This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft File: qqthEeAEwqBE8Wi40oJzz2dE86g.mft (raw, json) Hash identifier: ef6HmMZvc/7WctD+fRDoRhifBStg82mGMW6j2/uh02w= Subject key identifier: D8:6D:7E:8E:2C:FD:65:0E:E1:28:B1:BA:EB:56:A5:96:49:16:FD:61 Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Certificate serial: 019C070DDC8F3CDA2D8146DB758F5757CA06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft Manifest number: 17F4 Signing time: Thu 29 Jan 2026 00:01:14 +0000 Manifest this update: Thu 29 Jan 2026 00:01:14 +0000 Manifest next update: Fri 30 Jan 2026 00:01:14 +0000 Files and hashes: 1: 8AxYPUz9pvHelVo8wz2I9i9BNIA.roa (hash: utEz7HUdFnE3+cBxmQiomb42lkLTImzDLbYZMEDfv3U=) 2: 9aLc8spuhknepdIuXl9_G-7lgCo.roa (hash: c9hPYKhcAXRzZ0I45eLxMe1++ngSF8swg1cOGJyVE0A=) 3: B9Wd9EbM_iKJ8YfmPHlKXfnX71Y.roa (hash: IOwv2q5Yeh5JDUzx2NO+HAB/8+fTRVQ8TgVVOngqzZ4=) 4: LKXy-UiiwJTm9i-RPVj4M4X3jaQ.roa (hash: 4COeScrO5G+pH7nKA4NnbTjope4Fy5I6kyVaqtY/stg=) 5: i_OPbLZjNGN-ng4eZFgq10xKI3A.roa (hash: 2cnUyItzsSqni18M5wS3dShPIxCduQXQO/+heYm5xcI=) 6: qqthEeAEwqBE8Wi40oJzz2dE86g.crl (hash: HzHdQuBoeN4ot7IdL+I9Xkq79bB4gCkJjHEszJEIoXQ=) 7: t4ElfnENcIC_okPPyJa4ZzN81yQ.roa (hash: PzQD5S/AHK7SK7ouVXpLNAicfo5T5PWIFC9Ztw/en60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 00:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:07:0d:dc:8f:3c:da:2d:81:46:db:75:8f:57:57:ca:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Validity Not Before: Jan 29 00:01:14 2026 GMT Not After : Jan 30 00:01:14 2026 GMT Subject: CN=d86d7e8e2cfd650ee128b1baeb56a5964916fd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:2a:70:1d:79:4b:51:9a:2a:ea:1d:d9:65: 54:a9:73:8a:c9:00:99:3d:8f:1f:7c:2d:8e:7a:10: dc:e3:2d:01:16:b6:3e:57:28:29:d3:61:00:24:42: 6e:47:db:e1:9e:78:71:5a:6f:7e:4e:da:58:df:d8: 26:af:76:67:6d:0e:96:34:4a:6f:c4:b3:e9:69:6c: 45:27:ad:4d:b6:6a:d4:4d:d3:87:7a:e4:b8:13:9e: e6:d2:e2:95:ae:eb:6b:2d:e8:c7:a6:60:08:33:7e: ce:23:63:23:68:a6:2c:bf:72:c5:c2:bc:42:15:0d: 63:84:7e:ae:9c:a4:33:2f:ab:cd:1a:ed:a0:99:3a: 37:b4:a3:38:59:46:ab:df:e1:03:75:21:23:31:d4: 63:1a:cf:79:54:fb:16:f2:70:70:5f:6e:c4:aa:fb: 94:b0:7b:1d:d2:24:7e:76:58:c8:df:d6:87:9e:31: 70:a6:cb:25:59:da:ad:d3:0d:99:fc:be:7e:55:b3: 6b:fa:c5:43:02:ab:1f:95:77:52:fb:0d:c3:04:ed: 0f:9f:cf:f7:75:42:ad:96:5c:43:bd:51:e8:e3:be: 12:08:42:f0:e9:d2:bc:d7:88:a1:d8:29:c1:64:1f: 77:82:c8:b4:b9:c1:f5:b3:cb:29:48:0e:e7:a1:94: 17:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6D:7E:8E:2C:FD:65:0E:E1:28:B1:BA:EB:56:A5:96:49:16:FD:61 X509v3 Authority Key Identifier: keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e9:f9:d9:0a:80:4a:3c:e2:bd:21:b5:47:a8:6b:fa:7b:c0: 51:5e:cb:6d:6b:89:f7:f4:e1:d2:7c:c0:b9:85:8a:86:4f:df: 58:a7:7c:e6:59:cf:03:db:b4:c9:1c:14:db:00:b6:fb:b4:b8: 92:47:fd:0b:b6:ae:74:71:aa:2a:f2:2e:eb:f7:15:5a:c8:85: b4:08:b7:a2:e9:bd:64:cd:1d:8d:0f:63:c1:0a:b2:40:b4:d6: e7:7f:c7:1c:3b:ab:04:bf:a9:f2:62:d8:5f:e7:22:9f:b4:0f: 0b:e6:3d:75:95:16:ed:68:84:51:f2:d5:74:04:40:64:d6:ff: c5:b6:cd:4a:68:fd:38:7f:02:9c:cb:d8:c9:f1:33:b7:f8:f1: 63:d0:da:d3:f8:4b:39:fd:4b:66:1a:e1:0b:17:59:61:4d:4c: de:63:fd:d3:99:73:f0:b4:4e:54:32:5e:09:c8:7c:72:a7:8c: b9:a8:fb:0a:ad:99:6e:34:76:56:10:97:18:e5:8b:db:f6:18: e6:bc:98:52:9b:71:7a:04:2d:2c:9e:47:b9:19:d9:99:b7:b3: cc:73:94:97:cb:71:67:c9:8d:a8:76:90:b0:b5:c4:66:d6:3d: b1:80:1e:32:27:d7:6a:b6:82:82:35:c3:77:d2:0d:29:3a:f9: 33:a9:a8:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwHDdyPPNotgUbbdY9XV8oGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYWI2MTExZTAwNGMyYTA0NGYxNjhiOGQyODI3M2NmNjc0 NGYzYTgwHhcNMjYwMTI5MDAwMTE0WhcNMjYwMTMwMDAwMTE0WjAzMTEwLwYDVQQD EyhkODZkN2U4ZTJjZmQ2NTBlZTEyOGIxYmFlYjU2YTU5NjQ5MTZmZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7sqcB15S1GaKuod2WVUqXOKyQCZ PY8ffC2OehDc4y0BFrY+Vygp02EAJEJuR9vhnnhxWm9+TtpY39gmr3ZnbQ6WNEpv xLPpaWxFJ61NtmrUTdOHeuS4E57m0uKVrutrLejHpmAIM37OI2MjaKYsv3LFwrxC FQ1jhH6unKQzL6vNGu2gmTo3tKM4WUar3+EDdSEjMdRjGs95VPsW8nBwX27EqvuU sHsd0iR+dljI39aHnjFwpsslWdqt0w2Z/L5+VbNr+sVDAqsflXdS+w3DBO0Pn8/3 dUKtllxDvVHo474SCELw6dK814ih2CnBZB93gsi0ucH1s8spSA7noZQXLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhtfo4s/WUO4SixuutWpZZJFv1hMB8GA1UdIwQY MBaAFKqrYRHgBMKgRPFouNKCc89nRPOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDkt ODJlZGVkYTdmZTdhLzEvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDktODJlZGVkYTdmZTdh LzEvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+n52QqA SjzivSG1R6hr+nvAUV7LbWuJ9/Th0nzAuYWKhk/fWKd85lnPA9u0yRwU2wC2+7S4 kkf9C7audHGqKvIu6/cVWsiFtAi3oum9ZM0djQ9jwQqyQLTW53/HHDurBL+p8mLY X+cin7QPC+Y9dZUW7WiEUfLVdARAZNb/xbbNSmj9OH8CnMvYyfEzt/jxY9Da0/hL Of1LZhrhCxdZYU1M3mP905lz8LROVDJeCch8cqeMuaj7Cq2ZbjR2VhCXGOWL2/YY 5ryYUptxegQtLJ5HuRnZmbezzHOUl8txZ8mNqHaQsLXEZtY9sYAeMifXaraCgjXD d9INKTr5M6mowg== -----END CERTIFICATE-----Generated at Thu Jan 29 10:01:16 2026 by rpki-client