This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json) Hash identifier: 0ncdsUU+xUh0R83a9bhkccREAI7g9OLxq7NUDCKgdj8= Subject key identifier: CF:44:EA:30:3A:CE:BF:27:E8:AA:8B:7A:58:B8:9D:39:6C:6A:4F:38 Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36 Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136 Certificate serial: 019C1FBABC792373F59D95F46F501BCDF900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft Manifest number: 1801 Signing time: Mon 02 Feb 2026 19:00:57 +0000 Manifest this update: Mon 02 Feb 2026 19:00:57 +0000 Manifest next update: Tue 03 Feb 2026 19:00:57 +0000 Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: Pmx2LuMG9EomkkP9otjU8SMq89ADSjDkPPjP+aAbr40=) 2: 25O7M2UWZLtjZfht3TvmhhoKUbU.roa (hash: aHZMolfVFoYqPERvCPULtiENfnmx30XYIbMKIT0hRPE=) 3: DdN7vkJnOB--YPWssHLoFQourZw.roa (hash: 4Xwtg1/EpdhFY06tPduHwk9/msCJ+le6Q0TbeFIOaTA=) 4: ik9bQHA3wdhcXWdy4pApX4ViEtA.roa (hash: YUhchzwns71ZrkZmZzkm82sDpa46jMSA30HHNbNFaao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 19:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:ba:bc:79:23:73:f5:9d:95:f4:6f:50:1b:cd:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136 Validity Not Before: Feb 2 19:00:57 2026 GMT Not After : Feb 3 19:00:57 2026 GMT Subject: CN=cf44ea303acebf27e8aa8b7a58b89d396c6a4f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8b:15:dd:0a:e1:18:9c:dc:da:49:9b:b0:5a: 01:cf:52:c3:34:80:0e:97:e6:5d:1b:71:30:ad:d4: 08:07:93:b4:d7:b2:65:d7:ef:fc:f3:2b:5c:da:b7: 4e:51:85:83:4d:dd:fb:13:1c:02:f4:71:d7:22:81: bb:77:ce:73:d4:d1:25:6d:1a:f6:f1:ee:73:57:30: 0a:5c:dc:a3:b1:c4:0b:0c:a1:d7:ab:b7:63:0b:aa: b7:9f:bd:41:18:02:00:9d:3a:cb:1c:28:e3:ae:2d: cb:77:c8:ac:eb:70:10:78:00:be:ea:42:10:95:0a: b9:ad:f3:ed:6b:16:38:ac:09:bd:11:28:bd:52:94: 29:34:a6:ce:ba:0d:47:a5:90:dc:44:e4:19:37:6d: 51:2a:90:6d:7e:db:5c:81:c2:ba:02:00:48:f7:a9: 60:14:74:23:73:86:28:a4:69:b8:98:61:48:99:2f: 96:34:4b:df:8e:10:0f:f9:e3:6a:47:da:ee:1a:59: c1:8b:e8:ff:ec:b8:58:e3:b3:fe:68:7a:40:40:48: 87:96:44:90:e5:c7:b8:eb:c3:1b:1f:e2:7d:6b:b0: 63:54:4a:b3:77:9b:90:0e:dd:26:39:fc:7b:9e:91: d1:ca:9c:ad:47:4d:f0:94:be:66:65:33:4b:a9:9f: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:44:EA:30:3A:CE:BF:27:E8:AA:8B:7A:58:B8:9D:39:6C:6A:4F:38 X509v3 Authority Key Identifier: keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:99:a0:b6:fa:5f:0f:06:b9:e7:82:2a:6b:95:13:ab:13:ca: a9:23:7e:f6:78:5f:79:3c:2c:97:eb:64:f8:3e:bd:b3:9e:aa: 2c:71:c1:3a:16:c6:e2:2e:92:73:1e:41:e3:37:74:20:00:1e: ca:d8:ce:7d:df:17:7b:07:cc:e2:05:b6:8a:80:fa:4f:f4:5f: a2:ed:5f:8b:2f:95:aa:70:38:b0:0f:01:90:94:9e:70:93:86: 24:e9:61:7e:80:f9:09:58:44:a2:2f:9f:aa:64:85:e9:77:e5: 71:02:9b:50:ee:8f:ac:e5:f5:43:4c:56:4c:74:3a:56:2f:75: 40:40:aa:b2:a6:71:11:08:f3:8c:01:11:65:88:9d:6b:d3:04: 27:32:70:ae:4a:f8:b3:d5:39:2c:b1:7c:bd:56:91:12:b4:a9: ee:b6:33:f1:e6:d7:ec:46:1a:0b:a0:1d:14:83:95:d3:d4:ad: a9:01:e7:43:d2:80:f9:73:1d:8d:42:99:cf:5f:39:52:87:d7: 00:65:f3:da:c0:64:1d:8b:f9:27:9e:19:7e:bc:07:c3:eb:2b: 85:da:fb:fb:1b:a2:6b:48:6b:7b:4e:40:b0:68:26:a3:7c:4f: b8:d9:e3:05:9e:31:c7:c7:48:cb:ac:4e:0b:81:53:c4:d2:71: a2:d1:ed:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfurx5I3P1nZX0b1AbzfkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYTQ0NTI2MDJjOWRmOTc3YzlkNWRkOGRjMTNiNjY2MWRm NDAxMzYwHhcNMjYwMjAyMTkwMDU3WhcNMjYwMjAzMTkwMDU3WjAzMTEwLwYDVQQD EyhjZjQ0ZWEzMDNhY2ViZjI3ZThhYThiN2E1OGI4OWQzOTZjNmE0ZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14sV3QrhGJzc2kmbsFoBz1LDNIAO l+ZdG3EwrdQIB5O017Jl1+/88ytc2rdOUYWDTd37ExwC9HHXIoG7d85z1NElbRr2 8e5zVzAKXNyjscQLDKHXq7djC6q3n71BGAIAnTrLHCjjri3Ld8is63AQeAC+6kIQ lQq5rfPtaxY4rAm9ESi9UpQpNKbOug1HpZDcROQZN21RKpBtfttcgcK6AgBI96lg FHQjc4YopGm4mGFImS+WNEvfjhAP+eNqR9ruGlnBi+j/7LhY47P+aHpAQEiHlkSQ 5ce468MbH+J9a7BjVEqzd5uQDt0mOfx7npHRypytR03wlL5mZTNLqZ/XZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9E6jA6zr8n6KqLeli4nTlsak84MB8GA1UdIwQY MBaAFNKkRSYCyd+XfJ1d2NwTtmYd9AE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQt ZmU3NGVmN2FhYzk1LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQtZmU3NGVmN2FhYzk1 LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpmgtvpf Dwa554Iqa5UTqxPKqSN+9nhfeTwsl+tk+D69s56qLHHBOhbG4i6Scx5B4zd0IAAe ytjOfd8XewfM4gW2ioD6T/Rfou1fiy+VqnA4sA8BkJSecJOGJOlhfoD5CVhEoi+f qmSF6XflcQKbUO6PrOX1Q0xWTHQ6Vi91QECqsqZxEQjzjAERZYida9MEJzJwrkr4 s9U5LLF8vVaRErSp7rYz8ebX7EYaC6AdFIOV09StqQHnQ9KA+XMdjUKZz185UofX AGXz2sBkHYv5J54ZfrwHw+srhdr7+xuia0hre05AsGgmo3xPuNnjBZ4xx8dIy6xO C4FTxNJxotHtdg== -----END CERTIFICATE-----Generated at Tue Feb 3 02:14:20 2026 by rpki-client