This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json) Hash identifier: oEr/I2HJj/FtwsL/a9HPmzqu7HumG+OSoe40qqNsrWk= Subject key identifier: 9B:30:A3:FF:31:E2:B2:50:96:01:26:08:06:6E:6E:FE:90:A7:AA:C8 Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb Certificate serial: 019C1FF16DBD23EB75388E3682CB5FE11BCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft Manifest number: 06C7 Signing time: Mon 02 Feb 2026 20:00:41 +0000 Manifest this update: Mon 02 Feb 2026 20:00:41 +0000 Manifest next update: Tue 03 Feb 2026 20:00:41 +0000 Files and hashes: 1: UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa (hash: oiMnmWGgvSnOjT8fp4+LrkyK7pAMt/y+JFMAU+BQTbc=) 2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: V/3gx9bq1oU0wEkNDnpY1mugsFq+DSQ34B9V1FqpM68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:f1:6d:bd:23:eb:75:38:8e:36:82:cb:5f:e1:1b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb Validity Not Before: Feb 2 20:00:41 2026 GMT Not After : Feb 3 20:00:41 2026 GMT Subject: CN=9b30a3ff31e2b25096012608066e6efe90a7aac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:aa:46:a8:b6:14:30:f0:a1:06:74:1b:9b: e3:fa:d3:22:6b:38:f6:93:5a:34:7f:a5:28:86:a2: eb:a9:94:93:95:26:d3:d6:36:36:eb:d9:a8:f9:d8: 0f:4f:e0:34:79:5c:cd:e7:a4:d2:ef:72:f7:3a:bc: f5:18:6e:b0:7b:a7:5e:f3:cd:8b:a5:4d:e2:87:ec: 1a:b4:01:82:61:c7:b9:6d:61:10:96:c4:b3:7f:13: 5b:81:12:6d:3f:c0:cb:d5:cb:12:87:47:50:fa:24: 0f:d6:9e:ce:04:c4:c5:c6:d4:b0:7e:05:51:fe:ed: e2:f8:01:71:8b:5b:da:0a:cb:3a:86:da:50:1e:29: f3:a8:64:28:b3:b4:ed:74:49:40:30:4a:de:f0:1b: 29:36:35:1e:b4:88:29:b7:28:5f:d9:90:61:a4:0f: ba:a6:b1:15:d4:8f:3e:c7:c7:4f:40:ea:33:07:e8: e0:ba:77:cb:18:f0:f8:1f:76:f2:2d:5e:eb:3d:94: f2:ea:c0:0f:4a:d8:16:9a:b5:41:ec:fe:b8:1a:53: e9:cc:00:dd:55:71:f5:d8:2f:84:63:19:62:a0:2c: 20:44:07:0f:1e:bc:a2:aa:d1:69:a3:d6:3c:72:87: 85:32:41:6f:9a:ab:bd:bd:14:77:9e:a2:83:f4:73: 88:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:30:A3:FF:31:E2:B2:50:96:01:26:08:06:6E:6E:FE:90:A7:AA:C8 X509v3 Authority Key Identifier: keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:9c:27:d9:3c:0c:73:b8:96:45:4c:c7:77:01:56:a4:06:69: d4:83:5b:ff:d3:ff:05:a6:5f:80:c5:98:5d:1c:46:a0:c8:31: b5:40:3a:0b:ed:a3:c7:55:7f:43:02:1f:92:e6:90:56:7d:83: b7:7b:ef:d6:69:b5:3b:20:d6:10:95:97:89:17:92:88:d9:17: e0:79:13:b6:a5:82:d4:e8:83:50:67:36:7d:4f:a5:21:8b:5b: ed:6e:af:f2:8c:cb:66:ed:ce:a7:cf:fb:1d:81:0c:39:2f:75: 6b:6f:7f:f4:f5:19:f9:62:6e:54:de:79:a0:a2:6b:82:42:0c: b9:db:68:da:97:03:fe:95:c0:e7:f2:64:75:c6:33:ff:a8:33: df:36:8e:82:15:d1:b5:d2:d8:5b:2a:28:21:2f:02:7c:ec:74: b9:74:84:2b:03:54:81:9f:29:74:4c:15:f5:d3:48:64:9d:ea: 87:39:5a:e9:12:5b:33:8a:ed:b3:c9:8d:5f:6e:d0:09:c6:cf: 37:18:31:9b:95:00:ad:a8:19:ee:00:6d:01:cd:06:0b:3d:76: e0:63:db:1e:9c:e5:92:44:6b:c5:bb:f1:32:1e:62:a2:e4:5d: 4a:57:33:5c:81:b8:be:25:30:77:e4:e2:f2:e1:d9:3f:a0:8e: f9:f5:18:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwf8W29I+t1OI42gstf4RvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMGJkNzhjYTJjYWE1ZWI4ZmYzYjllODIzNzc0ZGMxYjc0 ZGViZWIwHhcNMjYwMjAyMjAwMDQxWhcNMjYwMjAzMjAwMDQxWjAzMTEwLwYDVQQD Eyg5YjMwYTNmZjMxZTJiMjUwOTYwMTI2MDgwNjZlNmVmZTkwYTdhYWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxSqRqi2FDDwoQZ0G5vj+tMiazj2 k1o0f6UohqLrqZSTlSbT1jY269mo+dgPT+A0eVzN56TS73L3Orz1GG6we6de882L pU3ih+watAGCYce5bWEQlsSzfxNbgRJtP8DL1csSh0dQ+iQP1p7OBMTFxtSwfgVR /u3i+AFxi1vaCss6htpQHinzqGQos7TtdElAMEre8BspNjUetIgptyhf2ZBhpA+6 prEV1I8+x8dPQOozB+jgunfLGPD4H3byLV7rPZTy6sAPStgWmrVB7P64GlPpzADd VXH12C+EYxlioCwgRAcPHryiqtFpo9Y8coeFMkFvmqu9vRR3nqKD9HOIxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJswo/8x4rJQlgEmCAZubv6Qp6rIMB8GA1UdIwQY MBaAFKoL14yiyqXrj/O56CN3TcG3TevrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85Nzg4MzctMTAyMy00YjM5LTliMzct YTEwOGRiZTBmZDFmLzEvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85Nzg4MzctMTAyMy00YjM5LTliMzctYTEwOGRiZTBmZDFm LzEvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJwn2TwM c7iWRUzHdwFWpAZp1INb/9P/BaZfgMWYXRxGoMgxtUA6C+2jx1V/QwIfkuaQVn2D t3vv1mm1OyDWEJWXiReSiNkX4HkTtqWC1OiDUGc2fU+lIYtb7W6v8ozLZu3Op8/7 HYEMOS91a29/9PUZ+WJuVN55oKJrgkIMudto2pcD/pXA5/JkdcYz/6gz3zaOghXR tdLYWyooIS8CfOx0uXSEKwNUgZ8pdEwV9dNIZJ3qhzla6RJbM4rts8mNX27QCcbP Nxgxm5UAragZ7gBtAc0GCz124GPbHpzlkkRrxbvxMh5iouRdSlczXIG4viUwd+Ti 8uHZP6CO+fUYnA== -----END CERTIFICATE-----Generated at Tue Feb 3 00:23:22 2026 by rpki-client