This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json) Hash identifier: oG0fH1i63zxWGoZbtqXTSpijae8QAgh8ka9DNEDCtOc= Subject key identifier: 95:AF:3E:E4:8F:4E:2E:F6:3E:09:7E:8F:FE:C4:71:E0:3B:E3:FF:2C Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b Certificate serial: 019BFC534D34D448BCA65C162BD123C664C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft Manifest number: 08AC Signing time: Mon 26 Jan 2026 22:01:16 +0000 Manifest this update: Mon 26 Jan 2026 22:01:16 +0000 Manifest next update: Tue 27 Jan 2026 22:01:16 +0000 Files and hashes: 1: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (hash: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk=) 2: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: WDPqOQoqLLTa68JzzQIkG1hVKko+mV2UVY9UgTr+uio=) 3: qfQMZchAHhAyOdl3mXgzwUrpBxY.roa (hash: vASEQLm08dVrfRq1NJLaLRqWtgEMXK7lP6xVfGKmCRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:4d:34:d4:48:bc:a6:5c:16:2b:d1:23:c6:64:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b Validity Not Before: Jan 26 22:01:16 2026 GMT Not After : Jan 27 22:01:16 2026 GMT Subject: CN=95af3ee48f4e2ef63e097e8ffec471e03be3ff2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:cb:9e:a0:ce:61:2b:16:87:d0:dc:af:7b: 18:f6:08:50:47:0a:c1:d5:e4:6d:c5:ed:8c:a2:7b: 5a:07:fb:4d:47:18:38:35:6a:df:93:5f:df:87:70: cf:75:66:42:b0:52:9b:31:4c:22:08:7c:78:23:d6: 04:c4:7c:d3:d3:7b:72:eb:40:5c:6d:e6:93:20:01: 47:6b:89:77:26:b3:58:01:8e:bf:e6:61:6a:84:1c: d1:ef:1f:71:79:3d:81:27:86:5d:fa:12:8b:9d:90: 34:12:1e:ed:82:8c:2c:78:36:80:0e:35:c1:40:3f: 7b:26:61:f0:1f:82:86:63:78:00:c2:b1:8e:48:1e: 71:f2:ad:26:80:7c:3f:60:38:44:4c:ff:c2:45:f2: f4:4e:77:45:28:98:15:26:cd:03:eb:75:ee:af:21: 55:de:53:5f:78:b3:07:df:00:64:67:f7:63:90:8b: 3d:62:86:e3:4e:de:c9:50:65:08:19:3c:1c:cb:47: de:90:01:35:ae:5d:5f:57:64:83:87:18:89:24:e4: 2e:19:af:cd:c1:1d:65:d0:1a:91:59:17:95:68:6c: ae:a5:7e:2f:32:69:95:c5:34:b1:49:1f:2d:bd:a7: e4:74:30:88:67:40:53:82:03:66:0d:56:14:8b:43: ac:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AF:3E:E4:8F:4E:2E:F6:3E:09:7E:8F:FE:C4:71:E0:3B:E3:FF:2C X509v3 Authority Key Identifier: keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:cf:88:14:0c:b2:fe:58:60:b4:1a:65:25:19:fc:1e:b1:49: ff:71:df:bb:2d:c9:7a:f2:2d:39:e8:f5:48:d0:ae:59:cf:78: 97:9a:d9:16:ab:d8:de:f5:28:1b:22:9c:9f:bd:f3:05:98:fe: c1:7e:17:93:5d:4c:16:91:ac:e1:ec:a8:2a:f0:a8:c0:9e:4a: 24:3c:92:fa:33:7d:d4:92:51:ac:03:96:73:64:5c:f5:29:84: e9:51:15:04:b3:f0:a6:5f:7c:52:66:48:20:14:a1:99:e9:15: 09:49:01:ba:25:81:f6:54:86:2a:8e:59:03:47:ae:6f:d0:f1: 28:bf:21:91:7d:b4:13:8c:24:f3:c4:58:a1:f2:03:8a:53:7a: 9b:88:65:f2:f7:6a:2c:b5:42:01:2f:06:ed:30:64:27:dd:da: 9c:3a:3b:b5:14:1a:7f:10:08:8a:09:96:aa:18:33:bf:66:1c: ba:15:6c:a4:34:0e:6a:89:8a:8b:03:e1:5e:6e:bb:73:e0:a2: aa:2b:20:16:93:b2:39:a2:04:b2:93:1a:59:9c:e6:82:5f:fb: 56:d7:bc:88:42:f2:d1:1d:14:73:b7:48:bd:8e:bb:27:31:28: 30:b7:96:c3:fd:8e:9c:43:c8:ad:e4:a7:cf:2a:30:e4:98:2d: 56:99:87:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8U0001Ei8plwWK9EjxmTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj MTE2M2IwHhcNMjYwMTI2MjIwMTE2WhcNMjYwMTI3MjIwMTE2WjAzMTEwLwYDVQQD Eyg5NWFmM2VlNDhmNGUyZWY2M2UwOTdlOGZmZWM0NzFlMDNiZTNmZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvonLnqDOYSsWh9Dcr3sY9ghQRwrB 1eRtxe2MontaB/tNRxg4NWrfk1/fh3DPdWZCsFKbMUwiCHx4I9YExHzT03ty60Bc beaTIAFHa4l3JrNYAY6/5mFqhBzR7x9xeT2BJ4Zd+hKLnZA0Eh7tgowseDaADjXB QD97JmHwH4KGY3gAwrGOSB5x8q0mgHw/YDhETP/CRfL0TndFKJgVJs0D63XuryFV 3lNfeLMH3wBkZ/djkIs9YobjTt7JUGUIGTwcy0fekAE1rl1fV2SDhxiJJOQuGa/N wR1l0BqRWReVaGyupX4vMmmVxTSxSR8tvafkdDCIZ0BTggNmDVYUi0OsAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWvPuSPTi72Pgl+j/7EceA74/8sMB8GA1UdIwQY MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt N2JlYmJiNzBjMDUwLzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGM+IFAyy /lhgtBplJRn8HrFJ/3Hfuy3JevItOej1SNCuWc94l5rZFqvY3vUoGyKcn73zBZj+ wX4Xk11MFpGs4eyoKvCowJ5KJDyS+jN91JJRrAOWc2Rc9SmE6VEVBLPwpl98UmZI IBShmekVCUkBuiWB9lSGKo5ZA0eub9DxKL8hkX20E4wk88RYofIDilN6m4hl8vdq LLVCAS8G7TBkJ93anDo7tRQafxAIigmWqhgzv2YcuhVspDQOaomKiwPhXm67c+Ci qisgFpOyOaIEspMaWZzmgl/7Vte8iELy0R0Uc7dIvY67JzEoMLeWw/2OnEPIreSn zyow5JgtVpmHXQ== -----END CERTIFICATE-----Generated at Tue Jan 27 02:52:24 2026 by rpki-client