This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft File: qqng6Jg9netBVxbWHoyRJRCibCQ.mft (raw, json) Hash identifier: PJhT31boRXtt4+jBa/3/9tk6U2KOzFoT8a9izFD9plQ= Subject key identifier: E5:D4:AB:4C:BE:8E:4B:E0:1E:41:F0:87:22:61:76:2B:F5:FC:AE:07 Authority key identifier: AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24 Certificate issuer: /CN=aaa9e0e8983d9deb415716d61e8c912510a26c24 Certificate serial: 019BB094332E72BCA80F485A299983C1BC63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft Manifest number: 030A Signing time: Mon 12 Jan 2026 05:01:00 +0000 Manifest this update: Mon 12 Jan 2026 05:01:00 +0000 Manifest next update: Tue 13 Jan 2026 05:01:00 +0000 Files and hashes: 1: NThsozj8huJ5IeZXtUiD3RXp3UE.roa (hash: tDMWht/uuveDY/y55oPzB8QNF9M6ccDoqURq7KgWOQI=) 2: qqng6Jg9netBVxbWHoyRJRCibCQ.crl (hash: yZlEPMRoMkrMVbQ3MGaV7KglOH7s0NEcwYK+wIUGzRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:94:33:2e:72:bc:a8:0f:48:5a:29:99:83:c1:bc:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa9e0e8983d9deb415716d61e8c912510a26c24 Validity Not Before: Jan 12 05:01:00 2026 GMT Not After : Jan 13 05:01:00 2026 GMT Subject: CN=e5d4ab4cbe8e4be01e41f0872261762bf5fcae07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:37:ff:43:8f:20:40:a4:4b:c7:97:e6:15: e4:32:12:bf:33:63:85:a6:bb:b1:25:9e:22:88:d5: 81:ea:09:3f:15:d2:23:42:56:c3:5a:0d:26:60:33: 21:5d:e8:ff:d2:78:17:99:1e:ef:9e:06:a2:ec:5a: 82:92:2a:61:5d:2b:2f:83:92:dd:75:84:43:75:66: 2c:21:47:78:56:fe:d4:c8:f6:47:e7:8f:ab:b0:04: 31:de:1a:24:27:02:05:1b:af:33:b6:8f:f6:03:14: 17:22:19:d3:4f:55:bd:bc:23:49:f0:22:74:4f:8f: 41:58:54:8e:c1:4f:d4:be:72:d7:e4:6b:d8:37:a8: cc:14:e9:10:b0:8c:0b:dd:99:ed:ed:d6:a0:13:7c: bc:24:21:cf:3e:ee:45:e3:bd:02:05:02:97:20:e3: 37:69:f6:0e:55:c9:9f:e7:d5:0d:7f:6c:7d:32:1b: a3:f4:4a:d0:6b:7f:8f:3e:bd:53:f9:7c:a6:9d:ff: 88:3f:ee:6d:01:29:6a:4d:86:1c:e4:83:d9:75:1a: 2e:4c:47:6c:66:3a:b9:cc:49:05:a6:42:67:cf:a3: 65:76:32:04:64:ca:7b:c4:60:bb:b8:a7:07:46:b2: 89:76:67:d7:51:1f:04:16:6d:6a:04:e8:c3:31:37: e2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D4:AB:4C:BE:8E:4B:E0:1E:41:F0:87:22:61:76:2B:F5:FC:AE:07 X509v3 Authority Key Identifier: keyid:AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:10:f3:3e:40:be:94:85:5f:f2:a9:a8:36:a2:b1:4c:4a:72: ff:9d:57:f4:bd:72:52:1a:ef:cd:34:6d:50:ff:8a:4d:84:79: 00:2e:84:46:e3:80:1d:d3:93:93:d6:a3:3c:cc:0e:85:ad:98: c7:c8:4a:af:78:7c:a7:14:fb:71:c1:47:34:0a:a0:25:b5:47: 13:14:db:57:29:a0:0d:36:81:1e:b9:6b:23:3c:be:dc:50:91: 2c:d7:b0:73:a5:69:db:82:3c:75:1d:93:9d:04:05:50:a6:ef: 1a:51:ec:71:32:1d:a9:d0:4c:ec:e1:33:a4:56:7b:90:a9:13: 14:d8:57:84:59:67:92:ac:8a:ac:03:33:5a:4e:88:6a:b3:55: dd:71:af:92:bc:23:d2:f3:ea:fe:f8:29:ff:d3:e9:0c:b4:4d: b5:3d:7a:3d:24:08:b5:a3:e0:87:91:42:15:54:88:75:7d:67: 12:da:53:80:b6:4b:46:8d:04:5c:11:04:b1:0f:11:97:d9:47: 7c:f8:ec:2d:67:42:c2:dc:15:7b:c3:73:d9:e8:ea:56:8d:b4: 3c:53:90:33:e9:32:d2:35:7e:1f:2c:84:ac:05:1e:3c:70:5f: 15:88:86:3d:2b:33:28:21:b8:6d:7d:19:46:54:51:93:2b:ac: f2:7a:7a:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwlDMucryoD0haKZmDwbxjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYTllMGU4OTgzZDlkZWI0MTU3MTZkNjFlOGM5MTI1MTBh MjZjMjQwHhcNMjYwMTEyMDUwMTAwWhcNMjYwMTEzMDUwMTAwWjAzMTEwLwYDVQQD EyhlNWQ0YWI0Y2JlOGU0YmUwMWU0MWYwODcyMjYxNzYyYmY1ZmNhZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTk3/0OPIECkS8eX5hXkMhK/M2OF pruxJZ4iiNWB6gk/FdIjQlbDWg0mYDMhXej/0ngXmR7vngai7FqCkiphXSsvg5Ld dYRDdWYsIUd4Vv7UyPZH54+rsAQx3hokJwIFG68zto/2AxQXIhnTT1W9vCNJ8CJ0 T49BWFSOwU/UvnLX5GvYN6jMFOkQsIwL3Znt7dagE3y8JCHPPu5F470CBQKXIOM3 afYOVcmf59UNf2x9Mhuj9ErQa3+PPr1T+Xymnf+IP+5tASlqTYYc5IPZdRouTEds Zjq5zEkFpkJnz6NldjIEZMp7xGC7uKcHRrKJdmfXUR8EFm1qBOjDMTfiKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXUq0y+jkvgHkHwhyJhdiv1/K4HMB8GA1UdIwQY MBaAFKqp4OiYPZ3rQVcW1h6MkSUQomwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hNjY2ZjQtZjZjZi00YWVkLWI5YmMt NDUxYjk2YWZjMmIxLzEvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hNjY2ZjQtZjZjZi00YWVkLWI5YmMtNDUxYjk2YWZjMmIx LzEvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBDzPkC+ lIVf8qmoNqKxTEpy/51X9L1yUhrvzTRtUP+KTYR5AC6ERuOAHdOTk9ajPMwOha2Y x8hKr3h8pxT7ccFHNAqgJbVHExTbVymgDTaBHrlrIzy+3FCRLNewc6Vp24I8dR2T nQQFUKbvGlHscTIdqdBM7OEzpFZ7kKkTFNhXhFlnkqyKrAMzWk6IarNV3XGvkrwj 0vPq/vgp/9PpDLRNtT16PSQItaPgh5FCFVSIdX1nEtpTgLZLRo0EXBEEsQ8Rl9lH fPjsLWdCwtwVe8Nz2ejqVo20PFOQM+ky0jV+HyyErAUePHBfFYiGPSszKCG4bX0Z RlRRkyus8np6cQ== -----END CERTIFICATE-----Generated at Mon Jan 12 07:57:28 2026 by rpki-client