This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft File: rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json) Hash identifier: PtESUMDpZT1tWAdcGhDD71q++f2Zy2+5ZrlNpmoUapc= Subject key identifier: 38:18:DC:FA:58:4F:FB:E8:15:DF:8A:00:65:D4:1F:26:24:3C:BE:99 Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4 Certificate issuer: /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4 Certificate serial: 019C09D7EED8377219735DFE0E0F6D57EF94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft Manifest number: 17F3 Signing time: Thu 29 Jan 2026 13:01:12 +0000 Manifest this update: Thu 29 Jan 2026 13:01:12 +0000 Manifest next update: Fri 30 Jan 2026 13:01:12 +0000 Files and hashes: 1: UYOEbjPyLAeXDjmWXka43xNSBrc.roa (hash: Ea7vb/KbqpdCWL5Nsui+X7+vrHZiuSMLp+d9Fc0ie4Y=) 2: W-LfzjkBmc4oTKnPhjs0kfHNJ6Q.roa (hash: ftW/H5OGOvc73tGHyq9jUHDKeB+UWHSYf4rvMWEvpmQ=) 3: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: AfAvgiaHGBUbfJdn7BF1V5NFwhA5oJVYGK4TuKg42Wc=) 4: w_LZxwyOUgD4IGBy1szvQwuznT8.roa (hash: YO+GhiXP/lIUMsu3S7EDreywlrg58HTztRPtniTveWM=) 5: x7TD4pUm1hOHrZRLC3TJ-5O5zTI.roa (hash: L8tddTG9LQKbBaTsHjpHN79P5a7dlI7sXDT4x985xho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 11:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:d7:ee:d8:37:72:19:73:5d:fe:0e:0f:6d:57:ef:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4 Validity Not Before: Jan 29 13:01:12 2026 GMT Not After : Jan 30 13:01:12 2026 GMT Subject: CN=3818dcfa584ffbe815df8a0065d41f26243cbe99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:5e:10:45:3e:71:b7:6c:73:83:8e:79:51: 48:c0:eb:26:0c:41:4b:d9:44:60:26:83:a2:07:c6: 9b:09:9e:f2:7d:a3:d3:9a:7f:8f:56:d6:6d:16:ec: d4:77:a8:06:da:94:b6:2a:51:aa:cd:1f:80:01:17: 51:62:d3:a6:84:14:30:78:71:8c:7d:95:63:3d:18: 1b:e6:ce:ba:6a:4d:6f:e9:32:33:d5:51:f5:73:f9: 17:86:b4:ee:9b:d2:c6:2e:e1:c1:e0:69:62:87:fd: 67:6b:cb:db:02:ae:ac:86:cd:38:b2:0d:c7:ff:8f: 03:8b:39:4a:6d:94:7a:3b:19:7c:39:dc:f1:1d:46: 2e:5d:1d:25:72:11:b6:eb:4f:03:44:cf:be:6e:7a: 77:84:f1:33:79:0a:f7:a1:c1:43:3d:cd:34:2d:75: 9a:79:60:21:eb:38:03:66:66:9a:11:4a:a4:24:df: 48:6f:c1:58:4d:18:fa:ed:45:2b:7e:2d:23:2c:0a: 6c:a0:c8:e7:28:48:ce:ab:14:77:d6:42:f2:ae:0b: 62:38:16:e3:f4:4c:65:01:d0:34:f1:35:93:f8:97: 7d:52:ea:05:b0:90:9c:ed:59:26:0c:a6:3b:1a:ec: 20:21:7f:41:12:31:96:26:88:c3:29:9f:9a:26:1f: 67:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:18:DC:FA:58:4F:FB:E8:15:DF:8A:00:65:D4:1F:26:24:3C:BE:99 X509v3 Authority Key Identifier: keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c9:e4:da:3b:b8:7f:04:3c:4e:07:0e:87:f1:34:b4:9c:91: 1f:00:1f:f8:a1:30:68:53:95:4f:f7:a5:0f:15:f2:4a:fe:62: 17:f8:42:03:a3:7b:3c:c1:bb:4c:10:96:c5:32:03:7f:9b:59: ae:b2:b7:29:2e:20:09:21:db:10:02:0a:01:d6:4d:4d:25:e1: 76:7c:1a:48:90:16:34:99:34:0a:d2:9a:1b:c4:79:b0:7b:7d: 54:f5:36:39:2e:54:a5:35:b2:0d:83:4d:c3:d8:a9:ad:0d:ad: 14:64:fa:57:ab:49:be:e8:84:50:0b:50:ee:84:71:30:db:4d: c8:ac:0b:1b:95:5a:27:7c:4f:4b:ae:93:3b:96:bd:9d:c6:de: 10:7e:4c:89:28:5f:2c:08:6f:bf:0e:75:90:4d:c5:ee:3b:1e: 9d:4d:86:a7:c4:65:64:d3:12:38:32:9c:95:ce:29:4a:08:ee: 70:9f:b3:a9:ab:c0:66:56:3e:8a:54:43:fd:0c:12:a1:43:44: a2:25:7b:93:6b:0d:77:d5:1f:48:5c:15:fb:82:57:2a:02:8e: 3d:2a:65:fc:a0:e5:56:67:a6:69:3a:5f:2c:ef:e5:7b:60:91: 45:64:1b:54:cc:8e:15:8b:00:11:f1:68:6c:25:2d:7c:82:ca: 8a:11:5b:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwJ1+7YN3IZc13+Dg9tV++UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYWMxYjIxMjlhYmJhYzY1MzlmODBkYTY1NTBjNDk3MjFk MGE4YzQwHhcNMjYwMTI5MTMwMTEyWhcNMjYwMTMwMTMwMTEyWjAzMTEwLwYDVQQD EygzODE4ZGNmYTU4NGZmYmU4MTVkZjhhMDA2NWQ0MWYyNjI0M2NiZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI5eEEU+cbdsc4OOeVFIwOsmDEFL 2URgJoOiB8abCZ7yfaPTmn+PVtZtFuzUd6gG2pS2KlGqzR+AARdRYtOmhBQweHGM fZVjPRgb5s66ak1v6TIz1VH1c/kXhrTum9LGLuHB4Glih/1na8vbAq6shs04sg3H /48DizlKbZR6Oxl8OdzxHUYuXR0lchG2608DRM++bnp3hPEzeQr3ocFDPc00LXWa eWAh6zgDZmaaEUqkJN9Ib8FYTRj67UUrfi0jLApsoMjnKEjOqxR31kLyrgtiOBbj 9ExlAdA08TWT+Jd9UuoFsJCc7VkmDKY7GuwgIX9BEjGWJojDKZ+aJh9nwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgY3PpYT/voFd+KAGXUHyYkPL6ZMB8GA1UdIwQY MBaAFK6sGyEpq7rGU5+A2mVQxJch0KjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGIt ODY2YjJiMDIxZmM1LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGItODY2YjJiMDIxZmM1 LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcnk2ju4 fwQ8TgcOh/E0tJyRHwAf+KEwaFOVT/elDxXySv5iF/hCA6N7PMG7TBCWxTIDf5tZ rrK3KS4gCSHbEAIKAdZNTSXhdnwaSJAWNJk0CtKaG8R5sHt9VPU2OS5UpTWyDYNN w9iprQ2tFGT6V6tJvuiEUAtQ7oRxMNtNyKwLG5VaJ3xPS66TO5a9ncbeEH5MiShf LAhvvw51kE3F7jsenU2Gp8RlZNMSODKclc4pSgjucJ+zqavAZlY+ilRD/QwSoUNE oiV7k2sNd9UfSFwV+4JXKgKOPSpl/KDlVmemaTpfLO/le2CRRWQbVMyOFYsAEfFo bCUtfILKihFbJQ== -----END CERTIFICATE-----Generated at Thu Jan 29 14:41:57 2026 by rpki-client