This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft File: Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json) Hash identifier: DNBsTON/UF1IOOQ26/Na5TDXCvKeSj9edMTVJrKg4ek= Subject key identifier: B2:71:3F:F6:52:DD:B8:0A:14:0B:E9:B6:BB:A6:8C:82:45:5B:00:D3 Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4 Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4 Certificate serial: 019BFA2D769698A3B35B0BA80795B1928A6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft Manifest number: 0BD5 Signing time: Mon 26 Jan 2026 12:00:41 +0000 Manifest this update: Mon 26 Jan 2026 12:00:41 +0000 Manifest next update: Tue 27 Jan 2026 12:00:41 +0000 Files and hashes: 1: KVqYko6zmqy1pTmx4kOmomDR1eo.roa (hash: FMw/fuHjmtAPyz81jyyZGfPvbXEsbopfOr42moHSoiA=) 2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: b1dW/rRqGguvvVPOP7vdmQtaaIQ095G6GcwubAMltZc=) 3: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=) 4: jvNVYqDPl5ZDvjEdTec8dYMFDrE.roa (hash: mkdE3JMB7Inwkz7RT7yv7TB5SnROSJYA3Nk4bVsDvlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:76:96:98:a3:b3:5b:0b:a8:07:95:b1:92:8a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4 Validity Not Before: Jan 26 12:00:41 2026 GMT Not After : Jan 27 12:00:41 2026 GMT Subject: CN=b2713ff652ddb80a140be9b6bba68c82455b00d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:cf:6d:f3:eb:00:5a:86:54:dd:05:65:c0: 44:06:54:08:58:bc:4c:14:8b:d8:65:a8:22:82:67: 83:65:26:63:d6:d6:da:45:d9:1f:e8:9e:45:4b:bb: 7b:a5:3c:cf:8c:99:90:2e:4b:32:40:4e:d5:d1:35: 6e:fc:84:5d:cf:b4:18:e2:87:9b:f9:ff:39:de:c1: c0:96:4b:bc:3c:9a:69:11:d5:44:e3:06:49:ed:ff: df:35:ab:ba:9e:88:c7:ec:45:5c:bf:ae:24:d6:42: 8e:54:4e:5a:51:d5:9f:b5:2a:81:8b:85:4f:2c:96: 66:53:5e:95:f2:f5:c6:49:fb:f0:17:84:8d:00:61: e3:dd:89:fd:a1:76:b4:d9:a6:e9:f3:4e:90:12:43: 93:13:45:8f:d1:7c:15:dd:de:57:01:cd:e1:21:64: 88:ac:95:aa:91:d8:5c:f6:19:d5:91:3b:bf:ef:1e: bf:df:df:d6:d1:6b:af:80:40:b8:bd:c1:17:ff:04: b5:f2:46:27:a6:64:aa:99:b9:67:33:77:a7:a4:a6: 34:d6:40:bc:98:e4:2e:2a:51:8b:b0:d3:95:ff:fb: 98:3b:7a:36:ae:41:49:c9:73:01:d3:01:da:c3:bc: 65:5b:49:b4:d6:9a:c3:3a:80:f4:99:28:9b:2f:37: 10:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:71:3F:F6:52:DD:B8:0A:14:0B:E9:B6:BB:A6:8C:82:45:5B:00:D3 X509v3 Authority Key Identifier: keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:30:56:de:55:96:71:ff:9d:38:7b:41:8d:f9:cb:16:53:b2: 1a:f9:5f:af:f2:82:56:3d:87:87:2a:7e:ed:c5:52:f8:d7:26: d8:73:2c:76:0d:6d:d1:54:bf:bd:14:ee:14:39:d8:d4:1d:45: 23:74:52:f3:6d:d5:42:01:94:2f:dd:23:68:19:1d:03:b0:14: e1:6e:b8:47:eb:88:c0:d6:6f:34:30:b2:40:37:cc:5f:b2:3d: ac:6c:fe:35:d0:2f:a7:d2:00:fe:62:be:34:30:08:71:3a:0d: 93:0c:b8:07:8d:cc:31:eb:ba:2d:6e:62:ef:03:ad:f0:af:2f: 1c:00:29:e4:d3:bd:f9:09:8a:b4:b5:ce:c4:14:82:85:84:bd: 23:27:89:24:ad:ab:23:4f:6d:93:3f:c5:4c:51:38:ad:b5:be: 5e:30:a2:48:56:c9:25:6e:23:a7:d6:b3:c3:9e:68:7b:27:f0: 3f:1f:fc:b4:b9:a7:cc:3c:ef:6a:6b:e4:9d:e1:44:03:b9:dd: 26:84:00:30:3b:78:83:3d:3e:09:bb:c2:7d:64:ad:4d:5f:0b: 55:22:a2:35:6c:6d:dd:26:34:9f:1f:09:4d:fd:7e:d5:91:53: 29:36:0c:8c:ea:e0:7a:aa:ac:6d:6d:28:17:43:66:27:6f:33: ba:d2:c5:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LXaWmKOzWwuoB5WxkoptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNjhhNGNmYjZiMWI2NDQ3ZGE5MzgzMzMyMWRkMzE1MDYx MTkzZDQwHhcNMjYwMTI2MTIwMDQxWhcNMjYwMTI3MTIwMDQxWjAzMTEwLwYDVQQD EyhiMjcxM2ZmNjUyZGRiODBhMTQwYmU5YjZiYmE2OGM4MjQ1NWIwMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqLPbfPrAFqGVN0FZcBEBlQIWLxM FIvYZagigmeDZSZj1tbaRdkf6J5FS7t7pTzPjJmQLksyQE7V0TVu/IRdz7QY4oeb +f853sHAlku8PJppEdVE4wZJ7f/fNau6nojH7EVcv64k1kKOVE5aUdWftSqBi4VP LJZmU16V8vXGSfvwF4SNAGHj3Yn9oXa02abp806QEkOTE0WP0XwV3d5XAc3hIWSI rJWqkdhc9hnVkTu/7x6/39/W0WuvgEC4vcEX/wS18kYnpmSqmblnM3enpKY01kC8 mOQuKlGLsNOV//uYO3o2rkFJyXMB0wHaw7xlW0m01prDOoD0mSibLzcQ5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJxP/ZS3bgKFAvptrumjIJFWwDTMB8GA1UdIwQY MBaAFEJopM+2sbZEfak4MzId0xUGEZPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMt MmZlZThiNjMwOWNiLzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMtMmZlZThiNjMwOWNi LzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDBW3lWW cf+dOHtBjfnLFlOyGvlfr/KCVj2Hhyp+7cVS+Ncm2HMsdg1t0VS/vRTuFDnY1B1F I3RS823VQgGUL90jaBkdA7AU4W64R+uIwNZvNDCyQDfMX7I9rGz+NdAvp9IA/mK+ NDAIcToNkwy4B43MMeu6LW5i7wOt8K8vHAAp5NO9+QmKtLXOxBSChYS9IyeJJK2r I09tkz/FTFE4rbW+XjCiSFbJJW4jp9azw55oeyfwPx/8tLmnzDzvamvkneFEA7nd JoQAMDt4gz0+CbvCfWStTV8LVSKiNWxt3SY0nx8JTf1+1ZFTKTYMjOrgeqqsbW0o F0NmJ28zutLFMw== -----END CERTIFICATE-----Generated at Mon Jan 26 14:04:22 2026 by rpki-client