This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft File: qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft (raw, json) Hash identifier: +uOz7zHiS1epLFqdA55F8hFDFgRpG+y7uAzeqPdN+98= Subject key identifier: 65:09:57:9D:A6:72:CB:58:4F:74:B9:78:1D:3E:54:A0:08:46:37:62 Authority key identifier: A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D Certificate issuer: /CN=a9a073b31d888e4439e272e007c9532fc305c80d Certificate serial: 019C2698C6D79C0BD13AA0F1DB684CF52102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft Manifest number: 0EC4 Signing time: Wed 04 Feb 2026 03:01:12 +0000 Manifest this update: Wed 04 Feb 2026 03:01:12 +0000 Manifest next update: Thu 05 Feb 2026 03:01:12 +0000 Files and hashes: 1: fVTksWbnATqXaCHSg3-Hyam5vM4.roa (hash: aKoDF8WcVN36RBOxnQH2HKKv2Xv+gPNSTtzRz6i4sY8=) 2: qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl (hash: oXm+J35MYgxP2DbUN+MXYtDdhBxW9AuJT7TKlK4NNtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:26:98:c6:d7:9c:0b:d1:3a:a0:f1:db:68:4c:f5:21:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a073b31d888e4439e272e007c9532fc305c80d Validity Not Before: Feb 4 03:01:12 2026 GMT Not After : Feb 5 03:01:12 2026 GMT Subject: CN=6509579da672cb584f74b9781d3e54a008463762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d8:66:5a:67:23:50:8e:77:ac:37:61:6d:62: 2c:0f:62:06:7f:5c:7e:c8:69:91:f2:d1:b9:02:cd: 9a:1b:3f:ee:4c:b7:8f:a7:e8:47:47:f2:a3:6e:14: 18:bb:b0:3e:f4:f9:6f:d8:6c:9a:f3:01:47:80:25: 3a:71:1b:0e:1f:1c:92:60:a2:fe:e2:45:32:64:8e: 63:da:28:54:eb:d8:84:9c:21:44:8c:71:ab:05:a9: d1:b7:60:8f:c8:30:ee:a6:cc:b6:35:83:dd:d0:c4: f1:80:1f:8c:fb:15:f8:14:d3:d0:eb:e1:c3:18:fa: 45:25:40:35:fd:0c:ae:54:a2:20:e3:8b:8e:db:75: 17:1d:1e:72:e0:51:ec:1d:6e:3f:34:47:3e:00:18: b7:f6:70:16:39:26:59:b9:0d:57:3f:1e:a1:cf:2f: a5:a2:05:49:0a:c9:0b:44:66:67:98:13:3b:8b:9f: 62:f7:7b:ca:56:81:cd:af:8f:37:b2:34:0e:45:ff: ec:e6:43:45:d4:7a:29:a5:de:f1:cc:24:4f:d1:03: 54:9e:e7:81:a3:27:23:af:60:80:8f:5d:35:e5:f6: 78:91:89:90:28:1e:a4:7e:01:19:bb:78:3c:36:20: 9a:20:66:df:4c:4a:7f:8b:4d:a6:19:24:82:29:bd: 50:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:09:57:9D:A6:72:CB:58:4F:74:B9:78:1D:3E:54:A0:08:46:37:62 X509v3 Authority Key Identifier: keyid:A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e7:9a:13:92:75:a0:68:ba:c5:97:44:5c:75:40:89:95:1c: 87:f3:aa:81:88:ff:56:00:ff:fa:8b:7b:c7:e6:6f:27:e6:10: 7b:ec:bf:8a:db:f9:21:53:33:b3:42:5f:26:b6:dd:73:a7:c4: 21:81:f9:81:b8:3c:94:77:4f:6f:6f:37:3b:65:21:1f:46:3b: 73:05:45:46:6b:e2:be:c2:22:4e:29:a6:35:32:a5:d6:c0:3c: 03:01:32:97:19:a6:33:37:1b:be:09:56:a4:ea:4b:80:6f:dc: ec:6b:d6:19:f9:8f:5b:92:41:c0:0e:a9:87:4d:a6:91:5f:d3: 61:ac:2f:6f:48:e3:2d:fe:e9:50:e1:9d:c9:31:50:cb:4f:21: 98:7f:02:e6:60:aa:11:6e:36:92:dc:e4:47:cc:15:1c:ee:da: e9:c5:61:58:29:ab:39:90:bc:aa:b0:52:e5:44:9c:3a:52:97: 8e:d5:ed:2a:92:0b:d4:d4:86:3d:1e:b8:e2:04:99:30:af:60: f7:e6:03:26:bb:a7:7e:7e:72:f7:24:fb:c4:18:8c:b0:50:ab: 0d:16:b0:32:a6:db:5c:cc:e2:3b:33:c9:02:d3:82:a7:53:e2: 92:eb:8b:1e:29:05:2f:11:cc:ac:f4:e1:5a:92:6d:53:41:5d: 22:a6:d2:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwmmMbXnAvROqDx22hM9SECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTA3M2IzMWQ4ODhlNDQzOWUyNzJlMDA3Yzk1MzJmYzMw NWM4MGQwHhcNMjYwMjA0MDMwMTEyWhcNMjYwMjA1MDMwMTEyWjAzMTEwLwYDVQQD Eyg2NTA5NTc5ZGE2NzJjYjU4NGY3NGI5NzgxZDNlNTRhMDA4NDYzNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdhmWmcjUI53rDdhbWIsD2IGf1x+ yGmR8tG5As2aGz/uTLePp+hHR/KjbhQYu7A+9Plv2Gya8wFHgCU6cRsOHxySYKL+ 4kUyZI5j2ihU69iEnCFEjHGrBanRt2CPyDDupsy2NYPd0MTxgB+M+xX4FNPQ6+HD GPpFJUA1/QyuVKIg44uO23UXHR5y4FHsHW4/NEc+ABi39nAWOSZZuQ1XPx6hzy+l ogVJCskLRGZnmBM7i59i93vKVoHNr483sjQORf/s5kNF1Hoppd7xzCRP0QNUnueB oycjr2CAj1015fZ4kYmQKB6kfgEZu3g8NiCaIGbfTEp/i02mGSSCKb1Q0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUJV52mcstYT3S5eB0+VKAIRjdiMB8GA1UdIwQY MBaAFKmgc7MdiI5EOeJy4AfJUy/DBcgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFCenN4Mklqa1E1NG5MZ0I4bFRMOE1GeUEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iYTNiMmYtYTI4OS00MDRlLWFlZjgt NGU3MzdlMDZkMjkwLzEvcWFCenN4Mklqa1E1NG5MZ0I4bFRMOE1GeUEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iYTNiMmYtYTI4OS00MDRlLWFlZjgtNGU3MzdlMDZkMjkw LzEvcWFCenN4Mklqa1E1NG5MZ0I4bFRMOE1GeUEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+eaE5J1 oGi6xZdEXHVAiZUch/OqgYj/VgD/+ot7x+ZvJ+YQe+y/itv5IVMzs0JfJrbdc6fE IYH5gbg8lHdPb283O2UhH0Y7cwVFRmvivsIiTimmNTKl1sA8AwEylxmmMzcbvglW pOpLgG/c7GvWGfmPW5JBwA6ph02mkV/TYawvb0jjLf7pUOGdyTFQy08hmH8C5mCq EW42ktzkR8wVHO7a6cVhWCmrOZC8qrBS5UScOlKXjtXtKpIL1NSGPR644gSZMK9g 9+YDJrunfn5y9yT7xBiMsFCrDRawMqbbXMziOzPJAtOCp1PikuuLHikFLxHMrPTh WpJtU0FdIqbS8A== -----END CERTIFICATE-----Generated at Wed Feb 4 14:46:47 2026 by rpki-client