This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json) Hash identifier: RF5/FHGn7XLD65rLy6P72duumXIPOWsBCKb1jVjgVCM= Subject key identifier: 02:BC:F6:A9:0A:5F:70:C3:67:2E:EE:3C:45:7B:EA:7A:BC:E5:5C:C2 Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86 Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86 Certificate serial: 019BFBE4ED8FD90D7A6240452235E7CC0B95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft Manifest number: 09B0 Signing time: Mon 26 Jan 2026 20:00:42 +0000 Manifest this update: Mon 26 Jan 2026 20:00:42 +0000 Manifest next update: Tue 27 Jan 2026 20:00:42 +0000 Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: RhUFdtn5W9+EGK9J15YflrMgYfvCxAgGhBekPLA0j1U=) 2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:ed:8f:d9:0d:7a:62:40:45:22:35:e7:cc:0b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86 Validity Not Before: Jan 26 20:00:42 2026 GMT Not After : Jan 27 20:00:42 2026 GMT Subject: CN=02bcf6a90a5f70c3672eee3c457bea7abce55cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:f7:14:cb:3b:8c:2e:33:d4:56:36:ba:ab: d5:e6:6c:9c:bb:c5:e5:1d:19:22:71:d7:09:45:d4: 55:c0:2c:60:de:05:49:45:12:a1:a2:7e:99:49:8b: 22:81:60:f3:48:cf:f7:ae:35:16:cb:b6:62:b5:e9: 5e:d5:4a:2a:60:5f:95:92:6c:e2:68:39:66:1c:ca: 44:41:5b:18:52:94:8a:f8:05:ac:1f:31:ff:79:10: 2c:30:ed:7e:c4:56:8b:52:58:d3:33:2a:92:1a:a3: 13:2b:a1:47:91:77:a5:00:76:72:96:49:28:19:0c: 5d:ad:5b:eb:b0:9c:ba:c8:c9:aa:b3:1e:3c:20:0c: c6:a4:c2:f3:fc:cf:45:8e:69:07:a9:81:c5:b1:73: 5a:c0:75:64:da:69:be:1e:55:92:44:64:df:2c:48: df:55:fd:df:d6:89:c6:72:19:43:21:b5:17:a9:77: 57:f8:c5:7a:47:ea:c4:a0:3c:95:3e:bf:9c:e2:3a: 80:6c:67:2e:02:03:22:3e:48:11:7d:36:cb:ac:46: 15:73:67:d0:c7:d5:8c:6b:f3:99:4c:76:76:8e:62: 7c:03:52:f8:c6:d3:a3:d0:cd:a9:92:ba:73:04:9b: 21:23:fd:d8:8f:f2:33:a0:c6:11:83:22:f8:76:cd: 28:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BC:F6:A9:0A:5F:70:C3:67:2E:EE:3C:45:7B:EA:7A:BC:E5:5C:C2 X509v3 Authority Key Identifier: keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:15:0e:97:0f:31:1f:58:71:03:96:cf:ca:02:75:d9:4e:0e: 94:a3:a5:a5:4f:e0:d6:d5:e1:6f:a6:65:3c:47:fc:ba:d7:01: 23:eb:35:b8:45:a3:1e:c2:c3:10:83:ef:98:dd:9e:64:42:1f: ac:bc:83:f0:e0:91:73:4e:09:2d:54:e6:e8:bc:75:ec:e8:72: 5b:70:7c:64:27:e5:4b:f9:3d:00:b2:50:44:1a:e4:05:53:61: d3:59:b4:03:57:4d:d9:e4:04:66:d4:6c:44:ba:cd:8c:1b:39: 7e:ab:5c:a5:ed:75:42:c5:91:ac:80:23:65:b8:4c:45:6b:13: eb:10:5a:10:d8:50:49:b4:1c:ed:66:c8:f4:c4:f9:20:20:03: f3:3a:9f:85:cf:6d:4c:42:2a:d8:44:15:0b:0d:46:ae:b2:79: ed:4f:93:61:41:0f:eb:b9:1c:f2:dc:9b:f9:14:08:41:63:12: e8:81:d8:ce:3a:fb:2f:8e:06:e6:3c:1a:24:65:dc:a4:40:20: da:7a:12:f0:22:af:54:0c:99:20:8d:d8:47:f5:f3:dc:45:b6: 97:0c:0a:77:8c:c9:05:0a:0d:af:5d:a7:85:7f:7a:e3:65:6a: d2:04:55:62:c1:c1:a0:56:3c:40:52:93:dd:24:ad:96:77:54: ae:22:bc:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75O2P2Q16YkBFIjXnzAuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNmIyZDc0NDBmYjc4ODQ0Y2YwMTM1ZWM1MTgyYjNmNmY3 ODNhODYwHhcNMjYwMTI2MjAwMDQyWhcNMjYwMTI3MjAwMDQyWjAzMTEwLwYDVQQD EygwMmJjZjZhOTBhNWY3MGMzNjcyZWVlM2M0NTdiZWE3YWJjZTU1Y2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubb3FMs7jC4z1FY2uqvV5mycu8Xl HRkicdcJRdRVwCxg3gVJRRKhon6ZSYsigWDzSM/3rjUWy7Zitele1UoqYF+Vkmzi aDlmHMpEQVsYUpSK+AWsHzH/eRAsMO1+xFaLUljTMyqSGqMTK6FHkXelAHZylkko GQxdrVvrsJy6yMmqsx48IAzGpMLz/M9FjmkHqYHFsXNawHVk2mm+HlWSRGTfLEjf Vf3f1onGchlDIbUXqXdX+MV6R+rEoDyVPr+c4jqAbGcuAgMiPkgRfTbLrEYVc2fQ x9WMa/OZTHZ2jmJ8A1L4xtOj0M2pkrpzBJshI/3Yj/IzoMYRgyL4ds0owQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAK89qkKX3DDZy7uPEV76nq85VzCMB8GA1UdIwQY MBaAFEJrLXRA+3iETPATXsUYKz9veDqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZGJkNzUtOTgxZC00NmEzLWI1YzMt MjU5MmExZWE2MTM4LzEvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xZGJkNzUtOTgxZC00NmEzLWI1YzMtMjU5MmExZWE2MTM4 LzEvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhUOlw8x H1hxA5bPygJ12U4OlKOlpU/g1tXhb6ZlPEf8utcBI+s1uEWjHsLDEIPvmN2eZEIf rLyD8OCRc04JLVTm6Lx17OhyW3B8ZCflS/k9ALJQRBrkBVNh01m0A1dN2eQEZtRs RLrNjBs5fqtcpe11QsWRrIAjZbhMRWsT6xBaENhQSbQc7WbI9MT5ICAD8zqfhc9t TEIq2EQVCw1GrrJ57U+TYUEP67kc8tyb+RQIQWMS6IHYzjr7L44G5jwaJGXcpEAg 2noS8CKvVAyZII3YR/Xz3EW2lwwKd4zJBQoNr12nhX9642Vq0gRVYsHBoFY8QFKT 3SStlndUriK8ow== -----END CERTIFICATE-----Generated at Mon Jan 26 23:48:08 2026 by rpki-client