This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json) Hash identifier: gGYPoNfgkd2LmpoxJISXdX4gPFw9ejr/OZOy7Xszbkw= Subject key identifier: 4A:3E:7F:51:D8:A1:3D:F5:72:C4:BC:8E:18:7D:6B:A7:C7:D1:11:87 Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4 Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4 Certificate serial: 019BFCC11482F76D673DE0B77359F213F952 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft Manifest number: 0557 Signing time: Tue 27 Jan 2026 00:01:10 +0000 Manifest this update: Tue 27 Jan 2026 00:01:10 +0000 Manifest next update: Wed 28 Jan 2026 00:01:10 +0000 Files and hashes: 1: mRqgMQ1oyI_OLISSLDMm0vHAWUE.roa (hash: Yip22LT0+wHV/CLjrRT+qmDSA0wut/7NqfT12lIPjXM=) 2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: rIc3tyJnMps23mOHjCZrmooViqGDOCNs/lOJbye0r4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:14:82:f7:6d:67:3d:e0:b7:73:59:f2:13:f9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4 Validity Not Before: Jan 27 00:01:10 2026 GMT Not After : Jan 28 00:01:10 2026 GMT Subject: CN=4a3e7f51d8a13df572c4bc8e187d6ba7c7d11187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:ce:3f:69:44:38:65:74:c0:e6:ef:ac:71: e2:ff:1f:81:36:72:8b:7f:dc:0e:96:54:8c:f6:e2: c3:37:fc:02:ca:9e:1a:b0:21:8c:66:4a:98:36:8d: b9:cb:78:99:b5:21:31:84:65:a5:1d:73:e9:92:02: cb:19:4a:d1:ea:a6:31:1c:d0:d1:0d:ba:8c:b5:7d: fa:b2:0a:14:bf:bf:13:bf:10:88:ac:cb:74:b8:ff: 7a:45:cf:ff:3a:8b:68:f1:69:96:25:0d:e8:a1:06: 43:f3:b8:b8:58:e9:09:86:22:46:28:59:47:95:0d: f1:14:19:86:d8:eb:76:4d:c2:13:aa:88:1d:17:a6: 18:e8:e4:37:f3:7f:62:fe:39:99:dc:23:42:ab:d1: a3:9a:c1:81:48:3b:21:49:19:ef:c2:86:23:6d:df: e8:34:da:56:23:0d:67:27:c8:83:21:6a:a5:de:e7: 8e:92:8f:27:40:e0:92:44:85:38:d7:2a:88:77:0d: bd:a8:87:4b:38:91:1e:0c:55:41:d7:44:05:7c:d7: 8f:9b:65:51:69:8e:e9:78:ea:92:09:ef:36:d9:7b: 3d:25:a9:08:19:7d:36:03:1b:6d:b5:21:a5:0f:2b: f2:57:cf:d7:da:17:6f:cc:5f:1c:76:6c:a1:4b:e3: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3E:7F:51:D8:A1:3D:F5:72:C4:BC:8E:18:7D:6B:A7:C7:D1:11:87 X509v3 Authority Key Identifier: keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b1:86:0c:44:90:38:29:e4:47:a6:56:c3:1a:0a:4f:2d:e4: 1c:74:6f:8b:25:d0:a2:39:f0:79:5b:b4:a1:ef:31:50:b0:76: 83:48:1c:6d:29:e0:24:df:f0:04:b8:73:b4:c7:d4:2d:94:36: 03:71:70:9f:71:99:4c:fd:c0:64:f1:2f:d0:77:48:73:0f:37: 33:0e:3e:4d:33:9a:8e:53:ea:7e:66:6e:ac:f2:90:57:e7:2f: 60:e2:af:46:25:b7:b5:04:aa:04:14:f9:27:ea:93:ed:f4:10: d9:d1:c6:89:f4:0e:56:db:cb:79:1c:54:f0:05:ae:6e:a9:66: 04:54:2e:d4:06:85:d1:fe:c2:9e:a2:7d:12:33:b5:f4:01:c4: 88:00:cd:79:52:95:70:fd:ec:44:5a:75:f2:7a:27:4f:6a:06: 25:df:9d:5f:91:00:3b:f7:5f:dc:db:4a:dc:da:e6:49:b4:2e: 51:55:e1:36:0b:31:15:95:ad:aa:c6:99:f3:00:d3:e1:7d:14: 6b:2b:c3:66:52:a3:37:58:eb:3b:ec:cd:1a:a6:6e:62:e1:78: 70:a5:8c:eb:53:c6:92:7e:9c:99:dc:a9:88:e4:70:b3:35:6c: 67:6d:47:9e:03:26:e3:4e:c9:83:f4:d2:96:bd:81:da:90:d7: 05:b8:b3:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wRSC921nPeC3c1nyE/lSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NWRiOGM5YjU2MzA4Y2YwODkwMjFiNTE2Y2FlNGM1NWZk NjRmZTQwHhcNMjYwMTI3MDAwMTEwWhcNMjYwMTI4MDAwMTEwWjAzMTEwLwYDVQQD Eyg0YTNlN2Y1MWQ4YTEzZGY1NzJjNGJjOGUxODdkNmJhN2M3ZDExMTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyPOP2lEOGV0wObvrHHi/x+BNnKL f9wOllSM9uLDN/wCyp4asCGMZkqYNo25y3iZtSExhGWlHXPpkgLLGUrR6qYxHNDR DbqMtX36sgoUv78TvxCIrMt0uP96Rc//Ooto8WmWJQ3ooQZD87i4WOkJhiJGKFlH lQ3xFBmG2Ot2TcITqogdF6YY6OQ3839i/jmZ3CNCq9GjmsGBSDshSRnvwoYjbd/o NNpWIw1nJ8iDIWql3ueOko8nQOCSRIU41yqIdw29qIdLOJEeDFVB10QFfNePm2VR aY7peOqSCe822Xs9JakIGX02AxtttSGlDyvyV8/X2hdvzF8cdmyhS+NkhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo+f1HYoT31csS8jhh9a6fH0RGHMB8GA1UdIwQY MBaAFKhduMm1YwjPCJAhtRbK5MVf1k/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUt NjBmNDlkMTIzMTczLzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUtNjBmNDlkMTIzMTcz LzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7GGDESQ OCnkR6ZWwxoKTy3kHHRviyXQojnweVu0oe8xULB2g0gcbSngJN/wBLhztMfULZQ2 A3Fwn3GZTP3AZPEv0HdIcw83Mw4+TTOajlPqfmZurPKQV+cvYOKvRiW3tQSqBBT5 J+qT7fQQ2dHGifQOVtvLeRxU8AWubqlmBFQu1AaF0f7CnqJ9EjO19AHEiADNeVKV cP3sRFp18nonT2oGJd+dX5EAO/df3NtK3NrmSbQuUVXhNgsxFZWtqsaZ8wDT4X0U ayvDZlKjN1jrO+zNGqZuYuF4cKWM61PGkn6cmdypiORwszVsZ21HngMm407Jg/TS lr2B2pDXBbizEg== -----END CERTIFICATE-----Generated at Tue Jan 27 10:17:20 2026 by rpki-client