This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json) Hash identifier: MP5+JVNq/dnmriPg/ie+130zXISyy2l1K3XRmhXsdpg= Subject key identifier: 07:01:13:46:CA:77:FA:C3:66:4B:1B:7D:46:9F:DE:48:3C:0F:C4:C6 Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Certificate serial: 019BDFC92EB14A316D0AB9E4BA7670002DA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft Manifest number: 02F1 Signing time: Wed 21 Jan 2026 09:01:02 +0000 Manifest this update: Wed 21 Jan 2026 09:01:02 +0000 Manifest next update: Thu 22 Jan 2026 09:01:02 +0000 Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=) 2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=) 3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: yrU7TIJxnAHpnTaiWCq2qlZ9hS2UK/YhDrMpoEYRn1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:c9:2e:b1:4a:31:6d:0a:b9:e4:ba:76:70:00:2d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Validity Not Before: Jan 21 09:01:02 2026 GMT Not After : Jan 22 09:01:02 2026 GMT Subject: CN=07011346ca77fac3664b1b7d469fde483c0fc4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:44:a9:5d:f5:ef:39:d9:7b:ad:72:75:49: 5a:32:8e:fd:74:5f:3c:42:05:ec:2c:40:ff:7d:16: 65:5a:a3:5d:c9:14:e2:13:d7:f8:ee:59:3b:c2:05: 06:87:6b:22:a4:19:79:bd:2b:53:b6:04:ea:0e:69: c2:62:cc:1e:21:9a:aa:ee:0b:b7:58:40:48:56:ef: f6:d9:3b:8a:e3:b9:62:b7:11:51:3a:50:88:7f:77: db:cf:f1:55:98:18:02:ce:cc:62:8e:61:ab:90:64: fc:a2:3d:cf:b5:3d:fe:05:39:64:2d:89:31:7d:70: 85:a3:a6:65:02:a5:9e:be:9d:2c:d0:c2:c3:f8:6f: 18:d4:51:4e:24:1a:31:f7:61:45:6a:03:fb:cb:7a: 95:66:0d:df:06:06:20:db:4d:cd:94:ec:29:8b:bd: 2c:48:78:32:8d:96:34:57:06:c1:3c:23:c4:bd:b1: fd:d3:49:87:20:02:27:e1:4d:c8:46:4b:b9:27:b7: 5d:9b:58:c0:3d:66:c4:48:ca:34:56:d6:8d:aa:fd: e8:a7:cd:43:e3:c0:15:9f:fe:6c:9d:78:2b:96:2d: 2b:be:1c:5b:aa:f8:6b:1a:eb:6d:c6:6a:66:50:69: 34:83:0c:7b:c1:e6:04:71:7f:a6:8d:9f:89:1f:98: 2b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:01:13:46:CA:77:FA:C3:66:4B:1B:7D:46:9F:DE:48:3C:0F:C4:C6 X509v3 Authority Key Identifier: keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:30:30:9a:45:a7:50:9c:7d:71:47:b2:9a:2d:a4:30:7d:c5: eb:f2:66:09:e1:bd:da:db:34:4e:74:f1:13:b5:01:bd:83:5f: c3:81:1f:a8:cb:22:f6:88:67:74:23:f0:92:e8:b6:47:34:0c: dc:c7:b9:4c:f8:51:96:4e:b3:19:69:a5:ed:2a:7f:07:33:9d: 3b:f8:56:21:7c:90:3f:4b:98:84:1a:4a:f7:a2:b1:b3:99:0e: 37:8a:0f:df:c7:79:a4:82:94:34:f1:a9:17:cc:50:b1:4b:0e: ff:3d:6f:4d:37:4c:5c:a1:09:50:81:a7:ef:10:ba:85:5a:25: 87:93:2b:bb:4d:b6:11:80:ad:57:79:3f:f3:00:85:7c:94:3e: f5:e5:72:50:5f:76:b7:9e:2f:4a:e1:36:7e:d3:74:2f:b1:12: 1d:b1:c1:da:00:98:d4:f2:a1:7e:8c:90:26:77:79:4a:af:4a: 81:d8:88:74:ea:1d:87:36:bd:18:ad:64:1d:30:10:20:c1:7d: 35:5e:2a:59:da:71:31:05:21:5e:1e:f8:61:16:2a:86:d2:92: 9e:52:34:16:d8:7e:f1:c7:cf:b4:66:00:d6:0c:37:64:5d:5f: ef:57:44:19:66:16:ca:11:a3:79:0b:1c:aa:d4:bd:fd:47:ea: 05:b5:9a:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfyS6xSjFtCrnkunZwAC2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNmQ4ODkwNDFjYjI5YWVkMWZlMWFjMzgwYzc5NGFmN2E0 MmM3ZDEwHhcNMjYwMTIxMDkwMTAyWhcNMjYwMTIyMDkwMTAyWjAzMTEwLwYDVQQD EygwNzAxMTM0NmNhNzdmYWMzNjY0YjFiN2Q0NjlmZGU0ODNjMGZjNGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxChEqV317znZe61ydUlaMo79dF88 QgXsLED/fRZlWqNdyRTiE9f47lk7wgUGh2sipBl5vStTtgTqDmnCYsweIZqq7gu3 WEBIVu/22TuK47litxFROlCIf3fbz/FVmBgCzsxijmGrkGT8oj3PtT3+BTlkLYkx fXCFo6ZlAqWevp0s0MLD+G8Y1FFOJBox92FFagP7y3qVZg3fBgYg203NlOwpi70s SHgyjZY0VwbBPCPEvbH900mHIAIn4U3IRku5J7ddm1jAPWbESMo0VtaNqv3op81D 48AVn/5snXgrli0rvhxbqvhrGuttxmpmUGk0gwx7weYEcX+mjZ+JH5grBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcBE0bKd/rDZksbfUaf3kg8D8TGMB8GA1UdIwQY MBaAFKptiJBByymu0f4aw4DHlK96QsfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYt ZTEzZDY5YTAwNDVlLzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYtZTEzZDY5YTAwNDVl LzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjAwmkWn UJx9cUeymi2kMH3F6/JmCeG92ts0TnTxE7UBvYNfw4EfqMsi9ohndCPwkui2RzQM 3Me5TPhRlk6zGWml7Sp/BzOdO/hWIXyQP0uYhBpK96Kxs5kON4oP38d5pIKUNPGp F8xQsUsO/z1vTTdMXKEJUIGn7xC6hVolh5Mru022EYCtV3k/8wCFfJQ+9eVyUF92 t54vSuE2ftN0L7ESHbHB2gCY1PKhfoyQJnd5Sq9KgdiIdOodhza9GK1kHTAQIMF9 NV4qWdpxMQUhXh74YRYqhtKSnlI0Fth+8cfPtGYA1gw3ZF1f71dEGWYWyhGjeQsc qtS9/UfqBbWaPA== -----END CERTIFICATE-----Generated at Wed Jan 21 17:20:28 2026 by rpki-client