This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json) Hash identifier: zLqJkwbssgcKLjGHpbzANiogrKYxCehBxEY4u8MlqS8= Subject key identifier: 9A:03:DF:0A:86:97:E1:7F:81:6A:AB:01:9E:E8:41:AB:02:87:FA:69 Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84 Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684 Certificate serial: 019C1C4BEFDC2B32A6AFEDF6812669E7A9B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft Manifest number: 0A2C Signing time: Mon 02 Feb 2026 03:01:04 +0000 Manifest this update: Mon 02 Feb 2026 03:01:04 +0000 Manifest next update: Tue 03 Feb 2026 03:01:04 +0000 Files and hashes: 1: 0UGDI8RA4ikQpQTFcofCBOI7pok.roa (hash: 0Yi/SCqGm10A/qaehmQPolk2SyxaZrDlQqK63HLj7qA=) 2: lTMr_tmE5zf1a8d0RFV7s8C_F3Q.roa (hash: r9UOMYxpKdYi63IObP/C5aZuW6pYv6q+dCCfoqFrtSU=) 3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: 2ytcK8KTJFUuZIWM1lPtpqvlT0EoqQiVdYkrzswm8A8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:4b:ef:dc:2b:32:a6:af:ed:f6:81:26:69:e7:a9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684 Validity Not Before: Feb 2 03:01:04 2026 GMT Not After : Feb 3 03:01:04 2026 GMT Subject: CN=9a03df0a8697e17f816aab019ee841ab0287fa69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:a5:46:b5:b5:4f:55:b2:15:c7:b8:c5:8f: 0a:47:fe:fb:5a:25:9b:4a:1f:5a:70:81:f3:71:46: 99:54:fc:d2:74:3e:37:c2:41:6f:7e:e9:33:3e:ef: d8:59:25:06:c8:b2:7c:ff:b3:43:51:ec:dc:c7:29: f3:fd:4d:e8:8c:a0:e1:92:36:9e:fe:70:7a:a2:c5: ad:40:37:bd:b0:77:e1:44:49:91:c5:8e:ae:0e:93: 04:00:d3:ba:ec:00:53:ae:d9:10:a8:c3:79:b9:77: 1c:73:1c:b3:75:de:07:d1:bc:6b:d6:57:b9:28:5f: 02:31:a4:76:a0:6c:33:07:5d:eb:66:0d:08:56:4b: 96:72:51:46:f7:52:82:34:f7:b1:bc:6e:86:bb:82: 5d:cb:5e:05:70:75:7c:7c:4b:15:79:3d:29:e8:95: 65:7a:0f:88:bd:e7:11:07:a8:71:b0:8c:67:2a:42: 9b:df:65:f5:d7:6b:6b:ea:bf:48:f1:f3:66:67:19: 1a:51:4d:cc:7f:ae:30:e8:3a:0d:56:51:7c:87:1d: 6d:30:ef:34:32:76:b8:fb:a3:51:49:17:e9:c2:59: a7:72:78:17:12:1c:98:f6:6d:34:7e:87:a6:75:80: c8:95:e5:34:fa:81:a2:7e:54:4b:a0:1d:31:76:9f: 11:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:03:DF:0A:86:97:E1:7F:81:6A:AB:01:9E:E8:41:AB:02:87:FA:69 X509v3 Authority Key Identifier: keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:63:82:35:2f:ef:09:4d:2e:ba:98:97:9e:52:71:a8:20:9f: 15:0f:42:4d:fb:eb:53:e7:d3:88:09:66:3a:c0:b3:73:f3:89: 81:be:be:ad:f5:43:ac:a5:50:25:75:c7:dc:d1:14:03:e9:e6: 3e:22:e5:5e:c1:e5:22:2e:6a:cd:f9:be:86:9b:40:bb:e3:da: 8a:14:16:31:ba:a2:33:f8:60:f8:97:45:01:83:0e:bd:dc:e6: 85:46:35:07:fa:df:9e:71:c8:43:7a:b8:82:d1:8c:38:09:22: 4a:ff:55:4d:7d:55:5f:8e:3f:5a:db:0e:b9:cd:3b:b3:22:70: c2:6f:a0:5a:1b:21:da:30:a0:39:32:90:df:3d:e8:2d:9e:43: d4:6e:2f:2d:0a:75:4a:86:09:7a:3b:5f:16:b3:19:5a:85:1e: 17:18:d4:a4:ad:6a:54:ee:7a:a6:83:ec:7e:94:12:31:4e:b4: 49:f2:1f:63:95:f0:b8:42:10:c7:33:f5:f0:97:94:09:9c:d6: d1:a1:0f:62:8a:9e:e0:39:ab:b5:50:55:b9:e1:86:93:a4:01: e7:30:ea:60:58:4b:e4:03:a8:1c:f9:1b:e2:70:45:48:20:bf: df:ad:cd:b3:f5:a0:11:a6:a7:3f:d0:66:7f:b5:38:57:ba:b7: ad:ab:96:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcS+/cKzKmr+32gSZp56m2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MDRiY2NlYjljMzYzZjEzZTNhZGFhNGMwZmE1Mjc4MGYw NjQ2ODQwHhcNMjYwMjAyMDMwMTA0WhcNMjYwMjAzMDMwMTA0WjAzMTEwLwYDVQQD Eyg5YTAzZGYwYTg2OTdlMTdmODE2YWFiMDE5ZWU4NDFhYjAyODdmYTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPClRrW1T1WyFce4xY8KR/77WiWb Sh9acIHzcUaZVPzSdD43wkFvfukzPu/YWSUGyLJ8/7NDUezcxynz/U3ojKDhkjae /nB6osWtQDe9sHfhREmRxY6uDpMEANO67ABTrtkQqMN5uXcccxyzdd4H0bxr1le5 KF8CMaR2oGwzB13rZg0IVkuWclFG91KCNPexvG6Gu4Jdy14FcHV8fEsVeT0p6JVl eg+IvecRB6hxsIxnKkKb32X112tr6r9I8fNmZxkaUU3Mf64w6DoNVlF8hx1tMO80 Mna4+6NRSRfpwlmncngXEhyY9m00foemdYDIleU0+oGiflRLoB0xdp8RfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoD3wqGl+F/gWqrAZ7oQasCh/ppMB8GA1UdIwQY MBaAFLUEvM65w2PxPjrapMD6UngPBkaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDNjZGMtZDA0Yi00YWRiLWIwNjkt MmEzNTFhYjNiOGY2LzEvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xZDNjZGMtZDA0Yi00YWRiLWIwNjktMmEzNTFhYjNiOGY2 LzEvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGOCNS/v CU0uupiXnlJxqCCfFQ9CTfvrU+fTiAlmOsCzc/OJgb6+rfVDrKVQJXXH3NEUA+nm PiLlXsHlIi5qzfm+hptAu+PaihQWMbqiM/hg+JdFAYMOvdzmhUY1B/rfnnHIQ3q4 gtGMOAkiSv9VTX1VX44/WtsOuc07syJwwm+gWhsh2jCgOTKQ3z3oLZ5D1G4vLQp1 SoYJejtfFrMZWoUeFxjUpK1qVO56poPsfpQSMU60SfIfY5XwuEIQxzP18JeUCZzW 0aEPYoqe4DmrtVBVueGGk6QB5zDqYFhL5AOoHPkb4nBFSCC/363Ns/WgEaanP9Bm f7U4V7q3rauWWA== -----END CERTIFICATE-----Generated at Mon Feb 2 09:30:20 2026 by rpki-client