This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json) Hash identifier: jItKDa/vC6Af2d88p+bc0KvX7tA6MPzWFWuGwT+j+I0= Subject key identifier: 82:23:42:18:F5:68:83:A2:F6:B5:33:9E:B4:DC:4A:BB:04:92:E5:97 Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53 Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553 Certificate serial: 019BD6FE0DC9151BD252E17E9299A4228199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft Manifest number: 0864 Signing time: Mon 19 Jan 2026 16:02:12 +0000 Manifest this update: Mon 19 Jan 2026 16:02:12 +0000 Manifest next update: Tue 20 Jan 2026 16:02:12 +0000 Files and hashes: 1: FVti0CnJBxW_ujwVe576uT5sBZY.roa (hash: wKPtK/uPr/cpuHyaQuhDbiv2SdMMAyJiY4SSf65iULo=) 2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: Se21Kcbz25MGHRJkv810s/W6YTlGkfZpoc9TW2DEGvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:fe:0d:c9:15:1b:d2:52:e1:7e:92:99:a4:22:81:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553 Validity Not Before: Jan 19 16:02:12 2026 GMT Not After : Jan 20 16:02:12 2026 GMT Subject: CN=82234218f56883a2f6b5339eb4dc4abb0492e597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e8:f0:08:87:9c:a9:fd:42:ee:42:cf:9b:63: 36:6b:d0:aa:c7:bf:f8:15:9f:fa:71:bc:55:ae:ff: bc:24:57:5e:db:27:63:5c:ce:22:c6:51:9f:1d:3f: 2d:9f:9d:df:12:e3:a9:ac:cf:00:54:4b:93:83:c1: 09:48:6c:87:14:1b:20:c4:db:98:7b:a9:2f:e3:af: bb:3e:32:25:56:e4:54:d6:4f:41:3b:87:f7:28:01: 06:80:bb:14:d9:bf:31:6d:dd:4a:63:44:d7:bb:6c: 68:01:76:e1:07:e7:00:de:e3:6a:35:dd:12:7a:a5: 88:da:b8:ac:7d:6f:b0:d8:20:46:07:ce:77:db:36: 98:34:89:a5:f8:3c:36:d6:45:99:52:f6:3a:c6:6d: 16:23:c6:e4:d8:fb:e6:db:1b:5e:a2:ae:2c:af:93: 0f:3a:8b:ac:03:4e:51:15:4e:bc:12:e5:28:ed:a6: 2f:b4:ce:f6:73:5d:d1:ee:98:42:88:4e:90:7f:a5: e2:34:00:c9:a4:6f:c4:ec:40:38:68:af:30:93:5e: ee:b0:60:5e:db:05:2c:38:8b:ca:7d:b7:82:b4:fd: 83:18:fc:a0:b8:c1:77:d8:b0:3e:d2:b3:94:69:ff: 2a:1c:32:3f:7e:cf:82:ae:b4:48:c5:9e:a4:24:58: 65:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:23:42:18:F5:68:83:A2:F6:B5:33:9E:B4:DC:4A:BB:04:92:E5:97 X509v3 Authority Key Identifier: keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:33:80:29:d1:73:4a:8c:05:98:cc:d1:79:7f:1e:cd:1a:5d: fc:e3:32:65:87:2d:c5:aa:d7:10:cf:b2:df:51:7e:d3:c4:5d: 9f:19:6a:f2:9a:a6:ea:ed:6d:a2:fe:60:b4:bb:f0:81:e8:98: 96:6b:64:f2:6c:78:b7:2a:69:d8:32:5a:a6:41:14:3e:63:d9: 59:92:6d:26:6a:2e:82:e5:c0:57:5f:02:dd:53:1a:5f:36:d4: 45:6e:9d:09:6a:17:03:81:58:d6:43:04:34:27:31:7b:eb:75: c7:e0:ef:46:8c:93:6b:df:a9:89:11:e1:a2:80:34:8c:98:0d: ac:93:19:2d:49:ed:a5:d8:16:fd:33:75:85:d1:7e:93:e8:9b: 29:7a:00:c3:d6:aa:2f:9e:88:1e:25:64:ef:59:81:a2:78:3b: be:24:33:ba:05:c1:13:e4:52:b1:a7:ec:ff:a8:f3:1c:f7:d7: 95:68:4b:32:de:36:af:47:d4:27:d3:05:89:b1:0e:3a:78:c8: bb:ad:81:ff:9a:1f:3f:e7:f7:12:a3:ba:eb:ac:1a:af:4c:44: 18:03:ee:c5:c9:4a:20:14:06:14:fe:e9:98:8f:fe:76:08:50: 2c:57:cc:ed:12:3f:9f:ed:73:42:50:e2:5b:7e:33:c3:cc:7e: d8:e6:fd:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvW/g3JFRvSUuF+kpmkIoGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj OGU1NTMwHhcNMjYwMTE5MTYwMjEyWhcNMjYwMTIwMTYwMjEyWjAzMTEwLwYDVQQD Eyg4MjIzNDIxOGY1Njg4M2EyZjZiNTMzOWViNGRjNGFiYjA0OTJlNTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqujwCIecqf1C7kLPm2M2a9Cqx7/4 FZ/6cbxVrv+8JFde2ydjXM4ixlGfHT8tn53fEuOprM8AVEuTg8EJSGyHFBsgxNuY e6kv46+7PjIlVuRU1k9BO4f3KAEGgLsU2b8xbd1KY0TXu2xoAXbhB+cA3uNqNd0S eqWI2risfW+w2CBGB8532zaYNIml+Dw21kWZUvY6xm0WI8bk2Pvm2xteoq4sr5MP OousA05RFU68EuUo7aYvtM72c13R7phCiE6Qf6XiNADJpG/E7EA4aK8wk17usGBe 2wUsOIvKfbeCtP2DGPyguMF32LA+0rOUaf8qHDI/fs+CrrRIxZ6kJFhl0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIjQhj1aIOi9rUznrTcSrsEkuWXMB8GA1UdIwQY MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt ZjRhMzllMThjZmI0LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0 LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTOAKdFz SowFmMzReX8ezRpd/OMyZYctxarXEM+y31F+08Rdnxlq8pqm6u1tov5gtLvwgeiY lmtk8mx4typp2DJapkEUPmPZWZJtJmouguXAV18C3VMaXzbURW6dCWoXA4FY1kME NCcxe+t1x+DvRoyTa9+piRHhooA0jJgNrJMZLUntpdgW/TN1hdF+k+ibKXoAw9aq L56IHiVk71mBong7viQzugXBE+RSsafs/6jzHPfXlWhLMt42r0fUJ9MFibEOOnjI u62B/5ofP+f3EqO666war0xEGAPuxclKIBQGFP7pmI/+dghQLFfM7RI/n+1zQlDi W34zw8x+2Ob9AA== -----END CERTIFICATE-----Generated at Mon Jan 19 19:40:31 2026 by rpki-client