This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json) Hash identifier: bG5rbgHnUQJ9hT9yRqsueRezw155TzNPlVPFmCkRGgA= Subject key identifier: 9B:31:90:02:34:E4:13:A0:31:59:77:C9:93:35:FD:45:FD:D8:F8:62 Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7 Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7 Certificate serial: 019BF8AD173FC625A483BD4D2C1F55533697 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft Manifest number: 1439 Signing time: Mon 26 Jan 2026 05:00:51 +0000 Manifest this update: Mon 26 Jan 2026 05:00:51 +0000 Manifest next update: Tue 27 Jan 2026 05:00:51 +0000 Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: 9ZP1YAil2V6ExLP7pIWhR0h5GexfUW33dHAh8Cju7/M=) 2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:17:3f:c6:25:a4:83:bd:4d:2c:1f:55:53:36:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7 Validity Not Before: Jan 26 05:00:51 2026 GMT Not After : Jan 27 05:00:51 2026 GMT Subject: CN=9b31900234e413a0315977c99335fd45fdd8f862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:63:17:b5:b0:08:f9:c5:31:33:32:4d:bc: 38:08:c6:83:32:d5:54:cc:d7:a9:ad:a0:9f:c7:23: 87:84:15:11:c9:91:71:87:7d:6c:be:97:a1:fa:c8: cb:38:16:4a:3f:a9:1d:07:36:26:2e:59:6f:ad:c9: bc:bf:8b:c9:9b:f6:f9:2c:7c:51:ec:55:44:f4:56: 66:a2:d5:1a:1e:1b:4c:93:15:4d:33:ea:3e:4f:41: 95:04:96:f5:35:b1:cf:df:92:18:ff:9c:b7:bf:c1: a6:61:c9:b9:8e:5f:13:ac:de:09:4d:90:ca:30:12: 45:fa:4e:89:6f:5a:25:14:ae:83:83:3e:53:1f:ff: 8c:14:fd:49:3f:8a:88:82:62:17:71:14:0d:ad:d4: 8f:df:0c:cc:75:38:49:fa:ae:50:e4:c2:91:33:c9: 22:ff:8a:ca:17:a4:23:7e:54:d6:1f:34:e6:2e:5b: 95:02:e2:00:90:40:6e:f1:a9:a7:e5:7b:58:06:fd: 74:c6:f1:f6:21:91:b6:66:1e:e8:2a:fa:36:77:da: da:74:2d:91:15:ac:87:ed:6f:bb:5f:1d:19:50:6d: 10:3f:49:9c:5c:e2:4c:cb:11:14:1d:48:20:a9:6a: 1a:f9:18:b7:c8:69:b1:05:a5:7d:c2:b3:72:81:aa: ad:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:31:90:02:34:E4:13:A0:31:59:77:C9:93:35:FD:45:FD:D8:F8:62 X509v3 Authority Key Identifier: keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:74:52:3f:24:17:83:bb:f6:1c:0a:c3:58:07:14:ad:53:58: d0:48:d8:15:e5:4e:b7:40:e2:83:e1:12:58:07:ab:fc:ef:c1: bc:21:58:25:01:9e:42:40:43:91:60:6d:12:82:d8:0a:a4:93: f5:c0:55:bf:11:5b:5b:d6:8d:12:8a:48:dc:ff:8a:cb:cf:c2: 54:4e:d1:ad:32:dd:d1:ea:58:e1:50:97:c3:67:e2:b6:44:48: 37:2b:fd:4e:9c:58:05:d8:54:1b:81:0d:ca:0e:39:00:52:c9: 15:11:3a:59:6f:0e:5c:79:3b:2c:d9:9f:fa:8b:fd:0f:e2:1a: 6f:9f:c7:59:5e:59:f1:de:89:bb:42:70:77:1a:32:ac:34:47: fc:3c:d0:b6:f6:43:8c:d7:5f:85:6b:0c:59:84:34:ad:5b:63: 07:7f:17:f1:5c:fe:1f:6e:fd:f6:f7:b7:fc:a0:90:20:8e:6f: 47:be:11:36:a2:46:d5:b0:1f:28:2a:19:a9:e0:b6:d4:a9:f6: 5b:66:70:28:e7:26:b4:bd:2c:f4:ff:06:98:98:f2:d1:15:1e: b2:67:d3:20:9d:b3:3e:e9:e2:fd:be:df:7a:7b:f3:ac:0d:c3: ee:03:45:d2:8c:1a:2d:a0:ab:ae:85:2d:1d:df:86:f2:47:a5: 7e:b7:c8:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rRc/xiWkg71NLB9VUzaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMTE2Nzc0YWZiNWVkMWFjOTkyNmIwYmMyZDU3ZjhiODA1 OGIzZTcwHhcNMjYwMTI2MDUwMDUxWhcNMjYwMTI3MDUwMDUxWjAzMTEwLwYDVQQD Eyg5YjMxOTAwMjM0ZTQxM2EwMzE1OTc3Yzk5MzM1ZmQ0NWZkZDhmODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNtjF7WwCPnFMTMyTbw4CMaDMtVU zNepraCfxyOHhBURyZFxh31svpeh+sjLOBZKP6kdBzYmLllvrcm8v4vJm/b5LHxR 7FVE9FZmotUaHhtMkxVNM+o+T0GVBJb1NbHP35IY/5y3v8GmYcm5jl8TrN4JTZDK MBJF+k6Jb1olFK6Dgz5TH/+MFP1JP4qIgmIXcRQNrdSP3wzMdThJ+q5Q5MKRM8ki /4rKF6QjflTWHzTmLluVAuIAkEBu8amn5XtYBv10xvH2IZG2Zh7oKvo2d9radC2R FayH7W+7Xx0ZUG0QP0mcXOJMyxEUHUggqWoa+Ri3yGmxBaV9wrNygaqtSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsxkAI05BOgMVl3yZM1/UX92PhiMB8GA1UdIwQY MBaAFEIRZ3Svte0ayZJrC8LVf4uAWLPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEt ZTk3Y2QzYWQ0ZGEzLzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEtZTk3Y2QzYWQ0ZGEz LzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXRSPyQX g7v2HArDWAcUrVNY0EjYFeVOt0Dig+ESWAer/O/BvCFYJQGeQkBDkWBtEoLYCqST 9cBVvxFbW9aNEopI3P+Ky8/CVE7RrTLd0epY4VCXw2fitkRINyv9TpxYBdhUG4EN yg45AFLJFRE6WW8OXHk7LNmf+ov9D+Iab5/HWV5Z8d6Ju0JwdxoyrDRH/DzQtvZD jNdfhWsMWYQ0rVtjB38X8Vz+H2799ve3/KCQII5vR74RNqJG1bAfKCoZqeC21Kn2 W2ZwKOcmtL0s9P8GmJjy0RUesmfTIJ2zPuni/b7fenvzrA3D7gNF0owaLaCrroUt Hd+G8kelfrfIjA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:35:24 2026 by rpki-client