This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json) Hash identifier: M00ps8b6XX6LHJfISg/Mp74Gsjgk8ACYYTKFvct3pjA= Subject key identifier: 10:FD:C9:86:98:ED:21:C5:FF:20:95:4C:A0:C8:E5:84:11:CE:CF:54 Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd Certificate serial: 019BF83F98739CD750A613F9B71EADACDBBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft Manifest number: 12C3 Signing time: Mon 26 Jan 2026 03:01:15 +0000 Manifest this update: Mon 26 Jan 2026 03:01:15 +0000 Manifest next update: Tue 27 Jan 2026 03:01:15 +0000 Files and hashes: 1: AOYNyLogCuZgfBQZ_rhFiasTEas.roa (hash: zOItC91i7X4F3quOK9yoQD+KspwFkw26V76frNAHPSc=) 2: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: PKA12EmU0dFP//Ur9z+/WJk4/8vz0VZcoLWp8LFjckk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:98:73:9c:d7:50:a6:13:f9:b7:1e:ad:ac:db:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd Validity Not Before: Jan 26 03:01:15 2026 GMT Not After : Jan 27 03:01:15 2026 GMT Subject: CN=10fdc98698ed21c5ff20954ca0c8e58411cecf54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:a8:63:75:48:04:a6:65:58:c5:ac:d5:03: 88:28:e7:9e:d1:b9:24:9d:81:a7:59:15:8a:77:b3: c8:2b:2f:d8:22:f3:20:f0:7c:53:5a:b1:09:2e:35: cc:af:90:a0:0c:9d:a8:be:28:df:43:2a:1f:08:d9: dc:83:dc:7a:12:6d:d7:2f:93:55:d6:73:cb:a5:d8: 4a:a1:52:a6:e5:9d:e3:c5:aa:55:bc:69:a4:45:a7: 99:22:1d:ea:21:e9:59:6f:ea:15:f3:66:f4:c0:9f: 92:77:55:fb:6f:18:12:5d:cc:a2:62:2d:07:74:3e: 94:29:9c:25:ff:db:0a:f1:20:0a:77:f0:8e:60:2e: 64:4c:a6:ce:5a:a0:66:0c:ce:57:3b:f8:16:40:92: f0:52:f4:01:f5:9e:de:d5:ec:2c:ec:c4:1d:06:e2: eb:3a:11:02:bc:90:14:02:34:44:21:f9:9d:41:df: 5d:bc:69:c7:2e:04:2d:9e:a4:f8:a8:3c:7a:12:bc: 89:8f:75:56:38:30:75:17:99:cd:3f:b2:b9:9e:8b: 0c:2a:02:56:0e:4e:42:2e:0e:7a:90:23:b2:e7:4e: 4f:6b:49:96:9b:9c:04:9d:f2:8b:dc:cc:39:ed:ad: 2e:5a:00:8e:3c:9e:e0:a8:d1:a3:55:54:29:9c:a2: f2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FD:C9:86:98:ED:21:C5:FF:20:95:4C:A0:C8:E5:84:11:CE:CF:54 X509v3 Authority Key Identifier: keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3f:ac:6e:0e:87:8e:c2:4f:d9:26:17:d0:94:ac:8a:2c:81: 13:28:66:c5:61:e1:0d:d5:3d:b0:13:be:b4:4e:41:75:84:86: f4:c3:82:96:66:fc:f6:c1:21:e2:ce:f3:1f:7b:2c:54:67:7a: c5:aa:3d:58:0f:be:38:82:7b:56:d6:83:5a:3f:ed:b6:c2:c1: 6c:bc:6e:77:65:48:4c:98:e7:dd:a1:7b:43:96:62:0a:01:77: 59:92:81:86:97:a6:c5:f4:23:e1:30:ae:2e:bd:1a:a6:3d:18: 99:03:ce:ea:d8:ef:1e:3a:96:d7:e7:54:30:16:72:52:26:b4: f1:a9:4c:dc:a6:3a:94:c9:a0:a1:b2:d9:a0:09:36:15:49:37: 67:ca:e9:ea:9c:fb:6d:7e:0c:b1:dc:1e:dc:97:51:b6:25:d9: e8:1d:55:20:4d:ec:ce:0c:5e:67:d3:f1:62:2d:6f:04:bf:90: 69:3a:90:5e:9b:fe:2d:c7:5a:e7:a6:fe:6a:f5:db:dc:d8:b6: e5:1b:17:ec:2e:7f:3c:41:7a:74:40:13:47:9e:90:4c:a3:72: 30:f9:4d:53:c6:46:1f:47:c0:55:0f:23:e7:a6:d9:53:53:10: 8c:09:b7:d6:9d:8c:16:3c:cb:02:63:79:b7:83:6a:d5:3f:50: 83:7a:af:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P5hznNdQphP5tx6trNu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzN2E1YzdlN2M3ZWFiMjM5MjM3MmZjMzhkNDhjN2E5Nzdi MjRhYmQwHhcNMjYwMTI2MDMwMTE1WhcNMjYwMTI3MDMwMTE1WjAzMTEwLwYDVQQD EygxMGZkYzk4Njk4ZWQyMWM1ZmYyMDk1NGNhMGM4ZTU4NDExY2VjZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHCoY3VIBKZlWMWs1QOIKOee0bkk nYGnWRWKd7PIKy/YIvMg8HxTWrEJLjXMr5CgDJ2ovijfQyofCNncg9x6Em3XL5NV 1nPLpdhKoVKm5Z3jxapVvGmkRaeZIh3qIelZb+oV82b0wJ+Sd1X7bxgSXcyiYi0H dD6UKZwl/9sK8SAKd/COYC5kTKbOWqBmDM5XO/gWQJLwUvQB9Z7e1ews7MQdBuLr OhECvJAUAjREIfmdQd9dvGnHLgQtnqT4qDx6EryJj3VWODB1F5nNP7K5nosMKgJW Dk5CLg56kCOy505Pa0mWm5wEnfKL3Mw57a0uWgCOPJ7gqNGjVVQpnKLy0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBD9yYaY7SHF/yCVTKDI5YQRzs9UMB8GA1UdIwQY MBaAFEN6XH58fqsjkjcvw41Ix6l3skq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUt NTVhNDNhYWI4ZjczLzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUtNTVhNDNhYWI4Zjcz LzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAj+sbg6H jsJP2SYX0JSsiiyBEyhmxWHhDdU9sBO+tE5BdYSG9MOClmb89sEh4s7zH3ssVGd6 xao9WA++OIJ7VtaDWj/ttsLBbLxud2VITJjn3aF7Q5ZiCgF3WZKBhpemxfQj4TCu Lr0apj0YmQPO6tjvHjqW1+dUMBZyUia08alM3KY6lMmgobLZoAk2FUk3Z8rp6pz7 bX4Msdwe3JdRtiXZ6B1VIE3szgxeZ9PxYi1vBL+QaTqQXpv+Lcda56b+avXb3Ni2 5RsX7C5/PEF6dEATR56QTKNyMPlNU8ZGH0fAVQ8j56bZU1MQjAm31p2MFjzLAmN5 t4Nq1T9Qg3qvFQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:46:07 2026 by rpki-client