This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json) Hash identifier: 0P+dG/wcDwemoyV+KbOJ4+SJeMFX0BNZBx8Ezq6wsNo= Subject key identifier: BA:20:2E:1A:B1:03:CC:D4:CF:3C:8F:46:1D:5E:79:DD:5C:AB:BD:12 Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9 Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9 Certificate serial: 019BFE0A0E5EC559F73EB8B740246F60D712 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft Manifest number: 1721 Signing time: Tue 27 Jan 2026 06:00:30 +0000 Manifest this update: Tue 27 Jan 2026 06:00:30 +0000 Manifest next update: Wed 28 Jan 2026 06:00:30 +0000 Files and hashes: 1: CitPrvEbL3mSkhY-h3ajKHpia-8.roa (hash: /+PG4/PPRJ0jxjBwjO3qbLw0M09UhMzUiGb+7CaKzGg=) 2: lcN_yuHnbi5WtHDyrC1WEMjdtHs.roa (hash: ik5LzxvVAt9iL2/7h4zp/cur7V0L47uoz6AFvyo0fRE=) 3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: wYWGWo4txlViA0AuGoDEfy8pHLJ9FptFUujDhioab60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:0e:5e:c5:59:f7:3e:b8:b7:40:24:6f:60:d7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9 Validity Not Before: Jan 27 06:00:30 2026 GMT Not After : Jan 28 06:00:30 2026 GMT Subject: CN=ba202e1ab103ccd4cf3c8f461d5e79dd5cabbd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:16:04:3e:27:15:55:c7:d4:b8:8f:ca:6c:9a: 0b:a5:fb:55:92:42:99:cc:40:53:b3:4a:fd:cb:ae: c2:c0:29:07:5d:c9:ec:52:fa:fd:8f:77:ce:95:70: 55:6d:8c:a7:42:5c:34:2f:41:2f:78:52:75:d0:91: 80:7c:86:e4:88:f7:7b:3c:c7:ef:79:c7:2f:93:7d: d0:05:9a:cc:e3:8a:b1:19:26:24:65:f9:f8:98:01: 56:0a:8c:b5:ab:31:17:9f:4a:03:45:66:79:2d:fe: 1b:f7:24:f7:07:70:e2:2b:22:95:86:81:1d:f0:1c: d2:63:51:42:c7:dd:77:03:f1:36:05:b3:87:ae:63: bc:a4:5e:69:47:2e:3e:d3:2a:da:80:f7:74:1a:74: c8:12:a3:ea:5d:26:1f:e4:d3:35:c4:ec:b9:ce:10: ab:2e:79:37:25:2a:a8:19:b8:76:32:f3:ca:25:15: c9:f5:05:ad:84:fb:11:20:cd:e3:d9:34:52:80:31: 9e:9d:3f:b7:66:98:65:05:6b:ad:f5:2e:a6:f1:d3: 24:9d:ce:41:0b:8b:86:a5:79:0c:d0:7e:71:10:e1: 2c:e1:15:7e:f3:76:3d:48:a3:cd:b2:55:90:91:5b: c3:95:a6:10:3b:dc:9e:b0:2e:e8:75:d8:6c:da:1b: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:20:2E:1A:B1:03:CC:D4:CF:3C:8F:46:1D:5E:79:DD:5C:AB:BD:12 X509v3 Authority Key Identifier: keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:38:27:02:e0:92:9d:0a:48:89:0f:a3:d2:34:6d:bc:f6:04: 45:7f:01:96:6c:ec:89:b9:7b:76:de:0f:65:2d:ff:91:81:6c: b7:ef:77:f4:dc:89:78:57:15:fa:28:0a:fd:11:28:cb:06:63: 13:61:8a:8e:24:6b:74:7b:e5:5f:3e:08:6b:67:b9:02:c0:2c: 9b:3b:86:59:17:cf:2c:da:22:73:15:27:d3:ca:be:07:bb:66: b7:d7:c7:a7:40:bd:9f:ea:5e:00:42:dc:03:16:ef:08:bb:5b: e7:0b:f8:3f:37:61:03:72:99:33:54:0b:70:72:f4:b6:45:77: a0:0f:fa:de:ee:3b:dc:de:c2:87:b8:41:5c:d5:0e:72:9f:f0: a7:f0:34:0a:46:6e:d2:aa:6d:20:d6:20:7b:92:2d:1e:fa:d5: 1a:c9:c9:d5:6b:00:1c:60:07:2b:1e:c8:56:fc:c4:f4:eb:78: 57:e0:01:96:b9:7f:a0:ba:05:19:d2:e7:d9:1f:78:be:43:09: f3:ef:f1:41:6f:36:ba:b9:98:15:83:51:46:16:ae:8d:1e:cc: 81:ae:8b:d7:f9:5a:68:48:0a:37:7b:4d:09:df:bd:22:27:62: e0:52:19:91:b8:0e:ca:f8:c8:3f:4a:3e:fb:44:e3:08:c9:c2: bc:f6:5d:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+Cg5exVn3Pri3QCRvYNcSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmZiOWIzNDE4YzQ1OGNkYmM2Y2ZkNjg0NTE0YmUyNGFk MGMzYzkwHhcNMjYwMTI3MDYwMDMwWhcNMjYwMTI4MDYwMDMwWjAzMTEwLwYDVQQD EyhiYTIwMmUxYWIxMDNjY2Q0Y2YzYzhmNDYxZDVlNzlkZDVjYWJiZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BYEPicVVcfUuI/KbJoLpftVkkKZ zEBTs0r9y67CwCkHXcnsUvr9j3fOlXBVbYynQlw0L0EveFJ10JGAfIbkiPd7PMfv eccvk33QBZrM44qxGSYkZfn4mAFWCoy1qzEXn0oDRWZ5Lf4b9yT3B3DiKyKVhoEd 8BzSY1FCx913A/E2BbOHrmO8pF5pRy4+0yragPd0GnTIEqPqXSYf5NM1xOy5zhCr Lnk3JSqoGbh2MvPKJRXJ9QWthPsRIM3j2TRSgDGenT+3ZphlBWut9S6m8dMknc5B C4uGpXkM0H5xEOEs4RV+83Y9SKPNslWQkVvDlaYQO9yesC7oddhs2hurPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLogLhqxA8zUzzyPRh1eed1cq70SMB8GA1UdIwQY MBaAFKgvubNBjEWM28bP1oRRS+JK0MPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgt YjI2MzQxZDM4YzNmLzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgtYjI2MzQxZDM4YzNm LzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTgnAuCS nQpIiQ+j0jRtvPYERX8Blmzsibl7dt4PZS3/kYFst+939NyJeFcV+igK/REoywZj E2GKjiRrdHvlXz4Ia2e5AsAsmzuGWRfPLNoicxUn08q+B7tmt9fHp0C9n+peAELc AxbvCLtb5wv4PzdhA3KZM1QLcHL0tkV3oA/63u473N7Ch7hBXNUOcp/wp/A0CkZu 0qptINYge5ItHvrVGsnJ1WsAHGAHKx7IVvzE9Ot4V+ABlrl/oLoFGdLn2R94vkMJ 8+/xQW82urmYFYNRRhaujR7Mga6L1/laaEgKN3tNCd+9Iidi4FIZkbgOyvjIP0o+ +0TjCMnCvPZdpg== -----END CERTIFICATE-----Generated at Tue Jan 27 11:53:01 2026 by rpki-client