This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json) Hash identifier: i/Q4eHrRHdtbQ3HGCsnhXob6JfTBLJcwJ0C3knDIRpI= Subject key identifier: FD:C9:05:A3:49:D2:C3:96:C7:69:20:EC:14:D5:B1:91:05:A6:51:36 Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd Certificate serial: 019BF808A6E2BA795B104181222DCF4A9DF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft Manifest number: 167D Signing time: Mon 26 Jan 2026 02:01:15 +0000 Manifest this update: Mon 26 Jan 2026 02:01:15 +0000 Manifest next update: Tue 27 Jan 2026 02:01:15 +0000 Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: EcZsdrQ1dKZssCp1tEsy6Tu30/AZeA/qPCo8c3ty9y8=) 2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=) 3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:a6:e2:ba:79:5b:10:41:81:22:2d:cf:4a:9d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd Validity Not Before: Jan 26 02:01:15 2026 GMT Not After : Jan 27 02:01:15 2026 GMT Subject: CN=fdc905a349d2c396c76920ec14d5b19105a65136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:97:60:b2:6d:1a:59:c7:7c:22:19:56:c9: 76:ab:4e:8b:96:48:34:39:47:0a:db:76:17:be:ba: 55:4c:7a:83:55:c5:3f:88:17:9e:4f:bf:54:d9:18: d8:e5:c6:03:e1:60:6b:c8:46:bd:fd:25:11:2b:7e: 3b:9f:73:cb:f2:91:7b:87:d0:a8:06:09:a0:da:be: d8:54:74:17:00:a4:2e:bc:86:0f:60:e3:46:81:d3: c1:d0:bf:c9:a1:ee:23:d5:1a:35:91:ba:cb:ad:48: c8:b5:88:0d:49:d4:41:48:72:08:14:76:2c:d4:67: da:47:95:a0:4f:d8:20:0a:9b:18:08:0b:ac:2a:3d: b1:c9:3c:d3:ca:30:e0:71:ac:a1:51:0c:86:81:1a: 68:9c:7a:4d:f4:10:9d:91:fe:2f:07:9b:d8:49:1c: 51:74:76:53:b3:94:05:32:1a:09:3f:de:7d:0b:ca: 4f:35:56:2d:a4:2d:da:9c:b2:71:01:e4:cc:6f:df: ba:a2:9e:60:a2:96:a4:8b:f8:22:53:f6:96:19:fd: 27:db:43:21:e1:ba:de:7d:23:2a:50:92:4b:41:18: 69:78:47:5d:a3:7f:04:9e:54:c8:2c:af:e0:20:b3: c6:61:1f:b0:95:fb:f1:8e:d4:0e:99:88:6f:38:1a: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C9:05:A3:49:D2:C3:96:C7:69:20:EC:14:D5:B1:91:05:A6:51:36 X509v3 Authority Key Identifier: keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ef:73:5e:17:c5:16:76:9c:e7:6d:f0:9f:dc:b3:a1:dc:85: 98:d6:19:75:6e:96:ee:e0:a1:be:33:7b:28:a5:85:42:b3:d4: 31:56:cb:3e:c0:cc:a9:f6:53:0e:39:9d:14:d9:db:85:fb:f1: a7:fd:29:d0:96:7b:72:24:79:f4:18:13:16:62:e3:e3:86:75: 6b:53:c0:d3:e0:40:38:23:f0:c3:14:61:f3:cb:9c:c2:1d:ab: fc:f2:70:3d:6f:7d:c8:3f:e3:65:3b:46:15:44:eb:39:b7:43: a4:90:c8:e7:f7:8a:b1:e0:6a:e1:f7:f1:f3:91:a2:cb:f0:7a: d6:a9:d8:41:9e:21:31:25:6e:62:06:ed:0d:de:6b:69:f5:36: 77:9b:28:9c:4a:49:11:31:2f:82:da:c4:eb:36:ab:eb:e6:8f: 50:e5:9d:7a:19:9d:00:8a:49:8e:ab:96:36:e3:08:66:5a:87: 5d:64:fa:fc:ea:8b:d7:27:90:d4:40:c4:89:e0:0f:5e:7d:4d: a3:1d:c9:3b:a5:4a:8f:e1:ed:c4:1c:a1:c2:3e:6d:1e:a2:70: 3a:c1:71:9b:a3:4a:d7:48:4d:69:73:90:b6:c3:28:12:6c:d0: be:1e:a7:ec:12:90:7b:96:d0:db:2f:3f:2b:5b:06:30:97:54: 10:d6:fe:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CKbiunlbEEGBIi3PSp33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGQ1MGFiMGY2Nzg4N2M1ZjVlZDFlODg3ZTc4ZGQyZjM1 OTI2ZmQwHhcNMjYwMTI2MDIwMTE1WhcNMjYwMTI3MDIwMTE1WjAzMTEwLwYDVQQD EyhmZGM5MDVhMzQ5ZDJjMzk2Yzc2OTIwZWMxNGQ1YjE5MTA1YTY1MTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrKXYLJtGlnHfCIZVsl2q06Llkg0 OUcK23YXvrpVTHqDVcU/iBeeT79U2RjY5cYD4WBryEa9/SURK347n3PL8pF7h9Co Bgmg2r7YVHQXAKQuvIYPYONGgdPB0L/Joe4j1Ro1kbrLrUjItYgNSdRBSHIIFHYs 1GfaR5WgT9ggCpsYCAusKj2xyTzTyjDgcayhUQyGgRponHpN9BCdkf4vB5vYSRxR dHZTs5QFMhoJP959C8pPNVYtpC3anLJxAeTMb9+6op5gopaki/giU/aWGf0n20Mh 4brefSMqUJJLQRhpeEddo38EnlTILK/gILPGYR+wlfvxjtQOmYhvOBrZ3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3JBaNJ0sOWx2kg7BTVsZEFplE2MB8GA1UdIwQY MBaAFAkNUKsPZ4h8X17R6IfnjdLzWSb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMt YWQxMzc4Mjg5YTEzLzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMtYWQxMzc4Mjg5YTEz LzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+9zXhfF Fnac523wn9yzodyFmNYZdW6W7uChvjN7KKWFQrPUMVbLPsDMqfZTDjmdFNnbhfvx p/0p0JZ7ciR59BgTFmLj44Z1a1PA0+BAOCPwwxRh88ucwh2r/PJwPW99yD/jZTtG FUTrObdDpJDI5/eKseBq4ffx85Giy/B61qnYQZ4hMSVuYgbtDd5rafU2d5sonEpJ ETEvgtrE6zar6+aPUOWdehmdAIpJjquWNuMIZlqHXWT6/OqL1yeQ1EDEieAPXn1N ox3JO6VKj+HtxByhwj5tHqJwOsFxm6NK10hNaXOQtsMoEmzQvh6n7BKQe5bQ2y8/ K1sGMJdUENb+BA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:59 2026 by rpki-client