This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft File: qXJG_EMZM_Cyggztllx4URgLFe4.mft (raw, json) Hash identifier: yFYfMsUzDFqPG0PbhVnHrNBzkUu+MZPf/OhpK8MCyLQ= Subject key identifier: CA:8A:AC:52:CC:8D:5D:90:39:9C:37:82:61:15:DC:61:F1:6E:19:15 Authority key identifier: A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE Certificate issuer: /CN=a97246fc431933f0b2820ced965c7851180b15ee Certificate serial: 019C1BDDA42F5B975B124403DF6F693717DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft Manifest number: 0BA4 Signing time: Mon 02 Feb 2026 01:00:36 +0000 Manifest this update: Mon 02 Feb 2026 01:00:36 +0000 Manifest next update: Tue 03 Feb 2026 01:00:36 +0000 Files and hashes: 1: qXJG_EMZM_Cyggztllx4URgLFe4.crl (hash: Y6XgUvfvnZLHZRaKuAlRZ6EiXicVfK4mJoX0pqlQ5Uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:dd:a4:2f:5b:97:5b:12:44:03:df:6f:69:37:17:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a97246fc431933f0b2820ced965c7851180b15ee Validity Not Before: Feb 2 01:00:36 2026 GMT Not After : Feb 3 01:00:36 2026 GMT Subject: CN=ca8aac52cc8d5d90399c37826115dc61f16e1915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:84:f5:3d:c0:38:e4:75:03:b1:d6:23:00:a1: 22:dc:fd:fb:49:65:6f:ce:9f:eb:9f:ff:a2:cf:9b: 93:82:d9:c0:d1:5b:9d:36:3b:a1:fd:70:8e:cd:6a: 27:99:13:59:8b:0e:57:96:42:5b:00:b3:f0:8f:b6: a6:25:d0:1c:c2:20:81:86:01:9f:88:84:bf:6f:7e: 9a:43:c4:de:69:1e:2b:75:fc:b6:c5:8f:5d:be:87: 50:84:d2:e0:5f:98:62:47:fd:65:30:10:1c:b9:3a: 14:c9:17:51:b1:c3:a8:19:d5:d3:3f:45:b4:68:ec: 9c:6a:df:d2:1f:24:d4:75:f7:8b:e6:25:b6:92:2c: 98:3a:75:3b:27:0a:cd:1b:c7:dd:18:ec:85:45:47: f9:69:02:35:f4:98:5c:11:d1:c3:68:6f:fe:91:5f: 20:1f:71:98:9a:28:a7:4c:06:17:4f:2d:1a:13:51: ab:fb:9d:f8:eb:fd:05:63:4c:ba:c3:a9:79:dd:44: 81:4f:75:31:d2:a8:a3:02:c4:a4:2b:4d:9a:8a:61: f2:37:f4:7f:11:87:a7:70:08:d2:6c:0a:e8:3d:98: 8b:aa:5c:b1:fe:d3:10:c6:a3:7b:d8:c8:bb:e4:e0: 26:12:e5:bf:76:36:ae:fa:d1:11:3a:4a:7c:69:2a: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8A:AC:52:CC:8D:5D:90:39:9C:37:82:61:15:DC:61:F1:6E:19:15 X509v3 Authority Key Identifier: keyid:A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:bb:29:2b:cc:0f:2f:25:57:0a:21:3d:8d:8e:ba:64:e8:fb: 4f:40:d8:19:62:3c:c8:72:86:82:d5:40:1d:7b:b6:90:9e:8d: ac:6c:a7:f6:e0:bc:a9:4c:fd:ca:8c:6e:c1:bf:f4:06:72:60: de:95:7e:05:b1:94:09:72:a0:fa:22:1d:8b:38:e9:28:2e:e6: 70:13:92:ea:9e:0d:78:d6:8e:4d:76:49:ba:51:a2:73:f8:5d: 6a:5c:7e:c7:fd:37:68:92:37:dd:85:38:f4:ce:f0:4a:cb:24: cb:32:88:ba:2d:ea:22:3b:e5:ee:2a:f0:d3:41:88:be:56:03: 3f:9d:cd:4a:0f:c8:0c:68:6b:4d:9b:54:85:c3:d0:90:0a:cf: 99:be:01:5a:67:3c:63:8e:8f:28:d2:91:c4:ef:8f:f3:c2:56: 69:52:7a:9c:7b:ad:be:ce:d1:30:1f:1a:1d:8d:e1:77:b6:de: 00:32:60:e8:dd:5b:79:49:2e:fe:34:df:62:f8:66:bc:39:1a: 37:6f:a6:91:dc:7d:31:48:7a:a3:6a:d8:d3:df:f6:b1:38:78: a1:6e:4c:d4:8a:b2:e5:8a:c0:03:48:57:cb:b8:80:f2:ed:e3: f3:57:6c:6c:a7:9a:4f:4f:f0:0b:8a:22:2d:24:70:ad:16:17: c4:a1:7c:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3aQvW5dbEkQD329pNxffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NzI0NmZjNDMxOTMzZjBiMjgyMGNlZDk2NWM3ODUxMTgw YjE1ZWUwHhcNMjYwMjAyMDEwMDM2WhcNMjYwMjAzMDEwMDM2WjAzMTEwLwYDVQQD EyhjYThhYWM1MmNjOGQ1ZDkwMzk5YzM3ODI2MTE1ZGM2MWYxNmUxOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIT1PcA45HUDsdYjAKEi3P37SWVv zp/rn/+iz5uTgtnA0VudNjuh/XCOzWonmRNZiw5XlkJbALPwj7amJdAcwiCBhgGf iIS/b36aQ8TeaR4rdfy2xY9dvodQhNLgX5hiR/1lMBAcuToUyRdRscOoGdXTP0W0 aOycat/SHyTUdfeL5iW2kiyYOnU7JwrNG8fdGOyFRUf5aQI19JhcEdHDaG/+kV8g H3GYmiinTAYXTy0aE1Gr+5346/0FY0y6w6l53USBT3Ux0qijAsSkK02aimHyN/R/ EYencAjSbAroPZiLqlyx/tMQxqN72Mi75OAmEuW/djau+tEROkp8aSo8IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqKrFLMjV2QOZw3gmEV3GHxbhkVMB8GA1UdIwQY MBaAFKlyRvxDGTPwsoIM7ZZceFEYCxXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVhKR19FTVpNX0N5Z2d6dGxseDRVUmdMRmU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ODYzMTktZmY1Zi00MTJmLWFhNzQt Y2FhZDUxNjk0ZTk3LzEvcVhKR19FTVpNX0N5Z2d6dGxseDRVUmdMRmU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83ODYzMTktZmY1Zi00MTJmLWFhNzQtY2FhZDUxNjk0ZTk3 LzEvcVhKR19FTVpNX0N5Z2d6dGxseDRVUmdMRmU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrspK8wP LyVXCiE9jY66ZOj7T0DYGWI8yHKGgtVAHXu2kJ6NrGyn9uC8qUz9yoxuwb/0BnJg 3pV+BbGUCXKg+iIdizjpKC7mcBOS6p4NeNaOTXZJulGic/hdalx+x/03aJI33YU4 9M7wSsskyzKIui3qIjvl7irw00GIvlYDP53NSg/IDGhrTZtUhcPQkArPmb4BWmc8 Y46PKNKRxO+P88JWaVJ6nHutvs7RMB8aHY3hd7beADJg6N1beUku/jTfYvhmvDka N2+mkdx9MUh6o2rY09/2sTh4oW5M1Iqy5YrAA0hXy7iA8u3j81dsbKeaT0/wC4oi LSRwrRYXxKF8Cw== -----END CERTIFICATE-----Generated at Mon Feb 2 05:03:33 2026 by rpki-client