This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json) Hash identifier: NZuSV8JU91RxjwTwnJ7A9md2hj64cEVbp4T3/Kbryy4= Subject key identifier: 09:13:13:33:C4:47:E9:05:62:7A:FA:F1:48:B4:E5:D2:5F:B9:F5:6C Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb Certificate serial: 019C0F34B22937DC8627F9ABF175DFC1352F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft Manifest number: 08BB Signing time: Fri 30 Jan 2026 14:00:37 +0000 Manifest this update: Fri 30 Jan 2026 14:00:37 +0000 Manifest next update: Sat 31 Jan 2026 14:00:37 +0000 Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: EGv1CwxRLluNJG1InBGAPUU+F9+SKGq4qd7oJYr/B88=) 2: R9Y6GrgbgpdjEIL15ST3hGQBv8A.roa (hash: ScvlNZwo3odOWYF4CC8lvyezDpeI3+SX0JX8xZyPseo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:34:b2:29:37:dc:86:27:f9:ab:f1:75:df:c1:35:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb Validity Not Before: Jan 30 14:00:37 2026 GMT Not After : Jan 31 14:00:37 2026 GMT Subject: CN=09131333c447e905627afaf148b4e5d25fb9f56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:4f:ed:e2:77:a4:26:e1:ed:0d:d5:3f:77: 84:22:e7:07:de:9a:4b:15:fc:c7:c1:43:32:d0:38: e3:c1:c9:47:13:53:c1:7c:f8:c2:08:12:5c:96:62: da:82:11:1d:8a:78:68:7b:8b:4a:c5:4d:03:91:36: fb:a2:1d:da:fc:eb:37:0c:26:03:7c:cf:4c:90:af: 4d:dd:27:2c:13:8a:91:62:c3:9f:58:5c:ec:f9:f1: af:f4:63:7e:33:cd:66:b0:f6:5b:df:06:24:6e:21: 43:2a:37:48:b2:d9:99:98:e7:04:4d:f2:ba:ad:bf: ba:37:1d:61:14:16:cc:df:e8:c4:a1:80:dc:c2:4f: 15:15:6c:eb:52:a1:ef:9f:8a:da:93:52:d8:08:90: a3:5c:7b:57:a0:1f:d0:a0:aa:2b:ed:d5:06:39:4a: d0:ca:45:ef:ad:88:07:a7:b1:53:22:75:4e:9d:69: 09:30:2e:ac:55:35:b5:80:e7:6c:f5:f9:35:01:de: 69:3e:a1:80:04:21:67:12:8f:25:cf:e6:7a:48:63: 20:47:ba:47:ff:67:51:fd:8e:e7:f6:cb:e6:34:86: 25:8f:06:2e:f1:08:43:4b:32:32:2c:87:89:d6:ef: 49:ad:56:c0:00:32:97:d2:43:b2:db:fd:a2:05:30: bd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:13:13:33:C4:47:E9:05:62:7A:FA:F1:48:B4:E5:D2:5F:B9:F5:6C X509v3 Authority Key Identifier: keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:81:15:ff:9c:d4:51:4c:e3:32:e9:92:96:9d:62:6f:5d:1a: 82:b6:17:97:51:7a:90:20:27:2c:e9:13:b7:93:b2:be:02:47: 7f:5e:bf:3a:f6:03:94:4e:b8:de:ab:34:b9:09:3b:70:dc:8a: f1:4c:c9:fa:14:be:51:4a:2f:41:87:b7:36:63:cb:33:67:58: 65:52:2b:a4:8c:ed:5c:ba:d5:b0:12:d5:c7:99:84:ca:33:b2: 2b:36:b1:42:6f:3f:b8:dc:98:4f:57:64:c0:60:45:3f:89:88: 57:f7:bf:5a:a8:b9:b7:07:35:8b:b6:bb:aa:6a:c6:95:82:9a: 8e:80:e0:e4:d3:81:05:a4:3e:49:7c:02:06:8d:a2:97:32:34: e7:33:6e:e3:cb:67:fa:c1:bc:09:4d:4d:2e:cb:a5:f3:42:59: 6c:74:5b:83:75:bd:a7:ce:5f:82:e4:54:a3:4f:24:41:d4:30: 66:e9:b5:2e:6e:f8:fd:6e:af:cc:71:e1:fd:0a:0e:c3:71:41: 7a:c5:88:8b:5c:1a:a0:25:b7:7b:02:a3:d5:51:54:79:1d:bb: ce:a4:2f:e4:b2:9b:9f:7b:ca:ab:c3:cb:ce:dc:4f:41:3e:4c: 8c:de:94:0f:9c:f4:d4:1a:ab:a9:1b:0b:2f:ab:e6:b5:23:63: 44:9f:fd:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwPNLIpN9yGJ/mr8XXfwTUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjUxYWVhZjc3NGI2MzNhNDdmOTYwYTcwODliMTViMzVi MWE0Y2IwHhcNMjYwMTMwMTQwMDM3WhcNMjYwMTMxMTQwMDM3WjAzMTEwLwYDVQQD EygwOTEzMTMzM2M0NDdlOTA1NjI3YWZhZjE0OGI0ZTVkMjVmYjlmNTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6ZP7eJ3pCbh7Q3VP3eEIucH3ppL FfzHwUMy0DjjwclHE1PBfPjCCBJclmLaghEdinhoe4tKxU0DkTb7oh3a/Os3DCYD fM9MkK9N3ScsE4qRYsOfWFzs+fGv9GN+M81msPZb3wYkbiFDKjdIstmZmOcETfK6 rb+6Nx1hFBbM3+jEoYDcwk8VFWzrUqHvn4rak1LYCJCjXHtXoB/QoKor7dUGOUrQ ykXvrYgHp7FTInVOnWkJMC6sVTW1gOds9fk1Ad5pPqGABCFnEo8lz+Z6SGMgR7pH /2dR/Y7n9svmNIYljwYu8QhDSzIyLIeJ1u9JrVbAADKX0kOy2/2iBTC91QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkTEzPER+kFYnr68Ui05dJfufVsMB8GA1UdIwQY MBaAFEL1Gur3dLYzpH+WCnCJsVs1saTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUt MWJhNjUxNzRiZDFkLzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUtMWJhNjUxNzRiZDFk LzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYEV/5zU UUzjMumSlp1ib10agrYXl1F6kCAnLOkTt5OyvgJHf16/OvYDlE643qs0uQk7cNyK 8UzJ+hS+UUovQYe3NmPLM2dYZVIrpIztXLrVsBLVx5mEyjOyKzaxQm8/uNyYT1dk wGBFP4mIV/e/Wqi5twc1i7a7qmrGlYKajoDg5NOBBaQ+SXwCBo2ilzI05zNu48tn +sG8CU1NLsul80JZbHRbg3W9p85fguRUo08kQdQwZum1Lm74/W6vzHHh/QoOw3FB esWIi1waoCW3ewKj1VFUeR27zqQv5LKbn3vKq8PLztxPQT5MjN6UD5z01BqrqRsL L6vmtSNjRJ/9Hw== -----END CERTIFICATE-----Generated at Fri Jan 30 21:29:35 2026 by rpki-client