This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json) Hash identifier: 1PU7hYy+Aa9PNBNsMGExwzfF/1vOVvCSLmxJZ9jTZ4g= Subject key identifier: 80:BD:0C:75:8A:E9:B3:4D:3E:B2:6A:91:CF:1C:F2:8B:A6:06:5D:E1 Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c Certificate serial: 019BACB774339EDA4C4539AADE585677748B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft Manifest number: 0D33 Signing time: Sun 11 Jan 2026 11:01:02 +0000 Manifest this update: Sun 11 Jan 2026 11:01:02 +0000 Manifest next update: Mon 12 Jan 2026 11:01:02 +0000 Files and hashes: 1: BOIyHGFsSVNlNKzWZCkVyw194to.roa (hash: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog=) 2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: PZF7OMf/HXBPb+pn33sGWnj1N/poGzP7HYvtizb11Hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:b7:74:33:9e:da:4c:45:39:aa:de:58:56:77:74:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c Validity Not Before: Jan 11 11:01:02 2026 GMT Not After : Jan 12 11:01:02 2026 GMT Subject: CN=80bd0c758ae9b34d3eb26a91cf1cf28ba6065de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:ff:87:83:0f:65:83:bd:78:c4:0b:b7:72: 47:fe:ed:e9:db:f3:11:a5:8a:1c:d1:34:43:cd:28: ea:28:63:75:dc:81:28:18:73:30:e1:fa:3e:a7:f5: 7d:55:27:37:e8:b1:68:e8:6f:e1:f0:b6:5e:23:19: e4:26:30:ec:45:76:2f:94:f7:ec:c5:fc:0d:e8:17: 1d:5f:bc:69:ba:79:d0:01:84:f8:91:d0:11:6d:a4: ab:26:98:68:22:a8:70:77:99:04:4e:b3:cd:76:af: 2a:24:88:c1:80:22:03:bf:00:6f:63:ea:f9:a5:68: 19:38:b3:ea:8a:f2:a5:40:25:45:a4:45:ab:aa:62: ac:20:8e:f8:9c:bf:8d:76:69:ef:82:dd:36:61:df: 0a:d1:ef:e5:ee:e7:86:c9:f9:ff:c2:26:93:9e:aa: 70:bc:be:5f:c8:23:10:fc:d1:bc:30:96:c5:f6:da: 3d:98:b0:76:8c:20:73:8f:62:4d:cf:45:0e:45:ea: 3a:44:fa:35:a4:5a:83:75:2d:11:d6:1a:8f:72:17: 5a:ad:2c:9c:b8:df:93:fe:7f:30:ea:5f:5b:6d:bc: ef:60:b3:17:ca:30:2c:27:8c:01:8f:a5:9d:18:c6: 35:ee:35:50:43:2e:fa:9f:f5:df:f7:2a:31:c4:be: 46:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BD:0C:75:8A:E9:B3:4D:3E:B2:6A:91:CF:1C:F2:8B:A6:06:5D:E1 X509v3 Authority Key Identifier: keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:21:8b:11:19:8c:5f:f8:22:a7:96:e2:50:71:c9:16:72:da: 4a:a4:2a:03:e7:6c:44:d1:67:da:a2:0a:a6:b0:5c:16:bc:63: 4f:2b:c8:8e:6a:06:b8:d3:20:94:1d:0f:9b:a4:30:cf:87:19: 92:19:fc:bd:57:11:e8:ce:02:cb:71:90:f5:e7:1c:d4:78:51: da:53:32:80:d2:49:d5:31:9a:46:00:39:02:57:83:68:3e:e1: 81:5e:f7:55:08:6c:39:9f:43:d0:94:54:46:65:c9:6b:d8:cf: f4:72:fa:ec:36:a0:4a:8a:2e:8e:34:e3:4d:6d:72:85:05:11: 38:c8:da:37:a1:86:b6:ad:e1:2a:f7:97:c9:6f:0b:0f:5d:59: 99:6d:db:f8:f6:fe:fe:cc:d5:df:93:b0:bd:26:0b:88:94:df: 6b:02:72:34:5f:70:cd:9a:66:f7:94:79:7d:fd:e8:9b:5e:25: 17:37:d3:6b:15:8d:a8:56:27:f7:90:78:a9:b4:f7:15:b6:97: d0:44:dc:45:8f:72:35:0c:a0:09:7e:19:ed:47:20:fa:a4:7b: bb:17:50:61:a4:e5:03:dc:db:7a:32:ef:33:4f:1b:46:a9:0c: 8e:54:fc:8b:5a:b3:08:f4:a5:6f:87:32:a3:ac:91:c8:8a:e6: 80:ad:1c:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZust3QzntpMRTmq3lhWd3SLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzFjOThlM2NhYjgyMWM4NGRkZWZmMjA2OWUwMjI1OWJk NmU2MWMwHhcNMjYwMTExMTEwMTAyWhcNMjYwMTEyMTEwMTAyWjAzMTEwLwYDVQQD Eyg4MGJkMGM3NThhZTliMzRkM2ViMjZhOTFjZjFjZjI4YmE2MDY1ZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywX/h4MPZYO9eMQLt3JH/u3p2/MR pYoc0TRDzSjqKGN13IEoGHMw4fo+p/V9VSc36LFo6G/h8LZeIxnkJjDsRXYvlPfs xfwN6BcdX7xpunnQAYT4kdARbaSrJphoIqhwd5kETrPNdq8qJIjBgCIDvwBvY+r5 pWgZOLPqivKlQCVFpEWrqmKsII74nL+Ndmnvgt02Yd8K0e/l7ueGyfn/wiaTnqpw vL5fyCMQ/NG8MJbF9to9mLB2jCBzj2JNz0UOReo6RPo1pFqDdS0R1hqPchdarSyc uN+T/n8w6l9bbbzvYLMXyjAsJ4wBj6WdGMY17jVQQy76n/Xf9yoxxL5G1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIC9DHWK6bNNPrJqkc8c8oumBl3hMB8GA1UdIwQY MBaAFKoxyY48q4IchN3v8gaeAiWb1uYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMt MDViZmYzMWM1M2ZlLzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMtMDViZmYzMWM1M2Zl LzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSGLERmM X/gip5biUHHJFnLaSqQqA+dsRNFn2qIKprBcFrxjTyvIjmoGuNMglB0Pm6Qwz4cZ khn8vVcR6M4Cy3GQ9ecc1HhR2lMygNJJ1TGaRgA5AleDaD7hgV73VQhsOZ9D0JRU RmXJa9jP9HL67DagSooujjTjTW1yhQUROMjaN6GGtq3hKveXyW8LD11ZmW3b+Pb+ /szV35OwvSYLiJTfawJyNF9wzZpm95R5ff3om14lFzfTaxWNqFYn95B4qbT3FbaX 0ETcRY9yNQygCX4Z7Ucg+qR7uxdQYaTlA9zbejLvM08bRqkMjlT8i1qzCPSlb4cy o6yRyIrmgK0cnQ== -----END CERTIFICATE-----Generated at Sun Jan 11 18:18:29 2026 by rpki-client