This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft File: qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json) Hash identifier: ed4Tr3QThFCQwdNESBtnA0JUWBQUVND49CPaFPp8Kx8= Subject key identifier: 99:3C:98:EA:EA:D5:5F:15:35:78:55:52:7D:61:7E:3F:C6:B8:66:C7 Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A Certificate issuer: /CN=a986a0677b91c45667e45e12ee07f5219901a87a Certificate serial: 019BFD6598597DC6E947FCFCCAA2AC034CC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft Manifest number: 061A Signing time: Tue 27 Jan 2026 03:00:52 +0000 Manifest this update: Tue 27 Jan 2026 03:00:52 +0000 Manifest next update: Wed 28 Jan 2026 03:00:52 +0000 Files and hashes: 1: bLk88x2HL-2GICyBNcP5Qc7qD64.roa (hash: 4cgQdkwpHUEmwJaaIvwsSgvpblfNuKKSJZKxTdOD8Wk=) 2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: B8TWJZ9bUUrvoOm+B5vcl8ZqNiRJuwob1Ubw8Dhwflw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 03:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:98:59:7d:c6:e9:47:fc:fc:ca:a2:ac:03:4c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a Validity Not Before: Jan 27 03:00:52 2026 GMT Not After : Jan 28 03:00:52 2026 GMT Subject: CN=993c98eaead55f15357855527d617e3fc6b866c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dd:bf:21:b2:49:85:2f:aa:e2:3b:2b:86:76: 6c:c1:8c:dc:6e:ef:e4:f5:b9:d1:9b:9d:11:6b:6a: 8b:ed:fe:d9:ad:81:6d:1a:c2:c4:15:ea:00:fa:f1: 07:d1:43:a5:54:40:a7:06:57:3e:4f:1c:0d:17:19: da:5d:6c:1a:6e:5d:9a:41:a7:f2:85:52:f0:86:c0: b3:e1:a4:ca:9b:78:93:32:21:68:d4:52:f7:88:f2: bc:f2:0c:00:60:07:7d:5c:49:6c:5b:70:3c:af:82: fb:c0:4c:31:2e:1d:26:63:37:e7:b5:a9:37:ce:b4: df:ac:09:fe:c9:ce:fe:a6:f2:c5:7f:31:45:4f:14: 3e:43:12:4a:8d:d6:f3:a6:78:fa:a1:11:7d:4f:72: bd:95:65:5b:f8:c4:ad:6e:4b:6d:ca:72:ac:c1:0f: 49:a2:95:0d:8b:7d:e0:86:3c:4b:0c:83:fb:f5:99: 13:a2:f4:8c:7b:a5:7a:e1:ca:7d:38:0e:75:c3:4f: 59:9e:df:5e:ed:e4:e6:62:1b:15:36:b7:48:51:64: ee:db:3c:30:1b:d9:65:0f:58:3d:9c:a9:ee:19:46: 14:5f:59:7c:74:79:ac:f8:24:40:fc:22:1c:9f:1a: 80:7c:2f:cc:4c:75:06:38:03:69:32:ff:0f:ed:13: 9d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3C:98:EA:EA:D5:5F:15:35:78:55:52:7D:61:7E:3F:C6:B8:66:C7 X509v3 Authority Key Identifier: keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:cc:36:7a:1f:ba:24:cb:dd:58:9f:a4:12:f7:ab:0d:59:cf: 15:75:cc:3a:1f:b2:d4:0a:d1:e8:ae:a0:24:84:16:1c:09:ea: 90:08:66:89:e5:58:07:2a:db:98:9b:18:42:89:8b:81:58:34: 23:71:de:bd:f5:ba:2e:a8:2a:c1:f7:03:b5:5f:55:cc:94:c2: 51:d8:3a:18:05:dd:b3:af:53:91:0f:03:ea:ce:a1:df:e6:fc: 3e:d9:c3:97:e3:ba:24:88:3e:f6:5e:cc:89:e8:08:e0:82:9e: da:cf:35:e5:e2:98:cd:bf:bb:4f:14:49:42:c8:23:ae:0d:b8: bc:68:a6:97:1c:3a:b0:7d:8f:c6:b9:64:65:d5:c0:53:7f:96: 78:1c:bf:3d:7e:be:bb:c8:f6:a1:1d:f2:91:b0:66:92:1f:36: f6:1c:69:9d:b2:2c:f2:04:7f:dc:dd:e7:d2:8a:83:f6:e4:94: 98:98:e4:f7:63:2c:a5:a8:21:1f:a8:13:ef:0d:82:4f:7a:20: 9f:f8:2c:f0:f3:4b:8c:5a:a8:fb:80:64:d5:70:24:de:4e:74: c2:b5:13:81:e0:8d:6a:b2:98:ff:21:db:6a:19:f4:01:2a:9c: c1:bf:b5:d4:5b:00:02:24:74:7e:e8:a5:11:2e:d0:47:25:42: a0:d9:0f:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZZhZfcbpR/z8yqKsA0zHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODZhMDY3N2I5MWM0NTY2N2U0NWUxMmVlMDdmNTIxOTkw MWE4N2EwHhcNMjYwMTI3MDMwMDUyWhcNMjYwMTI4MDMwMDUyWjAzMTEwLwYDVQQD Eyg5OTNjOThlYWVhZDU1ZjE1MzU3ODU1NTI3ZDYxN2UzZmM2Yjg2NmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t2/IbJJhS+q4jsrhnZswYzcbu/k 9bnRm50Ra2qL7f7ZrYFtGsLEFeoA+vEH0UOlVECnBlc+TxwNFxnaXWwabl2aQafy hVLwhsCz4aTKm3iTMiFo1FL3iPK88gwAYAd9XElsW3A8r4L7wEwxLh0mYzfntak3 zrTfrAn+yc7+pvLFfzFFTxQ+QxJKjdbzpnj6oRF9T3K9lWVb+MStbkttynKswQ9J opUNi33ghjxLDIP79ZkTovSMe6V64cp9OA51w09Znt9e7eTmYhsVNrdIUWTu2zww G9llD1g9nKnuGUYUX1l8dHms+CRA/CIcnxqAfC/MTHUGOANpMv8P7ROdTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJk8mOrq1V8VNXhVUn1hfj/GuGbHMB8GA1UdIwQY MBaAFKmGoGd7kcRWZ+ReEu4H9SGZAah6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlhZ1ozdVJ4RlpuNUY0UzdnZjFJWmtCcUhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mMGI5NTQtOTg4Ni00MDliLTgyMTkt ZDNmZGZhOWE4ZjE0LzEvcVlhZ1ozdVJ4RlpuNUY0UzdnZjFJWmtCcUhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9mMGI5NTQtOTg4Ni00MDliLTgyMTktZDNmZGZhOWE4ZjE0 LzEvcVlhZ1ozdVJ4RlpuNUY0UzdnZjFJWmtCcUhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8w2eh+6 JMvdWJ+kEverDVnPFXXMOh+y1ArR6K6gJIQWHAnqkAhmieVYByrbmJsYQomLgVg0 I3HevfW6LqgqwfcDtV9VzJTCUdg6GAXds69TkQ8D6s6h3+b8PtnDl+O6JIg+9l7M iegI4IKe2s815eKYzb+7TxRJQsgjrg24vGimlxw6sH2PxrlkZdXAU3+WeBy/PX6+ u8j2oR3ykbBmkh829hxpnbIs8gR/3N3n0oqD9uSUmJjk92MspaghH6gT7w2CT3og n/gs8PNLjFqo+4Bk1XAk3k50wrUTgeCNarKY/yHbahn0ASqcwb+11FsAAiR0fuil ES7QRyVCoNkPjQ== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:29 2026 by rpki-client