This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft File: qmVRVhfXd7VhHdDgs9ACU-oymgc.mft (raw, json) Hash identifier: AQiD0LMKurZVMvw+mAiVq/Fb6Wlvwy5HatKdaj3kREA= Subject key identifier: 7D:EA:D8:72:23:E3:36:87:0E:C2:D0:D7:D0:B6:BD:FA:64:46:63:EC Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Certificate serial: 019BCFB2094768E824BB3A17EB10E57A9944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft Manifest number: 86 Signing time: Sun 18 Jan 2026 06:01:50 +0000 Manifest this update: Sun 18 Jan 2026 06:01:50 +0000 Manifest next update: Mon 19 Jan 2026 06:01:50 +0000 Files and hashes: 1: DQ9wg5clR__wfBJFD0dMeSIRg8g.asa (hash: PKZqLo7mpSg4xooPivQlHkcXtiw9Yr6HCj25sDVF/hw=) 2: qmVRVhfXd7VhHdDgs9ACU-oymgc.crl (hash: 6ruu/lJCZPGPZa9loTOtDNFqFYSe/iMI7xqA4FHjfpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:b2:09:47:68:e8:24:bb:3a:17:eb:10:e5:7a:99:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Validity Not Before: Jan 18 06:01:50 2026 GMT Not After : Jan 19 06:01:50 2026 GMT Subject: CN=7dead87223e336870ec2d0d7d0b6bdfa644663ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:60:92:68:74:9c:16:84:79:e3:1f:70:a7: d7:cd:67:63:c7:26:9a:4c:89:7b:6c:b1:fd:3d:28: 53:9e:7b:09:e4:bb:ba:9b:ec:ae:28:59:6b:6f:64: 30:c7:c1:8d:46:97:85:d5:5a:75:11:3c:c4:23:4d: 2d:d9:a4:98:4a:a1:dc:64:dd:b7:19:8d:8d:0d:f7: 5d:90:ba:04:eb:09:d6:79:a3:76:7d:21:98:4a:ce: 01:8e:84:dc:10:1f:60:1a:e2:0d:41:77:77:c4:b7: da:57:0e:67:be:f7:87:51:b9:e4:2d:ab:31:a5:7c: ae:d2:c4:c6:5e:9d:4d:e1:e6:16:fe:c8:fd:dc:87: 6b:68:67:33:be:1f:23:c9:86:22:11:f5:95:b7:5a: 42:a7:88:25:87:ce:35:ff:df:0d:62:7a:4f:12:f2: fb:b0:43:2a:01:dd:4b:ee:ec:a7:78:00:a3:29:c8: b2:4c:dd:15:c8:a0:e9:2d:9d:9e:db:86:2c:e6:14: e8:f9:37:3f:71:82:af:51:ca:ba:36:f1:e9:85:1c: c6:7b:00:21:62:01:50:a7:c3:0e:19:81:d9:31:81: ce:6d:b1:81:68:dc:37:df:21:11:e9:46:82:8a:b3: 75:43:af:fd:05:ce:3b:70:35:47:78:db:0a:5a:ac: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EA:D8:72:23:E3:36:87:0E:C2:D0:D7:D0:B6:BD:FA:64:46:63:EC X509v3 Authority Key Identifier: keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ab:50:7b:4c:94:17:01:5d:6e:c6:3b:9a:89:dc:c3:77:86: af:5f:52:96:7b:12:10:bf:bb:ae:b3:d5:18:4b:0c:72:1d:c9: 26:07:ab:5a:bb:20:d4:81:a5:8c:3b:ec:98:ff:13:fc:05:6b: ad:b8:3f:09:87:31:47:6f:ca:46:ef:ec:74:16:32:79:47:11: e8:51:5e:75:0c:5a:a5:d2:8c:dc:40:d2:5a:2b:4c:31:1c:86: d0:c1:a0:d2:fb:ff:cb:03:03:b6:1f:43:75:9e:e5:75:83:1b: 73:69:31:f3:12:08:13:53:79:95:98:3b:e7:61:e1:33:94:f8: 4d:fe:84:ee:57:ea:1b:2a:ed:6f:82:f3:b9:2c:68:62:92:9e: 04:97:63:b1:1a:a8:4b:a4:41:3b:fa:27:30:fc:7e:2b:ed:67: 4a:43:bd:0e:7c:7e:c2:99:7e:0e:62:9f:d7:9f:ab:11:40:4b: 20:27:c9:15:4a:4e:8a:32:2f:87:32:08:be:e0:c7:12:2c:8f: 64:ea:04:b4:84:c3:59:9e:19:7b:25:ff:d7:ad:f9:d5:15:0d: 5e:c2:70:74:30:f0:f8:3d:2f:83:65:83:18:76:21:23:0d:91: bd:8b:98:04:b7:0d:70:19:8a:ec:d2:ed:c5:15:e7:88:d2:89: 16:1e:0a:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvPsglHaOgkuzoX6xDleplEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjU1MTU2MTdkNzc3YjU2MTFkZDBlMGIzZDAwMjUzZWEz MjlhMDcwHhcNMjYwMTE4MDYwMTUwWhcNMjYwMTE5MDYwMTUwWjAzMTEwLwYDVQQD Eyg3ZGVhZDg3MjIzZTMzNjg3MGVjMmQwZDdkMGI2YmRmYTY0NDY2M2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdBgkmh0nBaEeeMfcKfXzWdjxyaa TIl7bLH9PShTnnsJ5Lu6m+yuKFlrb2Qwx8GNRpeF1Vp1ETzEI00t2aSYSqHcZN23 GY2NDfddkLoE6wnWeaN2fSGYSs4BjoTcEB9gGuINQXd3xLfaVw5nvveHUbnkLasx pXyu0sTGXp1N4eYW/sj93IdraGczvh8jyYYiEfWVt1pCp4glh841/98NYnpPEvL7 sEMqAd1L7uyneACjKciyTN0VyKDpLZ2e24Ys5hTo+Tc/cYKvUcq6NvHphRzGewAh YgFQp8MOGYHZMYHObbGBaNw33yER6UaCirN1Q6/9Bc47cDVHeNsKWqwiXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3q2HIj4zaHDsLQ19C2vfpkRmPsMB8GA1UdIwQY MBaAFKplUVYX13e1YR3Q4LPQAlPqMpoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEt ZTU5MmM3ZDM1ZmYyLzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEtZTU5MmM3ZDM1ZmYy LzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPatQe0yU FwFdbsY7moncw3eGr19SlnsSEL+7rrPVGEsMch3JJgerWrsg1IGljDvsmP8T/AVr rbg/CYcxR2/KRu/sdBYyeUcR6FFedQxapdKM3EDSWitMMRyG0MGg0vv/ywMDth9D dZ7ldYMbc2kx8xIIE1N5lZg752HhM5T4Tf6E7lfqGyrtb4LzuSxoYpKeBJdjsRqo S6RBO/onMPx+K+1nSkO9Dnx+wpl+DmKf15+rEUBLICfJFUpOijIvhzIIvuDHEiyP ZOoEtITDWZ4ZeyX/16351RUNXsJwdDDw+D0vg2WDGHYhIw2RvYuYBLcNcBmK7NLt xRXniNKJFh4Klg== -----END CERTIFICATE-----Generated at Sun Jan 18 11:52:53 2026 by rpki-client