This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json) Hash identifier: W0G8VhdD2VbjqI0y5yoCvKznAa1vo0P20sRZd3a8ZHs= Subject key identifier: 89:87:8B:8B:25:91:CD:B4:CC:46:69:A0:DC:46:19:BF:0B:8D:EA:C5 Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42 Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842 Certificate serial: 019BAF81A4C23F995B2BC2B639ECD16D4020 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft Manifest number: 09B0 Signing time: Mon 12 Jan 2026 00:01:07 +0000 Manifest this update: Mon 12 Jan 2026 00:01:07 +0000 Manifest next update: Tue 13 Jan 2026 00:01:07 +0000 Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=) 2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: gda3goSwhKNy36LBHGySsvrbdIUwkvMgaZQb7AqMVAk=) 3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:81:a4:c2:3f:99:5b:2b:c2:b6:39:ec:d1:6d:40:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842 Validity Not Before: Jan 12 00:01:07 2026 GMT Not After : Jan 13 00:01:07 2026 GMT Subject: CN=89878b8b2591cdb4cc4669a0dc4619bf0b8deac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:77:87:62:29:9b:39:9c:e6:f1:aa:8a:1d:81: db:56:9f:4c:81:09:59:ba:e4:e8:71:83:aa:ac:a5: aa:5c:3b:dc:60:01:23:08:4d:7a:8a:fd:3f:4f:66: 30:f4:ec:78:62:98:98:38:9b:2e:aa:db:a9:cd:da: f1:2d:4d:2d:a5:4a:c1:34:4a:ae:14:88:f6:c3:ca: 91:a6:1c:8e:e4:c5:ac:34:f0:d3:43:cd:63:cc:1b: 99:eb:d3:07:ec:ba:45:f9:0c:91:47:9e:bb:64:c3: cc:1a:99:04:98:6f:f5:09:f5:50:16:2f:98:6d:df: 18:e9:ad:dc:c6:2e:e6:e0:d0:54:d1:c5:b6:c1:d1: 03:e6:80:23:d7:01:c3:e7:3b:70:19:b3:7f:e7:f1: 95:43:9d:08:85:e3:ea:43:4c:54:91:e2:77:1d:81: 6b:64:9d:4b:3a:df:ae:36:04:b6:2e:c6:32:46:a8: a8:23:7b:b8:bc:f8:a6:fd:cd:47:72:bb:a5:63:c4: 74:36:ff:2b:d0:96:5a:7a:12:e9:f2:f1:69:f3:2f: ce:58:2b:bf:e7:b3:85:8f:8f:5e:3e:72:29:cc:c4: 7d:4c:0e:5c:67:29:6a:2a:39:58:73:5a:b2:55:f6: 4b:34:46:26:ed:50:7d:4a:55:d1:4d:57:32:db:e0: 4c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:87:8B:8B:25:91:CD:B4:CC:46:69:A0:DC:46:19:BF:0B:8D:EA:C5 X509v3 Authority Key Identifier: keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:04:fe:42:64:c3:22:1d:47:09:c3:5f:a6:ce:03:2f:17:3c: a4:ec:48:eb:36:58:ce:e9:31:34:0b:94:f7:d9:50:1b:12:26: 6f:bd:8f:d6:b3:da:6a:60:34:e9:c0:4a:70:88:12:17:ec:79: 27:97:5d:13:e5:4d:6f:3b:25:2c:58:11:06:27:5a:c6:f2:3a: 23:e2:68:26:22:17:05:48:cf:4a:f1:01:af:e4:17:13:00:a1: 64:e1:df:62:c1:ad:b1:64:97:62:53:a7:ee:86:78:27:f3:b6: c5:31:e1:4e:4c:ad:40:84:d0:e3:9d:d2:1e:49:ff:21:c3:bd: a5:ec:2b:1e:50:dd:eb:f7:8d:52:ee:78:1f:0a:4a:7e:19:26: ea:37:a5:65:29:97:40:2e:54:23:b7:30:85:bc:48:7a:3b:df: 4d:ec:2e:55:b4:a4:6f:e5:26:60:20:8b:2c:e8:bf:f3:f2:14: 7f:f8:cb:cc:62:25:97:aa:38:44:f2:95:dc:fe:81:b2:e6:dd: ea:4a:9d:c2:6b:7f:fc:4b:3a:be:30:00:d9:84:b0:8b:68:d5: 91:2e:36:8e:8c:60:8a:57:c6:30:b9:3a:a6:06:78:7f:dd:03: bc:44:d1:29:47:fd:c7:d0:63:58:a1:e4:1c:69:5b:36:83:ea: 9e:2a:bd:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvgaTCP5lbK8K2OezRbUAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2 YzI4NDIwHhcNMjYwMTEyMDAwMTA3WhcNMjYwMTEzMDAwMTA3WjAzMTEwLwYDVQQD Eyg4OTg3OGI4YjI1OTFjZGI0Y2M0NjY5YTBkYzQ2MTliZjBiOGRlYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XeHYimbOZzm8aqKHYHbVp9MgQlZ uuTocYOqrKWqXDvcYAEjCE16iv0/T2Yw9Ox4YpiYOJsuqtupzdrxLU0tpUrBNEqu FIj2w8qRphyO5MWsNPDTQ81jzBuZ69MH7LpF+QyRR567ZMPMGpkEmG/1CfVQFi+Y bd8Y6a3cxi7m4NBU0cW2wdED5oAj1wHD5ztwGbN/5/GVQ50IhePqQ0xUkeJ3HYFr ZJ1LOt+uNgS2LsYyRqioI3u4vPim/c1HcrulY8R0Nv8r0JZaehLp8vFp8y/OWCu/ 57OFj49ePnIpzMR9TA5cZylqKjlYc1qyVfZLNEYm7VB9SlXRTVcy2+BMmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImHi4slkc20zEZpoNxGGb8LjerFMB8GA1UdIwQY MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt ZWVhMjY3YTU4NDk0LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0 LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAT+QmTD Ih1HCcNfps4DLxc8pOxI6zZYzukxNAuU99lQGxImb72P1rPaamA06cBKcIgSF+x5 J5ddE+VNbzslLFgRBidaxvI6I+JoJiIXBUjPSvEBr+QXEwChZOHfYsGtsWSXYlOn 7oZ4J/O2xTHhTkytQITQ453SHkn/IcO9pewrHlDd6/eNUu54HwpKfhkm6jelZSmX QC5UI7cwhbxIejvfTewuVbSkb+UmYCCLLOi/8/IUf/jLzGIll6o4RPKV3P6Bsubd 6kqdwmt//Es6vjAA2YSwi2jVkS42joxgilfGMLk6pgZ4f90DvETRKUf9x9BjWKHk HGlbNoPqniq9yg== -----END CERTIFICATE-----Generated at Mon Jan 12 02:29:07 2026 by rpki-client