This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json) Hash identifier: 5or2W8CWDTeG6Vje+BHoDmsf5jKXajP/HivdMen4TkY= Subject key identifier: 72:9A:85:E4:43:94:03:F0:E9:8F:64:CA:1C:69:27:16:EF:C0:7D:49 Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Certificate serial: 019B988C919AFF6C2A586C4C03E822D3C026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft Manifest number: 07B3 Signing time: Wed 07 Jan 2026 13:01:47 +0000 Manifest this update: Wed 07 Jan 2026 13:01:47 +0000 Manifest next update: Thu 08 Jan 2026 13:01:47 +0000 Files and hashes: 1: EWYJbFjQX31oYWlD58OJv_l9B30.roa (hash: 2Mav6QQLVSCd9edMOwHxUMX2MqYRij3v85DASHfIvYU=) 2: nYyVLm0gMDde0qblfT3ncHKAnz8.roa (hash: jNbahQjR6FvDEsOWUHlprHyKe5vIEPV9UxOl9Q91iVk=) 3: ow6igTPRlqbGU9GWr5GsAICpDvc.roa (hash: M2OOGjwOx0AiSEzEWO1U/xWbG8Khv5JvliFIW9WxDrw=) 4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: 84P5l6GcaeKFfLdAYjuTTH/adM+Ww2YkcgvVABGtetM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:8c:91:9a:ff:6c:2a:58:6c:4c:03:e8:22:d3:c0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Validity Not Before: Jan 7 13:01:47 2026 GMT Not After : Jan 8 13:01:47 2026 GMT Subject: CN=729a85e4439403f0e98f64ca1c692716efc07d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fe:61:2d:55:a1:b1:fd:00:3f:83:73:5b:a5: 9f:24:41:38:da:ab:c1:48:21:44:70:e3:80:44:63: 78:4e:5b:ea:cd:67:5a:df:95:c8:63:da:27:e5:00: 28:02:da:a9:3c:86:4c:89:1f:9f:f7:98:45:a8:11: 01:bd:cc:8b:44:d7:2b:23:2c:7b:a8:e6:5c:56:85: 6f:71:67:9a:21:da:40:5e:1b:55:b7:46:0e:50:2c: 35:ca:73:5a:ce:78:0d:d0:68:87:b5:d7:80:77:85: 83:ff:4e:b2:d0:2a:71:79:b3:89:fe:e7:46:da:d7: 35:9f:ab:34:0d:82:93:a8:fb:13:7a:53:63:23:0b: 23:aa:d2:8a:4a:b7:5e:02:5e:a7:8d:56:31:2f:5a: 39:1a:a1:a0:55:3c:a0:dd:99:7a:60:04:7b:81:2e: 15:7b:1e:6a:80:78:0a:05:0b:80:dc:79:75:c6:06: c1:9c:65:b6:e5:3d:35:2b:74:6f:6f:74:94:93:b5: 2f:6d:de:e2:0d:3f:89:76:7a:24:be:58:85:71:53: 0a:ee:44:4d:97:5d:6d:2d:f5:f6:3d:0e:db:f3:56: 8c:52:66:87:b7:12:64:87:dd:eb:ea:aa:ad:24:e1: 89:dd:e7:84:bb:49:15:b5:36:67:80:af:3b:b6:78: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9A:85:E4:43:94:03:F0:E9:8F:64:CA:1C:69:27:16:EF:C0:7D:49 X509v3 Authority Key Identifier: keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cc:2e:17:29:6c:f0:e1:65:62:d9:bc:d5:0a:cb:e6:9e:fe: 4b:f6:5b:c8:4a:ad:c8:4e:76:dc:1c:d6:6f:19:f6:2c:12:3a: 4f:e3:6c:97:83:fe:8d:cf:34:ae:41:44:f3:ae:e6:87:24:66: 9e:ab:6c:89:92:94:8a:da:1a:09:01:17:00:c0:81:ad:e4:6e: 8f:59:36:fb:1c:7d:24:aa:13:8c:a8:5c:d4:9a:5c:e2:d7:a7: d7:5c:ae:e6:9b:1a:2f:47:44:8e:4e:df:90:06:48:07:44:f3: 09:d9:a6:35:90:d4:0b:8d:91:cf:c8:f1:4b:f1:82:23:da:0c: c2:eb:ca:58:96:2c:a3:fd:e3:ab:39:a5:5d:27:a0:86:5b:fb: d5:f7:2a:3d:8b:a2:42:74:bb:5d:0a:19:e2:25:9d:c7:8c:7d: 7b:47:7c:7b:b8:da:b5:bc:c2:79:3c:70:fd:fc:1b:9e:6e:dc: 4c:da:1c:84:77:02:e9:cf:7e:56:ee:3d:3a:73:f1:18:ef:87: 21:9d:44:d4:64:9f:45:36:62:11:38:3c:97:a4:51:c5:b6:8f: 29:68:8d:ef:37:a3:ad:ca:04:19:8a:a5:62:18:4c:13:b7:fa: ab:30:57:20:34:2f:cb:c8:6f:b3:7b:b5:da:2e:6e:4e:ba:d5: b7:55:b0:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuYjJGa/2wqWGxMA+gi08AmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmY2YTM2ZWMyOTYwZDRkMDVmM2Q5ZGNiMTg3YjliOTA0 ZWE1OWIwHhcNMjYwMTA3MTMwMTQ3WhcNMjYwMTA4MTMwMTQ3WjAzMTEwLwYDVQQD Eyg3MjlhODVlNDQzOTQwM2YwZTk4ZjY0Y2ExYzY5MjcxNmVmYzA3ZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv5hLVWhsf0AP4NzW6WfJEE42qvB SCFEcOOARGN4TlvqzWda35XIY9on5QAoAtqpPIZMiR+f95hFqBEBvcyLRNcrIyx7 qOZcVoVvcWeaIdpAXhtVt0YOUCw1ynNazngN0GiHtdeAd4WD/06y0CpxebOJ/udG 2tc1n6s0DYKTqPsTelNjIwsjqtKKSrdeAl6njVYxL1o5GqGgVTyg3Zl6YAR7gS4V ex5qgHgKBQuA3Hl1xgbBnGW25T01K3Rvb3SUk7Uvbd7iDT+JdnokvliFcVMK7kRN l11tLfX2PQ7b81aMUmaHtxJkh93r6qqtJOGJ3eeEu0kVtTZngK87tngFUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKaheRDlAPw6Y9kyhxpJxbvwH1JMB8GA1UdIwQY MBaAFKtvajbsKWDU0F89ncsYe5uQTqWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUt OTRiYjgzYTIwMDI5LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUtOTRiYjgzYTIwMDI5 LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOswuFyls 8OFlYtm81QrL5p7+S/ZbyEqtyE523BzWbxn2LBI6T+Nsl4P+jc80rkFE867mhyRm nqtsiZKUitoaCQEXAMCBreRuj1k2+xx9JKoTjKhc1Jpc4ten11yu5psaL0dEjk7f kAZIB0TzCdmmNZDUC42Rz8jxS/GCI9oMwuvKWJYso/3jqzmlXSeghlv71fcqPYui QnS7XQoZ4iWdx4x9e0d8e7jatbzCeTxw/fwbnm7cTNochHcC6c9+Vu49OnPxGO+H IZ1E1GSfRTZiETg8l6RRxbaPKWiN7zejrcoEGYqlYhhME7f6qzBXIDQvy8hvs3u1 2i5uTrrVt1WwTA== -----END CERTIFICATE-----Generated at Wed Jan 7 22:13:03 2026 by rpki-client