This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json) Hash identifier: fctauHRdZxx8aX0rM8VCx0DQtFkOK4+KBlH65KEQ0Io= Subject key identifier: 80:1D:0A:BA:A8:9E:8B:8B:AE:B9:B6:52:2E:D5:6B:C5:C5:37:85:B7 Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02 Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102 Certificate serial: 019BF3BD59A09F988AE964FA5903E4E97225 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 06:00:31 +0000 Manifest this update: Sun 25 Jan 2026 06:00:31 +0000 Manifest next update: Mon 26 Jan 2026 06:00:31 +0000 Files and hashes: 1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: in5K8eJ23Mr1YxiqJHn6OLs+78pmT4sBlMcbLK/Re/4=) 2: Seo64cK5BBL5Z5Lga5yI1lf8M6w.roa (hash: LMUW9+NLiMGnI7ZWrV590GSKNkkWYi8Hg05UOVRU3Cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:59:a0:9f:98:8a:e9:64:fa:59:03:e4:e9:72:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102 Validity Not Before: Jan 25 06:00:31 2026 GMT Not After : Jan 26 06:00:31 2026 GMT Subject: CN=801d0abaa89e8b8baeb9b6522ed56bc5c53785b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0e:ea:e5:cf:1a:7b:aa:8a:d7:aa:d9:b0:8c: e8:0a:4e:49:67:94:21:51:e5:fb:79:b9:f1:b1:dc: f0:6b:d3:93:7b:ae:d0:a9:87:3e:e7:6e:f0:ca:f4: 55:35:82:5c:01:9b:c6:9a:b7:81:9b:69:c7:06:71: d7:3b:0a:c3:68:6d:a6:d4:f0:7b:21:28:71:ca:0c: 28:69:56:32:0a:7e:8f:26:26:46:7f:27:42:9f:ea: 59:cc:6f:9a:68:7b:1d:7f:f2:f8:96:c3:f9:35:2f: 40:39:6d:bc:45:85:94:05:1e:6a:3b:6e:81:34:60: 3d:77:ea:15:0c:78:66:8d:72:04:03:4f:56:69:d6: e1:ff:b0:36:92:10:2b:49:90:cd:37:0d:f4:24:d3: f4:21:ad:74:71:ec:91:73:99:d4:09:f0:66:d2:67: 64:fc:34:ee:4f:24:5c:2f:cc:82:61:7b:e8:ad:51: a7:88:be:ff:47:0a:10:af:29:a9:a9:87:5b:ac:39: eb:74:78:83:96:4f:fe:29:1b:fb:f2:29:bf:cb:08: 63:eb:d4:c6:38:84:44:16:0c:1c:aa:cb:1b:84:84: 44:83:37:7b:d5:e7:16:07:5f:06:26:8c:4b:db:94: 19:00:ba:f5:14:ef:56:62:29:51:29:b1:45:d4:4e: a8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1D:0A:BA:A8:9E:8B:8B:AE:B9:B6:52:2E:D5:6B:C5:C5:37:85:B7 X509v3 Authority Key Identifier: keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a4:48:2c:72:22:7e:6a:1c:89:e8:c5:8c:43:f3:a3:19:8c: db:4a:dd:bf:2b:1f:e6:3c:87:36:25:d5:e6:bf:4f:5c:97:29: 40:2c:a7:44:be:d3:4a:8e:c9:28:a3:f3:49:3f:14:bb:a3:5e: dc:27:f6:53:a6:f6:df:8c:02:ba:0e:be:8c:9e:f0:df:2b:e8: 67:0c:bb:e2:ba:db:84:17:7f:32:bc:83:c6:26:aa:8c:62:f1: a5:06:7b:c7:bb:d0:f2:97:f6:58:dd:75:2e:39:94:a7:73:36: 6b:92:e4:37:c4:f4:54:f5:c7:b2:42:f2:1b:52:83:b1:08:d5: 51:ac:2f:ef:ea:30:a1:79:d1:55:e8:2a:5e:56:52:df:85:3c: ef:a7:59:d8:24:d0:b1:20:34:7a:8c:e7:10:21:06:ea:32:36: 7d:c2:27:33:d8:b8:64:0b:ef:a8:ad:c3:5d:a0:d1:5f:0b:3c: 55:37:4d:0c:64:a9:fc:9b:f0:12:f0:cd:12:c7:af:ff:82:52: c4:06:9e:23:ff:8e:d8:85:d5:f7:d8:28:a8:99:a2:06:b0:45: b4:ed:c6:04:6f:e0:a5:a4:6b:38:fd:e9:c8:e4:a9:0b:c3:13: a2:18:18:d9:a3:41:e8:92:15:29:04:ae:27:99:69:0a:ce:51: 40:7e:60:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvVmgn5iK6WT6WQPk6XIlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOWIxY2YyMWQyMGY4YzZmOTQ2NDFlMzMyN2U0NTU1ZTJl NDExMDIwHhcNMjYwMTI1MDYwMDMxWhcNMjYwMTI2MDYwMDMxWjAzMTEwLwYDVQQD Eyg4MDFkMGFiYWE4OWU4YjhiYWViOWI2NTIyZWQ1NmJjNWM1Mzc4NWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg7q5c8ae6qK16rZsIzoCk5JZ5Qh UeX7ebnxsdzwa9OTe67QqYc+527wyvRVNYJcAZvGmreBm2nHBnHXOwrDaG2m1PB7 IShxygwoaVYyCn6PJiZGfydCn+pZzG+aaHsdf/L4lsP5NS9AOW28RYWUBR5qO26B NGA9d+oVDHhmjXIEA09Wadbh/7A2khArSZDNNw30JNP0Ia10ceyRc5nUCfBm0mdk /DTuTyRcL8yCYXvorVGniL7/RwoQrympqYdbrDnrdHiDlk/+KRv78im/ywhj69TG OIREFgwcqssbhIREgzd71ecWB18GJoxL25QZALr1FO9WYilRKbFF1E6oMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAdCrqonouLrrm2Ui7Va8XFN4W3MB8GA1UdIwQY MBaAFEKbHPIdIPjG+UZB4zJ+RVXi5BECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3Yzgt ZTU2ZTczODM4MGRlLzEvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3YzgtZTU2ZTczODM4MGRl LzEvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqRILHIi fmociejFjEPzoxmM20rdvysf5jyHNiXV5r9PXJcpQCynRL7TSo7JKKPzST8Uu6Ne 3Cf2U6b234wCug6+jJ7w3yvoZwy74rrbhBd/MryDxiaqjGLxpQZ7x7vQ8pf2WN11 LjmUp3M2a5LkN8T0VPXHskLyG1KDsQjVUawv7+owoXnRVegqXlZS34U876dZ2CTQ sSA0eoznECEG6jI2fcInM9i4ZAvvqK3DXaDRXws8VTdNDGSp/JvwEvDNEsev/4JS xAaeI/+O2IXV99goqJmiBrBFtO3GBG/gpaRrOP3pyOSpC8MTohgY2aNB6JIVKQSu J5lpCs5RQH5gIA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:34 2026 by rpki-client