This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json) Hash identifier: 6hzJuCruGP7BdefawsGJC7F1+fpPQuYiQTFByovQ2Iw= Subject key identifier: 97:A6:9B:99:DA:2C:E7:34:C0:7F:08:8D:EF:22:36:E2:41:F6:25:49 Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97 Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997 Certificate serial: 019BFDD39303FAF0C9B092EDA7D121F2C397 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft Manifest number: 17EF Signing time: Tue 27 Jan 2026 05:00:59 +0000 Manifest this update: Tue 27 Jan 2026 05:00:59 +0000 Manifest next update: Wed 28 Jan 2026 05:00:59 +0000 Files and hashes: 1: VQMozEw5e5cFbAbax7TNnFtChpk.roa (hash: kcI4JK6ZQqSjrwXa7nCut12JkcTP0x/T3dN3B6kDSUw=) 2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: y4iA9O1CkEQhPh7exWC0Ez5aQS/Vp3ckd+/P5JVE6ss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d3:93:03:fa:f0:c9:b0:92:ed:a7:d1:21:f2:c3:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997 Validity Not Before: Jan 27 05:00:59 2026 GMT Not After : Jan 28 05:00:59 2026 GMT Subject: CN=97a69b99da2ce734c07f088def2236e241f62549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:8f:48:d1:2a:ef:02:01:08:01:28:40:8c: e1:be:f7:0d:80:9c:e4:79:5b:b6:ae:12:a9:bc:a1: 14:41:f1:a1:00:c8:4a:41:c9:d3:e0:a6:f4:b6:aa: 4a:87:11:58:7f:df:98:a8:0e:90:ba:2b:e8:bd:91: 08:c6:46:b2:6c:60:84:ac:16:f4:c1:a5:b2:42:3a: b6:26:23:e7:14:da:d6:a7:c6:33:83:7b:1c:55:11: 37:62:8e:8b:e0:07:4f:75:25:76:d7:e1:35:f2:57: a6:d2:36:e5:c3:8e:89:a1:93:b0:ef:ed:cb:3e:66: 1e:c1:93:4d:79:aa:f7:db:c9:10:56:aa:64:a9:8a: 21:f9:42:5d:6d:39:fe:86:8b:4a:33:d6:4c:f3:31: a4:8d:e9:48:3d:6b:02:08:cc:62:3c:d3:dd:9c:aa: 70:4c:8c:25:e4:39:1a:0d:7d:44:54:e5:a4:e2:8c: 49:17:d2:11:9d:7c:2f:26:a1:ae:c9:6a:7c:5e:71: 2a:fe:0b:28:ad:21:38:91:c3:b3:4e:13:7f:f3:93: e3:5c:9a:e8:bf:71:70:66:16:66:7e:f6:81:49:15: 5b:5b:10:3b:3d:b5:7e:18:4f:8c:ed:69:8e:d3:19: 7c:5c:8c:e0:bb:dc:4d:4c:16:9d:42:e7:79:0f:1a: 5c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A6:9B:99:DA:2C:E7:34:C0:7F:08:8D:EF:22:36:E2:41:F6:25:49 X509v3 Authority Key Identifier: keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:bd:de:a7:2b:cd:75:c6:ab:f0:8c:cc:6e:c5:89:e6:83:91: ae:67:65:9a:64:22:a7:00:d7:d8:f0:ba:3d:72:32:17:d9:bf: 0b:8c:95:80:3a:70:34:b8:0d:c3:08:ed:72:a3:d4:4c:c0:67: 28:a3:e4:d6:32:d1:88:f0:74:5f:95:38:2f:a5:33:b8:f1:65: c0:88:30:d6:d0:87:ad:d7:bf:1c:81:3b:6b:8b:ff:aa:01:67: ff:94:a0:a6:ad:79:31:0f:d6:72:df:10:c4:a2:c5:8a:9a:aa: f2:23:6d:11:df:8c:bd:08:45:af:62:9e:66:15:5f:c9:d5:95: 21:b5:99:c7:b3:4b:07:39:08:06:3c:9e:8b:01:9a:60:67:a7: 19:35:4e:9d:36:23:48:07:ab:72:c5:5b:e5:eb:71:0a:0f:37: 40:7b:6c:c6:3f:43:27:aa:68:ea:10:bf:8b:f0:aa:2f:ab:3f: bb:fc:01:db:e3:ac:b7:f2:ef:24:91:9d:67:42:b4:93:47:19: 59:30:fb:d8:e0:15:0e:a5:a9:82:77:c9:ca:22:30:e5:23:a5: 60:f7:1f:f7:1e:db:ea:4b:af:24:7a:e6:10:8a:dd:8e:7e:6b: ae:7d:94:c8:d5:06:24:8e:9b:18:4b:e4:e9:54:5d:98:4b:f2: a9:88:04:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv905MD+vDJsJLtp9Eh8sOXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZTg5YmMzMDk3NzY4YWNkNjdjMmRkNzQ3ZDNiZTFhZGI3 MmU5OTcwHhcNMjYwMTI3MDUwMDU5WhcNMjYwMTI4MDUwMDU5WjAzMTEwLwYDVQQD Eyg5N2E2OWI5OWRhMmNlNzM0YzA3ZjA4OGRlZjIyMzZlMjQxZjYyNTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsiPSNEq7wIBCAEoQIzhvvcNgJzk eVu2rhKpvKEUQfGhAMhKQcnT4Kb0tqpKhxFYf9+YqA6QuivovZEIxkaybGCErBb0 waWyQjq2JiPnFNrWp8Yzg3scVRE3Yo6L4AdPdSV21+E18lem0jblw46JoZOw7+3L PmYewZNNear328kQVqpkqYoh+UJdbTn+hotKM9ZM8zGkjelIPWsCCMxiPNPdnKpw TIwl5DkaDX1EVOWk4oxJF9IRnXwvJqGuyWp8XnEq/gsorSE4kcOzThN/85PjXJro v3FwZhZmfvaBSRVbWxA7PbV+GE+M7WmO0xl8XIzgu9xNTBadQud5DxpcgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJemm5naLOc0wH8Ije8iNuJB9iVJMB8GA1UdIwQY MBaAFKrom8MJd2is1nwt10fTvhrbcumXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMt ZTNkZDc3NjQ4OWExLzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMtZTNkZDc3NjQ4OWEx LzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr73epyvN dcar8IzMbsWJ5oORrmdlmmQipwDX2PC6PXIyF9m/C4yVgDpwNLgNwwjtcqPUTMBn KKPk1jLRiPB0X5U4L6UzuPFlwIgw1tCHrde/HIE7a4v/qgFn/5Sgpq15MQ/Wct8Q xKLFipqq8iNtEd+MvQhFr2KeZhVfydWVIbWZx7NLBzkIBjyeiwGaYGenGTVOnTYj SAercsVb5etxCg83QHtsxj9DJ6po6hC/i/CqL6s/u/wB2+Ost/LvJJGdZ0K0k0cZ WTD72OAVDqWpgnfJyiIw5SOlYPcf9x7b6kuvJHrmEIrdjn5rrn2UyNUGJI6bGEvk 6VRdmEvyqYgEWQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:41:50 2026 by rpki-client