This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json) Hash identifier: Cd5KOj+4WVIa+nNW+5cOjKIdSrb0gV2tNLvoKWmQbq0= Subject key identifier: 25:0B:F3:E7:A4:12:7F:7B:42:20:EC:70:B0:70:6C:33:CD:17:85:6C Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12 Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712 Certificate serial: 019BF91B3858C8A30A10E6B5ED8D4F1BB709 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft Manifest number: 16DB Signing time: Mon 26 Jan 2026 07:01:09 +0000 Manifest this update: Mon 26 Jan 2026 07:01:09 +0000 Manifest next update: Tue 27 Jan 2026 07:01:09 +0000 Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: X06+s7IfHHr5BGoC1AvRttUAUag4hTA3b46t7XQKmu0=) 2: kIdKfcVB8xoU-jL0GS61sHZEdFc.roa (hash: 0PfvIN3m+RMyfBShY3gPVZh53Z/48yCnaRs0eMSULZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:38:58:c8:a3:0a:10:e6:b5:ed:8d:4f:1b:b7:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712 Validity Not Before: Jan 26 07:01:09 2026 GMT Not After : Jan 27 07:01:09 2026 GMT Subject: CN=250bf3e7a4127f7b4220ec70b0706c33cd17856c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:b0:b6:4e:9e:f2:3c:31:8d:b8:ef:5d:c8: cb:8a:b5:b3:86:71:67:02:cb:95:84:01:8e:24:9a: 58:e1:18:57:8a:9d:21:54:93:6a:69:2e:96:0c:64: 35:45:4a:bd:63:12:2f:da:37:8e:df:f1:2c:28:41: 0e:64:be:bc:76:9e:e1:5b:e6:05:90:42:25:cd:c4: 9b:0a:5d:2b:03:41:f0:e1:a0:74:9e:72:34:53:11: 6e:d3:f6:2f:39:3b:94:cf:88:11:c9:4f:91:8e:b5: 78:28:06:51:24:f6:94:b4:ee:ff:f9:bf:3f:f7:8e: 48:75:88:8b:32:47:93:af:2e:b1:05:e0:c0:6a:45: bc:f4:59:e7:7a:e1:e7:18:72:6f:ee:14:63:55:4d: cb:18:6d:b2:88:cc:08:02:19:0a:4a:f0:78:8c:de: 8c:35:9c:a2:92:43:7b:96:1c:ee:d8:4d:b0:f0:ee: 3a:b7:e9:9c:d4:4a:13:32:fe:6d:71:8b:27:f6:6f: 21:a4:d9:20:28:47:28:36:39:cd:87:21:f2:86:30: 81:45:d0:9a:83:f9:ac:8f:01:4d:95:ec:33:9b:b8: 6a:eb:eb:91:d7:be:db:4c:c1:ce:fc:05:02:74:44: e6:db:91:5b:d5:cc:61:30:10:be:23:01:15:09:76: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0B:F3:E7:A4:12:7F:7B:42:20:EC:70:B0:70:6C:33:CD:17:85:6C X509v3 Authority Key Identifier: keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a0:1f:0a:24:81:fa:47:fe:ae:a6:99:0d:5c:f7:8d:b8:0b: aa:d9:2d:cf:a7:95:2c:85:ed:05:02:76:bd:7c:9b:fd:af:87: d3:f3:4e:6f:ac:26:2e:2a:de:3f:86:23:7a:77:f2:a8:47:89: 47:a5:82:ff:ab:16:6a:27:f2:24:76:00:ab:68:63:62:ae:55: b9:ba:83:24:32:1c:74:f0:b2:ab:91:8f:58:3f:80:a9:6c:08: 84:6b:c5:5d:ae:f5:a8:05:f3:96:2b:67:c0:7c:e6:36:31:c6: 2e:2f:4c:71:d7:f7:d8:2a:ce:4f:f3:1a:31:4a:83:f8:51:cd: b4:87:a4:d6:8a:66:3d:cf:79:13:8c:f3:3d:9b:84:79:0a:5a: 02:b4:d6:a4:9f:e0:96:56:c9:bd:f9:fa:2e:9d:46:e4:86:49: 60:fd:22:c6:99:8b:50:0d:60:f8:5b:54:4b:fb:70:da:e4:e7: 47:7a:fb:ca:28:96:1a:ce:5f:e5:b5:c6:02:da:d1:fd:45:38: 23:13:55:c4:6e:80:ae:01:11:72:4a:e9:9d:5f:b1:12:7b:18: 8a:d8:d5:3f:59:55:e9:de:6c:91:5d:36:d9:bc:a5:8b:d0:a6: 30:5e:07:da:85:25:c7:3a:5d:b6:00:a4:ef:fc:40:67:9d:c8: 71:4e:74:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5GzhYyKMKEOa17Y1PG7cJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzMwMzcxOTg2ZGY1ZDU2NGVlNjcwNzQ3MTdiNjZhMDJm ZjU3MTIwHhcNMjYwMTI2MDcwMTA5WhcNMjYwMTI3MDcwMTA5WjAzMTEwLwYDVQQD EygyNTBiZjNlN2E0MTI3ZjdiNDIyMGVjNzBiMDcwNmMzM2NkMTc4NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2ywtk6e8jwxjbjvXcjLirWzhnFn AsuVhAGOJJpY4RhXip0hVJNqaS6WDGQ1RUq9YxIv2jeO3/EsKEEOZL68dp7hW+YF kEIlzcSbCl0rA0Hw4aB0nnI0UxFu0/YvOTuUz4gRyU+RjrV4KAZRJPaUtO7/+b8/ 945IdYiLMkeTry6xBeDAakW89FnneuHnGHJv7hRjVU3LGG2yiMwIAhkKSvB4jN6M NZyikkN7lhzu2E2w8O46t+mc1EoTMv5tcYsn9m8hpNkgKEcoNjnNhyHyhjCBRdCa g/msjwFNlewzm7hq6+uR177bTMHO/AUCdETm25Fb1cxhMBC+IwEVCXZArQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUL8+ekEn97QiDscLBwbDPNF4VsMB8GA1UdIwQY MBaAFELDA3GYbfXVZO5nB0cXtmoC/1cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84YmEwZGQtMmZiYi00YTZmLTlhMzct YzI0NTRjZTI4ZDQ4LzEvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC84YmEwZGQtMmZiYi00YTZmLTlhMzctYzI0NTRjZTI4ZDQ4 LzEvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqAfCiSB +kf+rqaZDVz3jbgLqtktz6eVLIXtBQJ2vXyb/a+H0/NOb6wmLireP4YjenfyqEeJ R6WC/6sWaifyJHYAq2hjYq5VubqDJDIcdPCyq5GPWD+AqWwIhGvFXa71qAXzlitn wHzmNjHGLi9Mcdf32CrOT/MaMUqD+FHNtIek1opmPc95E4zzPZuEeQpaArTWpJ/g llbJvfn6Lp1G5IZJYP0ixpmLUA1g+FtUS/tw2uTnR3r7yiiWGs5f5bXGAtrR/UU4 IxNVxG6ArgERckrpnV+xEnsYitjVP1lV6d5skV022byli9CmMF4H2oUlxzpdtgCk 7/xAZ53IcU50+w== -----END CERTIFICATE-----Generated at Mon Jan 26 14:26:04 2026 by rpki-client