This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json) Hash identifier: HjkX915T0IU1j1nSUO9jpV1WdUCYw0iplK6Y+si9g8Q= Subject key identifier: 95:AE:1A:E2:28:F7:D1:38:29:F9:CD:7C:1D:34:49:11:32:EE:4D:F4 Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01 Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501 Certificate serial: 019BA1FD60C47AE9BF6F717FC8FB46035041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft Manifest number: 12B1 Signing time: Fri 09 Jan 2026 09:01:35 +0000 Manifest this update: Fri 09 Jan 2026 09:01:35 +0000 Manifest next update: Sat 10 Jan 2026 09:01:35 +0000 Files and hashes: 1: 1j1sIxN7dokPMeqtWpa2O79IJ2E.roa (hash: curzmuQMCpShAx5Xjvb+jxSDTma4OGIGe6t1amKgW4Y=) 2: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: /z8Ofm0g3EhkFGpZOsMMt6V4jWPYwlHeFDe9l9InUMw=) 3: H41pXcA8VjDWzAOdUw8kJkHTePo.roa (hash: vd9X0KNO4KjRnGRSxo8WoFeqcJXdexnSKn3TUknAjFQ=) 4: og4k5qVFbhVmLtxHVp2XKWNx-Vw.roa (hash: t6ZkyRFXAOHZOC93uE5FiUdcUyb51CT48WJCdjiZU/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:fd:60:c4:7a:e9:bf:6f:71:7f:c8:fb:46:03:50:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501 Validity Not Before: Jan 9 09:01:35 2026 GMT Not After : Jan 10 09:01:35 2026 GMT Subject: CN=95ae1ae228f7d13829f9cd7c1d34491132ee4df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:83:d1:bb:ac:40:46:43:63:36:96:d2:77: 96:73:40:06:55:c4:e1:e6:f9:ec:34:26:87:da:2c: f1:06:dc:6a:e2:1e:76:b1:3f:e0:3b:4b:99:dc:30: db:99:da:6c:ca:e9:2c:50:0c:9d:10:48:21:19:d2: e2:fb:27:f3:f8:79:9e:c1:e3:d8:54:2c:59:68:33: 99:38:8f:9a:13:bb:28:13:a7:2b:15:52:4c:3c:89: d6:8d:55:c6:87:83:eb:64:e5:5e:7c:4e:4b:62:b3: 0b:f9:6e:68:90:d0:cb:bd:07:94:82:06:8d:58:42: f5:ba:81:2d:0d:16:a3:a8:13:9b:95:46:11:bd:3e: 75:50:b9:19:c2:0c:2b:78:12:93:1a:a2:3b:62:e4: a0:7a:4c:64:66:d9:d1:44:6d:7c:33:b5:82:ca:be: 51:26:fc:0c:28:11:f7:76:2d:86:c7:50:71:64:92: 52:71:bd:e8:7b:96:bd:6a:a0:94:ec:f0:d9:ad:b4: 6b:34:eb:94:cc:76:38:4c:3b:27:ed:1d:61:f3:28: 56:11:31:92:ef:1a:de:b7:5b:3d:54:d9:ad:e1:7b: 02:45:6f:dd:7a:1f:5a:4c:e3:01:19:ff:c0:73:6e: b6:95:6c:44:77:00:0c:3e:d1:c0:a9:d7:21:0c:ae: dc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AE:1A:E2:28:F7:D1:38:29:F9:CD:7C:1D:34:49:11:32:EE:4D:F4 X509v3 Authority Key Identifier: keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:37:88:81:06:68:53:5d:06:8b:6a:19:37:00:0d:4c:e3:bb: f2:a8:de:e3:c8:c9:d8:5a:85:6c:e3:f9:fe:25:ba:3f:c3:d7: d4:37:e5:74:f3:d9:4c:51:cb:0f:6c:43:e3:43:d0:fb:37:12: 7c:dd:19:d5:f5:7d:42:dd:d7:75:b1:0e:2f:cc:36:1b:94:e4: fc:18:54:f5:13:f3:b2:2b:1d:31:9e:82:64:02:b3:15:c2:76: b1:f3:cc:bc:ec:d8:04:cf:4a:c0:2c:2d:94:b2:95:aa:22:b2: 1e:2e:fa:a3:bd:32:2f:8f:d4:47:b8:59:25:36:d3:ce:60:c2: 3c:b3:d1:be:9a:f9:a1:8e:b1:35:b0:b5:89:a0:28:79:1a:e0: 27:0c:18:ff:2a:09:81:cd:da:ec:1a:16:69:7d:c5:12:b1:e8: 21:89:2a:ee:7a:46:e0:a6:20:e6:e2:60:58:33:76:63:50:b5: 69:7e:26:0b:41:a4:88:3c:f8:1b:94:d1:3e:a0:a0:21:6d:f8: 8a:53:b0:c0:d4:2a:2c:b2:95:4c:74:1c:64:0d:ae:35:de:8a: 75:62:f4:a9:56:1f:8a:27:44:49:83:68:ff:ab:52:08:4f:31: 2d:99:79:77:71:05:53:c1:f9:72:36:d8:99:db:87:f6:a5:56: ba:41:0a:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuh/WDEeum/b3F/yPtGA1BBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWE4OWY3YjcyMjI3OWMwMzI5NDJkY2YyNDg2NWY2ZDcy ZDY1MDEwHhcNMjYwMTA5MDkwMTM1WhcNMjYwMTEwMDkwMTM1WjAzMTEwLwYDVQQD Eyg5NWFlMWFlMjI4ZjdkMTM4MjlmOWNkN2MxZDM0NDkxMTMyZWU0ZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYGD0busQEZDYzaW0neWc0AGVcTh 5vnsNCaH2izxBtxq4h52sT/gO0uZ3DDbmdpsyuksUAydEEghGdLi+yfz+HmewePY VCxZaDOZOI+aE7soE6crFVJMPInWjVXGh4PrZOVefE5LYrML+W5okNDLvQeUggaN WEL1uoEtDRajqBOblUYRvT51ULkZwgwreBKTGqI7YuSgekxkZtnRRG18M7WCyr5R JvwMKBH3di2Gx1BxZJJScb3oe5a9aqCU7PDZrbRrNOuUzHY4TDsn7R1h8yhWETGS 7xret1s9VNmt4XsCRW/deh9aTOMBGf/Ac262lWxEdwAMPtHAqdchDK7ckwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWuGuIo99E4KfnNfB00SREy7k30MB8GA1UdIwQY MBaAFNaqife3IiecAylC3PJIZfbXLWUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYt OGJhNjg4ODY2OWNmLzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYtOGJhNjg4ODY2OWNm LzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDeIgQZo U10Gi2oZNwANTOO78qje48jJ2FqFbOP5/iW6P8PX1DfldPPZTFHLD2xD40PQ+zcS fN0Z1fV9Qt3XdbEOL8w2G5Tk/BhU9RPzsisdMZ6CZAKzFcJ2sfPMvOzYBM9KwCwt lLKVqiKyHi76o70yL4/UR7hZJTbTzmDCPLPRvpr5oY6xNbC1iaAoeRrgJwwY/yoJ gc3a7BoWaX3FErHoIYkq7npG4KYg5uJgWDN2Y1C1aX4mC0GkiDz4G5TRPqCgIW34 ilOwwNQqLLKVTHQcZA2uNd6KdWL0qVYfiidESYNo/6tSCE8xLZl5d3EFU8H5cjbY mduH9qVWukEKHA== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:30 2026 by rpki-client