This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: WmtFvr++qsyobotDSbBF0Wr2fV8YNIIBIjr/iQfnu5w=
Subject key identifier: C9:9E:EF:F7:88:CB:C5:B1:4D:3C:CE:2F:72:E1:8E:53:A2:65:AC:AA
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 019BF650D6DA4F92C148E447A039400D7E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 18:00:51 +0000
Manifest this update: Sun 25 Jan 2026 18:00:51 +0000
Manifest next update: Mon 26 Jan 2026 18:00:51 +0000
Files and hashes: 1: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
2: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: 3Q2r4uY4I075U2Fy9v7iedrGNgpOZlmo/V8p9h5PSl8=)
3: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:50:d6:da:4f:92:c1:48:e4:47:a0:39:40:0d:7e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Jan 25 18:00:51 2026 GMT
Not After : Jan 26 18:00:51 2026 GMT
Subject: CN=c99eeff788cbc5b14d3cce2f72e18e53a265acaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1c:7b:1d:f0:08:c7:95:74:82:bd:e0:1d:44:
7d:37:ca:b0:98:f5:8f:ac:6e:96:b0:26:61:f1:04:
01:93:90:e8:33:86:5c:61:a8:34:ff:ce:d4:94:57:
b8:b1:24:fb:2b:72:cf:9e:b2:d2:03:3b:05:b4:f4:
c1:be:9b:01:31:28:67:37:2b:a8:fc:69:c6:cd:e2:
77:6a:d4:11:6d:6e:fd:34:1c:7c:5b:7f:3a:cc:d4:
38:5e:c8:05:c3:dd:de:b9:87:8f:1d:fc:71:a1:16:
6e:2c:ac:59:43:1d:ab:88:95:f0:08:c7:3f:a7:86:
6f:78:86:e5:82:a9:09:aa:0d:88:76:f2:5e:56:a1:
ee:5b:4b:f2:f0:60:00:46:5a:ef:6e:4e:36:26:96:
80:af:73:31:f6:50:b6:5b:7b:13:19:65:2e:e0:5d:
51:a3:45:d4:cf:b0:ea:5f:25:2c:13:eb:b2:b8:52:
38:ae:f5:eb:4d:8f:3d:46:a6:d2:ca:82:6c:0c:56:
13:9b:76:66:d4:92:7d:4d:4a:b2:aa:1d:58:87:ee:
1b:c6:22:b8:8f:89:c0:c0:67:06:fd:ad:6b:66:1a:
ae:3f:5a:81:67:37:76:d5:93:59:24:3a:e8:8e:e3:
75:84:72:12:07:ab:63:02:32:43:6d:6d:b3:45:06:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:EF:F7:88:CB:C5:B1:4D:3C:CE:2F:72:E1:8E:53:A2:65:AC:AA
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:49:5d:62:fb:fd:41:e6:dc:fb:2a:3e:87:20:e0:83:6e:fc:
77:a9:98:be:60:f6:4c:5d:64:42:c2:c0:4e:38:32:37:02:d7:
32:07:10:51:cd:a1:9e:d7:87:c9:70:f1:01:21:ae:c8:f3:7b:
dc:bb:af:29:c7:05:82:52:86:f3:d6:d7:00:22:de:de:65:d5:
9d:1a:de:20:2d:ed:15:37:6b:a8:e5:d3:5e:af:df:14:9a:3a:
5d:92:23:af:f6:d3:a3:ba:fe:64:d8:fd:89:1a:b8:e9:e8:54:
dd:8e:9c:fb:a9:5d:54:43:88:c3:69:1d:12:4f:a8:37:71:e0:
da:67:09:04:57:c9:64:9c:c0:66:96:7d:b6:73:37:91:fc:e7:
d2:c6:c6:f4:e2:41:15:fa:7d:25:6c:6c:c6:d8:b7:8d:de:8c:
ee:00:51:11:d5:c1:a2:d8:3b:44:de:0b:6d:2b:3c:ae:48:5f:
fd:85:51:54:28:eb:62:78:dd:9a:fc:48:be:39:7f:fd:c5:65:
73:c4:30:ef:50:fd:8c:11:34:f1:9e:fc:57:8f:4b:fe:31:c7:
3f:4d:8c:0c:64:9b:00:ce:3f:22:dd:c2:b7:6f:00:2d:f4:03:
33:8a:2b:3c:27:f5:f0:58:00:e4:c0:30:1f:f1:ea:9e:31:f3:
cf:e6:98:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2UNbaT5LBSORHoDlADX5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzQyNzIzYzFmNzViYTBiZTg5MzVjNzJmNjFiZmU1YzVm
NGNlM2MwHhcNMjYwMTI1MTgwMDUxWhcNMjYwMTI2MTgwMDUxWjAzMTEwLwYDVQQD
EyhjOTllZWZmNzg4Y2JjNWIxNGQzY2NlMmY3MmUxOGU1M2EyNjVhY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixx7HfAIx5V0gr3gHUR9N8qwmPWP
rG6WsCZh8QQBk5DoM4ZcYag0/87UlFe4sST7K3LPnrLSAzsFtPTBvpsBMShnNyuo
/GnGzeJ3atQRbW79NBx8W386zNQ4XsgFw93euYePHfxxoRZuLKxZQx2riJXwCMc/
p4ZveIblgqkJqg2IdvJeVqHuW0vy8GAARlrvbk42JpaAr3Mx9lC2W3sTGWUu4F1R
o0XUz7DqXyUsE+uyuFI4rvXrTY89RqbSyoJsDFYTm3Zm1JJ9TUqyqh1Yh+4bxiK4
j4nAwGcG/a1rZhquP1qBZzd21ZNZJDrojuN1hHISB6tjAjJDbW2zRQav7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMme7/eIy8WxTTzOL3LhjlOiZayqMB8GA1UdIwQY
MBaAFELEJyPB91ugvok1xy9hv+XF9M48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAt
Yjk4YTY5MDFlYTEwLzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAtYjk4YTY5MDFlYTEw
LzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUldYvv9
Qebc+yo+hyDgg278d6mYvmD2TF1kQsLATjgyNwLXMgcQUc2hnteHyXDxASGuyPN7
3LuvKccFglKG89bXACLe3mXVnRreIC3tFTdrqOXTXq/fFJo6XZIjr/bTo7r+ZNj9
iRq46ehU3Y6c+6ldVEOIw2kdEk+oN3Hg2mcJBFfJZJzAZpZ9tnM3kfzn0sbG9OJB
Ffp9JWxsxti3jd6M7gBREdXBotg7RN4LbSs8rkhf/YVRVCjrYnjdmvxIvjl//cVl
c8Qw71D9jBE08Z78V49L/jHHP02MDGSbAM4/It3Ct28ALfQDM4orPCf18FgA5MAw
H/HqnjHzz+aYdQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:57 2026 by rpki-client