This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json) Hash identifier: m8U8qXCEloBR9ute/hbdbEhpdPBdo0WOmmQ3aZcoTCA= Subject key identifier: 33:FC:50:AE:7E:17:12:B5:3C:71:55:A1:C2:E3:C5:0C:3D:62:9D:0E Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16 Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216 Certificate serial: 019BFC1C47AC46A9ACB51B40EF0000B32E89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft Manifest number: 082A Signing time: Mon 26 Jan 2026 21:01:10 +0000 Manifest this update: Mon 26 Jan 2026 21:01:10 +0000 Manifest next update: Tue 27 Jan 2026 21:01:10 +0000 Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: ctgbsy2EZWIerTT4/npfUWUXG6YgqalA8ZzzeltMtb0=) 2: NBMICGxDjswxMBcIkL6TWpVgug4.roa (hash: SDiHoGR3hyxD5P9xq7VGB+HgvxZFXXwsXaz8vMU9je8=) 3: flkFMntj216ik-1RHE5z8QkiuF4.roa (hash: Gx/ViUGq+C6Lf+xKNlRvkXnmfpj7mqFvEpimMEsP3EM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:47:ac:46:a9:ac:b5:1b:40:ef:00:00:b3:2e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216 Validity Not Before: Jan 26 21:01:10 2026 GMT Not After : Jan 27 21:01:10 2026 GMT Subject: CN=33fc50ae7e1712b53c7155a1c2e3c50c3d629d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:79:b3:f0:75:4e:37:d0:5c:c3:45:9f:58: ee:0e:c2:d1:21:96:69:77:f9:cd:41:71:34:0a:5b: 96:ec:25:b5:68:00:5f:06:c5:96:86:76:93:3b:9e: d9:72:b4:ee:5d:0a:fb:17:94:b3:c7:d1:d1:f3:1c: 12:73:0e:88:d5:38:b3:64:79:ef:48:4b:fd:f9:51: 0b:fe:5a:ee:ba:b0:06:bd:2e:5b:6c:50:1e:c7:be: 8c:46:9e:ba:22:94:22:84:07:8a:77:81:94:0f:2f: 37:06:97:22:00:93:d3:62:cc:b6:10:47:b0:c1:77: 32:d2:5b:f3:b6:fa:60:85:6c:b9:e0:09:d1:aa:0b: a9:e5:ed:31:f5:56:94:ad:46:5a:63:48:6b:1c:0e: 02:18:5f:8b:7a:bb:fc:3e:1f:13:71:a4:ca:23:88: 57:05:a3:6e:2d:95:98:b7:85:be:7e:45:f5:30:a1: aa:06:1e:bf:d2:7b:66:4b:20:e4:aa:ed:21:80:eb: 7f:7c:74:d3:fe:1e:b2:5e:bf:89:14:62:b4:e0:bd: 4f:ba:b0:66:e0:34:a9:c1:97:5e:49:1b:bf:7a:56: 11:d4:5a:9f:0b:52:0b:f4:d4:6c:f5:dc:67:46:04: d8:82:45:22:e0:a1:e5:0e:3e:03:e4:fe:7d:e8:a6: 33:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FC:50:AE:7E:17:12:B5:3C:71:55:A1:C2:E3:C5:0C:3D:62:9D:0E X509v3 Authority Key Identifier: keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:aa:ce:9e:47:31:af:be:e7:05:78:80:c4:32:9f:14:1e:96: b8:48:8e:7c:1e:7a:70:2b:21:3d:6d:1b:22:0b:0c:a8:9b:51: 98:57:48:9b:05:a0:f9:87:11:10:5c:08:af:ea:0f:18:47:fc: 9a:af:ae:1e:e3:e7:9d:eb:03:f2:9b:34:5e:8b:f9:6a:54:5f: 5d:0f:af:d9:82:38:66:6a:ac:e8:5d:44:8a:9e:ac:73:8a:29: 77:a5:b4:4e:80:b1:3e:2f:47:53:58:10:6f:43:72:fe:b8:ce: 86:ae:d8:0f:0b:a3:69:40:37:34:6d:7f:2c:b7:c6:df:db:3c: d0:28:30:12:39:39:58:78:db:18:6b:23:94:a3:ee:9d:86:2b: 10:3e:61:31:88:30:82:d6:5a:6a:97:4c:96:2e:53:1f:61:07: ea:65:63:68:af:11:7d:25:51:05:39:35:22:0d:ab:b0:f9:6f: fd:8b:3c:03:72:75:da:7f:66:37:b2:71:e8:51:61:3b:75:a7: 18:4d:ca:f2:df:9d:b0:b4:c7:61:b1:29:2f:da:fa:ae:bb:07: 75:84:cf:44:51:cc:44:77:a9:3c:1e:97:0c:d6:73:ff:43:12: 68:5c:86:f1:6b:29:2e:98:77:6b:c9:4c:f6:b6:07:22:77:cd: 5d:2d:9b:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HEesRqmstRtA7wAAsy6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MGNkYTQ4YzM1ZTU0ZWI4MDI1NzVhYWE0MDhjY2U1Nzk5 MjcyMTYwHhcNMjYwMTI2MjEwMTEwWhcNMjYwMTI3MjEwMTEwWjAzMTEwLwYDVQQD EygzM2ZjNTBhZTdlMTcxMmI1M2M3MTU1YTFjMmUzYzUwYzNkNjI5ZDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW95s/B1TjfQXMNFn1juDsLRIZZp d/nNQXE0CluW7CW1aABfBsWWhnaTO57ZcrTuXQr7F5Szx9HR8xwScw6I1TizZHnv SEv9+VEL/lruurAGvS5bbFAex76MRp66IpQihAeKd4GUDy83BpciAJPTYsy2EEew wXcy0lvztvpghWy54AnRqgup5e0x9VaUrUZaY0hrHA4CGF+Lerv8Ph8TcaTKI4hX BaNuLZWYt4W+fkX1MKGqBh6/0ntmSyDkqu0hgOt/fHTT/h6yXr+JFGK04L1PurBm 4DSpwZdeSRu/elYR1FqfC1IL9NRs9dxnRgTYgkUi4KHlDj4D5P596KYzjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDP8UK5+FxK1PHFVocLjxQw9Yp0OMB8GA1UdIwQY MBaAFNUM2kjDXlTrgCV1qqQIzOV5knIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNTg3ZWItZWJkNC00MGFiLWExOWIt MjI5MjA1NjVjZGE0LzEvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zNTg3ZWItZWJkNC00MGFiLWExOWItMjI5MjA1NjVjZGE0 LzEvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqrOnkcx r77nBXiAxDKfFB6WuEiOfB56cCshPW0bIgsMqJtRmFdImwWg+YcREFwIr+oPGEf8 mq+uHuPnnesD8ps0Xov5alRfXQ+v2YI4Zmqs6F1Eip6sc4opd6W0ToCxPi9HU1gQ b0Ny/rjOhq7YDwujaUA3NG1/LLfG39s80CgwEjk5WHjbGGsjlKPunYYrED5hMYgw gtZaapdMli5TH2EH6mVjaK8RfSVRBTk1Ig2rsPlv/Ys8A3J12n9mN7Jx6FFhO3Wn GE3K8t+dsLTHYbEpL9r6rrsHdYTPRFHMRHepPB6XDNZz/0MSaFyG8WspLph3a8lM 9rYHInfNXS2bqQ== -----END CERTIFICATE-----Generated at Tue Jan 27 05:46:58 2026 by rpki-client