This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft File: q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json) Hash identifier: en/rQ/nKvfIypU6RMjE90X1oYUOF4VKNVa0rD+bMVnQ= Subject key identifier: C6:BF:44:E4:A4:3A:C3:C4:3B:CC:E1:D7:6E:25:68:FC:C6:BA:31:FF Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4 Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4 Certificate serial: 019BFC8A604042EBC938D5CF0459A0C02B2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft Manifest number: 02F1 Signing time: Mon 26 Jan 2026 23:01:25 +0000 Manifest this update: Mon 26 Jan 2026 23:01:25 +0000 Manifest next update: Tue 27 Jan 2026 23:01:25 +0000 Files and hashes: 1: BXI5ofFp8mb6gJRdDdim1c_uINA.roa (hash: PcZNAv5gh3OSvPv6RyLwjWyyXj09fuAhEv8CUwdyHpI=) 2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: AYlOiLRuU7Xzh36XgSYDf3cLbYOH2Bizjd7WHiM6SrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:60:40:42:eb:c9:38:d5:cf:04:59:a0:c0:2b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4 Validity Not Before: Jan 26 23:01:25 2026 GMT Not After : Jan 27 23:01:25 2026 GMT Subject: CN=c6bf44e4a43ac3c43bcce1d76e2568fcc6ba31ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:c1:0f:29:e0:89:4d:64:c9:ee:98:67:e8: f3:f1:ff:ff:49:6b:48:fb:ce:9a:4a:10:4e:a4:1f: 68:df:e0:1d:0f:77:57:79:3b:c9:34:1b:31:b8:11: 90:36:25:63:9d:c5:84:f8:74:24:53:8e:cc:1c:00: d1:40:36:7b:98:d1:6a:b1:f7:42:e7:7d:45:d6:2c: f6:3e:06:64:d2:88:76:a7:01:c3:b0:f8:71:a0:68: 39:ab:24:cb:8a:5e:27:1a:b6:45:c0:15:ef:b4:87: 4f:a9:74:2d:03:dc:1a:22:29:c5:8e:dc:49:15:dd: a2:1b:b4:99:1c:75:ad:5e:bc:73:77:29:b2:89:64: 1d:34:80:a4:15:c8:ca:6f:1d:72:d2:a8:30:c4:d9: a8:b8:b6:7f:45:d4:3a:8a:51:6b:68:cc:57:48:a7: d5:d4:2d:e2:aa:14:f6:5a:eb:bc:f5:04:f2:20:f8: f8:d5:82:5d:2e:60:92:eb:61:10:78:94:08:48:58: 92:c7:1b:8c:c2:3e:af:9d:b9:cd:01:ac:58:db:7f: 3e:df:ac:92:95:b7:69:ce:2e:60:c5:bb:c6:92:c2: 53:e4:a1:20:29:06:96:47:cf:46:54:b6:7e:29:b0: 28:fb:c4:ad:e5:fe:ec:71:f3:65:f9:36:be:cc:f4: 3e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BF:44:E4:A4:3A:C3:C4:3B:CC:E1:D7:6E:25:68:FC:C6:BA:31:FF X509v3 Authority Key Identifier: keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a8:5d:4d:d3:37:1b:01:9e:34:66:34:1e:76:41:f5:89:0d: 75:5e:31:30:82:f3:3d:26:c8:57:43:df:34:b5:74:61:a9:2f: f7:2f:37:d3:e1:38:02:90:de:bc:99:7b:f2:98:4f:96:fb:8d: 74:4a:1e:8e:c6:cc:66:a9:57:80:1b:aa:ab:32:10:03:8a:d3: 59:bd:7a:3f:a2:20:6f:a9:3e:0d:5d:6a:46:97:8c:d9:f4:80: 90:4e:7b:92:24:d5:0e:54:b1:37:c3:db:d5:b2:4f:47:95:4f: a0:88:78:45:cc:24:28:c7:53:85:b2:1e:f4:aa:61:ca:1f:5b: 35:fe:e4:b3:df:ee:bf:a4:27:fa:0a:b0:a1:49:af:af:79:b9: 96:02:4c:25:36:fe:04:3b:53:20:f1:79:20:c5:79:a1:f4:15: c2:2f:d2:b6:26:06:d6:e5:a6:14:57:11:16:8f:40:ac:54:a5: 5d:4f:4c:4a:72:6f:5b:85:da:87:30:f6:23:77:14:43:30:f7: b5:5e:71:8b:26:4f:50:af:72:36:8f:6c:03:44:ed:76:cd:b1: 6d:41:1a:d6:4b:24:44:ee:5f:0f:5d:5c:22:29:b3:2e:e4:83: 34:14:3e:18:7e:13:7f:3c:d8:23:de:cb:7c:ea:97:ca:1d:ba: 55:cf:9a:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8imBAQuvJONXPBFmgwCssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2JlMzRmNWQyNjlkYTUwMmFhNjgzNDhiZjA3YjkyZDky YzBjYzQwHhcNMjYwMTI2MjMwMTI1WhcNMjYwMTI3MjMwMTI1WjAzMTEwLwYDVQQD EyhjNmJmNDRlNGE0M2FjM2M0M2JjY2UxZDc2ZTI1NjhmY2M2YmEzMWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n3BDyngiU1kye6YZ+jz8f//SWtI +86aShBOpB9o3+AdD3dXeTvJNBsxuBGQNiVjncWE+HQkU47MHADRQDZ7mNFqsfdC 531F1iz2PgZk0oh2pwHDsPhxoGg5qyTLil4nGrZFwBXvtIdPqXQtA9waIinFjtxJ Fd2iG7SZHHWtXrxzdymyiWQdNICkFcjKbx1y0qgwxNmouLZ/RdQ6ilFraMxXSKfV 1C3iqhT2Wuu89QTyIPj41YJdLmCS62EQeJQISFiSxxuMwj6vnbnNAaxY238+36yS lbdpzi5gxbvGksJT5KEgKQaWR89GVLZ+KbAo+8St5f7scfNl+Ta+zPQ+TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMa/ROSkOsPEO8zh124laPzGujH/MB8GA1UdIwQY MBaAFKt7409dJp2lAqpoNIvwe5LZLAzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUt NTU4M2U2MWFkYjM4LzEvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUtNTU4M2U2MWFkYjM4 LzEvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKhdTdM3 GwGeNGY0HnZB9YkNdV4xMILzPSbIV0PfNLV0Yakv9y830+E4ApDevJl78phPlvuN dEoejsbMZqlXgBuqqzIQA4rTWb16P6Igb6k+DV1qRpeM2fSAkE57kiTVDlSxN8Pb 1bJPR5VPoIh4RcwkKMdThbIe9Kphyh9bNf7ks9/uv6Qn+gqwoUmvr3m5lgJMJTb+ BDtTIPF5IMV5ofQVwi/StiYG1uWmFFcRFo9ArFSlXU9MSnJvW4XahzD2I3cUQzD3 tV5xiyZPUK9yNo9sA0Ttds2xbUEa1kskRO5fD11cIimzLuSDNBQ+GH4TfzzYI97L fOqXyh26Vc+aHQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:30 2026 by rpki-client