This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft File: qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft (raw, json) Hash identifier: aS9vVih9/YLeKmFOeKauqHTBy+IugVUfJhl9uLumyug= Subject key identifier: 80:1B:CB:57:BE:1C:A3:2A:B5:4A:E0:8E:DB:9C:9C:52:13:35:90:F4 Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5 Certificate issuer: /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5 Certificate serial: 019B815FA0DB503B9107ADB92126E303D2D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft Manifest number: 0D07 Signing time: Sat 03 Jan 2026 01:01:26 +0000 Manifest this update: Sat 03 Jan 2026 01:01:26 +0000 Manifest next update: Sun 04 Jan 2026 01:01:26 +0000 Files and hashes: 1: okBlAs2MxKegFun8jqPmx6S71TI.roa (hash: ROgvc03TJnSVXqJkAtutWAdPihx/iJeoNeNlOaYR9fo=) 2: qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl (hash: 3M7Eb84otRBGVeZTTy4Qniw0ZH+BHnxQ9DtlOT3WCco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:5f:a0:db:50:3b:91:07:ad:b9:21:26:e3:03:d2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5 Validity Not Before: Jan 3 01:01:26 2026 GMT Not After : Jan 4 01:01:26 2026 GMT Subject: CN=801bcb57be1ca32ab54ae08edb9c9c52133590f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:75:9b:32:71:bc:40:59:ec:19:f8:7f:94:ff: ef:de:33:48:98:64:04:84:44:08:b5:2a:fc:2c:70: 38:f8:c5:44:3b:5c:8a:2f:6b:34:ca:c6:5a:c0:c7: 21:69:da:93:f3:37:e9:ef:62:40:57:81:40:c4:75: 4f:fd:11:46:e8:6f:64:5d:e8:11:5c:60:38:6f:f9: ad:5a:7a:98:14:71:3a:13:61:d0:10:d0:35:cb:64: 5d:9e:1e:f9:d0:ca:63:45:e1:ed:ac:20:20:b7:29: bd:07:9d:ef:b8:5e:8a:9d:3b:ca:73:45:46:09:80: 24:3d:ef:72:9b:6c:cb:73:3d:a9:5b:1f:4d:1b:ac: d0:81:4a:fe:e3:8f:61:42:bd:63:25:cc:b4:ba:9f: f4:c5:a2:75:d4:2a:32:a5:61:cb:88:d4:40:9c:eb: 80:5c:a7:75:29:2b:83:aa:1c:1d:56:a9:84:36:63: fe:37:ef:d4:84:90:a1:20:e6:35:21:90:b4:1d:dc: 49:5f:b8:43:2c:0f:a5:fb:d6:f6:dc:4c:95:4d:85: 74:a4:42:8f:0c:81:7a:96:87:f9:9c:26:22:e8:14: 3f:c1:ac:5d:a5:74:12:7a:f1:e6:78:70:31:f2:e4: ed:17:51:a5:3e:81:e5:70:b7:94:78:a9:ac:96:28: f7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1B:CB:57:BE:1C:A3:2A:B5:4A:E0:8E:DB:9C:9C:52:13:35:90:F4 X509v3 Authority Key Identifier: keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b9:2a:88:67:cf:4f:28:55:a7:23:c3:18:8b:98:39:25:43: eb:10:f1:1d:29:ff:b8:d1:26:63:e9:fd:95:2e:83:2a:04:8c: d5:03:62:56:65:0a:86:6e:10:f9:76:52:4f:99:b3:1b:00:99: 8a:0b:05:ea:21:9c:db:89:37:d3:d5:cc:b2:a9:e4:e3:f5:74: aa:f5:8b:55:74:4b:6f:f0:6a:eb:3d:9f:41:38:90:be:7c:ab: 5f:61:b5:4e:c7:fc:bb:57:00:c9:c5:6c:56:3f:ae:a3:ec:67: 3a:15:44:87:d9:31:95:dd:7b:e8:76:0e:62:ed:77:01:93:18: b1:80:9c:08:9d:2e:c9:2b:7a:92:df:48:71:d9:e0:eb:21:2f: 5c:12:71:2a:7c:ad:88:98:48:fa:38:65:eb:ca:93:a3:a7:94: ba:be:8c:1b:31:c8:3e:d1:e3:b4:ef:ba:ac:1c:5d:36:f0:b1: a5:da:04:e2:43:15:9c:2f:9e:5b:3f:f7:73:7b:63:ee:b9:96: b3:a3:05:29:25:2f:97:56:84:83:58:0e:39:eb:f8:c0:16:4e: 3b:c1:ae:ee:35:46:8e:ae:3d:e2:4d:f8:ff:68:5e:07:b1:f8: 6b:1b:51:b9:ad:9f:7e:a1:31:b4:f3:b9:16:8b:4d:08:74:87: b6:bf:68:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBX6DbUDuRB625ISbjA9LTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MzA4NGEwOWVkZGNmNTU2ZDE5YjNiNzM1NWM5ZGVmZTBh Mjc4ZjUwHhcNMjYwMTAzMDEwMTI2WhcNMjYwMTA0MDEwMTI2WjAzMTEwLwYDVQQD Eyg4MDFiY2I1N2JlMWNhMzJhYjU0YWUwOGVkYjljOWM1MjEzMzU5MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnWbMnG8QFnsGfh/lP/v3jNImGQE hEQItSr8LHA4+MVEO1yKL2s0ysZawMchadqT8zfp72JAV4FAxHVP/RFG6G9kXegR XGA4b/mtWnqYFHE6E2HQENA1y2Rdnh750MpjReHtrCAgtym9B53vuF6KnTvKc0VG CYAkPe9ym2zLcz2pWx9NG6zQgUr+449hQr1jJcy0up/0xaJ11CoypWHLiNRAnOuA XKd1KSuDqhwdVqmENmP+N+/UhJChIOY1IZC0HdxJX7hDLA+l+9b23EyVTYV0pEKP DIF6lof5nCYi6BQ/waxdpXQSevHmeHAx8uTtF1GlPoHlcLeUeKmslij3QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAby1e+HKMqtUrgjtucnFITNZD0MB8GA1UdIwQY MBaAFKgwhKCe3c9VbRmztzVcne/gonj1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcURDRW9KN2R6MVZ0R2JPM05WeWQ3LUNpZVBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMjE3ZTYtZDJjMy00NmY4LThlNDkt M2YxNDM5YTE1ZjFiLzEvcURDRW9KN2R6MVZ0R2JPM05WeWQ3LUNpZVBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wMjE3ZTYtZDJjMy00NmY4LThlNDktM2YxNDM5YTE1ZjFi LzEvcURDRW9KN2R6MVZ0R2JPM05WeWQ3LUNpZVBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLkqiGfP TyhVpyPDGIuYOSVD6xDxHSn/uNEmY+n9lS6DKgSM1QNiVmUKhm4Q+XZST5mzGwCZ igsF6iGc24k309XMsqnk4/V0qvWLVXRLb/Bq6z2fQTiQvnyrX2G1Tsf8u1cAycVs Vj+uo+xnOhVEh9kxld176HYOYu13AZMYsYCcCJ0uySt6kt9Icdng6yEvXBJxKnyt iJhI+jhl68qTo6eUur6MGzHIPtHjtO+6rBxdNvCxpdoE4kMVnC+eWz/3c3tj7rmW s6MFKSUvl1aEg1gOOev4wBZOO8Gu7jVGjq494k34/2heB7H4axtRua2ffqExtPO5 FotNCHSHtr9osQ== -----END CERTIFICATE-----Generated at Sat Jan 3 04:19:58 2026 by rpki-client