjBhkdJYhSVEq8K q3Frf/a1kXe2Kg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:27 2026 by rpki-client