This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json) Hash identifier: zGubqHynErZ1VLYPZJb8P7q0P7SkQ+GsGk1btAdy3eA= Subject key identifier: BD:02:60:4C:12:15:17:37:02:1C:69:92:02:A2:A1:03:61:B2:86:FB Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31 Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31 Certificate serial: 019BF462A524CFEC518394B061300D83B91F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft Manifest number: 117B Signing time: Sun 25 Jan 2026 09:01:04 +0000 Manifest this update: Sun 25 Jan 2026 09:01:04 +0000 Manifest next update: Mon 26 Jan 2026 09:01:04 +0000 Files and hashes: 1: NQ75nb1-xJ7HIs6FdHfLr_Qn5o8.roa (hash: 0/Ed5GPxhq59pa7mSV6ONsdGXpQguRmYVeDEeOnkcHU=) 2: PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa (hash: 2Ri2mgKyHMUEf2CJlFmGd9Z/Z2goUwzz5lX8kmekZSA=) 3: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: rLEWJiFxpoQEYiw5SoK/FLbncbuYGmux0Wq51zyX3K8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:a5:24:cf:ec:51:83:94:b0:61:30:0d:83:b9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31 Validity Not Before: Jan 25 09:01:04 2026 GMT Not After : Jan 26 09:01:04 2026 GMT Subject: CN=bd02604c12151737021c699202a2a10361b286fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:03:d1:9d:b8:3e:b3:70:29:3c:ca:77:d0:76: ae:f2:1a:4c:df:03:05:38:75:fb:0e:42:bb:05:53: 86:db:e3:c5:ed:e3:38:e3:42:9d:54:cf:cf:9f:70: 4d:b8:ef:fe:c9:42:63:2e:d9:4b:3e:7e:80:be:53: 10:e9:5a:46:f0:ec:3b:10:cc:25:8f:6f:da:a6:d6: ec:13:54:b8:89:da:e0:e4:e6:51:12:d6:92:2d:ab: fc:8a:8e:30:96:6b:b8:c3:d6:53:52:1b:67:11:66: 6e:62:5f:80:55:d3:48:96:55:eb:a7:fc:ef:31:9e: d6:30:f6:6f:ff:a1:6e:9a:0f:c9:9b:26:14:8c:68: 29:0e:23:6e:08:c2:5e:d0:24:91:f4:b7:fe:f3:dd: 66:3d:b8:15:84:21:03:de:5b:d8:3a:89:31:bf:99: ce:22:f1:25:8b:2f:a2:41:91:99:e9:8d:ed:d8:c9: 8a:16:87:99:21:17:e0:cd:38:c2:b6:c8:c7:09:46: da:00:e2:da:c1:31:24:54:09:76:3f:3d:f5:d0:9a: 93:b2:46:d7:38:ac:43:03:33:ba:ee:9e:95:8f:65: 3a:4a:45:26:7b:21:91:35:80:fc:05:df:53:ab:da: 18:d3:b7:d8:6e:82:25:f7:52:f1:da:b6:ac:3c:65: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:02:60:4C:12:15:17:37:02:1C:69:92:02:A2:A1:03:61:B2:86:FB X509v3 Authority Key Identifier: keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:71:dc:f3:26:2e:b2:6d:a5:52:48:42:d0:af:6e:ce:a5:6f: c0:6e:68:59:7a:26:e0:7c:2e:0f:ee:64:3e:77:92:e1:f3:ee: ce:6d:ad:a5:85:43:ea:b3:81:c0:b1:0a:2c:f7:2e:75:1d:df: 72:0a:91:9b:1f:d4:5d:ed:8b:49:2a:c5:c4:fd:06:ad:a1:2c: 49:45:a0:f0:95:9f:99:ec:e3:63:3c:07:4f:0a:05:78:e3:8f: 72:70:7f:ea:25:de:c9:1a:fd:f3:41:c9:55:53:11:87:e5:b4: 8d:da:df:b8:54:d1:58:98:3e:20:92:e5:ae:33:f8:24:56:f8: a5:2b:75:ee:49:c1:47:da:02:4a:26:4f:aa:f9:99:c8:f7:b9: 92:e5:93:bf:15:0b:72:71:56:83:7e:a1:2d:be:c3:c4:70:18: 95:0e:a0:87:6b:02:16:e3:04:27:52:b2:1e:1f:05:1c:f8:0b: 8b:b8:d9:3c:0a:17:9e:c3:ac:ee:f3:e3:d2:e8:c7:55:1b:ef: 5b:c0:6f:83:cd:78:ad:84:fd:57:b8:c7:e2:0e:79:40:78:be: 8c:b2:78:87:37:bb:50:bc:e0:95:8b:19:a0:a5:ec:8b:d8:fe: a6:d3:d2:4f:28:93:f4:86:1e:42:42:c8:10:b1:af:39:2f:ca: e6:d6:bb:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YqUkz+xRg5SwYTANg7kfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZWY0YjA2MGE4Yjc5YjI4OTNkMzMwOWFkNTBkMWNjY2Iy YjllMzEwHhcNMjYwMTI1MDkwMTA0WhcNMjYwMTI2MDkwMTA0WjAzMTEwLwYDVQQD EyhiZDAyNjA0YzEyMTUxNzM3MDIxYzY5OTIwMmEyYTEwMzYxYjI4NmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwPRnbg+s3ApPMp30Hau8hpM3wMF OHX7DkK7BVOG2+PF7eM440KdVM/Pn3BNuO/+yUJjLtlLPn6AvlMQ6VpG8Ow7EMwl j2/aptbsE1S4idrg5OZREtaSLav8io4wlmu4w9ZTUhtnEWZuYl+AVdNIllXrp/zv MZ7WMPZv/6Fumg/JmyYUjGgpDiNuCMJe0CSR9Lf+891mPbgVhCED3lvYOokxv5nO IvEliy+iQZGZ6Y3t2MmKFoeZIRfgzTjCtsjHCUbaAOLawTEkVAl2Pz310JqTskbX OKxDAzO67p6Vj2U6SkUmeyGRNYD8Bd9Tq9oY07fYboIl91Lx2rasPGXBHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0CYEwSFRc3AhxpkgKioQNhsob7MB8GA1UdIwQY MBaAFEHvSwYKi3myiT0zCa1Q0czLK54xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xMTFiODEtYWE2Yy00MGRhLWJlZDEt YmY4ZTVkODI2NWEyLzEvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xMTFiODEtYWE2Yy00MGRhLWJlZDEtYmY4ZTVkODI2NWEy LzEvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3Hc8yYu sm2lUkhC0K9uzqVvwG5oWXom4HwuD+5kPneS4fPuzm2tpYVD6rOBwLEKLPcudR3f cgqRmx/UXe2LSSrFxP0GraEsSUWg8JWfmezjYzwHTwoFeOOPcnB/6iXeyRr980HJ VVMRh+W0jdrfuFTRWJg+IJLlrjP4JFb4pSt17knBR9oCSiZPqvmZyPe5kuWTvxUL cnFWg36hLb7DxHAYlQ6gh2sCFuMEJ1KyHh8FHPgLi7jZPAoXnsOs7vPj0ujHVRvv W8Bvg814rYT9V7jH4g55QHi+jLJ4hze7ULzglYsZoKXsi9j+ptPSTyiT9IYeQkLI ELGvOS/K5ta79Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:13 2026 by rpki-client