This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json) Hash identifier: u20N4pSdOm4zczhl8ipAEY+xMxUDJv4XVc6mijqGrEE= Subject key identifier: 3A:CC:AD:BA:FF:73:A4:87:5F:58:FE:C7:06:88:7C:E2:5D:12:5E:C0 Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c Certificate serial: 019BFBE4D9F8AE61F4EA4451DBD82B6B02B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 20:00:37 +0000 Manifest this update: Mon 26 Jan 2026 20:00:37 +0000 Manifest next update: Tue 27 Jan 2026 20:00:37 +0000 Files and hashes: 1: TG-T28D3sM1IJX9-bR6zimuu3dQ.roa (hash: sKx/GRdEWeKSqR5AF1hTqJiMQ+ztWu0vS1aze4IWqmA=) 2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: 3aTTlSPj2J/ITob7KbwgiibXEggU37tFtraAdbBBnU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:d9:f8:ae:61:f4:ea:44:51:db:d8:2b:6b:02:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c Validity Not Before: Jan 26 20:00:37 2026 GMT Not After : Jan 27 20:00:37 2026 GMT Subject: CN=3accadbaff73a4875f58fec706887ce25d125ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:fa:5f:be:b2:e8:9c:1d:d1:1b:b1:84:3d: 64:5f:89:a3:54:86:1a:4c:62:6a:e6:19:94:b4:74: 24:59:98:e7:88:46:4f:cf:5a:b6:d2:34:3c:50:88: fa:57:56:c0:b9:30:32:51:76:15:08:8e:f9:bf:b2: 93:c0:96:e1:81:ee:30:84:26:a9:11:be:f5:f7:f8: b5:c6:e8:9a:d4:cd:71:b7:63:d2:c1:68:55:3d:a4: 3e:28:0e:c4:4e:68:e3:ed:62:16:27:08:de:79:39: 3c:da:16:c4:53:c5:fb:e6:56:fe:80:9e:8e:fa:29: fc:85:fb:23:64:8c:db:5c:38:60:12:1c:17:c9:4c: b3:7e:84:ad:00:1c:80:97:cd:f4:61:c6:a7:8e:54: 7a:c0:9b:78:b0:62:3b:2a:48:c0:99:45:18:6f:8b: 2c:7f:66:3d:85:1f:0f:9b:23:bd:1e:86:42:19:d1: db:08:9c:df:54:51:6e:e1:ef:e2:2a:e1:01:e1:21: 4b:b7:49:37:fd:3e:be:ad:6a:08:45:07:77:f7:01: 29:be:45:9b:e9:dd:6c:0f:1b:1b:75:e3:03:36:9d: e2:b2:6a:73:b6:17:5b:6a:bf:a0:7b:12:b8:8d:03: 5a:43:28:b1:14:78:2f:42:57:26:be:1d:4f:ed:3c: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CC:AD:BA:FF:73:A4:87:5F:58:FE:C7:06:88:7C:E2:5D:12:5E:C0 X509v3 Authority Key Identifier: keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b2:46:2d:e9:81:e9:b1:0d:a9:9a:4f:2e:14:06:34:9d:a1: 69:3a:a6:ee:eb:d5:90:38:85:24:70:8a:77:77:97:c5:d2:cc: 14:6e:06:08:5b:7a:d5:d3:f3:6d:05:93:76:04:ff:66:17:30: 33:17:bd:c5:1e:35:c0:8f:c6:d1:4d:6f:a1:f2:c7:f3:c0:a1: d6:c1:04:6b:97:10:93:91:64:3a:7d:75:4f:e7:94:8d:0f:e2: b8:31:4c:ca:a8:8d:5c:88:86:8b:dd:fa:12:6e:1b:70:43:c5: b9:ba:a9:e8:8e:a5:b9:a1:3a:8c:6a:7b:4d:60:3e:38:90:e5: 39:79:4a:d4:7e:27:5e:e5:df:93:47:f1:98:26:07:a5:b9:2a: 6e:98:a8:23:e7:cf:71:df:a9:02:61:3a:86:7a:7a:05:ac:60: bd:a9:42:ce:87:37:49:3c:0b:d7:c8:31:e0:b7:3c:a0:71:10: 7b:1a:cc:bb:ec:2b:67:3a:21:26:06:b3:5c:42:5a:83:ff:75: f2:17:ed:17:ad:1f:3e:e6:ef:8a:c6:97:69:48:13:52:c1:06: 61:70:52:1a:5e:4e:ba:9e:bb:17:a5:0c:ea:77:95:70:e6:be: 93:36:1c:ba:bc:b5:bf:23:ff:b1:88:8b:5d:ba:31:ed:c4:76: 89:1e:b8:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75Nn4rmH06kRR29grawK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OGU1OTQzYzM1NWQ0OGMwMDRlNmJmNGEzYjZjZGI4YzMw YWRjNGMwHhcNMjYwMTI2MjAwMDM3WhcNMjYwMTI3MjAwMDM3WjAzMTEwLwYDVQQD EygzYWNjYWRiYWZmNzNhNDg3NWY1OGZlYzcwNjg4N2NlMjVkMTI1ZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFj6X76y6Jwd0RuxhD1kX4mjVIYa TGJq5hmUtHQkWZjniEZPz1q20jQ8UIj6V1bAuTAyUXYVCI75v7KTwJbhge4whCap Eb719/i1xuia1M1xt2PSwWhVPaQ+KA7ETmjj7WIWJwjeeTk82hbEU8X75lb+gJ6O +in8hfsjZIzbXDhgEhwXyUyzfoStAByAl830YcanjlR6wJt4sGI7KkjAmUUYb4ss f2Y9hR8PmyO9HoZCGdHbCJzfVFFu4e/iKuEB4SFLt0k3/T6+rWoIRQd39wEpvkWb 6d1sDxsbdeMDNp3ismpzthdbar+gexK4jQNaQyixFHgvQlcmvh1P7TzPTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrMrbr/c6SHX1j+xwaIfOJdEl7AMB8GA1UdIwQY MBaAFKmOWUPDVdSMAE5r9KO2zbjDCtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAt M2M3NzNhNmM0MmY5LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAtM2M3NzNhNmM0MmY5 LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbJGLemB 6bENqZpPLhQGNJ2haTqm7uvVkDiFJHCKd3eXxdLMFG4GCFt61dPzbQWTdgT/Zhcw Mxe9xR41wI/G0U1vofLH88Ch1sEEa5cQk5FkOn11T+eUjQ/iuDFMyqiNXIiGi936 Em4bcEPFubqp6I6luaE6jGp7TWA+OJDlOXlK1H4nXuXfk0fxmCYHpbkqbpioI+fP cd+pAmE6hnp6BaxgvalCzoc3STwL18gx4Lc8oHEQexrMu+wrZzohJgazXEJag/91 8hftF60fPubvisaXaUgTUsEGYXBSGl5Oup67F6UM6neVcOa+kzYcury1vyP/sYiL Xbox7cR2iR64FA== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:42 2026 by rpki-client