This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json) Hash identifier: hVue4btldqcvrBVDgVYMPnpT91HALUd3niK20JHGHoE= Subject key identifier: 07:A0:69:53:80:78:C4:B8:EA:0B:FD:50:4F:26:78:ED:76:68:1C:88 Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1 Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1 Certificate serial: 019BFBAED1C7DE997C2E35335518D752F825 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft Manifest number: 02A0 Signing time: Mon 26 Jan 2026 19:01:36 +0000 Manifest this update: Mon 26 Jan 2026 19:01:36 +0000 Manifest next update: Tue 27 Jan 2026 19:01:36 +0000 Files and hashes: 1: LzYZHC-rjJGbruYM23VscVWulpM.roa (hash: sBrrJnoeM0fqyubYgpN8QGXQIytqFwMQbpd5rGJx9Ns=) 2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: lsfXGpAVsHCf8AYZ4sP4ZZoFd853bJSxzOWRNQuHPxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:d1:c7:de:99:7c:2e:35:33:55:18:d7:52:f8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1 Validity Not Before: Jan 26 19:01:36 2026 GMT Not After : Jan 27 19:01:36 2026 GMT Subject: CN=07a069538078c4b8ea0bfd504f2678ed76681c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:21:ce:f1:6f:e2:c7:c8:0e:14:2d:30:5f:75: 9f:73:6a:0a:85:ee:c7:00:81:26:5b:42:1b:1d:65: 42:c2:df:dd:45:5f:58:cd:d6:d1:52:31:3f:eb:b3: 3c:3b:9d:4a:12:48:68:da:0d:d9:bf:cd:21:f5:22: 8e:ed:a6:4b:ca:28:8a:f8:92:43:9f:a7:89:77:f8: 45:c9:26:eb:f8:f6:62:40:7c:47:72:09:ed:22:82: be:b4:c7:83:2d:ce:57:77:78:97:21:63:65:10:ef: 3a:27:d9:87:da:e2:e5:e6:6b:88:0e:60:1e:88:34: 6a:8b:12:4f:fa:93:05:27:10:a6:8b:3a:8f:67:9e: 5e:b6:23:c1:b2:38:bf:19:b9:19:6a:04:e1:a2:9e: 78:c6:a7:7f:ab:dd:ce:cb:d6:78:57:7a:9a:f7:c8: 07:0c:bd:a1:0e:46:99:33:63:ee:c4:6f:10:db:f5: f5:80:21:f6:ae:fb:23:66:f2:9e:27:02:2d:15:37: ff:25:b1:d0:74:10:d5:8f:88:f0:7a:53:9a:7e:71: 49:2f:ee:64:2d:1d:bb:ae:3b:f2:21:b3:af:c6:8f: fa:e4:5c:3c:5b:c2:75:33:81:9a:21:df:49:db:30: e1:fb:07:8d:3b:2f:0b:20:af:d0:bd:1b:4e:0d:7c: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A0:69:53:80:78:C4:B8:EA:0B:FD:50:4F:26:78:ED:76:68:1C:88 X509v3 Authority Key Identifier: keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:2e:e5:91:c2:5a:31:e1:94:19:a7:18:fe:e9:a8:3f:2c:ea: de:bd:95:e9:0f:53:fb:34:e3:69:88:42:03:c5:8b:8b:de:82: 15:0a:db:5f:dd:c8:99:6a:ae:81:92:8e:6a:b9:2f:87:ba:1e: 50:62:32:39:fe:c1:61:56:d9:53:ee:dd:3b:e4:1e:69:ab:af: f3:af:d8:90:5d:e8:09:6d:3d:c4:c2:9f:e2:04:09:3a:96:c8: 71:d6:a8:89:02:67:1b:aa:bf:11:ae:a1:a8:04:a5:d6:34:f4: 7c:9d:d2:f2:f7:e8:fb:4b:bf:32:be:81:69:41:53:6f:8b:5e: 76:82:54:04:90:93:91:c3:fb:5b:52:c7:12:91:d9:72:e0:e0: 77:cc:5e:22:05:3f:12:ca:7a:29:3d:aa:9d:cd:7c:1b:77:4e: d2:18:8e:e1:fc:aa:ba:3d:fc:db:45:db:4c:f3:c0:f2:a7:24: 6d:f0:68:55:5c:2d:00:a3:2a:b6:e2:4b:ac:cd:67:6e:2b:dc: c8:b1:bf:0f:4e:e8:95:0e:a2:14:14:b3:00:a3:74:bf:0e:13: 2d:d0:97:8a:73:10:00:2f:5f:b7:e8:ea:79:bd:1b:aa:a6:9f: 8b:e6:a6:56:5c:ba:72:55:c4:96:89:79:a0:5f:2a:ca:19:08: fc:ee:db:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rtHH3pl8LjUzVRjXUvglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmU1ZDk3OWUwMzI1Mzk5OTQ2YjIzOTA4MjJkMzBmMWQy ZjM1ZTEwHhcNMjYwMTI2MTkwMTM2WhcNMjYwMTI3MTkwMTM2WjAzMTEwLwYDVQQD EygwN2EwNjk1MzgwNzhjNGI4ZWEwYmZkNTA0ZjI2NzhlZDc2NjgxYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SHO8W/ix8gOFC0wX3Wfc2oKhe7H AIEmW0IbHWVCwt/dRV9YzdbRUjE/67M8O51KEkho2g3Zv80h9SKO7aZLyiiK+JJD n6eJd/hFySbr+PZiQHxHcgntIoK+tMeDLc5Xd3iXIWNlEO86J9mH2uLl5muIDmAe iDRqixJP+pMFJxCmizqPZ55etiPBsji/GbkZagThop54xqd/q93Oy9Z4V3qa98gH DL2hDkaZM2PuxG8Q2/X1gCH2rvsjZvKeJwItFTf/JbHQdBDVj4jwelOafnFJL+5k LR27rjvyIbOvxo/65Fw8W8J1M4GaId9J2zDh+weNOy8LIK/QvRtODXwt6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAegaVOAeMS46gv9UE8meO12aByIMB8GA1UdIwQY MBaAFKkuXZeeAyU5mUayOQgi0w8dLzXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAt YTQ3ZDE0MWNmYzVhLzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAtYTQ3ZDE0MWNmYzVh LzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARC7lkcJa MeGUGacY/umoPyzq3r2V6Q9T+zTjaYhCA8WLi96CFQrbX93ImWqugZKOarkvh7oe UGIyOf7BYVbZU+7dO+Qeaauv86/YkF3oCW09xMKf4gQJOpbIcdaoiQJnG6q/Ea6h qASl1jT0fJ3S8vfo+0u/Mr6BaUFTb4tedoJUBJCTkcP7W1LHEpHZcuDgd8xeIgU/ Esp6KT2qnc18G3dO0hiO4fyquj3820XbTPPA8qckbfBoVVwtAKMqtuJLrM1nbivc yLG/D07olQ6iFBSzAKN0vw4TLdCXinMQAC9ft+jqeb0bqqafi+amVly6clXElol5 oF8qyhkI/O7bZQ== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:36 2026 by rpki-client