This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json) Hash identifier: 7Ju46X1SXn0XsJuIFJRYaQ7mSVW3fuaZ8cJXkGgJqpA= Subject key identifier: BD:F0:27:0A:DE:C5:59:AA:DD:EC:FB:2B:D6:5F:8C:62:64:B2:A4:84 Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a Certificate serial: 019C0D84768922AE6A5424526D9DDFF75BD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft Manifest number: 0244 Signing time: Fri 30 Jan 2026 06:08:30 +0000 Manifest this update: Fri 30 Jan 2026 06:08:30 +0000 Manifest next update: Sat 31 Jan 2026 06:08:30 +0000 Files and hashes: 1: A5iuXW_cORbsvixFXow7PusXUbs.roa (hash: +5gLj6Wt4ZaNqfSC+m0HrIiKPOrW2+yDa66ixdPJ/8M=) 2: ih8GcxAhVwfWwQlPUzpQuVOLe-c.roa (hash: 3wfNubXgjKJ1/TUZb+D2ubigUZwrjebFGAnwYbZd+Zg=) 3: kovNbi9k6C5VS9TsNsh4WwyJcj4.roa (hash: wfzyhy6lTcFvyZ3aO38IsSFTP7CeDM/2TXk86k8bbkg=) 4: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: xK7qesimHFXXSeNT4LQvsVMA8p3xs4hSaqtnLuyEZlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0d:84:76:89:22:ae:6a:54:24:52:6d:9d:df:f7:5b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a Validity Not Before: Jan 30 06:08:30 2026 GMT Not After : Jan 31 06:08:30 2026 GMT Subject: CN=bdf0270adec559aaddecfb2bd65f8c6264b2a484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:0b:bc:6b:2d:b3:a2:d0:54:30:e0:43:f1: 04:10:fc:ca:8f:a8:b3:66:25:08:3b:4b:eb:10:08: 02:01:bd:ee:63:a6:2c:00:6a:ba:7e:57:ae:fc:10: 95:54:af:1e:c3:1b:08:24:c5:7d:cf:fb:52:65:01: 79:fc:41:04:ce:0b:71:b6:b1:6b:c1:54:fb:13:46: 5d:27:b5:0e:d6:14:e7:f6:50:bd:37:a8:17:4f:af: 6c:48:a3:a3:b7:ba:23:b7:e4:c5:73:9a:44:37:5d: 35:3b:c5:44:fe:1a:94:95:68:6d:e5:b4:3d:73:a1: 96:85:c7:ac:45:d8:bf:1c:e7:e4:46:3d:76:d4:96: 50:fb:11:53:48:df:99:83:51:ab:1d:a7:9c:45:05: 6e:46:36:67:df:cd:12:d7:e5:b5:60:f9:22:89:9a: d4:34:88:21:9c:48:94:bf:84:0d:83:c6:f7:18:97: b7:46:89:19:94:04:ec:f4:69:ae:2a:bc:83:3c:5c: ef:fd:95:06:33:c8:0b:b0:64:1f:f7:cd:87:08:36: 89:16:15:d9:01:4f:ed:c8:f9:95:0d:a8:fa:64:80: f3:ee:c9:4d:7f:de:01:e4:df:91:b5:10:82:5f:0b: 25:f8:8c:8f:5d:54:d9:c1:c1:5b:e5:55:f0:c7:30: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F0:27:0A:DE:C5:59:AA:DD:EC:FB:2B:D6:5F:8C:62:64:B2:A4:84 X509v3 Authority Key Identifier: keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:70:2f:6c:72:54:32:d2:99:24:f4:c6:43:ba:27:64:f2:9e: 93:dd:36:b0:de:36:83:fa:67:d4:cd:8f:59:0e:44:6a:88:f2: 61:aa:a2:08:a5:d7:62:34:ce:a8:4a:c1:93:b6:b1:03:39:1c: 95:0b:e7:87:35:c6:a1:b5:59:ad:e1:65:62:28:59:3b:bd:6c: 3e:18:02:b7:09:63:f5:70:e8:64:72:a1:60:c8:dd:9a:7d:2d: 0f:c7:19:7d:75:77:c5:a0:84:f9:cf:97:db:73:2a:92:11:0e: ab:09:29:40:b1:c2:4f:a7:52:b7:be:ce:c0:25:dc:3c:30:77: 3c:bf:d3:5d:09:c7:fc:4a:09:96:49:e7:b3:10:59:64:da:96: 28:6e:aa:5b:fa:9d:10:39:77:6c:50:12:bd:05:8b:eb:89:2e: d4:07:10:81:2c:59:83:25:2c:19:ea:eb:7f:3d:d8:b5:8e:c0: 84:48:66:98:5f:bd:67:92:25:7a:22:40:56:49:4d:8f:f1:d5: 14:56:ca:4c:75:9b:40:40:b8:11:4f:5b:d7:f4:c2:7c:0f:2a: 55:7f:90:57:6f:5a:50:49:1d:2c:b9:2b:91:c5:97:05:2e:cf: 13:34:f9:9e:d2:4d:72:24:7b:62:23:6a:fb:dd:84:3f:78:a5: 88:d3:2a:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwNhHaJIq5qVCRSbZ3f91vQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTIxMjk1OGQ4ZTFiYWExNDRhODJhODIxZjkzYTg5MGRj YmE0OWEwHhcNMjYwMTMwMDYwODMwWhcNMjYwMTMxMDYwODMwWjAzMTEwLwYDVQQD EyhiZGYwMjcwYWRlYzU1OWFhZGRlY2ZiMmJkNjVmOGM2MjY0YjJhNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD4LvGsts6LQVDDgQ/EEEPzKj6iz ZiUIO0vrEAgCAb3uY6YsAGq6fleu/BCVVK8ewxsIJMV9z/tSZQF5/EEEzgtxtrFr wVT7E0ZdJ7UO1hTn9lC9N6gXT69sSKOjt7ojt+TFc5pEN101O8VE/hqUlWht5bQ9 c6GWhcesRdi/HOfkRj121JZQ+xFTSN+Zg1GrHaecRQVuRjZn380S1+W1YPkiiZrU NIghnEiUv4QNg8b3GJe3RokZlATs9GmuKryDPFzv/ZUGM8gLsGQf982HCDaJFhXZ AU/tyPmVDaj6ZIDz7slNf94B5N+RtRCCXwsl+IyPXVTZwcFb5VXwxzBGKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3wJwrexVmq3ez7K9ZfjGJksqSEMB8GA1UdIwQY MBaAFKpSEpWNjhuqFEqCqCH5OokNy6SaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYt YjQwMWE0YTA0NDkyLzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYtYjQwMWE0YTA0NDky LzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXAvbHJU MtKZJPTGQ7onZPKek902sN42g/pn1M2PWQ5EaojyYaqiCKXXYjTOqErBk7axAzkc lQvnhzXGobVZreFlYihZO71sPhgCtwlj9XDoZHKhYMjdmn0tD8cZfXV3xaCE+c+X 23MqkhEOqwkpQLHCT6dSt77OwCXcPDB3PL/TXQnH/EoJlknnsxBZZNqWKG6qW/qd EDl3bFASvQWL64ku1AcQgSxZgyUsGerrfz3YtY7AhEhmmF+9Z5IleiJAVklNj/HV FFbKTHWbQEC4EU9b1/TCfA8qVX+QV29aUEkdLLkrkcWXBS7PEzT5ntJNciR7YiNq +92EP3iliNMqeA== -----END CERTIFICATE-----Generated at Fri Jan 30 14:12:18 2026 by rpki-client