This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json) Hash identifier: KI2LR+hul4vR44C7d/+mW2ufpqDNOfQuOc860YYoSaM= Subject key identifier: E2:C0:17:9E:07:97:17:BC:DA:54:6D:A1:9C:6B:E4:94:F8:03:8F:97 Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78 Certificate issuer: /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78 Certificate serial: 019BAE6F710F6F2F8CD83ABE8E709B82614E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft Manifest number: 17C0 Signing time: Sun 11 Jan 2026 19:01:37 +0000 Manifest this update: Sun 11 Jan 2026 19:01:37 +0000 Manifest next update: Mon 12 Jan 2026 19:01:37 +0000 Files and hashes: 1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: HpjsZNNXgNVM62+iL0EYv8EyM92cIxGdDt9WrsGn6Tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6f:71:0f:6f:2f:8c:d8:3a:be:8e:70:9b:82:61:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78 Validity Not Before: Jan 11 19:01:37 2026 GMT Not After : Jan 12 19:01:37 2026 GMT Subject: CN=e2c0179e079717bcda546da19c6be494f8038f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:26:e0:22:4b:99:29:bf:75:5d:65:95:36:ef: 46:01:87:e6:ba:42:3e:1d:0c:31:d4:68:4a:f5:f8: fc:54:83:1c:a1:0f:7d:c6:78:d5:13:80:ea:81:e6: 70:e0:50:ca:ce:cb:d6:f5:2f:ef:99:66:a6:5d:b0: 2e:b6:6e:f0:cb:cb:77:6a:e0:01:d2:92:28:d1:1c: 5f:dc:83:24:12:8e:1d:b1:68:8f:d9:90:77:43:06: ac:56:66:68:f8:7b:dc:2b:7e:20:36:28:da:36:2b: 67:bc:63:ce:88:9b:cb:fd:f9:68:8a:0c:bc:b8:e1: 42:b0:4c:57:b7:00:5f:12:3f:d4:8b:95:ad:3f:5c: 91:f7:d4:75:44:32:80:31:68:ee:38:90:32:15:12: 66:a7:79:d2:1f:64:29:2c:ec:9a:bf:76:fa:5c:45: 65:0d:1d:f3:e8:75:d1:9d:2c:37:1d:3c:f3:a4:1b: 35:16:2d:b4:75:84:1a:47:95:2e:8e:f9:74:dd:09: ec:8c:76:3a:4d:16:61:19:f1:38:f3:46:a7:7b:b6: b0:50:85:ba:ab:f4:11:8f:8f:d0:40:af:85:07:f7: 5b:6b:f2:29:96:a2:eb:62:b0:eb:37:45:fd:1a:8d: b0:2f:22:b8:73:70:4d:59:a4:ff:8a:eb:f3:64:41: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C0:17:9E:07:97:17:BC:DA:54:6D:A1:9C:6B:E4:94:F8:03:8F:97 X509v3 Authority Key Identifier: keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:45:2c:fe:a2:38:81:01:cc:63:92:15:46:dd:4e:aa:52:df: a6:a1:60:a8:01:ce:11:ab:21:27:15:78:4c:1d:04:00:b8:4a: 21:82:07:60:bb:7a:c1:06:e8:3a:9c:b5:8c:e1:a8:61:62:52: 97:fd:9b:de:ac:ef:c3:ac:54:03:b6:36:5f:03:db:10:76:61: 2c:c9:7c:eb:d8:1a:b4:e6:87:2d:f7:49:4a:a2:1a:49:38:d0: 6a:57:f9:ab:ee:ab:6e:bf:f0:21:fa:07:57:2e:08:f5:e9:99: 6a:fe:57:68:b7:03:40:02:94:8c:b4:f5:69:9a:ae:8e:d9:cf: b1:06:41:36:8f:0d:07:49:aa:01:01:e5:83:fe:08:45:bb:fc: a6:56:6d:67:38:4c:a1:73:7f:bf:10:9c:bc:c5:ec:16:b7:20: d1:e7:98:5f:40:e8:38:2d:d4:2b:94:12:33:39:0c:d6:60:fb: eb:19:be:dd:e4:32:65:4e:00:43:95:b2:1a:50:d2:25:69:0d: 8f:64:6a:8e:4c:2e:06:86:9f:f4:73:0c:f6:eb:60:0e:74:90: f6:25:a3:08:d0:9c:ff:a9:ec:4c:1f:e1:4f:47:cf:a0:b6:86: 69:4d:d5:46:e0:ae:ae:ed:cf:24:64:7b:0a:b2:1f:70:a4:b2: 62:03:ab:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuub3EPby+M2Dq+jnCbgmFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YWIzYmY4MzYyNjVmMmFhYjhmOTE5YmU4Y2ZiNmViNzQ3 ZTVmNzgwHhcNMjYwMTExMTkwMTM3WhcNMjYwMTEyMTkwMTM3WjAzMTEwLwYDVQQD EyhlMmMwMTc5ZTA3OTcxN2JjZGE1NDZkYTE5YzZiZTQ5NGY4MDM4Zjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CbgIkuZKb91XWWVNu9GAYfmukI+ HQwx1GhK9fj8VIMcoQ99xnjVE4DqgeZw4FDKzsvW9S/vmWamXbAutm7wy8t3auAB 0pIo0Rxf3IMkEo4dsWiP2ZB3QwasVmZo+HvcK34gNijaNitnvGPOiJvL/floigy8 uOFCsExXtwBfEj/Ui5WtP1yR99R1RDKAMWjuOJAyFRJmp3nSH2QpLOyav3b6XEVl DR3z6HXRnSw3HTzzpBs1Fi20dYQaR5Uujvl03QnsjHY6TRZhGfE480ane7awUIW6 q/QRj4/QQK+FB/dba/IplqLrYrDrN0X9Go2wLyK4c3BNWaT/iuvzZEGqkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLAF54Hlxe82lRtoZxr5JT4A4+XMB8GA1UdIwQY MBaAFEarO/g2Jl8qq4+Rm+jPtut0fl94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hZjcyNzQtY2NlNC00MmE2LTkzNDMt M2QyODZlODY1MWZjLzEvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hZjcyNzQtY2NlNC00MmE2LTkzNDMtM2QyODZlODY1MWZj LzEvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEUs/qI4 gQHMY5IVRt1OqlLfpqFgqAHOEashJxV4TB0EALhKIYIHYLt6wQboOpy1jOGoYWJS l/2b3qzvw6xUA7Y2XwPbEHZhLMl869gatOaHLfdJSqIaSTjQalf5q+6rbr/wIfoH Vy4I9emZav5XaLcDQAKUjLT1aZqujtnPsQZBNo8NB0mqAQHlg/4IRbv8plZtZzhM oXN/vxCcvMXsFrcg0eeYX0DoOC3UK5QSMzkM1mD76xm+3eQyZU4AQ5WyGlDSJWkN j2RqjkwuBoaf9HMM9utgDnSQ9iWjCNCc/6nsTB/hT0fPoLaGaU3VRuCuru3PJGR7 CrIfcKSyYgOrkg== -----END CERTIFICATE-----Generated at Sun Jan 11 22:31:13 2026 by rpki-client