This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft File: qp8GoFvDKfAAVRK56LgYUDtKlwI.mft (raw, json) Hash identifier: tN/rXvKla5FMIP7rhg445/x05Bfthso0KvZg+mbOlrk= Subject key identifier: B7:02:09:E3:E6:B9:60:63:27:CA:63:BC:84:73:0B:DB:CB:DE:16:F5 Authority key identifier: AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02 Certificate issuer: /CN=aa9f06a05bc329f0005512b9e8b818503b4a9702 Certificate serial: 019BFA4735B23FC488832AB5248F375F2969 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft Manifest number: 02 Signing time: Mon 26 Jan 2026 12:28:49 +0000 Manifest this update: Mon 26 Jan 2026 12:28:49 +0000 Manifest next update: Tue 27 Jan 2026 12:28:49 +0000 Files and hashes: 1: _4VYQRquhP3n7V0ZIUcFIYF3tcc.roa (hash: E+o4HFAoGMbScOOdpRNVFuEWt1wZ9tuocl+KZhVyuoo=) 2: qp8GoFvDKfAAVRK56LgYUDtKlwI.crl (hash: dwSwr3TUmreLbtl1q/XLP3RpDEEn8V/ol8lGlPGuLU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:47:35:b2:3f:c4:88:83:2a:b5:24:8f:37:5f:29:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9f06a05bc329f0005512b9e8b818503b4a9702 Validity Not Before: Jan 26 12:28:49 2026 GMT Not After : Jan 27 12:28:49 2026 GMT Subject: CN=b70209e3e6b9606327ca63bc84730bdbcbde16f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:51:71:26:d3:e7:4f:33:fc:8e:a3:43:ea: 4d:3a:0b:69:40:f4:5f:51:0b:01:7f:2a:34:b3:2f: c5:ee:1d:b5:1b:eb:73:65:55:d6:59:71:b4:35:cf: 07:fa:b4:2d:a2:07:26:f1:19:18:6f:d5:d9:6a:b0: be:79:26:5e:15:7e:d4:d4:40:55:96:bb:f2:c7:ab: 7f:38:9d:01:62:3e:f6:73:f5:6d:12:90:1e:27:74: 1b:69:f2:97:8b:5c:2a:3e:af:2b:88:8d:ad:75:26: 9b:5b:18:2e:99:41:c3:c7:b4:ab:82:0a:68:5b:e7: e5:a0:2a:9b:5a:02:aa:ef:7b:8b:e5:5b:53:aa:46: c0:73:cd:ea:80:40:1d:9d:0d:c4:ff:a3:53:b9:fc: a4:e1:74:66:1c:a5:fc:81:dc:71:a0:07:c0:4d:3e: c3:07:88:a8:2f:11:1a:11:ef:5d:34:32:7d:aa:6a: c2:72:ff:59:40:90:35:6d:6f:fe:b4:67:01:35:fb: d1:77:65:d6:5e:d0:75:e8:40:1b:25:88:52:17:1f: 79:af:9c:a7:40:a8:3d:b2:0e:4b:3f:fc:8c:5f:02: 12:b7:d9:f9:92:f5:03:56:51:4d:40:3f:98:16:fe: 16:a5:47:13:f2:f4:27:fc:b4:f7:15:ac:30:96:95: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:02:09:E3:E6:B9:60:63:27:CA:63:BC:84:73:0B:DB:CB:DE:16:F5 X509v3 Authority Key Identifier: keyid:AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e6:52:42:80:c4:3d:8d:12:59:ab:21:19:ec:df:45:9e:d0: 47:74:db:da:3c:76:97:3f:b8:86:88:67:3d:ff:83:22:ef:b9: 19:dc:a2:57:8d:67:f9:80:9c:41:4c:2a:41:c9:2c:21:16:11: 6e:2b:0b:8a:00:a7:e5:d0:d7:ef:69:46:c5:11:be:73:ef:ef: 35:d8:57:aa:13:3a:8e:58:11:65:b7:4a:c7:7d:f7:62:c7:ff: b7:3f:a4:96:44:30:59:4b:81:26:9c:0e:6c:64:9e:06:c6:39: 39:22:a0:f1:90:bb:90:d9:c9:2e:18:0e:66:6b:56:7b:0d:04: eb:1e:fc:70:43:7d:70:a3:00:33:a7:42:09:5a:f0:c8:fc:a5: 4d:64:8e:b1:86:95:d1:61:f9:73:23:f0:ca:7d:e0:4d:ce:e4: 5d:a2:06:c8:35:2f:89:de:27:83:8e:5c:04:ec:bb:2f:9e:03: fd:51:48:88:77:b1:90:14:fa:5e:b5:40:ba:6e:6d:a2:d4:91: d4:20:76:cb:96:c9:9c:13:c8:1b:5b:ed:56:44:13:0b:95:64: 55:3f:60:17:48:13:e9:d7:95:d8:00:53:e6:0a:ef:0a:bd:03: e8:0d:0e:74:49:cf:19:21:a6:f9:30:c9:f5:15:0c:02:50:c0: 00:ea:56:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6RzWyP8SIgyq1JI83XylpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOWYwNmEwNWJjMzI5ZjAwMDU1MTJiOWU4YjgxODUwM2I0 YTk3MDIwHhcNMjYwMTI2MTIyODQ5WhcNMjYwMTI3MTIyODQ5WjAzMTEwLwYDVQQD EyhiNzAyMDllM2U2Yjk2MDYzMjdjYTYzYmM4NDczMGJkYmNiZGUxNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS5RcSbT508z/I6jQ+pNOgtpQPRf UQsBfyo0sy/F7h21G+tzZVXWWXG0Nc8H+rQtogcm8RkYb9XZarC+eSZeFX7U1EBV lrvyx6t/OJ0BYj72c/VtEpAeJ3QbafKXi1wqPq8riI2tdSabWxgumUHDx7Srggpo W+floCqbWgKq73uL5VtTqkbAc83qgEAdnQ3E/6NTufyk4XRmHKX8gdxxoAfATT7D B4ioLxEaEe9dNDJ9qmrCcv9ZQJA1bW/+tGcBNfvRd2XWXtB16EAbJYhSFx95r5yn QKg9sg5LP/yMXwISt9n5kvUDVlFNQD+YFv4WpUcT8vQn/LT3FawwlpV7hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcCCePmuWBjJ8pjvIRzC9vL3hb1MB8GA1UdIwQY MBaAFKqfBqBbwynwAFUSuei4GFA7SpcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXA4R29GdkRLZkFBVlJLNTZMZ1lVRHRLbHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9lMWNiODctZDhjNi00ZDMxLWE3OTgt NGUyN2Q4OGIyODFhLzEvcXA4R29GdkRLZkFBVlJLNTZMZ1lVRHRLbHdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9lMWNiODctZDhjNi00ZDMxLWE3OTgtNGUyN2Q4OGIyODFh LzEvcXA4R29GdkRLZkFBVlJLNTZMZ1lVRHRLbHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuZSQoDE PY0SWashGezfRZ7QR3Tb2jx2lz+4hohnPf+DIu+5GdyiV41n+YCcQUwqQcksIRYR bisLigCn5dDX72lGxRG+c+/vNdhXqhM6jlgRZbdKx333Ysf/tz+klkQwWUuBJpwO bGSeBsY5OSKg8ZC7kNnJLhgOZmtWew0E6x78cEN9cKMAM6dCCVrwyPylTWSOsYaV 0WH5cyPwyn3gTc7kXaIGyDUvid4ng45cBOy7L54D/VFIiHexkBT6XrVAum5totSR 1CB2y5bJnBPIG1vtVkQTC5VkVT9gF0gT6deV2ABT5grvCr0D6A0OdEnPGSGm+TDJ 9RUMAlDAAOpWjw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:23 2026 by rpki-client