This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json) Hash identifier: ZPAMC2zwxN+MRZ5vlJLeu5wJnojZ/DF2D1nHa3ncNek= Subject key identifier: 28:B0:8A:0A:46:BB:A9:3D:8A:A1:FB:22:6A:60:A6:C4:70:E1:35:32 Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05 Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905 Certificate serial: 019BF72CEE28AB774392381CD340EF506946 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft Manifest number: 06EE Signing time: Sun 25 Jan 2026 22:01:15 +0000 Manifest this update: Sun 25 Jan 2026 22:01:15 +0000 Manifest next update: Mon 26 Jan 2026 22:01:15 +0000 Files and hashes: 1: 1-rBgyQgcZXkEd224n-2FZQ79R90.roa (hash: lXuaNOk5Bgob5HontELFPkVtHeAXizyQRbe4xoEKAQ8=) 2: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: 62Waz57IPDIN5cP8/YWCQyHgfLVWupfHh8nwffaKmEk=) 3: XInE7IhwLiH6cAbeJDA47vC4HFw.roa (hash: yvUw4Yhj3EW/lyYnrpik/JIwVjQtM07vuuoIeWKjTz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ee:28:ab:77:43:92:38:1c:d3:40:ef:50:69:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905 Validity Not Before: Jan 25 22:01:15 2026 GMT Not After : Jan 26 22:01:15 2026 GMT Subject: CN=28b08a0a46bba93d8aa1fb226a60a6c470e13532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:82:a3:f3:88:2b:31:55:61:5b:40:7b:f3:05: 4a:bc:61:cc:6c:d1:62:3d:02:97:01:66:54:dc:b9: a9:c0:8d:07:ab:36:ea:e1:55:f6:10:f5:31:d2:6b: 68:18:0b:6f:e7:9f:82:06:7e:85:0a:16:d3:e9:5f: 8a:69:03:c8:aa:d6:19:0c:38:7a:b3:01:3b:72:f6: 1a:4c:4d:e1:03:3b:e3:a8:83:1f:39:19:b8:34:bd: 8a:b3:fc:6b:02:d3:7e:49:a2:be:6e:fd:44:7b:b0: 7e:03:79:d9:ff:1f:21:d5:3d:12:44:cb:b5:e7:e8: 7f:05:41:ea:ba:ad:a8:a0:e9:cf:e1:43:6f:a8:ad: 8c:32:df:c3:53:13:2e:1c:5c:a0:65:07:c2:4a:f4: 82:84:91:4b:7b:8f:4f:fe:7b:20:82:db:97:d1:7d: 34:a9:4f:c8:11:a0:4f:9a:39:24:29:bc:d8:a6:ea: 8d:a9:8a:78:32:32:9c:13:97:6a:6d:f8:2c:7a:7d: 4f:56:95:c1:c7:3f:99:8d:fb:82:f4:73:9b:6d:f2: bd:1c:b1:d5:e9:c8:c2:31:06:db:f9:b3:fd:cd:e7: ec:22:62:c3:dc:f7:89:52:ee:de:72:d6:ad:60:20: 73:38:d6:6d:51:b3:c9:e5:ac:4f:ff:83:6e:39:78: 0d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B0:8A:0A:46:BB:A9:3D:8A:A1:FB:22:6A:60:A6:C4:70:E1:35:32 X509v3 Authority Key Identifier: keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:71:5a:b3:e8:65:33:09:04:d3:e6:a4:87:cb:08:b7:df:99: 4e:f6:1b:ab:1c:45:05:47:86:83:34:5b:b8:3f:f9:45:9b:7a: 7a:a8:f4:95:f7:eb:29:a4:9f:1f:1b:91:0c:05:a8:26:cf:d6: d2:95:cc:c1:b8:7b:d0:ce:7a:c6:5e:ef:68:df:60:4f:62:f8: 30:7e:33:65:dd:3d:3a:7e:4f:90:06:b6:d6:1b:2e:61:f5:b2: 4c:be:f6:ca:bb:36:38:9c:d4:c9:3a:d5:d2:2a:bf:5a:33:f9: 49:47:46:d7:5c:f8:e8:06:90:b8:d3:30:32:21:15:53:f4:6f: 09:54:e4:1e:19:57:4d:14:90:6e:5d:3b:a7:ba:b5:17:46:f4: 24:d9:4c:87:57:34:7b:fd:3f:07:2f:ee:74:3c:fe:09:42:ea: 04:2d:51:7c:94:fd:35:9a:4f:2d:53:96:73:ff:6f:69:ea:8a: 54:e4:37:ef:ae:1f:8d:70:1d:2d:e2:7e:f1:6d:e5:10:38:d2: cb:4f:ab:18:48:cb:23:41:bd:63:ea:f6:04:f7:fb:cb:79:98: 87:86:7b:15:95:6a:9f:cf:3d:9b:c6:58:b7:a2:58:c3:c3:8d: 04:db:d5:83:34:6a:1f:ae:5d:e4:40:ce:55:d1:8e:fb:75:48: 38:17:77:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LO4oq3dDkjgc00DvUGlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjBmNGQ0Yzc1MjhkOGE4MjdlYzcyNDkxOGZlMmRmNTM0 YmQ5MDUwHhcNMjYwMTI1MjIwMTE1WhcNMjYwMTI2MjIwMTE1WjAzMTEwLwYDVQQD EygyOGIwOGEwYTQ2YmJhOTNkOGFhMWZiMjI2YTYwYTZjNDcwZTEzNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIKj84grMVVhW0B78wVKvGHMbNFi PQKXAWZU3LmpwI0Hqzbq4VX2EPUx0mtoGAtv55+CBn6FChbT6V+KaQPIqtYZDDh6 swE7cvYaTE3hAzvjqIMfORm4NL2Ks/xrAtN+SaK+bv1Ee7B+A3nZ/x8h1T0SRMu1 5+h/BUHquq2ooOnP4UNvqK2MMt/DUxMuHFygZQfCSvSChJFLe49P/nsggtuX0X00 qU/IEaBPmjkkKbzYpuqNqYp4MjKcE5dqbfgsen1PVpXBxz+ZjfuC9HObbfK9HLHV 6cjCMQbb+bP9zefsImLD3PeJUu7ectatYCBzONZtUbPJ5axP/4NuOXgNVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiwigpGu6k9iqH7ImpgpsRw4TUyMB8GA1UdIwQY MBaAFEAg9NTHUo2Kgn7HJJGP4t9TS9kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1Zjkt NjRiZmI3OTkwMGQ2LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1ZjktNjRiZmI3OTkwMGQ2 LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnFas+hl MwkE0+akh8sIt9+ZTvYbqxxFBUeGgzRbuD/5RZt6eqj0lffrKaSfHxuRDAWoJs/W 0pXMwbh70M56xl7vaN9gT2L4MH4zZd09On5PkAa21hsuYfWyTL72yrs2OJzUyTrV 0iq/WjP5SUdG11z46AaQuNMwMiEVU/RvCVTkHhlXTRSQbl07p7q1F0b0JNlMh1c0 e/0/By/udDz+CULqBC1RfJT9NZpPLVOWc/9vaeqKVOQ3764fjXAdLeJ+8W3lEDjS y0+rGEjLI0G9Y+r2BPf7y3mYh4Z7FZVqn889m8ZYt6JYw8ONBNvVgzRqH65d5EDO VdGO+3VIOBd3Gw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:44 2026 by rpki-client