This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json) Hash identifier: tkAhk15Fh2uYyRwvgJoMrPwTZZOZ9onKf54LgbKvQMs= Subject key identifier: A5:11:4E:A7:6A:8F:8C:1D:24:91:F7:2A:F9:F0:58:A9:D7:E2:F3:6D Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e Certificate serial: 019BA1C626F0BBDD7EE6D7B1AC28D90F9A15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft Manifest number: 145C Signing time: Fri 09 Jan 2026 08:01:16 +0000 Manifest this update: Fri 09 Jan 2026 08:01:16 +0000 Manifest next update: Sat 10 Jan 2026 08:01:16 +0000 Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: eIZVr5u2MP/mrbnEYba9bzqWYnzls/s7jK1xPTMWeZ4=) 2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:c6:26:f0:bb:dd:7e:e6:d7:b1:ac:28:d9:0f:9a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e Validity Not Before: Jan 9 08:01:16 2026 GMT Not After : Jan 10 08:01:16 2026 GMT Subject: CN=a5114ea76a8f8c1d2491f72af9f058a9d7e2f36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:d8:e0:f2:f9:2b:6f:2b:60:57:9c:72:ec: f9:61:83:9e:4b:31:11:95:0c:53:21:bc:5d:55:c2: bd:2b:27:b3:37:4c:7f:c4:45:7c:b6:de:8c:19:2d: 4c:dd:61:d1:0f:83:d1:82:d7:c3:a0:fb:53:d7:30: 75:2c:eb:16:ca:cf:2e:c5:06:04:e5:2f:60:bd:07: e4:2d:a4:9f:14:fe:c4:7a:22:fa:5e:cc:8d:b6:4a: 92:c2:2d:27:99:70:73:a4:5a:4f:9f:ac:72:eb:c0: bd:c3:83:08:ff:ea:7a:2e:a0:8b:ab:21:5c:a8:3e: 28:6d:ce:90:ce:fc:16:7a:bc:75:be:76:c3:cd:f4: 7c:5c:13:6f:94:0d:f8:45:81:1e:79:8a:1b:a3:a4: 80:ef:db:15:8a:08:df:8b:58:1f:8a:17:4d:f5:3f: 46:16:27:f8:a5:ad:b4:55:c8:9e:69:cc:32:40:8e: a0:ed:c0:d3:ac:3a:78:01:5b:4e:29:7d:9b:6c:91: 06:7b:54:25:40:05:c7:c1:40:18:8d:5f:d8:f9:f5: 89:c0:f9:d7:86:8c:45:1c:fc:2b:56:dd:52:8d:98: aa:fc:39:0d:a4:ef:1f:01:71:1b:c5:c4:d9:15:86: 00:95:20:d3:12:39:8e:ae:21:15:2e:05:5b:ca:87: e1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:11:4E:A7:6A:8F:8C:1D:24:91:F7:2A:F9:F0:58:A9:D7:E2:F3:6D X509v3 Authority Key Identifier: keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3c:6d:df:6b:00:87:5d:c7:cd:85:99:e1:0f:d2:5f:6d:cc: 24:e0:6f:03:b3:60:08:52:cb:ea:59:f3:44:a9:b5:ff:dc:45: a9:60:c0:79:36:ad:fa:49:0f:e6:c9:37:8f:bc:58:65:e4:b5: d7:ff:01:21:29:1d:18:e9:82:02:0e:05:2f:f3:06:8a:45:ba: 8d:3b:b6:6b:18:4f:14:50:85:12:57:7e:32:9a:ee:c2:3e:a3: cf:7d:61:33:7c:2f:65:ec:f3:46:5d:47:b8:17:f9:ff:78:52: a7:ed:6a:4c:99:f4:86:d9:76:e9:6c:86:ff:15:00:1f:64:63: 27:37:a8:c9:56:4e:da:3d:73:0a:5a:b5:16:06:6f:0c:a6:75: d3:70:d4:29:93:2d:ce:30:34:4c:1d:dd:14:dd:e4:38:b7:2e: 0b:01:5e:8d:75:f8:31:f0:c4:a2:aa:d2:51:56:f5:84:f0:8e: d6:96:81:93:ec:27:23:19:ec:f8:61:72:ad:81:b2:d7:8b:33: d5:e8:a0:53:c5:10:46:39:91:ce:f2:0b:f0:c1:a6:ea:df:a1: af:aa:9c:4b:3c:6c:18:cc:43:ce:13:2a:a3:94:c6:d3:24:0e: f2:da:d3:59:d5:cc:57:05:d4:5f:fd:a1:1f:ee:83:40:01:27: 95:ca:cd:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhxibwu91+5texrCjZD5oVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNDk2NTg0ZTVjZjM5YjU2ODc0ZGU4ZGM3N2FhM2E2ZmY5 ZThhMWUwHhcNMjYwMTA5MDgwMTE2WhcNMjYwMTEwMDgwMTE2WjAzMTEwLwYDVQQD EyhhNTExNGVhNzZhOGY4YzFkMjQ5MWY3MmFmOWYwNThhOWQ3ZTJmMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvonY4PL5K28rYFeccuz5YYOeSzER lQxTIbxdVcK9KyezN0x/xEV8tt6MGS1M3WHRD4PRgtfDoPtT1zB1LOsWys8uxQYE 5S9gvQfkLaSfFP7EeiL6XsyNtkqSwi0nmXBzpFpPn6xy68C9w4MI/+p6LqCLqyFc qD4obc6QzvwWerx1vnbDzfR8XBNvlA34RYEeeYobo6SA79sVigjfi1gfihdN9T9G Fif4pa20VcieacwyQI6g7cDTrDp4AVtOKX2bbJEGe1QlQAXHwUAYjV/Y+fWJwPnX hoxFHPwrVt1SjZiq/DkNpO8fAXEbxcTZFYYAlSDTEjmOriEVLgVbyofhhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKURTqdqj4wdJJH3KvnwWKnX4vNtMB8GA1UdIwQY MBaAFENJZYTlzzm1aHTejcd6o6b/nooeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEt ZTJjOTIyOGFhYzUzLzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEtZTJjOTIyOGFhYzUz LzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTxt32sA h13HzYWZ4Q/SX23MJOBvA7NgCFLL6lnzRKm1/9xFqWDAeTat+kkP5sk3j7xYZeS1 1/8BISkdGOmCAg4FL/MGikW6jTu2axhPFFCFEld+Mpruwj6jz31hM3wvZezzRl1H uBf5/3hSp+1qTJn0htl26WyG/xUAH2RjJzeoyVZO2j1zClq1FgZvDKZ103DUKZMt zjA0TB3dFN3kOLcuCwFejXX4MfDEoqrSUVb1hPCO1paBk+wnIxns+GFyrYGy14sz 1eigU8UQRjmRzvIL8MGm6t+hr6qcSzxsGMxDzhMqo5TG0yQO8trTWdXMVwXUX/2h H+6DQAEnlcrN9A== -----END CERTIFICATE-----Generated at Fri Jan 9 17:09:00 2026 by rpki-client