This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json) Hash identifier: OId3knWy8hQvtVUxItFbtokxGeheOSlPlLuBk3SWOQ8= Subject key identifier: 95:6C:6C:D8:26:D6:1B:F0:E0:B5:BA:C4:7D:CE:09:73:EF:F3:03:0B Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Certificate serial: 019BF763A77ECEA00773B7EBAF3BDB4FF6C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 23:01:01 +0000 Manifest this update: Sun 25 Jan 2026 23:01:01 +0000 Manifest next update: Mon 26 Jan 2026 23:01:01 +0000 Files and hashes: 1: 9ogde2DCFGnyeWaJ0qvOZkuIZN4.roa (hash: Bj+Js4UPw1o6feOmkLrkYY/w7t2b1Dyp0TJfYGAVC4Q=) 2: LTmOQCe-BWUTWVQkjpSYNnXaYa4.roa (hash: zJdURY1Kn8xq2aZqWECgaU84OOgVmpgOtWckIX+5TSs=) 3: _opXEn0thzhgGf4NWVntdA2gblE.asa (hash: nbnWVS0wu/u5kwilgVDWUiJkK1AUWGIEUy+veLSh4gs=) 4: aXlS2MBHT3otsZcZeVd3GMw9MKU.roa (hash: EW9PAlMsLE2KLuPGMAVWKhlfJ/oPt4738Dlm3TTrJp4=) 5: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: Vdx+C25dsWViOysAimuFsRsMjaAKMdxsx0JBp5F/wLw=) 6: se4S9YxFwCEpWHZ2vpCV4ToJjdI.asa (hash: BYRkYl+G8DvP61IrHvjd0vDZAOoEN+QSTpQImOz8dG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:a7:7e:ce:a0:07:73:b7:eb:af:3b:db:4f:f6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Validity Not Before: Jan 25 23:01:01 2026 GMT Not After : Jan 26 23:01:01 2026 GMT Subject: CN=956c6cd826d61bf0e0b5bac47dce0973eff3030b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:11:6f:b2:c7:7f:37:be:e9:28:da:de:0d: 07:f3:b8:28:5a:8e:7b:f6:58:61:a3:09:14:4c:fe: 3c:41:dc:c1:21:9b:b1:03:33:6b:2e:68:da:cf:79: 59:f3:46:96:10:9a:80:20:48:4c:7c:64:f8:14:b3: 2a:c5:ef:af:c7:92:81:cc:9a:64:7b:3e:02:31:39: 60:cd:5c:45:16:5c:6c:71:65:7d:56:f2:2a:a4:56: 42:6a:bd:85:27:9e:58:c2:12:03:2c:50:a7:67:d9: 88:2b:93:a6:47:25:f1:f2:86:81:5c:9b:d2:0c:a3: a1:89:41:89:ce:e1:e9:35:41:54:f4:21:48:9d:fd: 9b:01:1d:e6:58:fc:f5:30:0f:b7:43:89:6e:06:d0: f9:fe:18:6f:3f:db:40:a4:54:61:19:f6:7d:40:02: 4c:16:af:0e:a2:84:dd:fe:31:4b:b6:35:67:76:05: 74:f8:a1:e3:d6:60:91:e9:0e:33:c8:66:60:48:99: 00:b1:47:58:c3:6b:38:4a:a7:a1:6a:e2:84:1c:fe: 98:dd:72:61:d8:8d:47:31:cd:4b:70:be:1b:e6:6d: 33:47:3d:88:e0:56:c0:72:21:09:cb:71:12:e7:ec: b7:54:e7:a9:44:c1:e0:73:33:ad:0a:7c:0b:e6:fd: 87:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6C:6C:D8:26:D6:1B:F0:E0:B5:BA:C4:7D:CE:09:73:EF:F3:03:0B X509v3 Authority Key Identifier: keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:78:53:4c:6a:01:8e:b7:df:02:0c:af:6d:c0:2a:ab:79:64: 7d:ae:51:65:85:75:b6:8a:55:f0:f0:53:93:aa:43:c5:b5:c3: f9:03:38:5e:97:ca:b6:ff:6c:64:0f:13:4b:0b:d6:64:48:a4: fd:5f:23:f0:f1:cc:74:d3:26:c7:55:d0:a8:78:03:54:43:eb: e1:89:0e:aa:5f:9e:65:6b:9f:82:a0:3c:17:90:1c:75:79:64: ba:f4:13:f5:bc:db:95:28:30:a1:69:05:22:a1:7c:4e:78:59: 52:71:80:a0:9c:57:2e:2b:4c:83:3a:39:47:10:15:97:75:8a: 76:78:c2:a4:ff:43:8d:bd:6f:73:e6:f9:27:05:2d:e4:25:7b: b1:fa:12:ba:ad:f9:98:16:90:25:fb:a3:f9:c6:36:69:43:77: 81:29:d9:03:62:8f:20:b5:64:b9:21:e6:fd:43:4f:dc:ee:8b: 91:c7:95:b2:6f:fe:ac:ff:e3:99:cc:93:e6:9d:fc:8b:d6:57: 94:51:93:77:50:ea:16:aa:c4:93:fe:9e:db:4c:7f:95:37:e5: 14:2f:89:b9:e3:ac:f8:b8:b0:ed:82:e0:42:4e:b1:9c:7c:11: 61:a0:5c:73:53:fa:9b:c8:4b:53:b9:40:f0:52:ca:0d:41:cf: 7a:ae:7e:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y6d+zqAHc7frrzvbT/bCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjVmZTY3YzIwNzk3ZDM5NDE1NTU1NTRmOGM5ODhjYTJm N2MxN2IwHhcNMjYwMTI1MjMwMTAxWhcNMjYwMTI2MjMwMTAxWjAzMTEwLwYDVQQD Eyg5NTZjNmNkODI2ZDYxYmYwZTBiNWJhYzQ3ZGNlMDk3M2VmZjMwMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGYRb7LHfze+6Sja3g0H87goWo57 9lhhowkUTP48QdzBIZuxAzNrLmjaz3lZ80aWEJqAIEhMfGT4FLMqxe+vx5KBzJpk ez4CMTlgzVxFFlxscWV9VvIqpFZCar2FJ55YwhIDLFCnZ9mIK5OmRyXx8oaBXJvS DKOhiUGJzuHpNUFU9CFInf2bAR3mWPz1MA+3Q4luBtD5/hhvP9tApFRhGfZ9QAJM Fq8OooTd/jFLtjVndgV0+KHj1mCR6Q4zyGZgSJkAsUdYw2s4SqehauKEHP6Y3XJh 2I1HMc1LcL4b5m0zRz2I4FbAciEJy3ES5+y3VOepRMHgczOtCnwL5v2HcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVsbNgm1hvw4LW6xH3OCXPv8wMLMB8GA1UdIwQY MBaAFKi1/mfCB5fTlBVVVU+MmIyi98F7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQt MWNjNjE5MTk3NTUxLzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQtMWNjNjE5MTk3NTUx LzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3hTTGoB jrffAgyvbcAqq3lkfa5RZYV1topV8PBTk6pDxbXD+QM4XpfKtv9sZA8TSwvWZEik /V8j8PHMdNMmx1XQqHgDVEPr4YkOql+eZWufgqA8F5AcdXlkuvQT9bzblSgwoWkF IqF8TnhZUnGAoJxXLitMgzo5RxAVl3WKdnjCpP9Djb1vc+b5JwUt5CV7sfoSuq35 mBaQJfuj+cY2aUN3gSnZA2KPILVkuSHm/UNP3O6LkceVsm/+rP/jmcyT5p38i9ZX lFGTd1DqFqrEk/6e20x/lTflFC+JueOs+Liw7YLgQk6xnHwRYaBcc1P6m8hLU7lA 8FLKDUHPeq5+4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:48:06 2026 by rpki-client