This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json) Hash identifier: gM3snbMt2DfcrKrecVazpQZmc7VTjHF2EB2NO8iVGmU= Subject key identifier: 02:21:AD:47:52:3F:74:67:26:7B:5E:81:9A:A2:75:66:40:83:E4:9E Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0 Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0 Certificate serial: 019BDE128265EC4EB18CD00D4D391840012F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft Manifest number: 0C1B Signing time: Wed 21 Jan 2026 01:01:53 +0000 Manifest this update: Wed 21 Jan 2026 01:01:53 +0000 Manifest next update: Thu 22 Jan 2026 01:01:53 +0000 Files and hashes: 1: 0UTNnPCaSBRChjd-4paFJAa8mvY.roa (hash: kU7KErkztorzfF4UTYyKtoYDyMlrOJjwkRRJcXS9JCM=) 2: 3XFseKD5P1HWKROwFzTd36OyHbE.roa (hash: BIeVIxGIOa2ePH8XQOOYNOlUDe/lxUqOSdtUmx3XDZE=) 3: 9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa (hash: uExdYX2548cfGCpmCeNErn/kV2y3p/D6bqfR/PH26F0=) 4: eBB5lvjqAnBclLcWqTOlF_8lA7s.roa (hash: AOzQfZTfdGMYeAqIt8a663Hmw+/xidNofnCq2r4ivkQ=) 5: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: D2DBHAakfsK8C44W1VMFOKbjVCFO8wsIaewOFDwvDII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:12:82:65:ec:4e:b1:8c:d0:0d:4d:39:18:40:01:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0 Validity Not Before: Jan 21 01:01:53 2026 GMT Not After : Jan 22 01:01:53 2026 GMT Subject: CN=0221ad47523f7467267b5e819aa275664083e49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6f:8a:7d:b3:26:6c:5e:22:1a:92:e9:c7:26: 3a:01:7b:16:4b:fc:85:30:09:35:57:45:a2:f3:eb: 4d:8b:71:2b:80:96:22:1d:ae:4d:73:9f:72:57:92: 57:74:0c:2d:63:1b:85:94:52:72:26:8b:03:a1:2d: a2:0b:b4:b4:60:45:06:33:9c:2e:22:20:8c:70:a3: 10:e2:e7:55:c8:bc:14:ac:79:ad:1b:4f:4b:a5:3f: 1d:75:52:a0:28:15:53:05:06:55:fa:f8:eb:9e:fb: b7:fb:52:06:4b:01:49:e0:4c:66:a7:d9:af:cc:64: 9f:d4:c9:7f:e7:ba:4f:57:f1:a2:f8:81:f9:cf:26: 9c:d5:2c:48:d6:1e:2a:7a:d0:5d:08:ef:e6:37:77: f6:9c:27:22:2d:09:29:d3:13:77:58:a8:9d:5e:f0: 14:2b:4c:95:04:6c:51:23:d2:10:98:d4:7c:9d:53: aa:7e:f0:ec:05:6c:33:f6:2d:28:62:1e:8a:bc:97: 2b:04:19:5e:da:ba:a3:b0:76:f8:0c:e9:de:de:84: ee:1a:34:c7:f0:77:d6:92:4e:72:cd:ae:b4:03:f8: fc:2f:89:fb:8d:ac:8e:61:29:64:28:91:77:8c:02: 7a:b5:8b:94:73:e4:1a:af:10:ac:4e:ee:75:26:31: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:21:AD:47:52:3F:74:67:26:7B:5E:81:9A:A2:75:66:40:83:E4:9E X509v3 Authority Key Identifier: keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:0b:f6:18:6c:ff:56:fc:bb:62:3a:de:00:96:a9:d2:55:af: c9:74:00:fd:c2:03:b2:4f:58:2a:d8:85:8f:40:c4:73:8a:d4: 5d:3b:c5:3f:a2:01:f1:85:1c:bf:aa:b0:f4:ee:fc:da:86:da: eb:bb:41:6f:30:7a:1e:9a:73:cc:5e:44:d5:e0:e4:48:2e:21: 2e:6e:8d:9e:86:e3:a6:66:36:3a:c8:b4:5f:60:f2:9f:2a:b5: 37:26:29:15:92:ec:b8:bf:76:e0:e8:58:3f:e2:55:81:a1:52: 3d:bd:5b:25:0e:20:51:2d:80:d1:de:e1:82:08:a3:25:41:f2: 7f:44:97:51:98:fe:13:d1:99:5a:bf:c2:59:b4:f5:d6:16:f1: 20:11:3f:65:97:ff:c0:4b:a1:3d:b7:5b:11:02:7a:10:03:07: a6:37:c7:6c:89:8f:c7:aa:7b:77:9a:f3:e8:fe:f6:df:26:67: 2c:85:7c:86:6e:4f:2d:5d:9b:51:0d:db:9b:ec:59:8a:d5:5d: d4:1f:03:5b:5e:a2:ef:d7:fd:37:88:79:5c:59:59:2c:08:da: 5f:00:d4:19:a7:7a:01:f6:da:2f:22:3f:98:cb:2d:4b:e8:2d: c0:9e:00:1a:70:dd:9e:66:3d:b6:1f:93:94:58:2c:46:b5:df: 80:0c:1c:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZveEoJl7E6xjNANTTkYQAEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhY2U2NzI1YTBhMGRkZDE2ODA0ODBhODM3ODVkMmNkNTdi ZjZhYjAwHhcNMjYwMTIxMDEwMTUzWhcNMjYwMTIyMDEwMTUzWjAzMTEwLwYDVQQD EygwMjIxYWQ0NzUyM2Y3NDY3MjY3YjVlODE5YWEyNzU2NjQwODNlNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m+KfbMmbF4iGpLpxyY6AXsWS/yF MAk1V0Wi8+tNi3ErgJYiHa5Nc59yV5JXdAwtYxuFlFJyJosDoS2iC7S0YEUGM5wu IiCMcKMQ4udVyLwUrHmtG09LpT8ddVKgKBVTBQZV+vjrnvu3+1IGSwFJ4Exmp9mv zGSf1Ml/57pPV/Gi+IH5zyac1SxI1h4qetBdCO/mN3f2nCciLQkp0xN3WKidXvAU K0yVBGxRI9IQmNR8nVOqfvDsBWwz9i0oYh6KvJcrBBle2rqjsHb4DOne3oTuGjTH 8HfWkk5yza60A/j8L4n7jayOYSlkKJF3jAJ6tYuUc+QarxCsTu51JjFvWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIhrUdSP3RnJntegZqidWZAg+SeMB8GA1UdIwQY MBaAFKrOZyWgoN3RaASAqDeF0s1Xv2qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTkt NzJhMDgyY2RiMTgyLzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTktNzJhMDgyY2RiMTgy LzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgv2GGz/ Vvy7YjreAJap0lWvyXQA/cIDsk9YKtiFj0DEc4rUXTvFP6IB8YUcv6qw9O782oba 67tBbzB6HppzzF5E1eDkSC4hLm6NnobjpmY2Osi0X2Dynyq1NyYpFZLsuL924OhY P+JVgaFSPb1bJQ4gUS2A0d7hggijJUHyf0SXUZj+E9GZWr/CWbT11hbxIBE/ZZf/ wEuhPbdbEQJ6EAMHpjfHbImPx6p7d5rz6P723yZnLIV8hm5PLV2bUQ3bm+xZitVd 1B8DW16i79f9N4h5XFlZLAjaXwDUGad6AfbaLyI/mMstS+gtwJ4AGnDdnmY9th+T lFgsRrXfgAwcGg== -----END CERTIFICATE-----Generated at Wed Jan 21 06:17:59 2026 by rpki-client