This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json) Hash identifier: NApwXECljA6GDK5UTdxhh7XBzd9lphl9fKOu/vlagdA= Subject key identifier: 63:09:55:24:51:8F:11:04:8B:C7:03:B2:65:74:2F:D7:54:1A:02:77 Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e Certificate serial: 019BD57E1E62961823CBD38C6B4A21AAEFA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft Manifest number: 01A5 Signing time: Mon 19 Jan 2026 09:02:50 +0000 Manifest this update: Mon 19 Jan 2026 09:02:50 +0000 Manifest next update: Tue 20 Jan 2026 09:02:50 +0000 Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=) 2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: 4OoEsBd3X22hqOqlHuHB0+XqgdvI8upwY55K3awAvYo=) 3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:7e:1e:62:96:18:23:cb:d3:8c:6b:4a:21:aa:ef:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e Validity Not Before: Jan 19 09:02:50 2026 GMT Not After : Jan 20 09:02:50 2026 GMT Subject: CN=63095524518f11048bc703b265742fd7541a0277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:b3:ef:c2:5e:f3:71:62:0a:73:8e:a4:99: 99:fb:a0:5b:22:3f:db:5c:87:5c:ac:b0:37:45:d5: 9f:00:7c:3c:ce:d2:3a:98:48:43:b5:e0:74:3c:da: 65:12:19:7f:f1:ee:12:a3:b3:b5:99:b1:91:84:a2: 2b:a2:be:bf:c6:b4:c0:63:5e:56:b4:76:84:1b:8a: ec:09:de:3b:59:af:98:3a:7b:60:64:84:0d:a4:10: 28:57:3f:18:a5:e5:73:67:59:c6:33:ea:eb:81:74: 8e:5a:bc:8b:a3:f2:b5:fe:f6:cb:aa:67:10:3c:b2: 5b:2d:ec:27:00:69:d2:b8:40:3a:bf:5b:24:33:7b: 21:5f:23:db:72:9c:60:6c:2c:94:a9:b0:f4:89:cd: 61:ff:fa:64:d3:cb:30:da:08:f8:22:a1:f8:87:a6: 36:34:a8:31:b1:d4:9b:9a:85:e0:0b:55:6b:d3:ab: 72:54:1b:54:0c:b2:ed:90:ff:a0:85:d4:91:30:4a: e7:9a:23:f2:67:89:21:7b:35:b5:ff:2c:d7:55:05: 0d:54:3b:29:ed:83:8e:64:a2:f6:b6:cf:f2:73:57: 5e:39:7e:c8:3b:2d:c8:88:a0:14:76:23:c1:22:64: 36:2c:f0:e9:e9:ef:99:25:1b:48:b1:c3:26:a1:7a: 42:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:09:55:24:51:8F:11:04:8B:C7:03:B2:65:74:2F:D7:54:1A:02:77 X509v3 Authority Key Identifier: keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:0c:8c:a2:83:55:76:76:2a:b8:d7:f8:8d:26:50:5a:b0:4e: 1d:9e:e6:46:98:5d:57:ff:85:55:81:ab:ad:29:16:86:b6:ca: f3:3f:54:56:74:b8:15:bd:8c:f7:42:96:79:77:dc:fb:96:f8: 02:8f:36:d9:bc:36:f4:cc:64:9e:5c:52:4c:da:a6:d3:13:de: de:d8:e0:81:54:5a:d2:81:40:d0:d6:43:18:88:c0:4d:a5:3a: a2:1a:32:cf:97:c5:d3:32:a5:9d:ad:a3:b6:b2:8c:72:fd:6c: f9:59:fa:be:fe:d7:5e:5d:e1:e4:67:b6:10:37:04:79:74:5f: e2:2c:fd:9d:ec:d5:12:c0:40:3a:4b:b2:73:71:28:70:86:f2: ae:dc:29:47:c0:60:11:fd:c7:32:d4:0c:73:3c:ad:06:01:3e: a2:68:29:ab:38:df:52:d4:98:36:ae:1e:aa:a1:b4:52:d6:26: 02:b1:93:63:fb:0a:c5:1e:31:87:9c:f9:61:a5:c7:8c:81:6c: 50:ab:0d:f6:63:ec:b1:70:a2:b5:dd:a8:04:6a:9f:24:31:87: 54:7e:0f:94:f0:1b:dc:f9:ba:19:a8:d6:4c:e2:db:31:e0:37: a8:e3:70:b0:f2:ff:22:0e:73:2b:d4:b7:bb:35:4d:d2:e4:11: b8:f4:28:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvVfh5ilhgjy9OMa0ohqu+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MjQ2Yjg4YjgyOWI0YTNhYWRjMjgwZGExNDViNjNlOTll OTJhMGUwHhcNMjYwMTE5MDkwMjUwWhcNMjYwMTIwMDkwMjUwWjAzMTEwLwYDVQQD Eyg2MzA5NTUyNDUxOGYxMTA0OGJjNzAzYjI2NTc0MmZkNzU0MWEwMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Oz78Je83FiCnOOpJmZ+6BbIj/b XIdcrLA3RdWfAHw8ztI6mEhDteB0PNplEhl/8e4So7O1mbGRhKIror6/xrTAY15W tHaEG4rsCd47Wa+YOntgZIQNpBAoVz8YpeVzZ1nGM+rrgXSOWryLo/K1/vbLqmcQ PLJbLewnAGnSuEA6v1skM3shXyPbcpxgbCyUqbD0ic1h//pk08sw2gj4IqH4h6Y2 NKgxsdSbmoXgC1Vr06tyVBtUDLLtkP+ghdSRMErnmiPyZ4khezW1/yzXVQUNVDsp 7YOOZKL2ts/yc1deOX7IOy3IiKAUdiPBImQ2LPDp6e+ZJRtIscMmoXpCVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMJVSRRjxEEi8cDsmV0L9dUGgJ3MB8GA1UdIwQY MBaAFKgka4i4KbSjqtwoDaFFtj6Z6SoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hMzZmYjItZTYwZC00ZjhiLTljOGEt NDkwYzg4MzAxZmNlLzEvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hMzZmYjItZTYwZC00ZjhiLTljOGEtNDkwYzg4MzAxZmNl LzEvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQyMooNV dnYquNf4jSZQWrBOHZ7mRphdV/+FVYGrrSkWhrbK8z9UVnS4Fb2M90KWeXfc+5b4 Ao822bw29MxknlxSTNqm0xPe3tjggVRa0oFA0NZDGIjATaU6ohoyz5fF0zKlna2j trKMcv1s+Vn6vv7XXl3h5Ge2EDcEeXRf4iz9nezVEsBAOkuyc3EocIbyrtwpR8Bg Ef3HMtQMczytBgE+omgpqzjfUtSYNq4eqqG0UtYmArGTY/sKxR4xh5z5YaXHjIFs UKsN9mPssXCitd2oBGqfJDGHVH4PlPAb3Pm6GajWTOLbMeA3qONwsPL/Ig5zK9S3 uzVN0uQRuPQonw== -----END CERTIFICATE-----Generated at Mon Jan 19 18:28:56 2026 by rpki-client