This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json) Hash identifier: Ep0D/HcGIYe2tUZEad1SvUNJWgF9WZ6W1TyimiRf2Do= Subject key identifier: 2C:24:7D:8D:F1:81:3B:DD:A0:AF:F1:E1:B5:B4:F3:38:A6:55:F5:E1 Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Certificate serial: 019BE0DB6BB9136D0A83CF919CC4697E6028 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft Manifest number: 0D46 Signing time: Wed 21 Jan 2026 14:00:34 +0000 Manifest this update: Wed 21 Jan 2026 14:00:34 +0000 Manifest next update: Thu 22 Jan 2026 14:00:34 +0000 Files and hashes: 1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=) 2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=) 3: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=) 4: b9NKUp5ebbUGbJkTuNTrmgi1fuc.roa (hash: AyGNKQTPsYrYHZ1HAXTaHMHz0cT3+QNKk6bga2VEm6U=) 5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=) 6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: ZCVVe5zBonT1Tz/TeoTAltFO1JqXWOWq6oAyvhmgTRo=) 7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:db:6b:b9:13:6d:0a:83:cf:91:9c:c4:69:7e:60:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Validity Not Before: Jan 21 14:00:34 2026 GMT Not After : Jan 22 14:00:34 2026 GMT Subject: CN=2c247d8df1813bdda0aff1e1b5b4f338a655f5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:90:31:3b:62:5e:0f:b0:4f:15:70:39:b4: 9a:10:19:b3:66:b7:9f:e8:c6:53:d5:05:db:b2:87: 7d:95:f5:38:24:13:9d:6f:9d:2b:b7:4b:68:de:ca: 2d:20:2d:64:7f:e6:4e:99:c8:e1:42:7b:c8:41:77: 0d:ed:95:43:ab:36:e4:1b:d2:f6:21:85:4a:13:7a: 30:be:f7:a9:95:2c:ff:17:02:ab:db:d6:51:a6:63: a1:d9:09:ab:5b:09:87:30:56:83:fa:f6:76:7c:b4: 38:ce:ed:40:d6:6d:63:df:b6:bf:f6:3a:1c:02:b3: 10:8c:5e:6e:96:70:8f:34:5a:4c:a5:4b:9f:18:b4: d0:b5:a4:b7:d0:6c:24:25:5f:de:46:14:61:27:b5: ea:2e:c0:ea:d0:22:09:b6:85:d9:32:a2:af:0d:66: f6:57:01:9d:9c:fa:b5:26:92:ec:de:8a:fb:59:b0: 2f:88:7c:81:fb:ea:6e:af:59:54:c7:c3:99:83:41: 60:54:6f:42:3d:10:11:2c:df:54:ba:a8:62:4a:1d: cb:30:06:ba:03:6b:73:01:85:ab:41:75:f0:97:c4: 32:9e:27:57:74:70:06:0f:26:ba:c1:3e:26:9b:19: 81:c6:3f:0b:f0:7e:dc:aa:93:6d:92:34:ce:c9:c6: cc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:24:7D:8D:F1:81:3B:DD:A0:AF:F1:E1:B5:B4:F3:38:A6:55:F5:E1 X509v3 Authority Key Identifier: keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4d:ab:02:9e:61:12:40:ba:85:47:79:2b:f0:84:ee:1e:5e: 81:76:cc:e1:85:fe:b7:00:c6:e3:4f:97:e0:aa:b4:e5:a9:43: 72:d2:ca:7d:a4:28:8e:28:89:bb:0b:00:c8:b0:4e:1b:d1:27: 75:8f:4d:12:4b:4d:97:37:0c:9a:e1:8c:3f:9f:e1:dd:0a:49: 31:d0:72:3f:40:9a:55:f0:ec:be:f8:5d:5d:e8:74:fd:7a:c1: 3c:34:0b:54:58:0d:be:64:08:4d:8d:a2:7c:02:86:ef:35:5b: 42:9b:c1:02:b2:71:db:04:ba:6c:8b:ae:07:26:d4:2a:a6:d5: 28:a7:1a:34:af:ca:68:c8:b2:36:4b:f3:20:7c:b1:92:6e:9c: ab:60:39:81:18:24:3c:0e:f0:82:12:c9:77:15:43:87:da:6b: ac:af:aa:83:c7:7e:0e:55:a7:cb:71:86:94:de:26:b8:d6:c0: ea:05:5a:f4:3d:50:93:15:a9:0e:95:8b:4d:69:c8:56:b0:a9: ab:d0:cc:a9:66:c8:70:bb:ad:05:99:c4:cb:31:29:6f:16:0e: da:ff:f8:5c:81:49:70:23:19:bc:c1:ff:57:73:01:f5:a2:2f: e1:5e:83:81:e2:57:c6:d3:22:97:0d:8c:32:8c:4f:6e:e5:29: 93:f4:12:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvg22u5E20Kg8+RnMRpfmAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz ZDUxZDcwHhcNMjYwMTIxMTQwMDM0WhcNMjYwMTIyMTQwMDM0WjAzMTEwLwYDVQQD EygyYzI0N2Q4ZGYxODEzYmRkYTBhZmYxZTFiNWI0ZjMzOGE2NTVmNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuouQMTtiXg+wTxVwObSaEBmzZref 6MZT1QXbsod9lfU4JBOdb50rt0to3sotIC1kf+ZOmcjhQnvIQXcN7ZVDqzbkG9L2 IYVKE3owvveplSz/FwKr29ZRpmOh2QmrWwmHMFaD+vZ2fLQ4zu1A1m1j37a/9joc ArMQjF5ulnCPNFpMpUufGLTQtaS30GwkJV/eRhRhJ7XqLsDq0CIJtoXZMqKvDWb2 VwGdnPq1JpLs3or7WbAviHyB++pur1lUx8OZg0FgVG9CPRARLN9UuqhiSh3LMAa6 A2tzAYWrQXXwl8QynidXdHAGDya6wT4mmxmBxj8L8H7cqpNtkjTOycbMFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwkfY3xgTvdoK/x4bW08zimVfXhMB8GA1UdIwQY MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt MmY1Yzc0YzY5YWUxLzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAME2rAp5h EkC6hUd5K/CE7h5egXbM4YX+twDG40+X4Kq05alDctLKfaQojiiJuwsAyLBOG9En dY9NEktNlzcMmuGMP5/h3QpJMdByP0CaVfDsvvhdXeh0/XrBPDQLVFgNvmQITY2i fAKG7zVbQpvBArJx2wS6bIuuBybUKqbVKKcaNK/KaMiyNkvzIHyxkm6cq2A5gRgk PA7wghLJdxVDh9prrK+qg8d+DlWny3GGlN4muNbA6gVa9D1QkxWpDpWLTWnIVrCp q9DMqWbIcLutBZnEyzEpbxYO2v/4XIFJcCMZvMH/V3MB9aIv4V6DgeJXxtMilw2M MoxPbuUpk/QS3A== -----END CERTIFICATE-----Generated at Wed Jan 21 23:40:18 2026 by rpki-client