This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json) Hash identifier: IV6XJXEB7wxZGkpL7T4Jze4RrhG4xQBewqBlwa+DliQ= Subject key identifier: D7:2B:24:AA:7E:76:E2:8F:B1:9A:61:36:DE:6B:AF:E5:27:40:E5:AD Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08 Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108 Certificate serial: 019BAEDD85121D4AA7FFE272D50A690F20D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft Manifest number: 1612 Signing time: Sun 11 Jan 2026 21:01:51 +0000 Manifest this update: Sun 11 Jan 2026 21:01:51 +0000 Manifest next update: Mon 12 Jan 2026 21:01:51 +0000 Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: ecm1yewUcSSuu9YhQ59XmZlXAA39cXZUIT2ctLClHyg=) 2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:85:12:1d:4a:a7:ff:e2:72:d5:0a:69:0f:20:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108 Validity Not Before: Jan 11 21:01:51 2026 GMT Not After : Jan 12 21:01:51 2026 GMT Subject: CN=d72b24aa7e76e28fb19a6136de6bafe52740e5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:ad:a8:a1:7f:9d:cf:98:67:8c:56:19:49: 0d:bf:81:0b:cc:8d:97:e5:b2:f3:11:de:f1:63:38: 32:a4:6c:bf:e1:94:a0:01:e4:29:16:a9:6c:c7:17: 90:b7:9c:e2:6b:9d:4d:8a:68:11:77:2b:1e:d5:a8: 12:ec:e7:15:d6:44:cf:8b:54:15:8b:e6:16:9d:de: 91:80:a1:5d:99:a4:27:4e:7d:91:d2:cf:a3:f7:f6: 09:4b:9a:89:55:74:20:72:1b:f1:29:b9:94:f0:85: 6a:2d:5e:8d:0e:be:d3:51:3e:01:02:a6:e7:ac:38: 5f:cd:e6:3e:9b:27:37:9f:11:68:61:a6:5f:e1:72: c3:88:d0:c1:e0:e8:2f:c1:f2:0a:d8:5d:a7:fd:6c: bf:8a:e4:c3:96:5b:e8:2c:7b:40:8a:0d:26:c1:1c: 3b:2e:30:50:48:e8:84:65:57:5c:49:e8:38:8a:5d: 02:6d:b0:0b:56:6c:33:bd:28:65:f2:94:40:63:5c: 6a:98:b7:ef:72:16:fa:0f:02:d0:65:a7:bb:99:79: 91:cd:be:53:06:57:d8:cf:72:a6:c6:e1:c9:e6:3c: 31:c5:b4:ea:fc:6a:97:bc:6f:b2:5d:ab:0d:a4:50: aa:bd:35:a2:74:60:53:d6:36:bf:33:41:ec:53:3e: 6e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2B:24:AA:7E:76:E2:8F:B1:9A:61:36:DE:6B:AF:E5:27:40:E5:AD X509v3 Authority Key Identifier: keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d7:bc:88:f4:0e:c6:1f:ff:6d:0e:51:30:21:66:87:92:aa: 64:58:72:2f:a6:a0:ea:52:b9:52:34:bf:3c:d9:a6:c0:59:28: 75:5f:82:b7:f8:20:7f:8e:e4:2e:7f:0b:4f:14:29:a5:53:32: ca:55:ba:ee:f1:c2:16:72:6c:4a:9c:ae:ff:8b:ee:8b:2e:15: 09:70:69:17:ca:59:0a:61:bc:e7:4f:82:9e:43:20:d9:46:8d: 33:45:42:5a:0a:55:bd:18:4a:90:ab:97:23:5d:b4:8a:6e:67: 7d:b3:3d:bb:79:65:9b:b5:75:09:33:16:ca:a0:3a:30:db:57: e2:f2:65:57:16:8b:87:b7:70:5b:e7:24:a9:20:20:bf:b3:4a: 56:02:a7:33:d3:e0:e3:98:ba:11:f2:56:31:10:df:b7:be:04: 3e:30:af:81:b4:f0:b7:1a:38:c8:a5:4a:55:47:c6:f4:8e:dd: 5e:e5:ce:b9:46:c4:6e:03:6a:65:34:34:49:bd:67:43:ab:cb: 19:ce:00:0e:f6:d4:9e:99:f5:22:79:4e:5e:97:28:ef:0d:24: 7c:ae:21:8a:0a:0d:ea:34:4c:fc:53:d3:b4:b9:48:ff:c9:f0: be:dc:82:c3:ed:78:77:f6:d5:0a:ba:3a:c9:0b:b8:99:d9:58: 8c:98:3e:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3YUSHUqn/+Jy1QppDyDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYThlMjg5OTY5M2ZjYTAwYmQ4MDQxYmE4ODAxZjJkODg4 NjkxMDgwHhcNMjYwMTExMjEwMTUxWhcNMjYwMTEyMjEwMTUxWjAzMTEwLwYDVQQD EyhkNzJiMjRhYTdlNzZlMjhmYjE5YTYxMzZkZTZiYWZlNTI3NDBlNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2WtqKF/nc+YZ4xWGUkNv4ELzI2X 5bLzEd7xYzgypGy/4ZSgAeQpFqlsxxeQt5zia51NimgRdyse1agS7OcV1kTPi1QV i+YWnd6RgKFdmaQnTn2R0s+j9/YJS5qJVXQgchvxKbmU8IVqLV6NDr7TUT4BAqbn rDhfzeY+myc3nxFoYaZf4XLDiNDB4OgvwfIK2F2n/Wy/iuTDllvoLHtAig0mwRw7 LjBQSOiEZVdcSeg4il0CbbALVmwzvShl8pRAY1xqmLfvchb6DwLQZae7mXmRzb5T BlfYz3KmxuHJ5jwxxbTq/GqXvG+yXasNpFCqvTWidGBT1ja/M0HsUz5ufwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcrJKp+duKPsZphNt5rr+UnQOWtMB8GA1UdIwQY MBaAFEOo4omWk/ygC9gEG6iAHy2IhpEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUt NDk1NDI3MGUyNTA3LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUtNDk1NDI3MGUyNTA3 LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9e8iPQO xh//bQ5RMCFmh5KqZFhyL6ag6lK5UjS/PNmmwFkodV+Ct/ggf47kLn8LTxQppVMy ylW67vHCFnJsSpyu/4vuiy4VCXBpF8pZCmG850+CnkMg2UaNM0VCWgpVvRhKkKuX I120im5nfbM9u3llm7V1CTMWyqA6MNtX4vJlVxaLh7dwW+ckqSAgv7NKVgKnM9Pg 45i6EfJWMRDft74EPjCvgbTwtxo4yKVKVUfG9I7dXuXOuUbEbgNqZTQ0Sb1nQ6vL Gc4ADvbUnpn1InlOXpco7w0kfK4higoN6jRM/FPTtLlI/8nwvtyCw+14d/bVCro6 yQu4mdlYjJg+mQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:18:50 2026 by rpki-client