This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json) Hash identifier: JUyj6ZdWjfrcX7s0HwghKZ2We+4L0azbbVSfGN91nOg= Subject key identifier: 23:4F:71:77:8D:E6:78:5F:E4:71:F7:B7:2B:A5:31:53:2E:9D:E2:9F Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef Certificate serial: 019BF6BF3F19CDE8351C3CA02FC1BAA4727F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft Manifest number: 1525 Signing time: Sun 25 Jan 2026 20:01:27 +0000 Manifest this update: Sun 25 Jan 2026 20:01:27 +0000 Manifest next update: Mon 26 Jan 2026 20:01:27 +0000 Files and hashes: 1: GLWh56MMEykKTE4rrV87G9Vgki8.roa (hash: 02Z7LQfQNnw59BWb8xFGQ1xpLvcBlJFnepDp+x8RT7E=) 2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: /sv2RiV+JUikj0HsEEpCSF8I53RGah5mkDOuCsd/G/Q=) 3: w5TxS3vkHkeqXw3CmU-mwmwBXvQ.roa (hash: Rh0VsCvy2O3VBR0z+FrTOlGdPanimSzIyXLHmJJMba4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:3f:19:cd:e8:35:1c:3c:a0:2f:c1:ba:a4:72:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef Validity Not Before: Jan 25 20:01:27 2026 GMT Not After : Jan 26 20:01:27 2026 GMT Subject: CN=234f71778de6785fe471f7b72ba531532e9de29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:48:0f:4f:63:5e:65:6f:32:30:ad:39:03:bb: 4d:46:89:27:12:92:80:ee:5e:32:a3:ee:71:a7:c9: 9e:ba:e4:0f:53:27:08:ce:6b:8d:04:9a:9f:bf:de: 69:9b:cc:37:a5:1a:35:5a:40:86:ef:aa:83:c2:ff: 8e:03:a2:c8:53:1b:10:0a:c8:b7:a8:36:59:2a:27: fc:0f:10:ad:8d:09:ba:df:28:b3:2a:0a:9c:19:e9: cb:30:d0:c3:ac:20:3b:7b:b3:32:7d:c1:5f:17:a8: 61:82:2c:03:01:aa:d9:9f:08:8b:f5:56:a3:2f:82: 3b:a9:7f:42:ca:57:9c:85:01:1b:13:3b:88:4b:40: a7:1a:be:30:3e:90:1c:f2:b3:90:a6:a2:9e:3c:f6: a0:1a:7f:f1:66:c3:70:1c:fb:79:d6:8d:e4:6c:96: 95:4c:f7:d8:06:45:85:bd:c1:e9:41:2b:73:b5:33: ff:08:8a:05:54:3a:f6:4f:23:de:5f:8e:b9:da:b1: 18:8c:96:8c:a6:3d:db:82:f7:55:88:c9:57:b3:8d: 43:2b:d2:7e:50:9a:69:79:07:ff:7e:ae:9c:11:fe: 42:8f:b6:df:a2:d8:3c:b4:48:ad:4a:dc:51:76:52: 4c:14:f5:c8:ff:79:3b:13:98:96:44:4a:e8:b9:04: f9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4F:71:77:8D:E6:78:5F:E4:71:F7:B7:2B:A5:31:53:2E:9D:E2:9F X509v3 Authority Key Identifier: keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d6:32:ef:c5:b0:97:51:e4:2f:4c:bf:9c:6a:1a:8e:f9:a5: ca:3c:c1:0b:66:d5:9b:bf:d0:5c:5d:96:c7:5e:2c:91:b0:4d: 74:b7:c4:3c:4c:f2:d0:88:ae:c7:70:74:22:ba:98:f7:a4:c1: cf:49:83:72:7d:6f:0b:f5:ed:54:53:64:7b:fb:e2:72:c1:03: b9:28:78:2b:05:ce:7c:d4:7a:cb:4d:e5:77:04:39:df:ac:34: 14:14:0c:7c:2e:41:60:83:d8:75:34:03:c1:bf:4a:62:c8:56: 52:c6:79:25:95:db:c1:f5:c7:71:39:12:07:33:07:20:98:86: d8:e5:64:fd:1c:55:9a:dd:47:6d:38:4c:4f:d1:dc:65:e6:bc: c3:31:2e:b5:18:98:47:ca:20:25:25:43:84:d7:f4:40:0c:a4: 26:72:cb:2d:17:a7:12:ad:1d:ff:34:b5:8b:96:15:ff:10:6e: a6:8b:23:c0:ad:1e:dd:8e:b3:7a:92:27:08:f9:ac:13:7d:52: 6e:ef:b7:5d:79:1b:dd:45:c1:08:c0:ab:d6:86:c5:78:56:03: 27:8b:b8:e2:a8:35:a5:a1:73:57:fa:eb:65:9f:a1:7b:a9:ad: 1e:f6:56:1c:f8:11:8b:6c:e5:df:df:59:e1:9c:99:76:ea:fa: 4e:03:a4:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vz8Zzeg1HDygL8G6pHJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTEyNTYxZmM0ZWU1NGI3OTljNWFmNDI4ZmZmYmNiYWZk NDU0ZWYwHhcNMjYwMTI1MjAwMTI3WhcNMjYwMTI2MjAwMTI3WjAzMTEwLwYDVQQD EygyMzRmNzE3NzhkZTY3ODVmZTQ3MWY3YjcyYmE1MzE1MzJlOWRlMjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkgPT2NeZW8yMK05A7tNRoknEpKA 7l4yo+5xp8meuuQPUycIzmuNBJqfv95pm8w3pRo1WkCG76qDwv+OA6LIUxsQCsi3 qDZZKif8DxCtjQm63yizKgqcGenLMNDDrCA7e7MyfcFfF6hhgiwDAarZnwiL9Vaj L4I7qX9CylechQEbEzuIS0CnGr4wPpAc8rOQpqKePPagGn/xZsNwHPt51o3kbJaV TPfYBkWFvcHpQStztTP/CIoFVDr2TyPeX4652rEYjJaMpj3bgvdViMlXs41DK9J+ UJppeQf/fq6cEf5Cj7bfotg8tEitStxRdlJMFPXI/3k7E5iWRErouQT5ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNPcXeN5nhf5HH3tyulMVMuneKfMB8GA1UdIwQY MBaAFEJRJWH8TuVLeZxa9Cj/+8uv1FTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUt N2E3MmUyNmM4OTE4LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUtN2E3MmUyNmM4OTE4 LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtYy78Ww l1HkL0y/nGoajvmlyjzBC2bVm7/QXF2Wx14skbBNdLfEPEzy0Iiux3B0IrqY96TB z0mDcn1vC/XtVFNke/vicsEDuSh4KwXOfNR6y03ldwQ536w0FBQMfC5BYIPYdTQD wb9KYshWUsZ5JZXbwfXHcTkSBzMHIJiG2OVk/RxVmt1HbThMT9HcZea8wzEutRiY R8ogJSVDhNf0QAykJnLLLRenEq0d/zS1i5YV/xBuposjwK0e3Y6zepInCPmsE31S bu+3XXkb3UXBCMCr1obFeFYDJ4u44qg1paFzV/rrZZ+he6mtHvZWHPgRi2zl399Z 4ZyZdur6TgOkAQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:53 2026 by rpki-client