This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft File: qn2enOi8XayPr4gW2aCgqGHbioU.mft (raw, json) Hash identifier: W4Sv8y4vaAwVWEbjg0h+f5bfQOt58t3lXU2wwUJ7FSI= Subject key identifier: 24:0B:F9:8F:3F:92:EC:E9:3D:B5:8D:63:33:83:55:0C:18:98:33:E7 Authority key identifier: AA:7D:9E:9C:E8:BC:5D:AC:8F:AF:88:16:D9:A0:A0:A8:61:DB:8A:85 Certificate issuer: /CN=aa7d9e9ce8bc5dac8faf8816d9a0a0a861db8a85 Certificate serial: 019C1C14B7EADE2023C2089CB73BC0891302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qn2enOi8XayPr4gW2aCgqGHbioU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft Manifest number: 59 Signing time: Mon 02 Feb 2026 02:00:45 +0000 Manifest this update: Mon 02 Feb 2026 02:00:45 +0000 Manifest next update: Tue 03 Feb 2026 02:00:45 +0000 Files and hashes: 1: OvPEVe_g0HPTbX2kaynw_Z6o3Pg.asa (hash: 5ulFTi8KO5d3SHzr+nQc7b2zIT0hBb21FVmP8ETMn+M=) 2: qn2enOi8XayPr4gW2aCgqGHbioU.crl (hash: erugAF7IEx87oYy05hL/Jj48cmzQmZiXMQ9MWpgcNnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft rsync://rpki.ripe.net/repository/DEFAULT/qn2enOi8XayPr4gW2aCgqGHbioU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:14:b7:ea:de:20:23:c2:08:9c:b7:3b:c0:89:13:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7d9e9ce8bc5dac8faf8816d9a0a0a861db8a85 Validity Not Before: Feb 2 02:00:45 2026 GMT Not After : Feb 3 02:00:45 2026 GMT Subject: CN=240bf98f3f92ece93db58d633383550c189833e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:98:f9:8d:8d:28:d9:e6:f9:4a:84:5d:ab:5d: 68:1d:14:b0:34:9d:2e:49:8b:f1:6f:8d:7c:33:7e: 57:c7:81:ba:a8:da:01:80:28:5f:e0:4a:78:65:37: ec:9c:3c:03:5a:f4:e9:1b:e3:69:87:c8:8d:ed:43: b9:f1:e8:ad:f6:72:e1:fe:f6:8e:7a:3d:08:14:1d: 86:14:26:49:76:bc:b8:83:11:19:09:19:b0:7f:69: e2:6e:3a:99:5e:f6:da:e1:c0:a8:0d:9d:01:ce:56: 6e:34:af:cd:5b:4a:1a:a8:92:df:96:61:2c:bf:89: fd:25:f0:a8:0e:1f:fb:a4:8d:f6:64:82:a2:cc:56: b3:d5:99:64:61:6a:c4:eb:09:99:f4:1d:72:6e:1c: 07:8f:75:cc:af:d3:35:9e:b9:92:4e:07:1e:b0:01: b5:a3:a4:ee:a6:de:b3:13:b9:41:76:0b:a4:50:8f: 3e:ef:f0:2c:51:9e:88:18:30:5e:4d:7b:3f:19:36: e3:42:ce:65:a9:75:0d:0b:db:c4:b4:96:fb:3b:07: a6:ea:cb:5b:45:63:80:55:f9:da:9b:cc:bb:6d:2d: 39:ef:b1:b7:74:ad:5d:40:d2:8f:b9:6b:d8:bd:9f: 1e:8b:6d:e3:b6:b2:76:94:7f:a3:55:55:7d:01:b5: 0e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0B:F9:8F:3F:92:EC:E9:3D:B5:8D:63:33:83:55:0C:18:98:33:E7 X509v3 Authority Key Identifier: keyid:AA:7D:9E:9C:E8:BC:5D:AC:8F:AF:88:16:D9:A0:A0:A8:61:DB:8A:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qn2enOi8XayPr4gW2aCgqGHbioU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:42:76:d0:06:a6:bd:5e:8e:9f:b7:38:f3:ce:e5:8c:72:d4: 64:2b:6e:8b:c4:da:d4:8c:eb:e4:ec:9c:04:ae:01:35:07:ce: ba:b2:e5:b3:bb:38:e3:91:70:83:39:20:7c:38:b7:1b:f8:bc: 01:ac:6b:71:40:5b:28:7e:de:28:9b:24:13:51:14:5a:1f:42: c4:d3:c0:84:17:e6:b6:a4:27:91:15:b5:7e:2a:b7:7a:d8:aa: 7a:bf:bf:ff:19:b8:55:19:20:12:9b:9e:94:c6:00:29:11:67: af:eb:47:d8:2b:e8:f1:9b:6a:5f:40:65:4b:02:3d:43:60:4b: c3:78:5a:46:93:24:f9:ba:d8:d8:5c:a3:7a:9e:79:5a:96:ae: 61:55:2b:b0:f1:ce:ef:5a:19:28:d7:6e:5b:76:10:c8:08:1c: 53:05:f1:7a:8a:0d:1d:1c:bc:16:c0:a8:56:47:14:f3:02:e3: ca:e2:17:7c:cd:4a:a4:49:bd:2a:3c:68:b8:54:fe:44:e0:e1: 89:4f:8c:1f:46:cb:23:92:c4:c2:6b:d9:b4:f8:73:3d:df:f7: 09:42:61:b2:de:50:48:03:79:23:b4:56:c4:8e:e6:c7:da:ad: 7a:93:4e:03:c1:f1:82:c8:25:0b:01:6a:55:7c:09:72:b7:5e: ca:02:cb:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFLfq3iAjwgictzvAiRMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2Q5ZTljZThiYzVkYWM4ZmFmODgxNmQ5YTBhMGE4NjFk YjhhODUwHhcNMjYwMjAyMDIwMDQ1WhcNMjYwMjAzMDIwMDQ1WjAzMTEwLwYDVQQD EygyNDBiZjk4ZjNmOTJlY2U5M2RiNThkNjMzMzgzNTUwYzE4OTgzM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJj5jY0o2eb5SoRdq11oHRSwNJ0u SYvxb418M35Xx4G6qNoBgChf4Ep4ZTfsnDwDWvTpG+Nph8iN7UO58eit9nLh/vaO ej0IFB2GFCZJdry4gxEZCRmwf2nibjqZXvba4cCoDZ0BzlZuNK/NW0oaqJLflmEs v4n9JfCoDh/7pI32ZIKizFaz1ZlkYWrE6wmZ9B1ybhwHj3XMr9M1nrmSTgcesAG1 o6Tupt6zE7lBdgukUI8+7/AsUZ6IGDBeTXs/GTbjQs5lqXUNC9vEtJb7Owem6stb RWOAVfnam8y7bS0577G3dK1dQNKPuWvYvZ8ei23jtrJ2lH+jVVV9AbUOnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQL+Y8/kuzpPbWNYzODVQwYmDPnMB8GA1UdIwQY MBaAFKp9npzovF2sj6+IFtmgoKhh24qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW4yZW5PaThYYXlQcjRnVzJhQ2dxR0hiaW9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMjhkNWItNjliMS00NzUyLTk5Y2It NTU0YTgxYzkwNzExLzEvcW4yZW5PaThYYXlQcjRnVzJhQ2dxR0hiaW9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lMjhkNWItNjliMS00NzUyLTk5Y2ItNTU0YTgxYzkwNzEx LzEvcW4yZW5PaThYYXlQcjRnVzJhQ2dxR0hiaW9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUJ20Aam vV6On7c4887ljHLUZCtui8Ta1Izr5OycBK4BNQfOurLls7s445FwgzkgfDi3G/i8 AaxrcUBbKH7eKJskE1EUWh9CxNPAhBfmtqQnkRW1fiq3etiqer+//xm4VRkgEpue lMYAKRFnr+tH2Cvo8ZtqX0BlSwI9Q2BLw3haRpMk+brY2Fyjep55WpauYVUrsPHO 71oZKNduW3YQyAgcUwXxeooNHRy8FsCoVkcU8wLjyuIXfM1KpEm9KjxouFT+RODh iU+MH0bLI5LEwmvZtPhzPd/3CUJhst5QSAN5I7RWxI7mx9qtepNOA8HxgsglCwFq VXwJcrdeygLL8w== -----END CERTIFICATE-----Generated at Mon Feb 2 08:08:20 2026 by rpki-client