This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json) Hash identifier: y4O7aiWJxNgo4qv6fx4ppu1jAjc4cAY9khJf/eR+QXo= Subject key identifier: 21:D6:D8:FD:43:88:99:F3:3E:C5:75:D8:32:40:1F:DC:F0:7D:2A:1B Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Certificate serial: 019BF507316707D9D5C26B27E3161FD7F21E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft Manifest number: 02FC Signing time: Sun 25 Jan 2026 12:00:47 +0000 Manifest this update: Sun 25 Jan 2026 12:00:47 +0000 Manifest next update: Mon 26 Jan 2026 12:00:47 +0000 Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=) 2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=) 3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: d4SF/GvCh1s5VyYSFgdysMmeamV+iLLJdwB9NCj2kJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:31:67:07:d9:d5:c2:6b:27:e3:16:1f:d7:f2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Validity Not Before: Jan 25 12:00:47 2026 GMT Not After : Jan 26 12:00:47 2026 GMT Subject: CN=21d6d8fd438899f33ec575d832401fdcf07d2a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:46:a8:a0:39:19:d6:c8:09:73:a2:b9:62: 40:88:49:ea:89:b8:b0:fe:0a:07:a8:54:c8:fe:ae: 9c:bc:cc:ba:33:b7:c5:01:26:c5:a1:bd:a7:9c:d4: ea:f3:02:a6:ff:e2:10:a1:5a:02:2b:5d:e3:0c:a4: 7b:a3:fb:c6:e5:9d:e9:01:a2:86:67:ea:44:5c:9c: f6:fb:1a:3e:e5:7b:a4:82:f6:12:bd:60:47:8b:59: 7d:de:ae:15:df:bf:88:47:b6:ba:bd:bd:67:d2:04: 33:f5:be:07:38:f6:a1:15:24:63:1a:ef:af:7e:1e: 36:15:78:8e:0c:24:0b:02:97:12:25:97:86:e5:42: 8c:7e:52:20:2f:9b:98:1f:c4:aa:41:68:73:b7:c1: 34:fa:66:21:61:2d:cb:e9:e9:dc:25:98:1c:e0:eb: d6:78:a1:3d:02:af:2c:ec:0d:0b:45:9f:79:c8:7e: da:a5:e2:87:78:01:3c:b9:18:c4:b2:39:b7:18:68: 74:8e:7e:a4:b4:43:cc:5c:d8:83:ac:e5:f2:b8:02: 5c:7b:dc:e3:77:50:b0:fe:f7:d5:cf:11:b4:92:17: 31:76:b2:59:64:76:e1:33:d2:80:7a:b3:35:99:a4: ac:66:40:71:f9:99:30:03:9a:8f:ba:0d:f2:b3:e4: 64:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D6:D8:FD:43:88:99:F3:3E:C5:75:D8:32:40:1F:DC:F0:7D:2A:1B X509v3 Authority Key Identifier: keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:35:64:0a:8b:4c:82:91:94:64:73:af:a0:0f:fc:03:e8:77: dc:da:1d:a9:ee:5b:55:8b:9b:80:5b:82:d8:30:19:02:ab:b7: 6c:a6:64:a8:a0:48:8b:5b:82:df:0d:67:00:76:4c:03:f4:3d: 4f:c6:30:a2:9c:93:b7:cb:36:3a:5f:5d:ee:d5:26:1d:8e:b8: ef:e9:8c:46:53:de:83:01:67:ac:c8:07:a5:68:22:23:bd:7c: ba:cf:4a:6d:fc:6d:3a:cf:a9:63:53:bd:f2:97:87:f8:40:d2: d0:89:4c:19:a3:19:e2:4d:a2:b8:17:54:a8:25:a5:b0:4c:39: 63:50:a7:f4:d3:c3:34:f3:42:0d:03:ba:c8:cf:ff:c1:ee:2d: 37:de:a7:0a:3f:fe:b5:91:c9:65:04:07:02:06:03:0c:f2:f2: f1:74:6a:06:f3:48:f3:96:15:9c:2a:08:2d:6f:ab:76:c6:f1: 4c:f7:8f:2d:ca:2a:d3:31:eb:d7:b8:1d:fc:dc:fe:85:d7:e3: 3c:b0:da:75:a0:20:9f:6a:c8:3f:86:46:2b:44:3b:95:31:ff: bb:ab:22:f7:b6:37:c3:1f:fc:ce:03:c9:0f:cd:07:6b:92:91: 3e:1c:58:31:5c:26:e8:34:d6:c4:9d:51:52:0b:bb:6a:81:f4: e2:56:38:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BzFnB9nVwmsn4xYf1/IeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNmQ4ODkwNDFjYjI5YWVkMWZlMWFjMzgwYzc5NGFmN2E0 MmM3ZDEwHhcNMjYwMTI1MTIwMDQ3WhcNMjYwMTI2MTIwMDQ3WjAzMTEwLwYDVQQD EygyMWQ2ZDhmZDQzODg5OWYzM2VjNTc1ZDgzMjQwMWZkY2YwN2QyYTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5FGqKA5GdbICXOiuWJAiEnqibiw /goHqFTI/q6cvMy6M7fFASbFob2nnNTq8wKm/+IQoVoCK13jDKR7o/vG5Z3pAaKG Z+pEXJz2+xo+5XukgvYSvWBHi1l93q4V37+IR7a6vb1n0gQz9b4HOPahFSRjGu+v fh42FXiODCQLApcSJZeG5UKMflIgL5uYH8SqQWhzt8E0+mYhYS3L6encJZgc4OvW eKE9Aq8s7A0LRZ95yH7apeKHeAE8uRjEsjm3GGh0jn6ktEPMXNiDrOXyuAJce9zj d1Cw/vfVzxG0khcxdrJZZHbhM9KAerM1maSsZkBx+ZkwA5qPug3ys+RkHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHW2P1DiJnzPsV12DJAH9zwfSobMB8GA1UdIwQY MBaAFKptiJBByymu0f4aw4DHlK96QsfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYt ZTEzZDY5YTAwNDVlLzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYtZTEzZDY5YTAwNDVl LzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDVkCotM gpGUZHOvoA/8A+h33Nodqe5bVYubgFuC2DAZAqu3bKZkqKBIi1uC3w1nAHZMA/Q9 T8YwopyTt8s2Ol9d7tUmHY647+mMRlPegwFnrMgHpWgiI718us9KbfxtOs+pY1O9 8peH+EDS0IlMGaMZ4k2iuBdUqCWlsEw5Y1Cn9NPDNPNCDQO6yM//we4tN96nCj/+ tZHJZQQHAgYDDPLy8XRqBvNI85YVnCoILW+rdsbxTPePLcoq0zHr17gd/Nz+hdfj PLDadaAgn2rIP4ZGK0Q7lTH/u6si97Y3wx/8zgPJD80Ha5KRPhxYMVwm6DTWxJ1R Ugu7aoH04lY4rw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:44:50 2026 by rpki-client