This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json) Hash identifier: kIGl7Z03vEeTNHsSrbvc8D16RaeJjEuYFWqyqQM6D2s= Subject key identifier: DF:D8:6E:1F:19:61:C1:4B:42:ED:9E:DA:1C:0F:C8:34:6C:12:9C:29 Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca Certificate serial: 019BF83EE6E9505162FDBB91F77388287C4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft Manifest number: 0C7C Signing time: Mon 26 Jan 2026 03:00:30 +0000 Manifest this update: Mon 26 Jan 2026 03:00:30 +0000 Manifest next update: Tue 27 Jan 2026 03:00:30 +0000 Files and hashes: 1: O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa (hash: x7HRiC6WoAyrY0ICRLQbw3hJY8kiQ6r/ahn5rm3lXqw=) 2: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: Djm1/5hCA2WUO5t1nx8cvEvENv/qd7EdMKfvdXL6lDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:e6:e9:50:51:62:fd:bb:91:f7:73:88:28:7c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca Validity Not Before: Jan 26 03:00:30 2026 GMT Not After : Jan 27 03:00:30 2026 GMT Subject: CN=dfd86e1f1961c14b42ed9eda1c0fc8346c129c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:af:37:2f:5e:44:e9:ac:e8:5d:91:70:9c: 42:ed:8e:2c:86:5e:61:23:d7:75:54:22:b5:69:13: 51:5a:0f:c6:89:a9:34:b8:00:31:71:d5:70:df:ad: 2b:6b:af:a2:e7:b8:dc:ec:65:a1:a9:34:50:f7:f2: f7:90:df:8b:0e:63:40:e4:0f:52:cc:81:e3:4d:63: 8c:aa:84:05:3a:bc:87:c5:0e:31:04:cf:dc:5d:c4: 3d:d7:51:b9:e2:62:cb:69:58:f7:ad:94:dc:e5:d2: 4e:97:1f:02:3a:10:39:69:48:19:59:22:6b:a6:65: 3f:7d:f2:36:bc:b3:97:ce:3c:3f:08:ed:02:84:f3: a5:e4:53:f7:c7:00:25:bb:4f:63:7a:3a:8c:18:83: 46:8b:f2:39:9a:a4:18:7f:bf:bd:5c:42:7b:27:81: 58:bc:65:98:6b:01:92:bd:af:3a:c1:9f:4b:71:5a: d5:0b:40:3c:44:03:71:a8:fd:97:63:6e:55:cb:40: ee:55:ce:3e:cd:d1:a8:fa:f7:74:db:bd:d2:5b:e2: 4c:f6:a1:44:63:11:36:f8:2a:41:ee:14:ce:20:5c: dd:07:24:0e:6c:71:8e:25:9e:70:d8:d0:f6:56:44: 47:49:9f:34:47:9c:5e:af:79:c0:40:1f:9a:72:b8: 1f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D8:6E:1F:19:61:C1:4B:42:ED:9E:DA:1C:0F:C8:34:6C:12:9C:29 X509v3 Authority Key Identifier: keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:8b:87:06:ef:76:74:28:e1:12:95:58:47:c0:20:af:96:a6: 0c:c3:9c:e4:7a:06:6c:5e:fe:4a:b0:92:6a:7a:57:7d:d4:52: 42:b4:44:e4:88:06:85:f7:42:e7:fb:d4:64:14:64:15:e8:15: 26:44:57:33:05:fd:20:bc:65:d8:81:e7:83:34:5a:05:ca:e4: 62:76:ab:6e:04:94:92:f5:d1:99:61:07:1f:81:45:c9:56:a2: 0f:8f:0b:7d:29:39:1e:0f:20:9d:73:92:f9:79:0a:d9:4b:4c: 56:4b:ce:f4:19:3b:c3:b9:6f:0d:c8:3c:96:1f:d9:4d:4c:0d: 33:e9:ea:09:8c:aa:55:70:ff:ab:fa:05:0f:97:25:53:12:8a: e5:61:6d:56:aa:2f:97:54:a0:65:46:b0:50:a3:7a:65:dd:3d: 62:ee:ba:ab:0d:15:f9:65:73:b0:ee:b6:42:2f:e3:3d:30:f4: 46:a5:d0:82:7c:89:ef:b1:00:2e:51:69:84:96:42:36:f9:9a: 95:82:30:d1:89:b5:e7:82:39:4c:f3:8f:db:1d:92:be:f3:2e: 7b:0c:04:ca:45:78:00:27:a7:61:3b:62:0c:84:56:9d:53:5a: cf:a6:7f:b1:21:81:35:ad:30:99:25:50:7c:5a:f5:13:7e:90: d3:4a:8e:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PubpUFFi/buR93OIKHxKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi NzlmY2EwHhcNMjYwMTI2MDMwMDMwWhcNMjYwMTI3MDMwMDMwWjAzMTEwLwYDVQQD EyhkZmQ4NmUxZjE5NjFjMTRiNDJlZDllZGExYzBmYzgzNDZjMTI5YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxGvNy9eROms6F2RcJxC7Y4shl5h I9d1VCK1aRNRWg/Giak0uAAxcdVw360ra6+i57jc7GWhqTRQ9/L3kN+LDmNA5A9S zIHjTWOMqoQFOryHxQ4xBM/cXcQ911G54mLLaVj3rZTc5dJOlx8COhA5aUgZWSJr pmU/ffI2vLOXzjw/CO0ChPOl5FP3xwAlu09jejqMGINGi/I5mqQYf7+9XEJ7J4FY vGWYawGSva86wZ9LcVrVC0A8RANxqP2XY25Vy0DuVc4+zdGo+vd0273SW+JM9qFE YxE2+CpB7hTOIFzdByQObHGOJZ5w2ND2VkRHSZ80R5xer3nAQB+acrgfIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/Ybh8ZYcFLQu2e2hwPyDRsEpwpMB8GA1UdIwQY MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt YjIyNjk1YzcwM2E5LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5 LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIuHBu92 dCjhEpVYR8Agr5amDMOc5HoGbF7+SrCSanpXfdRSQrRE5IgGhfdC5/vUZBRkFegV JkRXMwX9ILxl2IHngzRaBcrkYnarbgSUkvXRmWEHH4FFyVaiD48LfSk5Hg8gnXOS +XkK2UtMVkvO9Bk7w7lvDcg8lh/ZTUwNM+nqCYyqVXD/q/oFD5clUxKK5WFtVqov l1SgZUawUKN6Zd09Yu66qw0V+WVzsO62Qi/jPTD0RqXQgnyJ77EALlFphJZCNvma lYIw0Ym154I5TPOP2x2SvvMuewwEykV4ACenYTtiDIRWnVNaz6Z/sSGBNa0wmSVQ fFr1E36Q00qO+Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:13:36 2026 by rpki-client