This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json) Hash identifier: S2tMCgn/OULygApG1G29luue9Guu9ijwUgGSlDZMTQ4= Subject key identifier: 8A:86:D5:7E:20:7B:20:B8:62:F2:BB:75:06:06:E9:2F:34:C9:D6:A6 Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a Certificate serial: 019C1DCCC34CB2510B2C8EF5E1BE21A0B06E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft Manifest number: 17FE Signing time: Mon 02 Feb 2026 10:01:24 +0000 Manifest this update: Mon 02 Feb 2026 10:01:24 +0000 Manifest next update: Tue 03 Feb 2026 10:01:24 +0000 Files and hashes: 1: ml7gG0A_mVQfOFzP3FHFwuQkr2A.roa (hash: wWznWI3pS+Ln2wiCRlmdeHQDHSW6bkqR14q4qqXsCjc=) 2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: kLLNyA0YcN2MWpfQTf460jAWB5Y/sjAcH0G8kt6Ytlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:cc:c3:4c:b2:51:0b:2c:8e:f5:e1:be:21:a0:b0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a Validity Not Before: Feb 2 10:01:24 2026 GMT Not After : Feb 3 10:01:24 2026 GMT Subject: CN=8a86d57e207b20b862f2bb750606e92f34c9d6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:41:6d:70:83:a2:3f:0a:50:6d:96:b3:71: a0:32:ff:7c:ba:3f:8b:03:3b:41:e0:89:53:6e:eb: fd:b6:ae:a3:bb:35:b1:51:20:ad:e8:5c:ba:63:74: 17:99:71:6b:cc:bf:59:b8:66:5e:53:64:48:42:3f: e4:9a:20:e7:10:b9:dc:ca:c6:f3:ef:ce:f9:7a:b4: 29:02:47:fb:d4:4b:5d:d9:9f:bc:95:55:70:b8:70: d4:a1:98:a9:66:7b:74:6f:ad:69:a8:7c:73:e4:4f: fc:9f:25:d9:bf:09:f6:87:df:83:8d:7f:00:59:57: a1:3b:53:a1:62:d1:42:34:95:ca:28:ee:e7:f0:2b: c0:60:cd:55:b6:b3:2d:0a:c8:d2:f4:ec:9d:84:10: d6:fa:27:ed:84:65:b9:18:31:67:46:93:f0:56:fc: ed:03:b2:0a:85:b2:e7:98:77:8e:30:fe:32:2c:1b: 2a:61:39:d6:af:2d:8c:c8:a9:52:ce:aa:8e:3c:07: 41:6f:6b:24:21:b3:5f:fa:d2:5a:7c:f3:47:df:9e: 53:92:71:5b:92:75:1b:81:d2:6a:19:4a:ab:9a:7e: f1:d4:c5:c6:46:59:7e:a5:d0:67:86:65:52:ae:40: 1e:06:95:ff:13:47:1d:20:4e:91:4e:40:9f:50:b1: 2f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:86:D5:7E:20:7B:20:B8:62:F2:BB:75:06:06:E9:2F:34:C9:D6:A6 X509v3 Authority Key Identifier: keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1d:01:18:63:ba:10:83:29:fa:1c:c3:1b:7d:a3:ac:6f:0b: f3:bb:97:ef:ce:cf:58:26:78:dd:bf:b0:43:95:b2:e5:85:45: f0:78:1a:dd:3c:b1:cd:a0:b0:b1:bc:4f:99:60:77:6d:a1:86: 39:dd:82:49:b5:87:89:1d:7f:62:3b:3d:ca:3b:59:18:f6:6b: 40:c3:d5:fc:82:13:52:68:57:fc:c9:78:9a:09:65:3d:0e:38: 9e:88:f5:cc:bd:5f:4b:85:4d:d6:2a:40:87:31:d5:3c:73:9c: f7:a5:a4:d9:c8:72:29:34:07:d1:52:f3:80:9c:85:c4:48:ac: 1b:86:66:38:fa:20:3c:9a:70:b9:7c:21:11:ab:07:c1:bd:cb: b1:ee:5a:df:46:54:8c:de:7e:b2:28:5b:d0:43:7e:d0:f6:46: 8c:59:89:ae:43:f1:79:86:08:49:32:48:52:7f:b5:44:91:76: 6f:29:57:2f:ff:74:8a:ff:0a:20:38:4e:8d:d9:57:0c:20:c2: b1:ce:c9:90:0a:2e:c8:42:54:99:68:38:56:74:80:f8:2f:b8: 14:5f:3e:b5:88:00:68:06:df:a4:17:95:94:43:bf:69:b6:f1: ba:66:4b:6d:bb:94:41:ea:76:fe:d2:94:e0:9c:2c:be:70:db: ab:94:4c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdzMNMslELLI714b4hoLBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWNmZDE1NzQ0MWY2OTQyOGRkMWY2MzYxY2E0ZjRhZTQy Y2IzOGEwHhcNMjYwMjAyMTAwMTI0WhcNMjYwMjAzMTAwMTI0WjAzMTEwLwYDVQQD Eyg4YTg2ZDU3ZTIwN2IyMGI4NjJmMmJiNzUwNjA2ZTkyZjM0YzlkNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWJBbXCDoj8KUG2Ws3GgMv98uj+L AztB4IlTbuv9tq6juzWxUSCt6Fy6Y3QXmXFrzL9ZuGZeU2RIQj/kmiDnELncysbz 7875erQpAkf71Etd2Z+8lVVwuHDUoZipZnt0b61pqHxz5E/8nyXZvwn2h9+DjX8A WVehO1OhYtFCNJXKKO7n8CvAYM1VtrMtCsjS9OydhBDW+ifthGW5GDFnRpPwVvzt A7IKhbLnmHeOMP4yLBsqYTnWry2MyKlSzqqOPAdBb2skIbNf+tJafPNH355TknFb knUbgdJqGUqrmn7x1MXGRll+pdBnhmVSrkAeBpX/E0cdIE6RTkCfULEvQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqG1X4geyC4YvK7dQYG6S80ydamMB8GA1UdIwQY MBaAFKuc/RV0QfaUKN0fY2HKT0rkLLOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUt OTU0ZjI2OTEzZjQzLzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUtOTU0ZjI2OTEzZjQz LzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiR0BGGO6 EIMp+hzDG32jrG8L87uX787PWCZ43b+wQ5Wy5YVF8Hga3TyxzaCwsbxPmWB3baGG Od2CSbWHiR1/Yjs9yjtZGPZrQMPV/IITUmhX/Ml4mgllPQ44noj1zL1fS4VN1ipA hzHVPHOc96Wk2chyKTQH0VLzgJyFxEisG4ZmOPogPJpwuXwhEasHwb3Lse5a30ZU jN5+sihb0EN+0PZGjFmJrkPxeYYISTJIUn+1RJF2bylXL/90iv8KIDhOjdlXDCDC sc7JkAouyEJUmWg4VnSA+C+4FF8+tYgAaAbfpBeVlEO/abbxumZLbbuUQep2/tKU 4JwsvnDbq5RMRw== -----END CERTIFICATE-----Generated at Mon Feb 2 15:48:36 2026 by rpki-client