This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json) Hash identifier: TyUjSJfsBGOjTgW2flrpl2UmOlH8RO7kjwbZaFd8OZs= Subject key identifier: 62:54:33:F2:D9:53:A2:DB:A6:AA:91:19:44:FA:A2:46:FE:56:A0:63 Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4 Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4 Certificate serial: 019BFB77421F0C24FBBEB0BC4382F2F21E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft Manifest number: 0642 Signing time: Mon 26 Jan 2026 18:00:55 +0000 Manifest this update: Mon 26 Jan 2026 18:00:55 +0000 Manifest next update: Tue 27 Jan 2026 18:00:55 +0000 Files and hashes: 1: Ayy3FQCZfsnrrkGpwiilXLbjkWM.roa (hash: esgmCzM37dMW6UxbTfw9yQ8cfp/xjD2YDV7D5NJMYIE=) 2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: krohI7pnyN35CQla7KAy8doFw2FR5tz7LvGUmM8F2io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:42:1f:0c:24:fb:be:b0:bc:43:82:f2:f2:1e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4 Validity Not Before: Jan 26 18:00:55 2026 GMT Not After : Jan 27 18:00:55 2026 GMT Subject: CN=625433f2d953a2dba6aa911944faa246fe56a063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:87:d0:b8:17:9a:8a:90:68:71:f6:18:7e: 63:06:30:97:2f:b1:d0:f9:e0:b1:df:2a:b8:b0:38: dd:6c:bf:91:a1:08:d7:53:21:ab:c6:98:d2:ff:70: c5:91:45:22:1b:96:db:e0:ab:04:2b:b6:48:1d:a0: c7:40:98:8e:1b:46:25:fd:3e:8c:3a:f4:bf:18:bd: cd:62:02:ef:e2:b6:87:a0:ca:44:d9:67:4e:cb:78: 1f:7b:76:6d:3d:6a:f8:d2:ea:f9:a6:39:63:84:76: 30:93:ab:43:bf:cc:a4:5e:b7:0b:8b:3b:00:a8:56: 2f:f8:98:6d:0b:48:10:3c:c1:9e:26:62:08:8f:41: 3c:c5:ac:a7:fb:7b:bd:28:53:67:23:0b:a1:07:9d: 9a:48:61:36:ee:06:df:cf:4a:6f:c6:5b:8a:fe:73: dd:a4:df:3d:ad:02:33:10:5e:0f:88:7c:2e:29:38: a7:c3:5c:9b:98:b0:c9:40:ea:98:a6:ed:10:49:58: 57:5c:43:be:3d:42:97:66:a3:20:0d:a2:43:23:5b: c1:a4:02:17:49:e7:30:0a:e7:5c:b7:36:bd:e3:75: 21:b2:c0:14:29:91:20:a5:49:f9:9b:88:93:5e:75: 08:e2:0e:af:25:a6:76:a5:24:3e:44:cb:59:25:fc: 60:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:54:33:F2:D9:53:A2:DB:A6:AA:91:19:44:FA:A2:46:FE:56:A0:63 X509v3 Authority Key Identifier: keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c1:42:28:b4:d2:38:ca:8b:0f:07:78:78:d3:83:02:1d:b7: 0e:f7:f1:11:b7:dc:74:f9:15:4b:fd:f6:fa:da:68:fd:a3:b1: ce:8b:cd:7a:7d:8f:0e:02:49:40:ec:95:88:64:60:97:11:26: 0c:42:fd:41:ec:08:de:f3:af:5a:51:86:95:ac:8b:2e:a9:e7: 96:cc:88:f4:a0:8a:7d:41:3a:e3:69:40:04:2d:3e:0e:1b:ac: 44:62:20:4d:ff:ad:c0:8d:41:6a:41:2e:ec:6a:04:d6:5b:9c: 80:70:97:04:8a:73:01:9c:18:b8:b6:97:4d:49:77:9d:ae:bd: 69:41:ee:3d:b6:fb:7f:d6:51:98:20:77:c0:a6:82:95:53:1f: 81:ed:5b:33:ed:5e:e7:15:f5:39:1e:a4:9d:94:07:f9:26:b7: 0b:1a:0a:38:d6:33:92:f4:d3:a7:f3:a3:1d:4a:08:88:90:2c: 09:25:8c:16:e5:77:44:79:b9:fa:f6:40:12:2d:01:d5:08:7e: 48:19:df:ee:00:70:11:c5:ec:3c:b6:c4:89:f8:68:a0:d9:22: 8a:79:b0:37:a8:7a:c6:1b:f7:09:7e:61:b3:e8:12:96:fe:97: 47:e5:6b:08:30:25:8d:f5:34:87:91:e4:7c:b5:0c:d5:04:a5: f5:ac:f6:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d0IfDCT7vrC8Q4Ly8h4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MGUyOGYyZTUwOWZlMzdhYzVjMzQwMWEwYThjMTEwMjli NjIxZTQwHhcNMjYwMTI2MTgwMDU1WhcNMjYwMTI3MTgwMDU1WjAzMTEwLwYDVQQD Eyg2MjU0MzNmMmQ5NTNhMmRiYTZhYTkxMTk0NGZhYTI0NmZlNTZhMDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmWH0LgXmoqQaHH2GH5jBjCXL7HQ +eCx3yq4sDjdbL+RoQjXUyGrxpjS/3DFkUUiG5bb4KsEK7ZIHaDHQJiOG0Yl/T6M OvS/GL3NYgLv4raHoMpE2WdOy3gfe3ZtPWr40ur5pjljhHYwk6tDv8ykXrcLizsA qFYv+JhtC0gQPMGeJmIIj0E8xayn+3u9KFNnIwuhB52aSGE27gbfz0pvxluK/nPd pN89rQIzEF4PiHwuKTinw1ybmLDJQOqYpu0QSVhXXEO+PUKXZqMgDaJDI1vBpAIX SecwCudctza943UhssAUKZEgpUn5m4iTXnUI4g6vJaZ2pSQ+RMtZJfxgyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJUM/LZU6LbpqqRGUT6okb+VqBjMB8GA1UdIwQY MBaAFKkOKPLlCf43rFw0AaCowRAptiHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEt YTAwM2JmZGY0ZTQ1LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEtYTAwM2JmZGY0ZTQ1 LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsFCKLTS OMqLDwd4eNODAh23DvfxEbfcdPkVS/32+tpo/aOxzovNen2PDgJJQOyViGRglxEm DEL9QewI3vOvWlGGlayLLqnnlsyI9KCKfUE642lABC0+DhusRGIgTf+twI1BakEu 7GoE1lucgHCXBIpzAZwYuLaXTUl3na69aUHuPbb7f9ZRmCB3wKaClVMfge1bM+1e 5xX1OR6knZQH+Sa3CxoKONYzkvTTp/OjHUoIiJAsCSWMFuV3RHm5+vZAEi0B1Qh+ SBnf7gBwEcXsPLbEifhooNkiinmwN6h6xhv3CX5hs+gSlv6XR+VrCDAljfU0h5Hk fLUM1QSl9az2DA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:56 2026 by rpki-client