This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json) Hash identifier: LH7v68Ot5jZGcLCSMdKFhBgb/eHFRTIVEFKk7mqLRNE= Subject key identifier: 09:9B:BD:93:AF:16:88:2D:E9:28:D9:DF:BA:C2:97:20:B3:5A:5B:27 Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb Certificate serial: 019BA2A20B8C6ACD450053B9174AFFABF207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft Manifest number: 0445 Signing time: Fri 09 Jan 2026 12:01:27 +0000 Manifest this update: Fri 09 Jan 2026 12:01:27 +0000 Manifest next update: Sat 10 Jan 2026 12:01:27 +0000 Files and hashes: 1: 5sjVZOffDC3SdMXl3xj-LISTTRA.roa (hash: NgYO+E9uip8I6LBuV26/SjtRZiAA/mIEsqO23fxRKZo=) 2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: hBCVsJ1A68c6hAMwg93KDTcdKfPfhkA+Jp+uVKnsCIU=) 3: UZ8MoagtWKlsIsRGsjso-iozLGw.roa (hash: dnetz1uWniSUYV1OlTPjy0Ix9dXrnsa95CDJdNzqlUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:a2:0b:8c:6a:cd:45:00:53:b9:17:4a:ff:ab:f2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb Validity Not Before: Jan 9 12:01:27 2026 GMT Not After : Jan 10 12:01:27 2026 GMT Subject: CN=099bbd93af16882de928d9dfbac29720b35a5b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:5a:0e:21:cf:31:d9:72:4e:8b:05:41:7c: 2c:25:13:f5:3a:fe:af:e2:27:3b:d4:6d:d8:5d:c0: db:ee:e9:e8:53:9b:f8:ae:ca:09:6e:16:ff:51:a1: e4:0d:db:31:94:0d:ee:2e:f4:c0:c4:cf:21:3f:ed: 70:a4:d8:36:32:59:5d:dd:4a:15:9c:67:76:9c:95: 6f:dc:bd:8e:6d:47:63:0f:fc:e7:99:da:8a:a1:47: 8d:f3:94:66:1f:49:a4:36:cf:45:76:d1:08:4f:7d: f0:3c:16:59:86:13:8d:1c:85:dd:59:29:4c:31:7e: 74:d0:02:7a:b2:17:12:35:a5:db:66:a9:13:e7:b4: 61:cb:d1:8e:17:f3:f1:87:ec:47:30:c7:0d:c4:88: 15:ff:aa:7d:1a:82:e0:55:44:06:a3:eb:c4:70:84: ed:93:6e:9a:36:f1:17:ad:58:52:7a:4e:e7:3b:c9: 3d:3c:d4:c1:bb:15:a6:20:e0:90:39:c4:b9:ee:67: 09:80:b8:fc:04:c3:9f:11:b6:b5:07:16:f5:d3:78: f5:a1:6d:d3:0d:60:ae:24:c9:3e:07:28:90:99:33: dd:15:a4:7f:73:65:49:fc:f0:a5:1d:9e:44:2c:bb: 6b:8e:5c:c8:0f:08:df:ec:16:a0:39:28:e6:0c:2e: 85:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9B:BD:93:AF:16:88:2D:E9:28:D9:DF:BA:C2:97:20:B3:5A:5B:27 X509v3 Authority Key Identifier: keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bd:f1:83:b9:ab:8d:1f:27:cf:f5:14:e9:ea:87:3b:cb:e8: b2:b3:10:3e:45:39:af:cc:7c:fd:65:a4:14:5d:4f:9b:b0:93: 48:f7:6d:2b:9f:de:0c:d5:e5:f3:ce:59:74:c6:f0:8b:c7:5a: f4:41:b5:c7:f8:4c:25:09:73:ed:f4:2d:cb:07:e1:d9:91:69: 78:89:60:2c:ca:ea:11:77:bb:90:27:29:f6:b1:c9:21:1a:c1: 9a:85:e2:3d:68:6f:c2:0c:b9:56:e7:3b:b5:37:85:2d:0a:12: 02:18:05:02:f7:15:e5:8f:21:9b:f1:74:ea:fb:b4:10:e5:d6: 5d:00:11:cd:89:aa:fe:31:d9:b4:ee:f5:4c:40:9e:f1:6d:51: 62:26:73:6b:93:a0:fd:58:63:2f:5a:8b:11:cb:ff:23:23:10: 8f:42:4a:02:b0:a1:1a:dc:c4:ef:e6:ea:20:ce:5e:05:45:a5: be:57:1e:bf:20:35:e2:7d:a0:ac:f1:dd:8a:c5:73:23:10:cf: ea:f8:01:af:44:ef:9d:5d:dd:c8:d9:eb:05:82:7d:29:fe:d2: cb:8f:93:8b:d6:00:cf:f8:2f:70:ca:df:00:75:35:ed:fd:ce: f3:d3:3a:36:ac:cb:5b:25:e3:d0:5b:cf:5b:a1:74:03:d9:e6: 72:3e:b4:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuioguMas1FAFO5F0r/q/IHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNjc1NDdkODUxZTNjZDc3NmNkMzMyOTBiMjQ1NGFjYzBl ODUxYmIwHhcNMjYwMTA5MTIwMTI3WhcNMjYwMTEwMTIwMTI3WjAzMTEwLwYDVQQD EygwOTliYmQ5M2FmMTY4ODJkZTkyOGQ5ZGZiYWMyOTcyMGIzNWE1YjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX9aDiHPMdlyTosFQXwsJRP1Ov6v 4ic71G3YXcDb7unoU5v4rsoJbhb/UaHkDdsxlA3uLvTAxM8hP+1wpNg2Mlld3UoV nGd2nJVv3L2ObUdjD/znmdqKoUeN85RmH0mkNs9FdtEIT33wPBZZhhONHIXdWSlM MX500AJ6shcSNaXbZqkT57Rhy9GOF/Pxh+xHMMcNxIgV/6p9GoLgVUQGo+vEcITt k26aNvEXrVhSek7nO8k9PNTBuxWmIOCQOcS57mcJgLj8BMOfEba1Bxb103j1oW3T DWCuJMk+ByiQmTPdFaR/c2VJ/PClHZ5ELLtrjlzIDwjf7BagOSjmDC6FDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmbvZOvFogt6SjZ37rClyCzWlsnMB8GA1UdIwQY MBaAFENnVH2FHjzXds0zKQskVKzA6FG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NzRjODUtOWU3ZC00YWNlLTk1OGYt ZGFiN2YwYzhkMjQwLzEvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84NzRjODUtOWU3ZC00YWNlLTk1OGYtZGFiN2YwYzhkMjQw LzEvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfb3xg7mr jR8nz/UU6eqHO8vosrMQPkU5r8x8/WWkFF1Pm7CTSPdtK5/eDNXl885ZdMbwi8da 9EG1x/hMJQlz7fQtywfh2ZFpeIlgLMrqEXe7kCcp9rHJIRrBmoXiPWhvwgy5Vuc7 tTeFLQoSAhgFAvcV5Y8hm/F06vu0EOXWXQARzYmq/jHZtO71TECe8W1RYiZza5Og /VhjL1qLEcv/IyMQj0JKArChGtzE7+bqIM5eBUWlvlcevyA14n2grPHdisVzIxDP 6vgBr0TvnV3dyNnrBYJ9Kf7Sy4+Ti9YAz/gvcMrfAHU17f3O89M6NqzLWyXj0FvP W6F0A9nmcj60cg== -----END CERTIFICATE-----Generated at Fri Jan 9 17:09:01 2026 by rpki-client