This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json) Hash identifier: GjlG7DCi3lTuXZI27kNeoF3m+X76/X5Qx+OuyBF8AFg= Subject key identifier: 75:9C:AF:90:D2:B1:66:A5:F3:25:05:86:F2:BC:57:F6:CB:AF:8A:4C Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd Certificate serial: 019BF72C95495913E877A48704DA726418C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft Manifest number: 0643 Signing time: Sun 25 Jan 2026 22:00:52 +0000 Manifest this update: Sun 25 Jan 2026 22:00:52 +0000 Manifest next update: Mon 26 Jan 2026 22:00:52 +0000 Files and hashes: 1: X29-SsmJR9k5fDOjjkh75Kg4cpc.roa (hash: +euzTLNo94RLGMAt+aTDFJ+R3lTEiHq3dfTEgVifPSc=) 2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: H7JiTo254iLXAD8E5M3uXNtdXFl7zTvshZ8ZyAmo/JU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:95:49:59:13:e8:77:a4:87:04:da:72:64:18:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd Validity Not Before: Jan 25 22:00:52 2026 GMT Not After : Jan 26 22:00:52 2026 GMT Subject: CN=759caf90d2b166a5f3250586f2bc57f6cbaf8a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1c:29:3f:e6:b3:de:e8:be:7f:36:57:b1:7c: 58:13:3f:aa:f0:b6:08:1a:77:b3:00:61:da:13:ec: a5:90:1d:52:e1:ae:96:31:c7:65:fe:70:bb:d3:3b: 7d:0f:ff:2c:f7:95:0a:be:3e:6d:e4:63:23:b7:f7: c6:62:82:7a:a7:69:d8:bf:b4:e7:e3:0d:97:ba:2a: fa:b7:37:b2:aa:20:54:2d:6e:ad:cf:26:5e:90:38: 80:e1:92:ce:45:29:ef:29:bb:ab:49:2d:e9:7b:47: 28:74:6e:39:30:11:7d:0a:6e:24:70:b0:70:41:7e: 9f:85:fe:d8:96:5f:b4:7c:70:7a:1f:57:7c:46:59: 4b:36:39:18:50:cc:b8:e9:3e:63:41:27:4c:ab:fa: c3:b9:c6:7e:a9:0f:f6:ea:56:1b:0b:6b:ff:0b:db: 03:3a:25:57:1d:13:e7:54:07:d1:79:d9:41:ea:94: a3:2e:ce:d5:b6:a9:8a:1f:c0:ae:f1:52:4d:f2:06: 16:3e:b5:a7:ad:c7:ea:d6:ae:04:57:16:6f:da:b8: ee:5f:53:8d:73:46:92:81:87:dd:df:5b:74:64:bf: 57:f4:e8:e8:0d:05:9b:67:ae:13:34:3c:23:e0:94: d9:f1:31:97:11:1c:a2:b8:75:f2:5d:9b:66:7f:d7: 27:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9C:AF:90:D2:B1:66:A5:F3:25:05:86:F2:BC:57:F6:CB:AF:8A:4C X509v3 Authority Key Identifier: keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0e:fa:31:64:c0:61:fd:6f:d9:9a:50:4f:ca:3c:b1:8c:62: 42:a4:5e:94:aa:5a:1e:b3:8e:b9:8b:54:e8:dd:0f:aa:81:f6: c4:93:3f:94:16:13:af:67:88:0a:c2:37:37:11:3b:37:28:61: a0:e6:b6:53:82:c7:07:22:50:aa:70:13:1f:03:3e:b9:11:da: 0b:a6:fd:3b:49:ab:85:63:ce:47:a1:34:3d:ad:ed:0b:6d:92: 1a:d0:24:9a:53:47:34:2d:70:f4:24:70:85:97:1e:70:0a:9b: 49:6d:7a:3f:f4:24:e1:65:b4:5d:4e:10:11:8c:4c:79:4f:0d: d0:95:96:8b:a9:95:80:cd:a0:5e:d6:fc:16:be:59:78:07:ab: d0:55:8e:68:2d:20:ef:00:2f:fb:5e:4c:8d:91:f9:db:87:c8: fb:94:54:f4:d1:12:94:38:74:19:43:9d:8b:0f:c7:5a:31:2b: 13:84:79:0f:2c:81:8e:10:4c:58:8f:9b:3a:2e:6b:46:7f:a4: e6:42:b2:85:3f:e7:59:45:0f:54:b1:a0:0e:90:bb:3f:bc:c8: 3a:8d:78:87:e1:71:a2:ff:8b:b2:e1:23:c2:f6:0d:43:2d:cd: 72:64:51:33:b1:82:21:e9:4a:6c:0c:aa:05:e9:d8:42:78:d3: be:16:20:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LJVJWRPod6SHBNpyZBjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZThlOWI0ZDhkYjk0NmJiMjBjY2Y1MTI3OTcwNzVjOGFm ZDgzY2QwHhcNMjYwMTI1MjIwMDUyWhcNMjYwMTI2MjIwMDUyWjAzMTEwLwYDVQQD Eyg3NTljYWY5MGQyYjE2NmE1ZjMyNTA1ODZmMmJjNTdmNmNiYWY4YTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xwpP+az3ui+fzZXsXxYEz+q8LYI GnezAGHaE+ylkB1S4a6WMcdl/nC70zt9D/8s95UKvj5t5GMjt/fGYoJ6p2nYv7Tn 4w2Xuir6tzeyqiBULW6tzyZekDiA4ZLORSnvKburSS3pe0codG45MBF9Cm4kcLBw QX6fhf7Yll+0fHB6H1d8RllLNjkYUMy46T5jQSdMq/rDucZ+qQ/26lYbC2v/C9sD OiVXHRPnVAfRedlB6pSjLs7VtqmKH8Cu8VJN8gYWPrWnrcfq1q4EVxZv2rjuX1ON c0aSgYfd31t0ZL9X9OjoDQWbZ64TNDwj4JTZ8TGXERyiuHXyXZtmf9cnswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWcr5DSsWal8yUFhvK8V/bLr4pMMB8GA1UdIwQY MBaAFKro6bTY25RrsgzPUSeXB1yK/YPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgt Zjg5MDU2NzJlNTlkLzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgtZjg5MDU2NzJlNTlk LzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASg76MWTA Yf1v2ZpQT8o8sYxiQqRelKpaHrOOuYtU6N0PqoH2xJM/lBYTr2eICsI3NxE7Nyhh oOa2U4LHByJQqnATHwM+uRHaC6b9O0mrhWPOR6E0Pa3tC22SGtAkmlNHNC1w9CRw hZcecAqbSW16P/Qk4WW0XU4QEYxMeU8N0JWWi6mVgM2gXtb8Fr5ZeAer0FWOaC0g 7wAv+15MjZH524fI+5RU9NESlDh0GUOdiw/HWjErE4R5DyyBjhBMWI+bOi5rRn+k 5kKyhT/nWUUPVLGgDpC7P7zIOo14h+Fxov+LsuEjwvYNQy3NcmRRM7GCIelKbAyq BenYQnjTvhYgYg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:41:29 2026 by rpki-client