This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json) Hash identifier: 3yiHXB8jrhQrp9B76BPC8+i+gteeT7RdUvTF9Iv0nPQ= Subject key identifier: 4E:5F:E3:00:0E:31:C3:FD:86:75:C8:7B:61:C9:F6:B1:F3:2A:08:51 Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9 Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9 Certificate serial: 019BF5E39FD55896C9698EBBB99CBB31EB7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 16:01:33 +0000 Manifest this update: Sun 25 Jan 2026 16:01:33 +0000 Manifest next update: Mon 26 Jan 2026 16:01:33 +0000 Files and hashes: 1: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (hash: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM=) 2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: 89XWy1iynKHua+alGRfM62ywya5IpotToGxTJAFcK2Q=) 3: ken38hVxmy14aPMAbzAPgPTg5Qc.roa (hash: TJhvTJDZL4uFVPaDoKqNX3HyglY2ChDkoRzq0njH+TA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:9f:d5:58:96:c9:69:8e:bb:b9:9c:bb:31:eb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9 Validity Not Before: Jan 25 16:01:33 2026 GMT Not After : Jan 26 16:01:33 2026 GMT Subject: CN=4e5fe3000e31c3fd8675c87b61c9f6b1f32a0851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:25:e0:85:aa:3c:15:39:de:56:c9:91:1d:be: 10:32:14:bd:04:2d:c5:cb:1a:11:3a:ec:e5:72:af: 41:5a:6a:ae:38:b1:a6:81:9c:eb:13:d3:19:2e:8d: 5f:b5:e8:8c:06:4e:fc:a6:4b:ff:6b:eb:12:05:09: 2e:32:64:86:27:24:25:85:87:5a:82:93:e6:bc:0c: bb:af:1f:76:83:c0:64:30:b9:ca:e3:e9:f5:8d:98: 0c:97:36:90:40:5c:49:02:ea:3e:bc:6f:44:e3:0e: 4b:cc:d6:02:a3:48:2c:f2:73:c6:3b:04:90:a3:58: ac:02:93:96:1b:fe:ef:89:2c:11:3a:ee:10:13:ff: bc:3d:21:fb:cd:ee:b3:1a:71:6b:0e:18:d6:86:e0: 98:16:bf:57:42:04:5b:f9:b0:05:ad:03:cb:53:01: a0:58:6e:96:99:ac:bf:76:d1:39:67:36:50:32:56: 65:1b:67:17:19:60:a3:52:e1:ce:b7:55:e7:2d:a3: e3:b0:12:33:3a:4a:64:69:bc:b1:35:a5:67:7f:4c: 2f:d0:00:ed:6b:66:50:8c:ff:71:a8:75:7a:bd:3c: e1:c5:a8:25:10:c1:11:c2:ce:81:76:06:bd:d6:8b: 07:ff:1b:3c:03:f6:a6:11:1e:a1:7e:36:6d:b1:25: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5F:E3:00:0E:31:C3:FD:86:75:C8:7B:61:C9:F6:B1:F3:2A:08:51 X509v3 Authority Key Identifier: keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d2:45:7d:b7:54:d6:41:a2:4a:31:b3:73:69:b9:76:52:f9: a7:6e:a3:f6:03:99:5e:bf:d9:0e:08:dc:30:c6:01:e8:fb:d7: 5d:87:34:b1:8c:fb:d2:5b:89:18:16:7b:73:0f:7f:eb:35:cd: 44:13:54:3f:28:d2:f1:52:ac:f5:2e:02:89:15:40:e9:10:8f: ed:35:2e:7f:97:92:42:c2:ee:ad:a7:b3:da:86:8f:77:8a:98: 35:00:0c:5a:60:9a:92:96:89:e5:1f:61:09:91:0b:b0:df:18: 11:3b:40:f9:d7:bc:a8:93:95:5c:7b:a0:fe:86:ce:bf:fb:00: 71:cf:0a:e6:c5:10:3c:ee:7a:87:2b:66:2a:5a:f4:f8:50:e1: b2:7c:ff:6b:a0:c1:b0:52:97:a6:65:a0:10:31:04:81:d0:73: b4:78:3c:3f:6b:eb:8f:c4:b2:56:68:b7:af:16:fa:7a:ff:cc: 33:f1:34:22:87:0b:33:28:30:7e:aa:15:0d:e2:96:aa:78:56: b3:43:37:c5:5b:57:bf:4b:ba:e5:48:36:4e:6a:ee:de:9a:62: 5d:0e:e5:07:9b:4f:a3:d4:70:59:65:3a:e0:4d:4a:e7:ed:16: bb:f6:74:5c:95:94:d6:c3:48:45:c7:ee:5f:1f:8f:47:ec:4a: a7:e2:e1:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv145/VWJbJaY67uZy7Met+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx YTI4YjkwHhcNMjYwMTI1MTYwMTMzWhcNMjYwMTI2MTYwMTMzWjAzMTEwLwYDVQQD Eyg0ZTVmZTMwMDBlMzFjM2ZkODY3NWM4N2I2MWM5ZjZiMWYzMmEwODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCXghao8FTneVsmRHb4QMhS9BC3F yxoROuzlcq9BWmquOLGmgZzrE9MZLo1fteiMBk78pkv/a+sSBQkuMmSGJyQlhYda gpPmvAy7rx92g8BkMLnK4+n1jZgMlzaQQFxJAuo+vG9E4w5LzNYCo0gs8nPGOwSQ o1isApOWG/7viSwROu4QE/+8PSH7ze6zGnFrDhjWhuCYFr9XQgRb+bAFrQPLUwGg WG6Wmay/dtE5ZzZQMlZlG2cXGWCjUuHOt1XnLaPjsBIzOkpkabyxNaVnf0wv0ADt a2ZQjP9xqHV6vTzhxaglEMERws6Bdga91osH/xs8A/amER6hfjZtsSVZpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5f4wAOMcP9hnXIe2HJ9rHzKghRMB8GA1UdIwQY MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt ODMzMGU3ZTMyZTE5LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5 LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtJFfbdU 1kGiSjGzc2m5dlL5p26j9gOZXr/ZDgjcMMYB6PvXXYc0sYz70luJGBZ7cw9/6zXN RBNUPyjS8VKs9S4CiRVA6RCP7TUuf5eSQsLuraez2oaPd4qYNQAMWmCakpaJ5R9h CZELsN8YETtA+de8qJOVXHug/obOv/sAcc8K5sUQPO56hytmKlr0+FDhsnz/a6DB sFKXpmWgEDEEgdBztHg8P2vrj8SyVmi3rxb6ev/MM/E0IocLMygwfqoVDeKWqnhW s0M3xVtXv0u65Ug2Tmru3ppiXQ7lB5tPo9RwWWU64E1K5+0Wu/Z0XJWU1sNIRcfu Xx+PR+xKp+Lhjg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:49 2026 by rpki-client