This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: mH4zTEflSu29BUePlQQ1+e35LNAoNgVG6NOed36qTEQ= Subject key identifier: BA:A2:B9:A6:8A:39:4C:53:0F:BA:E3:54:AE:92:F0:00:A4:74:3E:05 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019BF72D8802978661FEAA1B69A9363EFEBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 17F6 Signing time: Sun 25 Jan 2026 22:01:54 +0000 Manifest this update: Sun 25 Jan 2026 22:01:54 +0000 Manifest next update: Mon 26 Jan 2026 22:01:54 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: 24lvsSxh7MUVQcE3eg7_Djq-Tso.asa (hash: Hjss/TGOcmwG6GtuhM5X9Ph0gtLBzHScnu3DTiqPa9c=) 3: 36K8uvuxLLbczf1YXC_ASJxPbng.asa (hash: 870+pBNRKYWmY6ePML/QQK6e/MrQo9VBr7qVr3BXzBw=) 4: FWYopd6TlSta9pASbYNvraqyvNM.asa (hash: I8ABTTre9KM0IJfOp7PT39kOwRj4TE5ZVbXeJW/G+gk=) 5: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 6: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 7: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 8: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 9: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: NhoxiOOLT7laxw578+b+lu4wQqZ3Bu2eHxkwvH+Llhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:88:02:97:86:61:fe:aa:1b:69:a9:36:3e:fe:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Jan 25 22:01:54 2026 GMT Not After : Jan 26 22:01:54 2026 GMT Subject: CN=baa2b9a68a394c530fbae354ae92f000a4743e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:6e:86:3d:01:d6:99:f9:f5:3c:50:6f:1e: 5e:a7:60:3d:39:f2:7b:ff:f5:a5:3f:85:64:56:3a: 5f:f4:28:cd:79:24:20:b3:4b:97:23:f6:c6:d8:5d: 2e:c4:c1:84:d6:23:9b:df:75:be:9b:56:aa:d4:34: b9:ab:2c:65:a4:87:8e:b2:ae:7e:be:39:d2:11:ec: 00:80:8b:3b:db:f0:70:ac:48:ec:4c:c2:3c:ac:96: cc:3d:25:bb:0a:70:11:6b:4b:54:3a:53:58:62:e8: dc:b7:a9:a0:51:dc:4d:d8:10:d5:26:11:01:c4:49: 2a:f5:3b:10:5f:1b:6b:ad:55:3d:07:28:ff:95:4f: 74:a5:c7:9c:b8:62:64:a6:5c:b8:94:0a:52:f2:f0: ae:8a:3a:11:62:9a:41:62:f9:0a:9d:83:69:46:af: 35:a8:e8:a7:b7:71:53:92:d2:d1:a0:ef:75:42:5e: cd:34:80:5d:b6:03:05:e2:a5:b5:9a:f0:43:4a:38: 5b:24:fd:ab:3e:49:16:66:88:57:be:3e:67:dd:65: 90:dd:b0:26:83:40:7e:f1:4b:b1:fe:99:26:28:df: 14:3d:a0:63:26:40:bd:7a:f6:f4:7c:54:a9:4d:34: 87:84:ff:a9:5e:0e:e2:53:bc:cc:d3:81:6e:02:86: 81:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A2:B9:A6:8A:39:4C:53:0F:BA:E3:54:AE:92:F0:00:A4:74:3E:05 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:81:2d:ba:3a:92:9f:5c:43:20:78:3c:c7:80:2c:b0:f8:e1: bb:e0:a2:b8:c6:63:e9:c2:87:4e:d6:43:d5:c9:c0:52:49:f5: 75:01:67:1d:58:5b:9f:97:c3:39:25:ca:6d:1e:53:a9:57:7f: 0b:70:e9:60:6a:a6:3b:db:dd:ce:55:7c:1b:cb:8b:e8:62:b5: fa:55:40:92:44:da:26:de:87:32:7a:3d:8e:39:3d:53:b9:66: 63:4d:94:df:5d:d4:fb:fc:bd:b1:7c:54:34:e9:5d:a1:64:8f: 2d:c6:2d:33:6d:48:d4:e1:25:36:52:4e:2b:67:cf:cc:ea:28: a2:ad:6f:99:04:e1:e0:33:0f:6b:47:87:75:17:23:35:e5:44: 5d:15:08:d4:60:d3:3a:1c:a1:7d:98:fe:2d:44:3c:69:9e:c5: 66:7b:6c:a6:35:28:1e:78:d4:96:d3:f5:d1:27:9e:cf:36:fa: ce:86:38:0b:cc:ab:8b:56:5c:c1:81:3e:54:56:75:34:02:a6: c9:2b:a9:37:34:fe:6a:37:5d:df:2b:2a:a7:d4:ee:a9:03:19: 1b:17:a1:8d:b4:02:0f:bb:8e:9b:45:17:65:39:24:ac:3f:71: ca:93:96:c1:25:35:fb:71:21:2b:4d:c4:7b:2e:5e:c6:76:47: dc:8c:74:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LYgCl4Zh/qobaak2Pv6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwMTI1MjIwMTU0WhcNMjYwMTI2MjIwMTU0WjAzMTEwLwYDVQQD EyhiYWEyYjlhNjhhMzk0YzUzMGZiYWUzNTRhZTkyZjAwMGE0NzQzZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRhuhj0B1pn59TxQbx5ep2A9OfJ7 //WlP4VkVjpf9CjNeSQgs0uXI/bG2F0uxMGE1iOb33W+m1aq1DS5qyxlpIeOsq5+ vjnSEewAgIs72/BwrEjsTMI8rJbMPSW7CnARa0tUOlNYYujct6mgUdxN2BDVJhEB xEkq9TsQXxtrrVU9Byj/lU90pcecuGJkply4lApS8vCuijoRYppBYvkKnYNpRq81 qOint3FTktLRoO91Ql7NNIBdtgMF4qW1mvBDSjhbJP2rPkkWZohXvj5n3WWQ3bAm g0B+8Uux/pkmKN8UPaBjJkC9evb0fFSpTTSHhP+pXg7iU7zM04FuAoaBbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqiuaaKOUxTD7rjVK6S8ACkdD4FMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoEtujqS n1xDIHg8x4AssPjhu+CiuMZj6cKHTtZD1cnAUkn1dQFnHVhbn5fDOSXKbR5TqVd/ C3DpYGqmO9vdzlV8G8uL6GK1+lVAkkTaJt6HMno9jjk9U7lmY02U313U+/y9sXxU NOldoWSPLcYtM21I1OElNlJOK2fPzOoooq1vmQTh4DMPa0eHdRcjNeVEXRUI1GDT OhyhfZj+LUQ8aZ7FZntspjUoHnjUltP10Seezzb6zoY4C8yri1ZcwYE+VFZ1NAKm ySupNzT+ajdd3ysqp9TuqQMZGxehjbQCD7uOm0UXZTkkrD9xypOWwSU1+3EhK03E ey5exnZH3Ix0Mw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:38 2026 by rpki-client