This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json) Hash identifier: MsYBAco4e9LOnlkTG+Q9Soxt5iCyEk4OyLWd358i+C0= Subject key identifier: 77:E8:F4:DB:89:96:C2:45:4D:E8:B3:04:A2:49:D2:C9:90:96:08:3F Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4 Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4 Certificate serial: 019BF651253122E86826F85A0CBB5022952B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft Manifest number: 09D6 Signing time: Sun 25 Jan 2026 18:01:11 +0000 Manifest this update: Sun 25 Jan 2026 18:01:11 +0000 Manifest next update: Mon 26 Jan 2026 18:01:11 +0000 Files and hashes: 1: 2j_D2kuSa562Zx4XnJ12w00oiMA.roa (hash: axWB++PeEKcojO8mVkayfPDvB+OsvgmhWTzXNDpM5Gk=) 2: 7Un3ch6sdTltAsulfRI9pykeqS0.roa (hash: qClWxzfRNb7UAsReGRMx4ioTUH4td3oi9VjiWf2rMZk=) 3: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: CfCav0Zyc6B2sSA3JCqSA/elM+0pud3FEBw6J0YY/fE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:25:31:22:e8:68:26:f8:5a:0c:bb:50:22:95:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4 Validity Not Before: Jan 25 18:01:11 2026 GMT Not After : Jan 26 18:01:11 2026 GMT Subject: CN=77e8f4db8996c2454de8b304a249d2c99096083f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ff:48:0d:d7:75:e2:d8:e1:ab:38:23:40:df: 52:c3:0f:37:94:7d:20:f8:3b:be:e3:50:af:bc:75: 75:43:69:8d:ee:8e:54:9b:ac:15:77:d0:71:6f:0e: 08:69:a3:e7:ea:32:d5:76:3d:b8:6b:bb:b6:9d:a3: 0d:85:64:69:5c:34:36:e6:30:1a:23:ad:04:44:c2: e3:76:a1:0b:9c:02:ca:a8:14:0a:f0:0d:59:7d:e3: 1f:d7:e5:cd:8b:e8:00:81:c8:db:43:07:31:02:e1: 64:1c:54:b4:85:5a:37:83:22:93:da:d8:d3:13:ae: 59:62:80:54:ce:d7:33:15:04:f0:c7:e1:9c:1b:58: 07:57:84:da:e2:bd:4a:20:79:2c:c8:0b:a1:b7:43: 41:17:65:f2:34:9d:f1:c8:c6:04:c5:4d:f8:13:f9: 63:1f:9f:0d:5f:28:26:40:f9:6c:06:99:ec:00:a7: f1:28:16:8c:4c:cb:56:44:0d:0a:78:1e:ad:2c:28: ca:27:31:ea:6f:b3:ca:35:21:d3:d9:a9:e4:97:69: 22:fa:cf:2f:e1:5c:03:5e:b2:24:f4:33:bb:63:4b: 44:b2:73:c4:ea:4d:54:f9:54:3f:fe:1d:c3:cc:50: e0:d5:da:f8:29:b5:68:5b:63:f7:75:96:12:60:71: 76:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E8:F4:DB:89:96:C2:45:4D:E8:B3:04:A2:49:D2:C9:90:96:08:3F X509v3 Authority Key Identifier: keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e6:33:b4:51:49:1e:f3:d2:4e:58:7e:97:ab:67:8d:d7:f1: 89:35:5c:7c:20:50:5e:f4:ed:80:30:e9:54:93:4b:a1:6b:b5: c6:da:1b:30:1c:43:00:8e:f8:83:21:fe:b4:b9:7d:b9:02:dd: cb:58:9e:80:88:04:46:2e:d4:cb:22:8e:1d:6e:05:d4:aa:90: 71:f4:b4:79:46:ca:8b:ef:32:00:60:49:cb:c2:64:bc:8d:e6: 0e:34:b2:de:96:6a:60:e2:b6:3f:73:f7:d0:f6:26:0b:ef:dd: 1b:db:4e:0f:a6:9c:ef:23:b6:83:a8:f5:d8:3e:c8:f5:3a:2c: c9:ae:a9:20:60:50:47:f8:85:6c:97:e2:99:63:92:36:c3:ed: 49:a2:d9:c1:0a:39:3c:10:7e:dc:b6:3f:61:bd:ee:e6:1b:4a: aa:db:9d:8d:54:b3:9b:26:1e:f9:27:f2:7b:21:ed:0d:e8:e9: a4:c8:b4:8e:ee:3d:bf:74:9e:d7:44:4b:f2:b0:6f:ec:28:fa: 2e:a6:28:98:97:3e:3f:95:ad:16:57:04:9f:e9:55:55:c9:25: 1f:f2:e7:f5:c0:c8:98:26:a8:67:ac:c7:be:7c:d9:39:70:b2: 48:0b:98:ea:7b:0f:6e:05:23:70:42:f5:ca:04:f6:82:2b:4e: 58:51:e7:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2USUxIuhoJvhaDLtQIpUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2EyNjcwNTA4Yjk0NTEyM2JlZWNiZjEzMTQ1ZmZiZDdi ZmNkZTQwHhcNMjYwMTI1MTgwMTExWhcNMjYwMTI2MTgwMTExWjAzMTEwLwYDVQQD Eyg3N2U4ZjRkYjg5OTZjMjQ1NGRlOGIzMDRhMjQ5ZDJjOTkwOTYwODNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f9IDdd14tjhqzgjQN9Sww83lH0g +Du+41CvvHV1Q2mN7o5Um6wVd9Bxbw4IaaPn6jLVdj24a7u2naMNhWRpXDQ25jAa I60ERMLjdqELnALKqBQK8A1ZfeMf1+XNi+gAgcjbQwcxAuFkHFS0hVo3gyKT2tjT E65ZYoBUztczFQTwx+GcG1gHV4Ta4r1KIHksyAuht0NBF2XyNJ3xyMYExU34E/lj H58NXygmQPlsBpnsAKfxKBaMTMtWRA0KeB6tLCjKJzHqb7PKNSHT2ankl2ki+s8v 4VwDXrIk9DO7Y0tEsnPE6k1U+VQ//h3DzFDg1dr4KbVoW2P3dZYSYHF2EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfo9NuJlsJFTeizBKJJ0smQlgg/MB8GA1UdIwQY MBaAFEJ6JnBQi5RRI77svxMUX/vXv83kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQt MDZiM2NlYTQ5MmVlLzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQtMDZiM2NlYTQ5MmVl LzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuYztFFJ HvPSTlh+l6tnjdfxiTVcfCBQXvTtgDDpVJNLoWu1xtobMBxDAI74gyH+tLl9uQLd y1iegIgERi7UyyKOHW4F1KqQcfS0eUbKi+8yAGBJy8JkvI3mDjSy3pZqYOK2P3P3 0PYmC+/dG9tOD6ac7yO2g6j12D7I9Tosya6pIGBQR/iFbJfimWOSNsPtSaLZwQo5 PBB+3LY/Yb3u5htKqtudjVSzmyYe+SfyeyHtDejppMi0ju49v3Se10RL8rBv7Cj6 LqYomJc+P5WtFlcEn+lVVcklH/Ln9cDImCaoZ6zHvnzZOXCySAuY6nsPbgUjcEL1 ygT2gitOWFHnow== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:02 2026 by rpki-client