This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json) Hash identifier: 4P+AGEzIMPtwNzIo2M9nsLVAaCJV4mdW1vN/P/gu3Og= Subject key identifier: C3:66:B3:78:7F:0E:F4:9E:FD:16:2A:73:73:4F:EA:B4:99:3B:90:D0 Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5 Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5 Certificate serial: 019BF42C19FEC97F20DC4A9A356F332B1886 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft Manifest number: 172D Signing time: Sun 25 Jan 2026 08:01:29 +0000 Manifest this update: Sun 25 Jan 2026 08:01:29 +0000 Manifest next update: Mon 26 Jan 2026 08:01:29 +0000 Files and hashes: 1: DsEiDbdONX-wlDkZ_X-1g9jpCQg.roa (hash: OA/21KHBKcEIJSTWxQCJ0tkhioZ536fK4ENW6PbwjpI=) 2: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: YhL3km/7lr4kn5nHZOHV30fLdSWby9m84sXSc+x6w3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2c:19:fe:c9:7f:20:dc:4a:9a:35:6f:33:2b:18:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5 Validity Not Before: Jan 25 08:01:29 2026 GMT Not After : Jan 26 08:01:29 2026 GMT Subject: CN=c366b3787f0ef49efd162a73734feab4993b90d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ec:4f:77:4c:3c:74:1b:80:09:1d:d0:5b:9b: 65:4b:06:4a:f0:d3:11:d1:ca:19:53:f9:33:66:20: e7:2b:bc:54:9f:70:60:f7:0b:15:d3:49:4c:6e:86: 7b:03:a4:a9:d3:f2:0f:4c:22:12:e4:8c:cd:e8:9b: e7:04:0a:6c:97:64:55:12:fd:a8:d9:da:3d:78:30: 7b:c9:0e:f2:97:15:23:71:90:df:5e:7e:d6:9d:84: a7:b2:c2:d2:4b:9f:31:14:6c:12:4e:cd:af:79:3c: 8e:30:67:81:e4:9f:34:9b:02:75:e1:e9:8f:49:67: 32:74:99:75:5b:0c:73:54:60:a7:0b:2c:f1:e5:7f: 98:c2:18:55:73:fb:ef:7c:ed:a1:e2:fe:f0:02:64: 0f:b0:65:1d:8c:c4:89:bd:79:aa:b8:7e:38:00:c3: c1:08:cd:e5:49:51:dd:68:76:a6:a1:da:fb:e8:00: 70:a7:a7:09:07:25:2f:b6:7a:02:b9:ac:96:cc:c9: f6:64:fa:a2:66:69:e4:7a:10:2d:ca:61:57:08:5c: de:ee:c8:c5:1e:e3:36:00:e4:c8:c1:9f:e2:a6:c2: bb:6a:c3:03:9f:77:2f:07:5f:a9:32:c4:f2:61:68: 16:59:b5:ca:bd:ab:6f:73:aa:72:ae:ea:b9:6e:bc: 1b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:66:B3:78:7F:0E:F4:9E:FD:16:2A:73:73:4F:EA:B4:99:3B:90:D0 X509v3 Authority Key Identifier: keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:3c:b2:e0:34:1e:bb:9f:ae:d9:25:74:db:06:19:5a:52:31: b6:35:90:41:1a:bc:d9:17:00:59:29:f5:4f:59:a2:8b:3b:05: aa:4c:96:84:3d:f8:19:84:37:d1:5c:1e:86:31:ae:a0:43:3d: ca:c0:17:44:a5:69:30:85:5d:44:81:cc:ee:ba:7b:12:26:6b: a9:dc:d6:3c:24:70:a7:85:81:65:9b:81:57:83:d9:9f:1e:9b: 31:1b:59:df:d0:6c:ec:95:d7:bf:69:aa:f5:3d:9c:d8:15:10: a9:cb:37:28:98:20:2f:ba:d7:e5:93:9f:5f:a3:69:3b:2b:3f: 6e:b8:e2:c3:6e:29:3c:69:87:8d:c0:45:31:5c:16:95:ef:ff: 89:9b:4d:d8:2a:62:fe:b9:e2:dd:4c:3d:cb:6b:9e:2f:b9:ed: 12:93:ab:4d:a1:fc:94:02:71:76:e4:9d:d1:dc:cc:fc:94:1a: 09:0d:f9:9e:b7:a2:bd:46:7f:4f:93:35:b3:31:4f:0c:71:dc: 4c:32:89:9a:d2:cf:43:d5:25:98:14:9a:11:4b:06:16:5d:18: 73:57:a9:86:db:04:79:8c:78:a0:ed:53:a7:c1:4b:91:c5:39: 92:ce:ac:d4:e3:28:96:d3:70:28:7e:8e:8f:c8:1f:eb:a2:44: c4:eb:9a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0LBn+yX8g3EqaNW8zKxiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzN2UwMzBkNDQ2NjFhNGMyMDFlYmEwM2RlNDUyYjA0Yjhl N2Q5ZTUwHhcNMjYwMTI1MDgwMTI5WhcNMjYwMTI2MDgwMTI5WjAzMTEwLwYDVQQD EyhjMzY2YjM3ODdmMGVmNDllZmQxNjJhNzM3MzRmZWFiNDk5M2I5MGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOxPd0w8dBuACR3QW5tlSwZK8NMR 0coZU/kzZiDnK7xUn3Bg9wsV00lMboZ7A6Sp0/IPTCIS5IzN6JvnBApsl2RVEv2o 2do9eDB7yQ7ylxUjcZDfXn7WnYSnssLSS58xFGwSTs2veTyOMGeB5J80mwJ14emP SWcydJl1WwxzVGCnCyzx5X+YwhhVc/vvfO2h4v7wAmQPsGUdjMSJvXmquH44AMPB CM3lSVHdaHamodr76ABwp6cJByUvtnoCuayWzMn2ZPqiZmnkehAtymFXCFze7sjF HuM2AOTIwZ/ipsK7asMDn3cvB1+pMsTyYWgWWbXKvatvc6pyruq5brwb4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNms3h/DvSe/RYqc3NP6rSZO5DQMB8GA1UdIwQY MBaAFEN+Aw1EZhpMIB66A95FKwS459nlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS80YmUyNTktYmU5Ni00MGZhLTg4MGUt YmJkMjEwNmYzMzcwLzEvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS80YmUyNTktYmU5Ni00MGZhLTg4MGUtYmJkMjEwNmYzMzcw LzEvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDyy4DQe u5+u2SV02wYZWlIxtjWQQRq82RcAWSn1T1miizsFqkyWhD34GYQ30VwehjGuoEM9 ysAXRKVpMIVdRIHM7rp7EiZrqdzWPCRwp4WBZZuBV4PZnx6bMRtZ39Bs7JXXv2mq 9T2c2BUQqcs3KJggL7rX5ZOfX6NpOys/brjiw24pPGmHjcBFMVwWle//iZtN2Cpi /rni3Uw9y2ueL7ntEpOrTaH8lAJxduSd0dzM/JQaCQ35nreivUZ/T5M1szFPDHHc TDKJmtLPQ9UlmBSaEUsGFl0Yc1ephtsEeYx4oO1Tp8FLkcU5ks6s1OMoltNwKH6O j8gf66JExOuaPg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:54 2026 by rpki-client