This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json) Hash identifier: oSMQfOj1LGvOozFF6A3pDpKydTjimM9toLKYHlQHYj4= Subject key identifier: 0F:92:DB:D6:1D:0F:10:B5:ED:13:B0:1C:7E:45:4B:45:AB:D8:B2:23 Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88 Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88 Certificate serial: 019BFC52BFE6589F5F3E2BD2A89BEDFA0296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft Manifest number: 0ED2 Signing time: Mon 26 Jan 2026 22:00:40 +0000 Manifest this update: Mon 26 Jan 2026 22:00:40 +0000 Manifest next update: Tue 27 Jan 2026 22:00:40 +0000 Files and hashes: 1: 0rfYrVviZUVYPptqvM07XCjMZN8.roa (hash: NsAvwSlgjtFhEFUQcFrnr4l17cyyPI73mz93IQlKjBw=) 2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: RoN15PRw+/4tsWjS9n70zzE1i8kGdAWjMogCZw2bMT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:bf:e6:58:9f:5f:3e:2b:d2:a8:9b:ed:fa:02:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88 Validity Not Before: Jan 26 22:00:40 2026 GMT Not After : Jan 27 22:00:40 2026 GMT Subject: CN=0f92dbd61d0f10b5ed13b01c7e454b45abd8b223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:2f:de:46:4f:0d:05:6d:84:3a:02:34:3a: f2:cb:d1:c7:01:0b:44:c7:de:53:60:e4:a8:28:dd: d4:40:7a:32:5f:d4:05:fc:c2:4e:c7:6c:20:b6:c9: 77:e3:76:c8:2c:78:e4:00:1e:ca:d4:c3:45:7a:fb: 6c:80:5e:37:3b:6c:63:d0:a1:33:54:57:db:b4:da: 55:5b:6c:7d:9f:f7:c2:91:2f:4d:8b:36:33:23:c7: ab:c8:50:b7:22:0b:9c:8c:75:3f:10:af:6d:5f:94: 15:c8:ba:83:20:c3:68:87:55:4f:99:86:70:85:3d: b1:69:2f:69:cb:a6:83:1c:6a:7d:38:2a:63:51:64: 35:1f:a1:4d:c8:82:72:b3:c6:de:6f:1f:9d:c3:e8: 6c:0f:40:5d:db:bf:c8:ec:87:db:3f:b7:2c:3c:ac: 54:9a:1b:4c:f9:4b:b8:c2:e8:50:76:18:f4:ed:49: c9:cb:14:ea:95:21:b7:ac:51:66:35:b5:f3:e3:c4: 96:95:0e:77:b0:d8:67:83:76:04:2a:b2:61:20:41: 55:f0:14:d9:61:0f:d8:97:e6:e9:6e:f7:c7:36:9b: c0:94:b2:2e:0a:fb:6a:e4:f6:9d:39:bb:a3:38:e7: 69:17:0f:37:1d:83:01:11:ee:20:f2:67:58:1b:d0: d9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:92:DB:D6:1D:0F:10:B5:ED:13:B0:1C:7E:45:4B:45:AB:D8:B2:23 X509v3 Authority Key Identifier: keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:04:21:1e:ba:c8:f7:20:56:bb:1f:c3:76:be:c3:25:6d:78: ab:8e:49:da:91:c5:14:26:4e:11:35:0a:4c:92:69:90:d4:a0: ec:28:7c:56:5b:b8:9b:b3:18:cb:9a:9d:52:0a:e1:1b:cd:97: bc:6f:f9:2a:e3:eb:dd:52:04:8a:13:90:42:a0:55:5a:0b:d4: fc:0a:84:7e:73:39:ac:a2:04:9b:df:cc:9e:33:66:1a:8b:37: 03:d1:d3:30:c3:fd:ab:5f:3e:87:ba:17:23:23:bd:50:2a:bf: 34:a6:77:52:3d:ea:18:82:23:fe:4e:1e:29:5f:f5:be:bb:49: 4f:b9:e3:1f:9c:a3:7f:61:ff:47:ba:f4:b2:e2:4d:c8:15:80: 0d:4c:87:31:3e:4a:63:14:43:bf:a5:88:3b:fb:82:28:4f:9b: e4:17:33:f4:b4:57:4f:2f:58:2e:90:3a:0a:d4:b6:36:21:4c: 07:88:7f:19:c9:69:b5:01:d7:be:69:55:be:0a:2f:83:75:01: 96:e2:d5:b9:8d:a2:f0:6c:65:37:c7:1e:28:0e:45:36:a9:10: 93:ac:d1:d5:32:07:9c:7d:ff:08:73:13:37:9d:77:e6:b7:c2: 76:62:18:85:90:b6:8c:49:ab:53:89:80:b7:af:83:f6:f1:8d: 9f:8e:78:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8Ur/mWJ9fPivSqJvt+gKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTY5OWE1YmM2NDg3YmQyZjE3NDlkMTMzZmNhMmUzN2Zk NGRhODgwHhcNMjYwMTI2MjIwMDQwWhcNMjYwMTI3MjIwMDQwWjAzMTEwLwYDVQQD EygwZjkyZGJkNjFkMGYxMGI1ZWQxM2IwMWM3ZTQ1NGI0NWFiZDhiMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPQv3kZPDQVthDoCNDryy9HHAQtE x95TYOSoKN3UQHoyX9QF/MJOx2wgtsl343bILHjkAB7K1MNFevtsgF43O2xj0KEz VFfbtNpVW2x9n/fCkS9NizYzI8eryFC3IgucjHU/EK9tX5QVyLqDIMNoh1VPmYZw hT2xaS9py6aDHGp9OCpjUWQ1H6FNyIJys8bebx+dw+hsD0Bd27/I7IfbP7csPKxU mhtM+Uu4wuhQdhj07UnJyxTqlSG3rFFmNbXz48SWlQ53sNhng3YEKrJhIEFV8BTZ YQ/Yl+bpbvfHNpvAlLIuCvtq5PadObujOOdpFw83HYMBEe4g8mdYG9DZJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+S29YdDxC17ROwHH5FS0Wr2LIjMB8GA1UdIwQY MBaAFKgWmaW8ZIe9LxdJ0TP8ouN/1NqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mZDc0OTMtNzU5OS00M2I2LTg1NTkt Nzg3YzA2MzJjZmVhLzEvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mZDc0OTMtNzU5OS00M2I2LTg1NTktNzg3YzA2MzJjZmVh LzEvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAQhHrrI 9yBWux/Ddr7DJW14q45J2pHFFCZOETUKTJJpkNSg7Ch8Vlu4m7MYy5qdUgrhG82X vG/5KuPr3VIEihOQQqBVWgvU/AqEfnM5rKIEm9/MnjNmGos3A9HTMMP9q18+h7oX IyO9UCq/NKZ3Uj3qGIIj/k4eKV/1vrtJT7njH5yjf2H/R7r0suJNyBWADUyHMT5K YxRDv6WIO/uCKE+b5Bcz9LRXTy9YLpA6CtS2NiFMB4h/GclptQHXvmlVvgovg3UB luLVuY2i8GxlN8ceKA5FNqkQk6zR1TIHnH3/CHMTN5135rfCdmIYhZC2jEmrU4mA t6+D9vGNn454bw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:15:25 2026 by rpki-client