This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json) Hash identifier: 12h7cXyXqg9o7Xonq0Gt7SMpexjgw6hJTyWoM+8n6NU= Subject key identifier: D0:30:F1:1C:2C:7A:B9:BE:1F:B3:F0:6F:67:6E:C6:63:9C:5E:F6:3C Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07 Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07 Certificate serial: 019C2DAD894B1F472D24513CC5D14B0A2467 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft Manifest number: 02A5 Signing time: Thu 05 Feb 2026 12:01:13 +0000 Manifest this update: Thu 05 Feb 2026 12:01:13 +0000 Manifest next update: Fri 06 Feb 2026 12:01:13 +0000 Files and hashes: 1: 5-EJwRqi1XA3u9gFAcZ9njZ3ubQ.roa (hash: hFNKGoVbXoj2tJMUg9incrRV/V229/edfKbWOK21tzs=) 2: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: BUtUu8+/j1HUdWnXq42BSf3C21K0GMeK0YaLH8JSEF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:ad:89:4b:1f:47:2d:24:51:3c:c5:d1:4b:0a:24:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07 Validity Not Before: Feb 5 12:01:13 2026 GMT Not After : Feb 6 12:01:13 2026 GMT Subject: CN=d030f11c2c7ab9be1fb3f06f676ec6639c5ef63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:08:f3:be:ee:86:d3:5d:de:ce:13:4b:44: 25:37:da:bf:28:bf:1b:32:04:2b:ba:51:9d:c5:c9: 97:74:35:c1:ed:29:8d:be:e6:84:b9:c4:35:a3:ca: 34:3a:e3:71:7c:be:64:f6:7e:ab:67:98:25:33:18: e0:ef:ea:c4:dc:5b:a5:34:f7:72:e8:ee:70:7e:24: 74:df:19:55:0d:9d:2e:75:ec:b4:73:23:97:11:48: e0:aa:2e:2d:bf:8e:1c:11:09:db:d1:3d:5a:e9:fe: 4f:e9:bd:5f:d1:28:8d:da:37:ac:2e:43:2c:76:09: 31:a3:91:cd:7e:a8:db:6e:c9:8c:bd:ee:98:7f:12: bd:4a:40:46:62:79:46:91:ba:36:a5:c7:e7:8e:57: a5:f3:41:39:f7:dd:28:88:eb:3d:4a:11:77:d0:08: e7:81:06:57:c2:c5:8b:d6:61:17:7b:36:01:a8:e0: 78:d2:7c:1b:0e:84:4b:b1:2d:ed:e8:4b:31:f3:f0: ad:e6:42:1f:eb:71:21:23:db:2d:c6:67:83:14:11: 31:21:12:bf:64:b4:5c:d9:ab:a3:c6:0d:0b:5e:1e: 24:8e:a1:5a:68:35:ce:fe:e9:12:fc:43:ba:57:4d: 28:3c:45:87:1e:ea:cf:6f:84:c9:c0:5f:d0:2d:c3: f9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:30:F1:1C:2C:7A:B9:BE:1F:B3:F0:6F:67:6E:C6:63:9C:5E:F6:3C X509v3 Authority Key Identifier: keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:53:2d:c8:09:cd:bb:c7:5b:bc:91:48:ae:2d:b0:ad:b8:8d: 05:e9:a9:05:6f:62:63:2c:82:fb:62:80:ea:c2:08:c2:13:0d: e0:46:fb:7b:ab:41:24:86:f1:3f:97:4f:59:2a:48:a2:32:57: 6d:9a:20:29:a6:b3:01:15:a8:c6:70:1a:d3:1e:31:c3:1f:c7: cc:21:5d:eb:32:e6:d1:38:9b:4c:d1:63:41:c8:e5:d7:f1:08: 07:20:f8:c8:84:92:b8:ff:49:96:e3:04:ee:ac:f4:4b:8f:14: 27:ea:73:70:eb:8f:b6:a3:db:f7:be:36:74:df:1b:bc:60:09: f0:8a:76:56:95:62:a1:9c:67:58:5c:0b:28:c2:e8:e8:ef:49: e6:ea:82:ca:94:fc:67:15:f7:fa:24:93:29:26:23:12:ca:0e: 55:8a:af:35:61:fc:76:85:96:30:36:45:45:8d:d8:76:72:ad: 7c:5a:27:1a:13:a6:90:a8:2f:a1:e8:76:e5:73:44:43:71:17: a9:0a:b3:49:b6:39:36:67:9a:b8:91:c5:f3:2a:40:b9:a9:84: 13:cf:b8:6a:78:95:6c:e7:e0:fb:57:d6:d0:29:47:9f:68:b8: 81:87:a9:de:d8:2f:ec:dd:71:96:b5:9e:aa:fa:9e:6a:1a:a0: f3:5a:33:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwtrYlLH0ctJFE8xdFLCiRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2JmZDQyMGRiNWNhZWJhZGExYTIwNTVkODdiYzdkYTJi MDljMDcwHhcNMjYwMjA1MTIwMTEzWhcNMjYwMjA2MTIwMTEzWjAzMTEwLwYDVQQD EyhkMDMwZjExYzJjN2FiOWJlMWZiM2YwNmY2NzZlYzY2MzljNWVmNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroAI877uhtNd3s4TS0QlN9q/KL8b MgQrulGdxcmXdDXB7SmNvuaEucQ1o8o0OuNxfL5k9n6rZ5glMxjg7+rE3FulNPdy 6O5wfiR03xlVDZ0udey0cyOXEUjgqi4tv44cEQnb0T1a6f5P6b1f0SiN2jesLkMs dgkxo5HNfqjbbsmMve6YfxK9SkBGYnlGkbo2pcfnjlel80E5990oiOs9ShF30Ajn gQZXwsWL1mEXezYBqOB40nwbDoRLsS3t6Esx8/Ct5kIf63EhI9stxmeDFBExIRK/ ZLRc2aujxg0LXh4kjqFaaDXO/ukS/EO6V00oPEWHHurPb4TJwF/QLcP5iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAw8Rwserm+H7Pwb2duxmOcXvY8MB8GA1UdIwQY MBaAFKp7/UINtcrrraGiBV2HvH2isJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2Mt NzliNDA5YzFiZDM4LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2MtNzliNDA5YzFiZDM4 LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFMtyAnN u8dbvJFIri2wrbiNBempBW9iYyyC+2KA6sIIwhMN4Eb7e6tBJIbxP5dPWSpIojJX bZogKaazARWoxnAa0x4xwx/HzCFd6zLm0TibTNFjQcjl1/EIByD4yISSuP9JluME 7qz0S48UJ+pzcOuPtqPb9742dN8bvGAJ8Ip2VpVioZxnWFwLKMLo6O9J5uqCypT8 ZxX3+iSTKSYjEsoOVYqvNWH8doWWMDZFRY3YdnKtfFonGhOmkKgvoeh25XNEQ3EX qQqzSbY5NmeauJHF8ypAuamEE8+4aniVbOfg+1fW0ClHn2i4gYep3tgv7N1xlrWe qvqeahqg81ozDw== -----END CERTIFICATE-----Generated at Thu Feb 5 15:07:27 2026 by rpki-client