This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json) Hash identifier: wSKodqbazhmmOrMEij3eHqPBo1qcshGOR30p6n9Yw2c= Subject key identifier: 4D:8A:9C:AE:0B:80:36:BE:DC:51:4C:4F:D9:C4:5B:19:2A:A7:8D:76 Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb Certificate serial: 019C1E034B883D07C3BA15F33039B6AB2D84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft Manifest number: 06C6 Signing time: Mon 02 Feb 2026 11:00:58 +0000 Manifest this update: Mon 02 Feb 2026 11:00:58 +0000 Manifest next update: Tue 03 Feb 2026 11:00:58 +0000 Files and hashes: 1: UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa (hash: oiMnmWGgvSnOjT8fp4+LrkyK7pAMt/y+JFMAU+BQTbc=) 2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: 1YaHYFsLuXP1yniuum+fBSvSSFn9+wsra4hhz1ecAJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:03:4b:88:3d:07:c3:ba:15:f3:30:39:b6:ab:2d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb Validity Not Before: Feb 2 11:00:58 2026 GMT Not After : Feb 3 11:00:58 2026 GMT Subject: CN=4d8a9cae0b8036bedc514c4fd9c45b192aa78d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:24:bd:5b:43:de:42:a0:86:d0:3c:c4:44: f7:e3:57:79:ba:20:d4:ac:65:bb:37:1a:5f:b9:51: 36:54:99:c8:7c:3c:b0:fd:bc:dd:6e:9c:73:1f:30: 30:04:c5:1d:3f:46:e8:66:97:d5:57:84:26:02:43: 26:5d:00:96:90:14:47:a7:35:54:16:d1:3c:98:b0: c1:58:77:e8:02:a8:e8:32:6b:85:94:19:31:b2:e7: bf:60:54:ef:da:27:de:d7:69:ef:ce:ad:5b:29:34: 3d:31:31:04:1a:e3:26:dd:65:2e:3b:a9:16:6b:7a: 75:a3:2a:f8:d0:dc:6d:ff:ba:e9:52:bb:3e:b3:69: e8:b0:3a:46:3e:3b:85:db:12:b6:f1:b1:a3:bc:e1: 29:c1:00:fe:ce:a6:d9:d1:bb:7a:ac:ad:37:36:25: f8:0e:8c:06:93:a3:6a:27:64:d6:c9:84:de:c0:dd: b3:4c:33:9c:2b:42:38:39:a7:9e:5b:d3:82:67:27: 4f:99:d9:7e:b9:07:7a:bf:0e:33:56:eb:4f:ba:7f: 9d:cb:4d:e6:e4:d8:97:3f:02:8a:35:2e:65:7b:d6: e7:02:ee:73:5e:ad:4d:55:5a:cc:3a:ba:c5:ed:f8: 39:39:02:b1:90:4d:53:9d:11:82:56:1f:1a:c1:83: 97:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8A:9C:AE:0B:80:36:BE:DC:51:4C:4F:D9:C4:5B:19:2A:A7:8D:76 X509v3 Authority Key Identifier: keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2d:e7:9d:28:5f:01:12:82:58:7a:99:c2:52:63:cd:9f:85: 1f:9a:e4:25:df:88:37:bc:bf:85:04:34:09:0d:ec:66:1b:95: 25:80:74:d8:bc:2e:e0:d9:a3:d1:59:b8:c4:0b:58:ac:c2:65: d1:69:7c:5f:3e:75:45:db:4e:fc:35:95:6c:73:e8:aa:51:4f: 1c:78:f3:d7:33:25:60:78:1d:4c:b1:38:43:2d:39:fb:70:5a: fe:90:c3:e5:b3:67:44:e2:49:5b:cb:62:54:e0:29:f8:43:01: 9e:39:af:72:55:a8:b7:9b:90:bf:d8:56:b8:b0:43:20:b6:5b: f0:e7:d0:ef:f4:3c:6d:e2:f9:e6:6d:4b:2c:80:d0:fd:85:78: 1f:29:58:be:ef:93:0e:b4:da:bc:38:e5:a1:29:85:cc:83:7d: 84:70:07:ee:e4:cc:15:70:ed:d5:61:be:da:31:0b:71:39:17: 17:ae:72:31:c0:9b:6e:9c:20:06:10:c2:76:9c:59:75:65:43: 92:93:29:24:cc:25:e7:8f:4c:32:ae:28:18:4d:53:ed:e2:7b: 17:a7:7b:a1:d9:17:b6:1d:a1:ee:69:11:67:76:fa:d3:db:fe: f9:1e:81:64:01:92:df:f1:de:79:f6:5a:65:d1:a3:8c:84:63: ec:83:fb:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweA0uIPQfDuhXzMDm2qy2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMGJkNzhjYTJjYWE1ZWI4ZmYzYjllODIzNzc0ZGMxYjc0 ZGViZWIwHhcNMjYwMjAyMTEwMDU4WhcNMjYwMjAzMTEwMDU4WjAzMTEwLwYDVQQD Eyg0ZDhhOWNhZTBiODAzNmJlZGM1MTRjNGZkOWM0NWIxOTJhYTc4ZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE0kvVtD3kKghtA8xET341d5uiDU rGW7NxpfuVE2VJnIfDyw/bzdbpxzHzAwBMUdP0boZpfVV4QmAkMmXQCWkBRHpzVU FtE8mLDBWHfoAqjoMmuFlBkxsue/YFTv2ife12nvzq1bKTQ9MTEEGuMm3WUuO6kW a3p1oyr40Nxt/7rpUrs+s2nosDpGPjuF2xK28bGjvOEpwQD+zqbZ0bt6rK03NiX4 DowGk6NqJ2TWyYTewN2zTDOcK0I4OaeeW9OCZydPmdl+uQd6vw4zVutPun+dy03m 5NiXPwKKNS5le9bnAu5zXq1NVVrMOrrF7fg5OQKxkE1TnRGCVh8awYOX2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2KnK4LgDa+3FFMT9nEWxkqp412MB8GA1UdIwQY MBaAFKoL14yiyqXrj/O56CN3TcG3TevrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85Nzg4MzctMTAyMy00YjM5LTliMzct YTEwOGRiZTBmZDFmLzEvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85Nzg4MzctMTAyMy00YjM5LTliMzctYTEwOGRiZTBmZDFm LzEvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFy3nnShf ARKCWHqZwlJjzZ+FH5rkJd+IN7y/hQQ0CQ3sZhuVJYB02Lwu4Nmj0Vm4xAtYrMJl 0Wl8Xz51RdtO/DWVbHPoqlFPHHjz1zMlYHgdTLE4Qy05+3Ba/pDD5bNnROJJW8ti VOAp+EMBnjmvclWot5uQv9hWuLBDILZb8OfQ7/Q8beL55m1LLIDQ/YV4HylYvu+T DrTavDjloSmFzIN9hHAH7uTMFXDt1WG+2jELcTkXF65yMcCbbpwgBhDCdpxZdWVD kpMpJMwl549MMq4oGE1T7eJ7F6d7odkXth2h7mkRZ3b609v++R6BZAGS3/HeefZa ZdGjjIRj7IP7dA== -----END CERTIFICATE-----Generated at Mon Feb 2 20:55:26 2026 by rpki-client