This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft File: qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json) Hash identifier: lJX+GInBbeIan9iSaJki74LdyjvQazAkO7mRVqsr+PA= Subject key identifier: 85:EB:B4:C6:63:E7:38:F7:36:F3:67:1F:C2:6E:94:73:A8:0B:B5:CE Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46 Certificate issuer: /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46 Certificate serial: 019BFC1CA09056FD74893340FCD213DB9953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft Manifest number: 0AA2 Signing time: Mon 26 Jan 2026 21:01:32 +0000 Manifest this update: Mon 26 Jan 2026 21:01:32 +0000 Manifest next update: Tue 27 Jan 2026 21:01:32 +0000 Files and hashes: 1: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: gc6IhUofgk2ORS1KI73efL59g7pc0ZnAhQG6EppFgEs=) 2: uLVt8T3d78JYSpR4LeS6qWguKcM.roa (hash: rBNYvMK4p3Mahw6EVTteREy0VbAJzYePOU2yB1g4AWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:a0:90:56:fd:74:89:33:40:fc:d2:13:db:99:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46 Validity Not Before: Jan 26 21:01:32 2026 GMT Not After : Jan 27 21:01:32 2026 GMT Subject: CN=85ebb4c663e738f736f3671fc26e9473a80bb5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4e:7d:e0:cb:92:4b:cf:f7:96:68:c5:91:93: 26:c6:06:ab:42:10:aa:3f:77:01:1b:fc:f7:ab:8e: 77:51:9e:05:da:7d:6e:ef:54:fc:03:99:3c:f7:cc: 55:c0:54:83:fd:59:4c:7f:84:fc:a5:fc:de:8f:3b: 11:de:91:cb:c2:eb:fb:d1:95:8f:cb:42:89:e3:95: 0c:e2:66:3e:91:c3:40:08:cb:62:87:f0:17:c1:aa: c1:fc:2e:f3:91:24:81:f2:bb:22:00:b5:85:f3:11: ba:75:88:6e:18:07:a3:bf:ed:e7:ee:9e:47:5e:6a: 17:14:19:6a:db:0d:a1:29:90:2d:0c:e6:e7:28:19: 3a:f2:c9:49:1d:e1:e5:c5:44:ad:56:7f:a8:d2:e8: e3:26:e1:05:42:5c:f0:51:54:34:05:b3:e6:b6:89: 08:c5:97:9d:09:64:e6:6c:0d:d5:7c:fe:d5:89:32: 31:da:cb:d5:9d:62:3d:d0:0b:ad:8f:d5:58:09:ee: 8b:f2:87:b0:97:49:fc:00:0a:9b:ad:4e:05:93:84: 2a:22:c9:c3:55:7e:65:9a:be:9d:0d:34:b3:68:f4: 98:85:59:b5:10:31:de:36:23:99:65:a0:0b:f5:c3: 1b:f8:95:fb:13:8b:52:cc:f5:bd:40:91:db:e4:c0: 24:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EB:B4:C6:63:E7:38:F7:36:F3:67:1F:C2:6E:94:73:A8:0B:B5:CE X509v3 Authority Key Identifier: keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6a:66:c3:31:6e:16:e9:a2:02:f2:04:8f:63:38:c1:b1:72: 72:55:3a:1d:7f:df:f1:31:d8:3a:98:84:d9:d7:5a:de:c3:28: b9:ae:ee:ce:a4:a7:d5:79:ec:73:01:7a:08:73:6f:2c:60:81: 5a:a4:09:8a:5c:99:75:9f:fe:29:12:de:d5:ec:cb:db:e7:6e: 5c:72:de:59:e2:64:83:ae:19:f6:cb:62:11:d6:b4:83:3c:56: 06:e3:bb:6f:2e:cb:2f:26:0c:7d:b5:db:d3:8e:7e:85:94:f0: 28:3d:c9:a0:ae:23:5f:50:8d:75:4c:f4:16:30:a3:99:44:26: 1e:93:52:24:99:0a:ca:36:65:d7:d8:13:57:90:17:5a:8a:a7: 1d:a3:8d:1a:70:a2:e0:db:24:38:56:49:19:e0:87:a0:4e:e8: 41:03:b3:39:ef:ce:2a:f8:7c:32:7f:a4:65:50:66:51:d2:ed: 75:af:a9:e7:f5:95:62:c8:41:86:3c:8c:9a:fe:46:79:0c:24: c1:ef:0d:15:a1:74:5c:ee:3e:b8:d1:68:3d:e5:35:61:fb:ac: ee:01:f5:58:e7:f0:b6:58:7b:b3:5f:89:00:f4:47:8f:27:7b: e0:d9:91:1f:e1:9e:df:c4:69:56:9f:d6:73:0e:1c:5f:7f:a2: fe:6e:6d:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HKCQVv10iTNA/NIT25lTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NjhhZGYxMjBhNzRhNWQxMDgwOWNmZDNjYjY4MTRmYzg5 YjFmNDYwHhcNMjYwMTI2MjEwMTMyWhcNMjYwMTI3MjEwMTMyWjAzMTEwLwYDVQQD Eyg4NWViYjRjNjYzZTczOGY3MzZmMzY3MWZjMjZlOTQ3M2E4MGJiNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k594MuSS8/3lmjFkZMmxgarQhCq P3cBG/z3q453UZ4F2n1u71T8A5k898xVwFSD/VlMf4T8pfzejzsR3pHLwuv70ZWP y0KJ45UM4mY+kcNACMtih/AXwarB/C7zkSSB8rsiALWF8xG6dYhuGAejv+3n7p5H XmoXFBlq2w2hKZAtDObnKBk68slJHeHlxUStVn+o0ujjJuEFQlzwUVQ0BbPmtokI xZedCWTmbA3VfP7ViTIx2svVnWI90Autj9VYCe6L8oewl0n8AAqbrU4Fk4QqIsnD VX5lmr6dDTSzaPSYhVm1EDHeNiOZZaAL9cMb+JX7E4tSzPW9QJHb5MAkNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXrtMZj5zj3NvNnH8JulHOoC7XOMB8GA1UdIwQY MBaAFKlorfEgp0pdEICc/Ty2gU/Imx9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2It ODBjZTQ1ODYxMjM5LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2ItODBjZTQ1ODYxMjM5 LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2pmwzFu FumiAvIEj2M4wbFyclU6HX/f8THYOpiE2dda3sMoua7uzqSn1XnscwF6CHNvLGCB WqQJilyZdZ/+KRLe1ezL2+duXHLeWeJkg64Z9stiEda0gzxWBuO7by7LLyYMfbXb 045+hZTwKD3JoK4jX1CNdUz0FjCjmUQmHpNSJJkKyjZl19gTV5AXWoqnHaONGnCi 4NskOFZJGeCHoE7oQQOzOe/OKvh8Mn+kZVBmUdLtda+p5/WVYshBhjyMmv5GeQwk we8NFaF0XO4+uNFoPeU1Yfus7gH1WOfwtlh7s1+JAPRHjyd74NmRH+Ge38RpVp/W cw4cX3+i/m5tlg== -----END CERTIFICATE-----Generated at Tue Jan 27 06:23:59 2026 by rpki-client