This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json) Hash identifier: ukHpLZbNHgCYADNXRALRJ7DcYKrwMtiK8+nYwSW1Q/U= Subject key identifier: 2A:CD:A6:9F:C5:BC:BA:E3:0C:1B:65:B9:A4:49:91:BE:FB:98:17:80 Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8 Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8 Certificate serial: 019BF2E1CD8C6E55F7ADCD7C0FF5643D30A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft Manifest number: 0BE2 Signing time: Sun 25 Jan 2026 02:00:42 +0000 Manifest this update: Sun 25 Jan 2026 02:00:42 +0000 Manifest next update: Mon 26 Jan 2026 02:00:42 +0000 Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=) 2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: 2ffnCnzYM/alAeSbpuEXLm8d01N3EDOG66VCRPGWRws=) 3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:cd:8c:6e:55:f7:ad:cd:7c:0f:f5:64:3d:30:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8 Validity Not Before: Jan 25 02:00:42 2026 GMT Not After : Jan 26 02:00:42 2026 GMT Subject: CN=2acda69fc5bcbae30c1b65b9a44991befb981780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a1:94:27:7f:3f:4d:a5:16:c1:67:e4:70:53: ee:03:5c:26:d8:19:3c:23:c9:49:21:49:64:e8:1d: 23:7b:be:4b:34:db:ab:88:0e:59:f3:7f:7f:70:63: bd:8e:8f:56:41:da:07:b4:cd:5e:b5:72:4b:3f:fb: 28:f8:8c:65:bf:18:f6:28:61:8c:f3:eb:af:4c:eb: 5e:42:95:aa:5f:41:ac:78:42:51:02:ee:40:1d:0f: 4e:ac:5d:dc:7b:5d:ac:58:a6:ff:57:87:a8:0a:ab: 69:5d:f0:de:f2:e6:24:66:13:de:28:d0:9b:03:2f: a0:c4:bf:16:ce:76:9f:85:11:36:79:5b:08:82:12: 9e:b3:80:f8:43:67:13:e0:59:16:52:a5:94:97:d0: b1:07:05:d2:b4:48:4d:f3:14:e9:88:00:9c:b6:e5: b3:81:a6:1e:73:05:ab:ba:64:19:5a:06:c8:a5:c3: e3:74:0f:13:90:ca:5a:86:9f:cd:ac:b4:aa:b6:48: 5d:59:54:65:68:92:27:38:9b:c2:84:17:e5:cc:50: 61:01:50:2c:47:73:5f:1d:eb:75:b5:bc:65:69:7b: ef:af:ea:52:9e:c9:ed:97:7e:02:07:89:c5:66:28: ba:7a:99:91:7a:8e:cc:40:23:9c:e2:40:16:ec:8a: c5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CD:A6:9F:C5:BC:BA:E3:0C:1B:65:B9:A4:49:91:BE:FB:98:17:80 X509v3 Authority Key Identifier: keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:14:d7:bd:dc:b9:9b:1c:3e:c8:6d:d4:fd:1a:86:6e:e9:51: 56:50:74:92:12:38:b1:65:8a:0e:0f:91:38:3b:f6:56:69:91: f3:78:21:9e:9a:92:c0:49:03:48:23:99:68:b8:a3:31:ae:18: 9d:28:56:4d:ec:8a:56:84:d4:ca:b4:c7:b8:7e:c6:c7:98:96: 37:af:43:a2:5d:36:0f:b0:97:b1:8b:65:7d:5a:44:93:56:42: 16:1c:b1:23:87:06:12:0b:dc:ca:fa:07:cf:e9:df:f1:4f:20: 90:7b:f6:3e:f4:7b:92:9e:57:53:e0:ad:ab:6d:70:1d:ed:e3: 19:7e:20:dc:27:b6:ef:e7:ef:d6:69:c8:40:5c:79:fa:c1:f4: 4e:2b:a6:5a:8f:c5:22:1b:7f:60:f5:60:e1:3a:ab:f3:59:7d: 3e:2a:c6:64:e6:96:ad:75:f6:35:40:db:8f:1d:9d:0c:aa:1b: 8b:0e:a0:a1:27:b3:00:e4:2b:01:61:97:75:3c:0b:96:3a:e4: 0a:93:e3:fc:9a:fa:22:32:8d:b0:26:1a:96:38:98:a5:77:ca: 9d:c6:72:c2:a4:b1:7f:1d:16:5a:7e:d2:51:bc:89:25:22:80: 1e:05:b9:4c:79:7c:69:c2:b2:8a:7a:bc:13:be:b7:60:59:48: d3:75:cf:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4c2MblX3rc18D/VkPTCkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZDRmNmU0MjI5NWY1NDAzYjg0NWI1MmJiYTk2Nzk3NjFk ODg0ZDgwHhcNMjYwMTI1MDIwMDQyWhcNMjYwMTI2MDIwMDQyWjAzMTEwLwYDVQQD EygyYWNkYTY5ZmM1YmNiYWUzMGMxYjY1YjlhNDQ5OTFiZWZiOTgxNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KGUJ38/TaUWwWfkcFPuA1wm2Bk8 I8lJIUlk6B0je75LNNuriA5Z839/cGO9jo9WQdoHtM1etXJLP/so+Ixlvxj2KGGM 8+uvTOteQpWqX0GseEJRAu5AHQ9OrF3ce12sWKb/V4eoCqtpXfDe8uYkZhPeKNCb Ay+gxL8WznafhRE2eVsIghKes4D4Q2cT4FkWUqWUl9CxBwXStEhN8xTpiACctuWz gaYecwWrumQZWgbIpcPjdA8TkMpahp/NrLSqtkhdWVRlaJInOJvChBflzFBhAVAs R3NfHet1tbxlaXvvr+pSnsntl34CB4nFZii6epmReo7MQCOc4kAW7IrFGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrNpp/FvLrjDBtluaRJkb77mBeAMB8GA1UdIwQY MBaAFELU9uQilfVAO4RbUrupZ5dh2ITYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEt M2M3NmRkNDkxMDA2LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEtM2M3NmRkNDkxMDA2 LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBTXvdy5 mxw+yG3U/RqGbulRVlB0khI4sWWKDg+RODv2VmmR83ghnpqSwEkDSCOZaLijMa4Y nShWTeyKVoTUyrTHuH7Gx5iWN69Dol02D7CXsYtlfVpEk1ZCFhyxI4cGEgvcyvoH z+nf8U8gkHv2PvR7kp5XU+Ctq21wHe3jGX4g3Ce27+fv1mnIQFx5+sH0TiumWo/F Iht/YPVg4Tqr81l9PirGZOaWrXX2NUDbjx2dDKobiw6goSezAOQrAWGXdTwLljrk CpPj/Jr6IjKNsCYaljiYpXfKncZywqSxfx0WWn7SUbyJJSKAHgW5THl8acKyinq8 E763YFlI03XPKg== -----END CERTIFICATE-----Generated at Sun Jan 25 08:22:13 2026 by rpki-client