This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft File: qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json) Hash identifier: tG2aE4SD62M2DSjnUWNLwpA6nxl8iU/Ti6lCxjP77XM= Subject key identifier: 7F:88:A8:D4:FA:EA:C4:47:5E:36:5F:1A:FA:1F:D6:47:0B:0D:EC:68 Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64 Certificate issuer: /CN=a92ea758e415594a8037ffdb798f6bb918c15e64 Certificate serial: 019BB39587F185CA657C1570B9F471EBCDD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft Manifest number: 1602 Signing time: Mon 12 Jan 2026 19:01:19 +0000 Manifest this update: Mon 12 Jan 2026 19:01:19 +0000 Manifest next update: Tue 13 Jan 2026 19:01:19 +0000 Files and hashes: 1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: eoD8mjmj01QUlhmSeo0V8ruiX2HrbXusOy9h81fOHnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:95:87:f1:85:ca:65:7c:15:70:b9:f4:71:eb:cd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64 Validity Not Before: Jan 12 19:01:19 2026 GMT Not After : Jan 13 19:01:19 2026 GMT Subject: CN=7f88a8d4faeac4475e365f1afa1fd6470b0dec68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:26:a9:a2:89:63:49:39:91:55:82:87:94: 5a:2d:04:4b:73:75:e4:7a:8a:87:b4:86:ff:be:b6: ff:9b:8d:55:de:20:79:ca:7f:d5:9d:63:6e:19:47: 98:0b:3b:bd:70:3f:40:cb:5d:f4:c4:f3:3b:60:88: 30:2a:30:b8:f5:15:b5:66:dc:a9:ea:77:91:d8:ba: 23:c0:a1:87:80:8e:93:dd:9f:96:96:e2:51:10:b1: 39:e8:63:aa:dd:21:c6:d5:1d:e1:a8:b2:4a:90:44: 99:44:49:2f:85:7c:9d:8e:9a:dc:b9:b7:02:0d:cc: e9:d8:b0:9b:18:9e:ff:27:a1:52:fd:b9:aa:f1:fb: ec:5d:63:e0:a3:96:70:e1:57:b3:ba:b7:26:c8:da: 93:c4:cd:ee:3d:78:a9:49:63:d4:19:08:de:79:cb: 20:29:49:24:e3:c7:4b:eb:ce:28:a6:a2:53:d3:65: 6e:23:94:dc:c1:a9:02:8f:38:76:0b:34:0c:c0:80: 49:2a:5c:15:33:fd:db:fc:d4:3f:2f:5c:28:fd:75: 44:99:ac:1a:ff:6f:c7:cf:af:bd:f4:30:52:a7:c8: 58:0b:03:13:93:a8:5c:41:26:00:30:e3:00:a9:2b: c5:53:a5:3a:a7:26:5c:f1:3a:71:b8:e6:88:0b:f7: 1d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:88:A8:D4:FA:EA:C4:47:5E:36:5F:1A:FA:1F:D6:47:0B:0D:EC:68 X509v3 Authority Key Identifier: keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:39:d0:91:7c:77:55:49:a1:0d:d3:ce:ed:9d:7a:30:19:c2: 72:4e:db:51:d0:e6:ef:1e:c7:5d:74:48:67:3b:46:db:01:5c: bc:ce:16:0c:25:2e:68:05:b7:73:d5:8b:d4:ec:21:5c:29:7b: 70:cb:ba:40:b1:8b:53:6f:9e:3e:da:00:68:21:51:b8:c0:c2: d2:fb:17:d5:9f:db:da:c7:d2:11:48:70:9b:fa:05:78:23:60: c2:18:5f:80:58:c5:66:74:2f:6e:fb:49:d6:7a:20:10:19:71: ac:c4:7e:37:46:55:c9:02:de:85:b1:8c:c2:2d:86:1b:6a:23: 27:56:3c:2b:f5:57:eb:80:2e:23:3a:16:5e:a9:4b:0d:cf:38: da:35:6d:6e:5f:93:db:f9:5a:c3:6e:84:79:7b:f9:50:cb:fc: 04:97:d3:21:81:3e:dd:5f:3d:0f:35:89:75:18:4c:3c:8a:86: 50:49:b6:b0:a6:6a:bd:e7:af:97:ff:9c:d1:bf:2a:61:0c:08: 02:43:58:1f:ea:90:48:bf:41:5e:6e:7a:dd:8c:96:c8:77:2e: 62:e5:22:2f:97:7e:d6:91:f4:1c:3c:32:c8:8d:8e:7c:62:f3: 49:c5:28:c3:36:48:9a:7b:1b:7c:fd:b7:67:aa:09:b2:c8:47: ef:93:92:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzlYfxhcplfBVwufRx683QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmVhNzU4ZTQxNTU5NGE4MDM3ZmZkYjc5OGY2YmI5MThj MTVlNjQwHhcNMjYwMTEyMTkwMTE5WhcNMjYwMTEzMTkwMTE5WjAzMTEwLwYDVQQD Eyg3Zjg4YThkNGZhZWFjNDQ3NWUzNjVmMWFmYTFmZDY0NzBiMGRlYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCsmqaKJY0k5kVWCh5RaLQRLc3Xk eoqHtIb/vrb/m41V3iB5yn/VnWNuGUeYCzu9cD9Ay130xPM7YIgwKjC49RW1Ztyp 6neR2LojwKGHgI6T3Z+WluJRELE56GOq3SHG1R3hqLJKkESZREkvhXydjprcubcC Dczp2LCbGJ7/J6FS/bmq8fvsXWPgo5Zw4VezurcmyNqTxM3uPXipSWPUGQjeecsg KUkk48dL684opqJT02VuI5TcwakCjzh2CzQMwIBJKlwVM/3b/NQ/L1wo/XVEmawa /2/Hz6+99DBSp8hYCwMTk6hcQSYAMOMAqSvFU6U6pyZc8TpxuOaIC/cdRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+IqNT66sRHXjZfGvof1kcLDexoMB8GA1UdIwQY MBaAFKkup1jkFVlKgDf/23mPa7kYwV5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVM2bldPUVZXVXFBTl9fYmVZOXJ1UmpCWG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iZmE0ZDQtNzZiNy00MDlhLTg1MmYt OTU4NmQ4NDAxMzRlLzEvcVM2bldPUVZXVXFBTl9fYmVZOXJ1UmpCWG1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iZmE0ZDQtNzZiNy00MDlhLTg1MmYtOTU4NmQ4NDAxMzRl LzEvcVM2bldPUVZXVXFBTl9fYmVZOXJ1UmpCWG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTnQkXx3 VUmhDdPO7Z16MBnCck7bUdDm7x7HXXRIZztG2wFcvM4WDCUuaAW3c9WL1OwhXCl7 cMu6QLGLU2+ePtoAaCFRuMDC0vsX1Z/b2sfSEUhwm/oFeCNgwhhfgFjFZnQvbvtJ 1nogEBlxrMR+N0ZVyQLehbGMwi2GG2ojJ1Y8K/VX64AuIzoWXqlLDc842jVtbl+T 2/law26EeXv5UMv8BJfTIYE+3V89DzWJdRhMPIqGUEm2sKZqveevl/+c0b8qYQwI AkNYH+qQSL9BXm563YyWyHcuYuUiL5d+1pH0HDwyyI2OfGLzScUowzZImnsbfP23 Z6oJsshH75OS0g== -----END CERTIFICATE-----Generated at Tue Jan 13 04:37:22 2026 by rpki-client