This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json) Hash identifier: EaUUo9XNXePD2hmzXivFJnZp8HU21rIlwGno+QK9DpU= Subject key identifier: 89:E3:C2:2D:73:77:6D:64:04:D1:AE:5D:C4:53:A7:0A:E2:83:8C:46 Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b Certificate serial: 019C1FF1B891E9CBD39A84FE0C3F23E0AA20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft Manifest number: 11AB Signing time: Mon 02 Feb 2026 20:01:00 +0000 Manifest this update: Mon 02 Feb 2026 20:01:00 +0000 Manifest next update: Tue 03 Feb 2026 20:01:00 +0000 Files and hashes: 1: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: /T6coDvPerSSfsCeNI+YLbnWGs/ww0GVm557Yyr6Hn8=) 2: y4ozBsAhD0SXzDXTnSLIwi05yzY.roa (hash: UpquKmMoHnebuH46QTJH9ZI2B7xELceGE768LObgLRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:f1:b8:91:e9:cb:d3:9a:84:fe:0c:3f:23:e0:aa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b Validity Not Before: Feb 2 20:01:00 2026 GMT Not After : Feb 3 20:01:00 2026 GMT Subject: CN=89e3c22d73776d6404d1ae5dc453a70ae2838c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:b9:6e:80:de:44:f7:d1:54:77:78:64:f1: 15:c2:55:9f:ec:91:31:57:87:8b:32:e9:b0:71:6c: 59:c4:46:b5:0b:6e:e3:80:5f:94:91:ae:ec:fa:96: a9:e9:ae:b8:57:13:39:9a:a6:68:8f:22:c6:19:21: 1c:42:34:51:93:48:68:f8:ac:8f:eb:6b:d6:65:95: 35:e6:d2:35:82:45:12:22:8d:c2:3e:a9:5e:61:7a: 24:ea:3e:07:a2:bd:74:c8:a7:ff:5c:ab:79:d6:88: 66:0d:4b:1b:d6:56:a5:11:5c:47:70:fb:1a:3a:0c: b8:60:d9:75:b6:52:3a:11:96:d2:a0:f1:e9:51:ef: 40:40:2f:40:cc:de:1e:3a:9e:82:9d:28:6c:58:7d: ef:55:41:b0:06:09:37:1a:80:e0:62:cb:08:4f:7a: 1a:8f:ed:d7:e5:69:94:70:dc:b5:16:ce:4d:c7:1b: f6:90:b9:7b:57:0e:74:c1:b4:49:f7:30:85:5d:94: 1f:b4:94:f1:99:7c:a3:88:5f:d7:d8:d9:65:89:f2: c4:97:0d:b7:ee:49:78:0b:a5:35:87:cd:37:09:68: 14:ae:65:dd:18:91:a7:99:d4:90:e0:cb:4c:4d:66: e3:d0:75:f4:7a:0d:b4:ba:b9:da:c1:11:0f:f1:14: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E3:C2:2D:73:77:6D:64:04:D1:AE:5D:C4:53:A7:0A:E2:83:8C:46 X509v3 Authority Key Identifier: keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:05:6d:55:21:13:ca:d6:f5:95:a5:8b:1c:ae:9e:c4:4f:e5: ba:f0:1c:c2:02:b0:b9:2b:39:74:ef:be:b2:f0:51:a1:78:4c: 31:da:f3:60:8b:83:83:f7:11:55:96:66:94:6b:ef:6b:24:1e: bc:91:01:6c:2f:e1:0f:47:e9:4e:34:42:c0:27:a7:0b:3b:0e: 00:46:a9:66:cd:6c:19:fb:53:34:66:5b:01:cd:69:6a:20:83: 91:44:e8:d3:2c:56:bb:be:e6:fe:93:fa:c0:b4:2d:71:e0:6f: 38:5d:72:95:54:36:c4:c4:ef:9a:da:00:d8:c7:3a:e4:b3:20: 53:8a:4d:38:42:6b:ea:77:9a:3f:e7:95:ca:ba:e5:fd:16:d4: da:39:d5:54:64:16:5a:0a:9d:e0:b5:be:b9:fc:50:bb:f6:e1: e6:ea:65:e4:a6:86:e7:9e:e0:b5:88:59:87:9b:55:03:55:12: e3:a0:fd:64:2f:cf:d1:42:e7:28:b8:60:9f:70:9a:5e:c6:a6: 70:3c:55:e3:80:99:79:4f:2b:09:67:a0:6e:f5:72:69:4a:71: 2f:68:02:c0:f4:92:d4:02:4d:12:3f:73:f4:69:6c:d0:a8:c4: 19:69:a7:62:b5:e4:4e:b0:b0:24:1d:85:f4:57:96:26:72:2d: 43:bd:63:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwf8biR6cvTmoT+DD8j4KogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OGFkNTQ2ZjFhMGVmOGNmNzVjOTJhNzQ4YmQ1Yzg2MzYy ZTIwOWIwHhcNMjYwMjAyMjAwMTAwWhcNMjYwMjAzMjAwMTAwWjAzMTEwLwYDVQQD Eyg4OWUzYzIyZDczNzc2ZDY0MDRkMWFlNWRjNDUzYTcwYWUyODM4YzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmi5boDeRPfRVHd4ZPEVwlWf7JEx V4eLMumwcWxZxEa1C27jgF+Uka7s+pap6a64VxM5mqZojyLGGSEcQjRRk0ho+KyP 62vWZZU15tI1gkUSIo3CPqleYXok6j4Hor10yKf/XKt51ohmDUsb1lalEVxHcPsa Ogy4YNl1tlI6EZbSoPHpUe9AQC9AzN4eOp6CnShsWH3vVUGwBgk3GoDgYssIT3oa j+3X5WmUcNy1Fs5Nxxv2kLl7Vw50wbRJ9zCFXZQftJTxmXyjiF/X2NllifLElw23 7kl4C6U1h803CWgUrmXdGJGnmdSQ4MtMTWbj0HX0eg20urnawREP8RQszQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInjwi1zd21kBNGuXcRTpwrig4xGMB8GA1UdIwQY MBaAFKiK1UbxoO+M91ySp0i9XIY2LiCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDBhOGMtNmEyZC00MzRiLTk2ZjEt MThlYjc3OWE2NDk3LzEvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MDBhOGMtNmEyZC00MzRiLTk2ZjEtMThlYjc3OWE2NDk3 LzEvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngVtVSET ytb1laWLHK6exE/luvAcwgKwuSs5dO++svBRoXhMMdrzYIuDg/cRVZZmlGvvayQe vJEBbC/hD0fpTjRCwCenCzsOAEapZs1sGftTNGZbAc1paiCDkUTo0yxWu77m/pP6 wLQtceBvOF1ylVQ2xMTvmtoA2Mc65LMgU4pNOEJr6neaP+eVyrrl/RbU2jnVVGQW Wgqd4LW+ufxQu/bh5upl5KaG557gtYhZh5tVA1US46D9ZC/P0ULnKLhgn3CaXsam cDxV44CZeU8rCWegbvVyaUpxL2gCwPSS1AJNEj9z9Gls0KjEGWmnYrXkTrCwJB2F 9FeWJnItQ71j9g== -----END CERTIFICATE-----Generated at Tue Feb 3 00:14:14 2026 by rpki-client